GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, azure-service-operator, k3s, rancher-webhook, keda, spqr, crossplane, kube-rbac-proxy, kapp-controller, cloud-provider-gcp-cloud-controller-manager, cluster-autoscaler, cert-manager, tekton-pipelines, cloud-provider-aws, metallb,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: zot, cerbos-fips, k8sgpt, flux-source-controller-fips, helm-push, kuma, cert-manager-cmctl-fips, chart-testing, flux-source-controller, cluster-api-helm-controller, istio, consul-k8s, helm-operator-fips, flux-helm-controller-fips, kargo, k9s, pluto, harbor-fips, triv...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: eksctl, flux-helm-controller, k8sgpt, cilium-cli, kubevela, up, helm-push, k9s, zot, flux-source-controller, trivy, zarf, helm-operator, kots, kubescape, chartmuseum...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: eksctl, flux-helm-controller, k8sgpt, cilium-cli, kubevela, up, helm-push, k9s, zot, flux-source-controller, trivy, zarf, helm-operator, kots, kubescape, chartmuseum...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: drone-fips, cluster-api-helm-controller-fips, kyverno-notation-aws-fips, headlamp-fips, ocm-cli, ocm-kubernetes-controller-fips, kargo, ocm-cli-fips, falcoctl-fips, kube-mgmt-fips, chartmuseum-fips, linkerd2, kubescape-server, gogatekeeper, ocm-kubernetes-controller,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: go, terragrunt, flux-operator-fips, flux-source-controller, victorialogs-fips, nova, flux-image-reflector-controller, flux-image-automation-controller, grafana-operator, librechat, victoriametrics-fips, grafana-fips, victoriametrics, aws-ebs-csi-driver,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: go, terragrunt, flux-operator-fips, flux-source-controller, victorialogs-fips, nova, flux-image-reflector-controller, flux-image-automation-controller, grafana-operator, librechat, victoriametrics-fips, grafana-fips, victoriametrics, aws-ebs-csi-driver,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, longhorn-instance-manager, prometheus-adapter-fips, kubernetes-csi-external-provisioner, terraform-provider-azuread, cluster-api-helm-controller-fips, fscrypt, tflint, ceph-csi-operator, promxy, spicedb-fips, spqr, docker-compose-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, prometheus-adapter-fips, amazon-ssm-agent, newrelic-nri-statsd, age-fips, fscrypt, kiali-fips, tflint, promxy, spqr, docker-compose-fips, falcoctl-fips, opentelemetry-collector-contrib-fips, kyverno-policy-reporter, prometheus-pushgateway, gomplat...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: chart-testing, pluto, helm-docs, zot, zarf, kots, flux-helm-controller, tw, helm-operator, cluster-api-helm-controller, flux-source-controller, k9s, k8ssandra-client, trivy, cilium-cli, eksctl, rancher-helm, chartmuseum, helm-push, flux, cert-manager-cmctl, kubescape...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: eksctl, flux-helm-controller, k8sgpt, chartmuseum, helm-operator, flux-source-controller, helm-push, k9s, kots, kubevela, zarf, kubescape, up, trivy, zot, cilium-cli...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: eksctl, flux-helm-controller, k8sgpt, chartmuseum, helm-operator, flux-source-controller, helm-push, k9s, kots, kubevela, zarf, kubescape, up, trivy, zot, cilium-cli...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, skaffold, ctop, up, zot, kots, kubevela, buildkitd, flux-helm-controller, melange, flux-source-controller, gitness, trivy, grype, cilium-cli, eksctl, k8sgpt, helm-push, kubescape, kaniko, newrelic-infrastructure-agent, helm, k3d...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, containerd, headlamp, manifest-tool, ctop, neuvector-scanner, opa-envoy, k3s, rancher-fleet, falco-no-driver, zot, xeol, zarf, osv-scanner, kots, kubevela, buildkitd, spegel, envoy-gateway, dagger, flux-helm-controller, tw, melange,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: chart-testing, pluto, rancher-fleet, helm-docs, zot, zarf, cerbos, kots, envoy-gateway, flux-helm-controller, tw, helm-operator, cluster-api-helm-controller, flux-source-controller, k9s, istio, linkerd2, k8ssandra-client, trivy, cilium-cli, eksctl, k8sgpt, kargo,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nova, grafana-alloy, migrate, azure-service-operator, k3s, wire-go, gobump, lazydocker, kpt, envconsul, swagger, wal-g, buildkitd, controller-gen, cloud-sql-proxy, polaris, kapp-controller, kubernetes-dashboard, k8sgateway, nri-redis,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-notification-controller, crossplane-provider-family-azure, gh, rabbitmq-messaging-topology-operator, skopeo, snyk-cli, crossplane-provider-azure-sql, terragrunt, aactl, k3s, pulumi-kubernetes-operator, zot, zarf, sigstore-scaffolding,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: grype-db, syft, packer, cluster-api-helm-controller-fips, spegel-fips, headlamp-fips, kargo, docker-compose-fips, kube-mgmt-fips, kubevela-fips, harvester, neuvector, k3s, chartmuseum-fips, linkerd2, kubescape-server, helm, gitlab-rails-ce-fips, trivy-operator-fips,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, containerd, headlamp, rancher-agent, manifest-tool, ctop, neuvector-scanner, tigera-operator, kubescape, opa-envoy, k3s, zot, xeol, zarf, osv-scanner, kots, kubevela, buildkitd, spegel, kube-arangodb, datadog-agent, envoy-gateway, dagger,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, containerd, headlamp, rancher-agent, manifest-tool, ctop, neuvector-scanner, tigera-operator, kubescape, opa-envoy, k3s, zot, xeol, zarf, osv-scanner, kots, kubevela, buildkitd, spegel, kube-arangodb, datadog-agent, envoy-gateway, dagger,...