GO-2026-4883 vulnerabilities

Vulnerabilities for packages: jfrog-cli, amazon-cloudwatch-agent-operator, opentelemetry-collector-contrib-fips, melange, openfga-fips, commercial-grafana, zot, cri-tools, prometheus-podman-exporter-fips, rancher-machine, docker, envoy-gateway, harvester-fips, podman-fips, cluster-api-fips,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: argo-events, istio, amazon-cloudwatch-agent-operator, opentelemetry-collector-contrib-fips, wgcf, grype-db, dataplaneapi, kyverno-notation-aws-fips, cosign, flux-source-controller-fips, nri-prometheus, glab, github-mcp-server, glow, kube-bench-fips, swagger, dagger,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: aactl, cosign, minio-fips, guac, grpc-health-probe, melange, zot, gomplate, fulcio, argo-workflows-fips, oauth2-proxy, falcoctl-fips, vexctl, rook, sigstore-scaffolding-fips, tkn, rabbitmq-messaging-topology-operator, kubernetes-dashboard-fips, policy-controller-fips...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: trivy, crossplane, aactl, kubescape-server-fips, kyverno-notation-aws-fips, policy-controller-fips, kubescape, chainctl-fips, commercial-chainloop-cli, commercial-chainloop-backend, kyverno-notation-aws, zot, ko-fips, trivy-operator-fips, crossplane-fips, kyverno-fip...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, aactl, neuvector-sigstore-interface, skaffold, spire-server-fips, policy-controller-fips, kubescape, falcoctl, melange, zot, ko, tekton-chains, ko-fips, apko, flux-source-controller, chainctl, wolfictl, policy-controller, goreleaser, zarf,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: opa-envoy, sbomqs, delve, portieris, terraform-provider-sendgrid, extism, k8ssandra-operator, clickhouse-operator, neuvector-dbgen, argo-rollouts, nri-haproxy, dex, cluster-proportional-autoscaler, sonobuoy, kpt, nri-mysql, cert-manager-csi-driver, juicefs-csi-driver...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: tigera-operator, backup-restore-operator-fips, crane-fips, newrelic-fluent-bit-output-fips, jfrog-cli, aactl, tigera-operator-fips, cosign, licenseclassifier, nsc-fips, chezmoi, prometheus-podman-exporter-fips, kube-mgmt-fips, mattermost, rook-fips, falcoctl-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: tigera-operator, backup-restore-operator-fips, crane-fips, newrelic-fluent-bit-output-fips, jfrog-cli, aactl, tigera-operator-fips, cosign, licenseclassifier, nsc-fips, chezmoi, prometheus-podman-exporter-fips, kube-mgmt-fips, mattermost, rook-fips, falcoctl-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, crane-fips, listmonk, dbmate, jfrog-cli, newrelic-fluent-bit-output-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: crane-fips, prometheus-pgbouncer-exporter, aactl, kubernetes-csi-external-attacher, juicefs-csi-driver, percona-xtradb-cluster-operator-fips, victorialogs, licenseclassifier, lvm-driver, crossplane-provider-aws-ssm, metrics-agent-fips, cri-tools,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, aactl, neuvector-sigstore-interface, skaffold, spire-server-fips, policy-controller-fips, kubescape, falcoctl, melange, zot, ko, tekton-chains, ko-fips, apko, flux-source-controller, chainctl, wolfictl, policy-controller, goreleaser, zarf,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, aactl, neuvector-sigstore-interface, skaffold, spire-server-fips, policy-controller-fips, kubescape, falcoctl, melange, zot, ko, tekton-chains, ko-fips, apko, flux-source-controller, chainctl, wolfictl, policy-controller, goreleaser, zarf,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: trivy, kubeflow-katib, loki, aactl, k8sgpt, eksctl, skaffold, up, flux-helm-controller, cosign, k3d, policy-controller-fips, kubescape, helm-operator-fips, argo-workflows, dagger, cadvisor, docker-machine-driver-harvester, falcoctl, flux, ctop, guac, helm, kpt, zot,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: trivy, kubeflow-katib, loki, aactl, k8sgpt, eksctl, skaffold, up, flux-helm-controller, cosign, k3d, policy-controller-fips, kubescape, helm-operator-fips, argo-workflows, dagger, cadvisor, docker-machine-driver-harvester, falcoctl, flux, ctop, guac, helm, kpt, zot,...