CVE-2026-33818 vulnerabilities

Vulnerabilities for packages: direnv, fscrypt, witness, spire-controller-manager, cert-manager-istio-csr, grafana-agent-operator, sftpgo-plugin-auth, hubble, stakater-reloader, kubeflow, podinfo, src, vale, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, openbao-k8s, aws-flb-firehos...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: direnv, fscrypt, witness, spire-controller-manager, cert-manager-istio-csr, grafana-agent-operator, sftpgo-plugin-auth, hubble, stakater-reloader, kubeflow, podinfo, src, vale, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, openbao-k8s, aws-flb-firehos...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: direnv, fscrypt, witness, spire-controller-manager, cert-manager-istio-csr, grafana-agent-operator, sftpgo-plugin-auth, hubble, stakater-reloader, kubeflow, podinfo, src, vale, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, openbao-k8s, aws-flb-firehos...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: direnv, fscrypt, witness, spire-controller-manager, cert-manager-istio-csr, grafana-agent-operator, sftpgo-plugin-auth, hubble, stakater-reloader, kubeflow, podinfo, src, vale, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, openbao-k8s, aws-flb-firehos...

GO-2022-0236 vulnerabilities

Vulnerabilities for packages: grpcurl, hey, k3d, terraform-provider-sendgrid-fips, terraform-provider-sendgrid...

GO-2022-0197 vulnerabilities

Vulnerabilities for packages: hey...

GO-2021-0238 vulnerabilities

Vulnerabilities for packages: grpcurl, hey, k3d, terraform-provider-sendgrid-fips, terraform-provider-sendgrid...

GO-2022-0536 vulnerabilities

Vulnerabilities for packages: hey, k3d...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, gitleaks, hey, k3d, terraform-provider-sendgrid-fips, terraform-provider-sendgrid, dynamic-localpv-provisioner, vt-cli...

GO-2022-0197 vulnerabilities

Vulnerabilities for packages: hey...

GO-2022-0536 vulnerabilities

Vulnerabilities for packages: k3d, hey...

GO-2021-0238 vulnerabilities

Vulnerabilities for packages: k3d, grpcurl, hey, terraform-provider-sendgrid...

GO-2022-0236 vulnerabilities

Vulnerabilities for packages: k3d, grpcurl, hey, terraform-provider-sendgrid...

GO-2022-0969 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, dynamic-localpv-provisioner, grpcurl, k3d, kubeflow, wireguard-go, hey, terraform-provider-sendgrid...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, gitleaks, grpcurl, k3d, vt-cli, kubeflow, hey, terraform-provider-sendgrid, php-fpmexporter...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, gitleaks, vt-cli, k3d, hey, terraform-provider-sendgrid...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, kubeflow-katib, dynamic-localpv-provisioner, go, grpcurl, k3d, kubeflow, wireguard-go, restic, hey, terraform-provider-sendgrid...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, spqr, kubo, goreleaser, octo-sts, zarf, cni-plugins, dask-gateway, paranoia, ko, step-ca, k8sgpt, atlantis, hubble, sftpgo-plugin-auth, harbor-scanner-trivy, go, step, kubeflow, speedtest-go, xeol, croc, prometheus-operator, vault-secrets-webhook,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, spqr, x509-certificate-exporter, docker-credential-gcr, flux-kustomize-controller, kubo, fuse-overlayfs-snapshotter, spire-controller-manager, goreleaser, octo-sts, gcp-compute-persistent-disk-csi-driver, go-licenses, dask-gateway,...

CVE-2026-48819

Hey API is an ecosystem for turning API specifications into production-ready code. Prior to 0.97.3, dist/clients/core/params.ts ships a runtime template copied into generated SDKs as params.gen.ts, and buildClientParams writes unknown slot-prefixed keys such as $body, $headers, $path, and $query...