GO-2026-5094 vulnerabilities

Vulnerabilities for packages: zot, kots, gitness, envoy-gateway, argocd-image-updater, portieris...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: zot, kots, gitness, envoy-gateway, argocd-image-updater, portieris...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gptscript, kaniko, flux-kustomize-controller, snyk-cli, nuclei, trivy, bom, src-fingerprint, scorecard, wolfictl, chezmoi, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, kargo, zot, apko, argo-workflows, grafana-alloy,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gptscript, kaniko, flux-kustomize-controller, snyk-cli, nuclei, trivy, bom, src-fingerprint, scorecard, wolfictl, chezmoi, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, kargo, zot, apko, argo-workflows, grafana-alloy,...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2025-3934 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argo-cd, gptscript, kaniko, snyk-cli, steampipe, nuclei, trivy, bom, src-fingerprint, xeol, teleport, scorecard, wolfictl, chezmoi, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, gitlab-runner, kargo, gomplate, apko, zot, argo-workflows...

GO-2025-3433 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-3720 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: rekor, step, prometheus-operator, flux-kustomize-controller, cortex, nuclei, trivy, grafana-mimir, airflow, rclone, up, trino, opentelemetry-collector-contrib, tekton-chains, chezmoi, thanos, tempo, argo-events, falcoctl, fluent-bit-plugin-loki, zot, tkn,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: contour, swagger, rancher-loglevel, trino, pdfcpu, nova, neuvector-dbgen, ytt, rabbitmq-messaging-topology-operator, kubernetes-dashboard, nsc, kubernetes-event-exporter, nri-nginx, redka, cri-tools, k8sgpt, aws-application-networking-k8s, src, dkron, cerbos, atlanti...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, nri-redis, kwok, cortex, k8sgpt-operator, nuclei, mockery, newrelic-fluent-bit-output, nri-kafka, up, nri-haproxy, nri-mongodb, kube-bench, kubeflow-pipelines, cadvisor, kubebuilder, nerdctl, grafana-operator, protoc-gen-go-grpc, vt-cli,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: envconsul, temporal-ui-server, promxy, prometheus, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, cilium, traefik, crossplane-provider-aws-memorydb, nri-haproxy, trino, kube-logging-operator-custom-runner, kube-bench, kubeflow-pipelines,...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: aactl, kpt, bom, argocd-image-updater, kubernetes-dashboard...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, prometheus, flux-kustomize-controller, crossplane-provider-aws-cloudfront, nuclei, cilium, traefik, crossplane-provider-aws-memorydb, chezmoi, nerdctl, sealed-secrets, argo-events, crossplane-provider-keycloak, pulumi-language-yaml,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, nri-redis, swagger, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, rancher-loglevel, newrelic-fluent-bit-output, traefik,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: rekor, crossplane-provider-family-azure, flux-kustomize-controller, snyk-cli, nuclei, grafana-mimir, src-fingerprint, actions-runner-controller, opentelemetry-collector-contrib, flux-notification-controller, scorecard, tekton-chains, flux-image-automation-controller,...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: tekton-chains, wolfictl, ko, zot, falcoctl, apko, tkn, kubescape, goreleaser, zarf, policy-controller, skaffold, aactl, gitsign, neuvector-sigstore-interface, spire-server, slsa-verifier, melange, vexctl, flux-source-controller...

PT-2026-72054

VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion...