GO-2026-4883 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, opentelemetry-collector, opentelemetry-collector-fips, docker, spire-server, nerdctl-fips, buf, vault, buildah, opentelemetry-operator, google-cloud-otel-ops-collector, elastic-agent, newrelic-infrastructure-agent-fips, buildah-fips, portieris,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, opentelemetry-collector, opentelemetry-collector-fips, dagger, chart-testing-fips, spire-server, swagger, nerdctl-fips, conftest, opentelemetry-operator, pgtimetable, kyverno-policy-reporter, kyverno-fips, elastic-agent, opa-fips-envoy,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: spire-server, vault, rekor, kube-oidc-proxy, step, kubernetes-dashboard-fips, vexctl, flux-source-controller, fulcio-fips, falcoctl-fips, zot, falcoctl, wolfictl, cosign-fips, kube-rbac-proxy-fips, minio, weaviate, ko, temporal-ui-server, dgraph,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: crossplane, chainctl-fips, trivy-operator, trivy-operator-fips, kyverno-fips, chainctl, aactl, slsa-verifier, kyverno-notation-aws, commercial-chainloop-cli, kubescape-server-fips, cloudbeat-fips, policy-controller, ko-fips, kubescape-server, cloudbeat,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: spire-server, gitsign, goreleaser, chainctl, aactl, slsa-verifier, zarf, vexctl, flux-source-controller, policy-controller, ko-fips, skaffold, falcoctl-fips, apko, tkn-fips, policy-controller-fips, zot, tekton-chains, falcoctl, wolfictl, neuvector-sigstore-interface,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: net-kourier, cilium, percona-server-mongodb-operator, victoriametrics-operator, nri-mysql, stern, stakater-reloader, chart-testing, mkcert, go-discover, aactl, smokescreen, pdfcpu, php-fpmexporter, eksctl, flux-helm-controller, dive, promxy, terraform-provider-azapi,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: openbao, amazon-ecs-agent-fips, elastic-agent, spegel-fips, kbld-fips, opa-fips-envoy, act, atlantis-fips, libnvidia-container-fips, nsc, gosu, nuclei, zot, docker-cli-fips, cloud-provider-aws-fips, kube-state-metrics, prometheus-podman-exporter-fips, datadog-agent,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: openbao, amazon-ecs-agent-fips, elastic-agent, spegel-fips, kbld-fips, opa-fips-envoy, act, atlantis-fips, libnvidia-container-fips, nsc, gosu, nuclei, zot, docker-cli-fips, cloud-provider-aws-fips, kube-state-metrics, prometheus-podman-exporter-fips, datadog-agent,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: authservice, jupyterhub-k8s-image-awaiter-fips, openbao, vault-k8s, crossplane-provider-aws-rds-fips, swagger, falco-exporter, opentelemetry-operator, aws-privateca-issuer, amazon-ecs-agent-fips, db-operator, secrets-store-csi-driver-provider-aws, yunikorn-k8shim-fip...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: authservice, crossplane-provider-aws-rds-fips, spegel-fips, crossplane-provider-aws-elbv2, kbld-fips, nsc, cert-manager-google-cas-issuer-fips, go-md2man, virt-controller-fips, kyverno-policy-reporter-plugins-trivy-fips, gosu, flux-image-reflector-controller,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: spire-server, gitsign, goreleaser, chainctl, aactl, slsa-verifier, zarf, vexctl, flux-source-controller, policy-controller, ko-fips, skaffold, falcoctl-fips, apko, tkn-fips, policy-controller-fips, zot, tekton-chains, falcoctl, wolfictl, neuvector-sigstore-interface,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: spire-server, gitsign, goreleaser, chainctl, aactl, slsa-verifier, zarf, vexctl, flux-source-controller, policy-controller, ko-fips, skaffold, falcoctl-fips, apko, tkn-fips, policy-controller-fips, zot, tekton-chains, falcoctl, wolfictl, neuvector-sigstore-interface,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: k3s, dagger, scorecard, cadvisor-fips, gitsign, helm-fips, docker-machine-driver-harvester, goreleaser, flux-helm-controller, aactl, kargo, slsa-verifier, rancher-machine, k9s, kots, loki, zarf, vexctl, kubevela, kpt, flux, nerdctl, argo-workflows, helm-operator,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: k3s, dagger, scorecard, cadvisor-fips, gitsign, helm-fips, docker-machine-driver-harvester, goreleaser, flux-helm-controller, aactl, kargo, slsa-verifier, rancher-machine, k9s, kots, loki, zarf, vexctl, kubevela, kpt, flux, nerdctl, argo-workflows, helm-operator,...