GO-2024-2497 vulnerabilities

Vulnerabilities for packages: kaniko, scorecard, skaffold, docker, trivy, guac, buildkitd, kubescape, conftest, zot...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: podman, kaniko, docker-compose, scorecard, trivy-operator, skaffold, docker-cli-buildx, trivy, osv-scanner, guac, kubescape, conftest, zot, buildah...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: podman, kaniko, docker-compose, scorecard, trivy-operator, skaffold, docker-cli-buildx, trivy, osv-scanner, guac, kubescape, conftest, zot, buildah...

GO-2024-2492 vulnerabilities

Vulnerabilities for packages: kaniko, scorecard, skaffold, docker, trivy, guac, buildkitd, kubescape, conftest, zot...

GO-2024-2493 vulnerabilities

Vulnerabilities for packages: kaniko, scorecard, skaffold, docker, trivy, guac, buildkitd, kubescape, conftest, zot...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: melange, apko, grype, snyk-cli, kots, pulumi-language-java, skaffold, syft, osv-scanner, dagger, pulumi-language-dotnet, zot, go-licenses, tfsec, pulumi-kubernetes-operator, goreleaser, bom, gptscript, wolfictl, kubevela, k8sgpt, task, grafana-alloy,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: melange, apko, grype, snyk-cli, kots, pulumi-language-java, skaffold, syft, osv-scanner, dagger, pulumi-language-dotnet, zot, go-licenses, tfsec, pulumi-kubernetes-operator, goreleaser, bom, gptscript, wolfictl, kubevela, k8sgpt, task, grafana-alloy,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: melange, apko, grype, snyk-cli, kots, pulumi-language-java, skaffold, syft, osv-scanner, dagger, gomplate, pulumi-language-dotnet, trufflehog, zot, tfsec, pulumi-kubernetes-operator, gitlab-runner, bom, zarf, gptscript, wolfictl, gitaly, nfpm, kubevela, grafana-alloy...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: istio, external-secrets-operator, containerd, mattermost, argocd-image-updater, k3s, gitsign, argo-events, prometheus, telegraf, guac, terragrunt, falco-no-driver...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: fulcio, opentelemetry-collector, up, boring-registry, py3-azure-identity, velero, druid, spire-server, hugo, restic, airflow, flyte, opentelemetry-collector-contrib, rook, zot, grafana-agent-operator, goreleaser, bank-vaults, sqlpad, rekor, thanos, zarf,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: melange, apko, fulcio, ko, kots, skaffold, caddy, spire-server, gomplate, rabbitmq-messaging-topology-operator, skopeo, rook, zot, weaviate, kubernetes-dashboard, aactl, goreleaser, grpc-health-probe, bank-vaults, cloudflared, rekor, wolfictl, minio,...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: melange, apko, grype, snyk-cli, kots, pulumi-language-java, skaffold, syft, osv-scanner, dagger, gomplate, pulumi-language-dotnet, trufflehog, zot, tfsec, pulumi-kubernetes-operator, gitlab-runner, goreleaser, bom, zarf, gptscript, wolfictl, gitaly, kubevela,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: melange, crossplane-provider-aws-ec2, datadog-agent, eksctl, crossplane-provider-aws-cloudwatchlogs, osv-scanner, gomplate, zot, containerd, kubernetes-dashboard, crossplane-provider-aws-s3, crossplane-provider-family-azure, tw, vault-benchmark, fscrypt,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: melange, apko, grype, opentelemetry-collector, datadog-agent, cilium, kots, snyk-cli, pulumi-language-java, skaffold, syft, cloud-provider-aws, loki, spire-server, osv-scanner, dagger, gomplate, gitlab-kas, pulumi-language-dotnet, zot, pulumi-kubernetes-operator,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: fulcio, ko, docker-compose, kots, neuvector-sigstore-interface, skaffold, spire-server, skopeo, kyverno-notation-aws, zot, aactl, goreleaser, tflint, gh, ratify, zarf, rekor, sigstore-scaffolding, policy-controller, falco-no-driver, buildah, flux-source-controller,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: eksctl, zot, grafana-rollout-operator, containerd, kubernetes-dashboard, bom, k8sgateway, kubernetes-dashboard-api, delve, dive, harbor-cli, controller-gen, cerbos, prometheus-operator, spire-controller-manager, nginx-prometheus-exporter,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: fulcio, flux-helm-controller, crossplane-provider-azure-authorization, opentelemetry-collector, snyk-cli, neuvector-sigstore-interface, kubernetes-event-exporter, spire-server, gomplate, rabbitmq-messaging-topology-operator, crossplane-provider-azure, skopeo, rook,...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: kube-arangodb, guac...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: kube-arangodb, guac...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: syft-fips, flux-notification-controller-fips, prometheus-operator, prometheus-podman-exporter-fips, kyverno-notation-aws-fips, crossplane-provider-azure-search, witness, crossplane-provider-azure-alertsmanagement, kuma, prometheus-podman-exporter, terraform-fips,...