GO-2025-3900 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, istio-fips, neuvector-sigstore-interface-fips, grafana, beats, grafana-fips, boring-registry-fips, pluto-fips, jitsucom-bulker, rancher-security-scan, beats-fips, bank-vaults, kyverno-notation-aws-fips, k9s-fips, mattermost-fips, tkn-fips,...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, commercial-kyverno, custom-pod-autoscaler, fleet-server-fips, custom-pod-autoscaler-fips, kyverno-fips, cloudbeat, aws-lambda-runtime-interface-emulator, aws-lambda-runtime-interface-emulator-fips...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: flux-source-controller, goreleaser, gitsign, melange, tekton-chains-fips, vexctl, neuvector-sigstore-interface, falcoctl, chainctl, apko, aactl, kubescape, policy-controller, spire-server-fips, ko, skaffold, ko-fips, falcoctl-fips, wolfictl, policy-controller-fips,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, spire-server, policy-controller, witness, vexctl, trivy-operator, zot, docker, buildkitd, trivy, zarf, neuvector-sigstore-interface, ko, flux-source-controller, gitsign, tekton-chains, gh, tkn, tflint, teleport, sigstore-scaffolding,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: goreleaser, falcoctl, spire-server, policy-controller, kyverno, trivy-operator, aactl, slsa-verifier, zarf, neuvector-sigstore-interface, ko, crossplane, gitsign, tekton-chains, tkn, tflint, teleport, ratify, kyverno-notation-aws, kubescape...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: chisel, spire-server, terraform-provider-acme, witness, openbao, cloudflared, mods, crossplane-provider-aws-cloudfront, crossplane-provider-aws-firehose, gitlab-runner, argocd-image-updater, containerd, datadog-agent, flux, opentelemetry-collector, docker, grype,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, spire-server, policy-controller, witness, vexctl, trivy-operator, aactl, zot, slsa-verifier, buildkitd, trivy, zarf, neuvector-sigstore-interface, ko, flux-source-controller, gitsign, tekton-chains, gh, tkn, tflint, teleport, ratify,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, spire-server, policy-controller, witness, vexctl, aactl, zot, zarf, neuvector-sigstore-interface, ko, flux-source-controller, gitsign, tekton-chains, gh, docker-cli-buildx, tkn, tflint, teleport, ratify, sigstore-scaffolding,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, podman, falcoctl, spire-server, undock, policy-controller, witness, docker-compose, fulcio, vexctl, falco-no-driver, trivy-operator, guac, aactl, zot, slsa-verifier, buildkitd, trivy, zarf, kots, skopeo, neuvector-sigstore-interface, ko, rekor,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, spire-server, policy-controller, witness, kyverno, vexctl, trivy-operator, aactl, zot, docker, slsa-verifier, buildkitd, trivy, zarf, neuvector-sigstore-interface, ko, flux-source-controller, crossplane, gitsign, tekton-chains,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, spire-server, policy-controller, witness, vexctl, trivy-operator, aactl, zot, docker, slsa-verifier, buildkitd, trivy, zarf, neuvector-sigstore-interface, ko, rekor, flux-source-controller, gitsign, tekton-chains, gh, tkn, tflint,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kpt, nats-server-config-reloader, witness, cni-plugins, cloud-provider-gcp-cloud-controller-manager, containerd, ipfs-cluster, flux, terraform-mcp-server, chart-testing, wgcf, nri-memcached, wal-g, portieris, k3d, gcsfuse, nri-nginx,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, spire-server, policy-controller, witness, vexctl, trivy-operator, aactl, zot, docker, slsa-verifier, buildkitd, trivy, zarf, neuvector-sigstore-interface, ko, rekor, flux-source-controller, gitsign, tekton-chains, gh, tkn, tflint,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: goreleaser, actions-runner-controller, nuclei, grafana-mimir, falcoctl, spire-server, bank-vaults, policy-controller, pulumi, kargo, sops, terragrunt, fulcio, argo-events, vexctl, flux-image-reflector-controller, crossplane-provider-azure-storage, src-fingerprint,...

CVE-2026-19791

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19790

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19788

A vulnerability was found in Tenda AC1206 15.03.06.23multiTD01. This affects the function setdevicename of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched...

CVE-2026-19792

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

EUVD-2026-58584

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

EUVD-2026-58575

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...