GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubescape-operator, gitlab-kas, gatekeeper, cert-manager-istio-csr, spicedb-operator, helm-operator, kubernetes, spqr, azure-service-operator, k3s, cluster-api-azure-controller, zot, crossplane, apisix-ingress-controller, cluster-api-aws-controller,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kots, eksctl, k9s, kubescape, kubevela, zot, cilium-cli, flux-source-controller, k8sgpt, zarf, chartmuseum, trivy, up, helm-operator, helm-push, flux-helm-controller...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: envoy-gateway, cert-manager-cmctl-fips, linkerd2, eksctl, rancher-helm, trivy-fips, cerbos, kargo, k8sgpt, rancher-fleet, chartmuseum, flux-helm-controller-fips, chart-testing-fips, cert-manager-cmctl, helm-operator, tw, envoy-gateway-fips, harbor, helm-docs,...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kots, eksctl, k9s, kubescape, kubevela, zot, cilium-cli, flux-source-controller, k8sgpt, zarf, chartmuseum, trivy, up, helm-operator, helm-push, flux-helm-controller...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: rancher-helm, kargo, kyverno-notation-aws, kube-arangodb, rancher-agent, gitness, rancher-fleet-fips, kube-arangodb-fips, gitlab-operator, drone-fips, kgateway-fips, consul-k8s, opentofu-fips, falcoctl-fips, jfrog-cli, argo-cd, teleport, helm-exporter, steampipe,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: librechat, grafana-rollout-operator, metacontroller, aws-ebs-csi-driver, victoriametrics-cluster-fips, victoriametrics-fips, aws-ebs-csi-driver-fips, victorialogs, localstack, podinfo, cluster-autoscaler-fips, flux-notification-controller, polaris,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: librechat, grafana-rollout-operator, metacontroller, aws-ebs-csi-driver, victoriametrics-cluster-fips, victoriametrics-fips, aws-ebs-csi-driver-fips, victorialogs, localstack, podinfo, cluster-autoscaler-fips, flux-notification-controller, polaris,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter-fips, etcd-fips, longhorn-share-manager, k6-fips, snyk-cli, gitlab-runner-fips, cue-fips, crossplane-provider-aws-efs-fips, dex-k8s-authenticator, terraform-provider-kubernetes, kube-metrics-adapter-fips, cilium-envoy-fips, temporal-serve...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: containerd-fips, openbao-k8s, prometheus-blackbox-exporter-fips, etcd-fips, snyk-cli, kargo, jitsucom-bulker, scorecard, dex-k8s-authenticator, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, temporal-server, kube-bench, zot,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: eksctl, helm-push, rancher-helm, flux, flux-source-controller, cluster-api-helm-controller, helm-docs, chartmuseum, helm-operator, kubescape, zarf, flux-helm-controller, k9s, cert-manager-cmctl, k8ssandra-client, cilium-cli, pluto, trivy, zot, chart-testing, tw, kots...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: zot, chartmuseum, up, kubevela, helm-operator, kubescape, zarf, eksctl, flux-helm-controller, helm-push, k9s, cilium-cli, kots, flux-source-controller, k8sgpt, trivy...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: zot, chartmuseum, up, kubevela, helm-operator, kubescape, zarf, eksctl, flux-helm-controller, helm-push, k9s, cilium-cli, kots, flux-source-controller, k8sgpt, trivy...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: kubescape-operator, gogatekeeper, kubevela, melange, opa-envoy, eksctl, helm-push, rancher-helm, helm, flux-source-controller, cluster-api-helm-controller, k8sgpt, chartmuseum, docker, docker-compose, kaniko, fuse-overlayfs-snapshotter, helm-operator, helm-mapkubeapi...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: kubevela, melange, eksctl, helm-push, helm, flux-source-controller, k8sgpt, kaniko, fuse-overlayfs-snapshotter, skaffold, kubescape, flux-helm-controller, ctop, cilium-cli, grype, gitness, trivy, zot, up, newrelic-infrastructure-agent, buildkitd, k3d, kots...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: istio, eksctl, helm-push, rancher-helm, flux-source-controller, k8sgpt, cluster-api-helm-controller, helm-docs, chartmuseum, helm-operator, zarf, kargo, flux-helm-controller, k9s, cert-manager-cmctl, k8ssandra-client, cilium-cli, pluto, linkerd2, trivy, zot, cerbos,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, wire-go, kubernetes-csi-driver-nfs, gobuster, eksctl, helm-push, portieris, kor, aws-privateca-issuer, nri-f5, lazydocker, libnvidia-container, dive, helm-operator, conftest, migrate, azure-service-operator, envconsul, k3s, cluster-api-azure-controller,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: src-fingerprint, flux-image-reflector-controller, falcoctl, kubevela, crossplane-provider-azure-storage, spire-server, step-ca, flux-kustomize-controller, crossplane-provider-azure-managedidentity, gomplate, ksops, skopeo, flux, flux-source-controller, grafana-mimir,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: rancher-helm, kargo, kube-arangodb, fuse-overlayfs-snapshotter, rancher-agent, scorecard, kaniko, kube-arangodb-fips, kgateway-fips, consul-k8s, zot, grype, jfrog-cli, syft, grype-db, wolfictl, skaffold-fips, teleport, helm-exporter, steampipe, docker-compose,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: kubescape-operator, gogatekeeper, gatekeeper, kubevela, opa-envoy, eksctl, helm-push, rancher-helm, helm, kube-arangodb, cluster-api-helm-controller, k8sgpt, chartmuseum, docker, docker-compose, kaniko, fuse-overlayfs-snapshotter, helm-operator, consul-k8s,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: kubescape-operator, gogatekeeper, gatekeeper, kubevela, opa-envoy, eksctl, helm-push, rancher-helm, helm, kube-arangodb, cluster-api-helm-controller, k8sgpt, chartmuseum, docker, docker-compose, kaniko, fuse-overlayfs-snapshotter, helm-operator, consul-k8s,...