GO-2026-4883 vulnerabilities

Vulnerabilities for packages: chainloop-control-plane-fips, kubedock, spire-server-fips, opentelemetry-collector, cg, portieris, cri-tools, undock, zarf, envoy-gateway, zarf-fips, trivy-fips, harvester-fips, neuvector, neuvector-scanner-fips, aws-otel-collector, wolfictl, apko, grafana-beyla,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: conftest-fips, argo-workflows, nri-kubernetes, nri-postgresql, spire-server-fips, opentelemetry-collector, cg, argo-events, pgtimetable, nri-prometheus, zarf, kyverno-policy-reporter, envoy-gateway, trivy-fips, cosign, kyverno-notation-aws, docker-cli-buildx-fips,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: argo-workflows, rekor, spire-server-fips, caddy-fips, weaviate, zarf, minio, vault-csi-provider, cosign, rook, temporal, neuvector, kubescape, timestamp-authority, flux-source-controller, k3s, skaffold, wolfictl, policy-controller, external-secrets-fips, apko, tkn,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: cloudbeat, slsa-verifier, kubescape-server-fips, trivy, ratify, cloudbeat-fips, chainctl, trivy-fips, kyverno-notation-aws, zot, kubescape, policy-controller-fips, trivy-operator, kyverno-fips, kyverno-notation-aws-fips, crossplane-fips, policy-controller,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: slsa-verifier, spire-server-fips, melange, zarf, chainctl, spire-server, kubescape, policy-controller-fips, tekton-chains-fips, flux-source-controller, falcoctl, skaffold, wolfictl, policy-controller, tkn-fips, falcoctl-fips, apko, tkn, ko, tekton-chains, ko-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, cluster-proportional-autoscaler, helm-set-status, otel-cli, aws-node-termination-handler, envoy-ratelimit, ghaudit, kubernetes-csi-external-attacher, openbao, juicefs-csi-driver, keda, terraform-provider-azapi,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: conftest-fips, argo-workflows, kbld-fips, istio, sonobuoy, kyverno-fips, kbld, flux-source-watcher-fips, kubernetes-csi-node-driver-registrar-fips, nemo, cilium-cli, cilium, trivy-operator-fips, rabbitmq-messaging-topology-operator-fips, libnvidia-container-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: conftest-fips, argo-workflows, kbld-fips, istio, sonobuoy, kyverno-fips, kbld, flux-source-watcher-fips, kubernetes-csi-node-driver-registrar-fips, nemo, cilium-cli, cilium, trivy-operator-fips, rabbitmq-messaging-topology-operator-fips, libnvidia-container-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: conftest-fips, argo-workflows, otel-cli, harbor-scanner-trivy, nginx-prometheus-exporter-fips, crossplane-provider-gcp, wave-fips, minc, crossplane-provider-aws-sns-fips, http-echo, volcano-fips, nri-haproxy-fips, mongodb-kubernetes-operator-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: conftest-fips, harbor-scanner-trivy, minc, k8s-metacollector-fips, kbld-fips, grpcurl, flux-source-watcher-fips, flux-image-automation-controller-fips, cilium-cli, consul-k8s, wireguard-go, knative-kafka-broker, cilium, kubernetes-event-exporter,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: slsa-verifier, spire-server-fips, melange, zarf, chainctl, spire-server, kubescape, policy-controller-fips, tekton-chains-fips, flux-source-controller, falcoctl, skaffold, wolfictl, policy-controller, tkn-fips, falcoctl-fips, apko, tkn, ko, tekton-chains, ko-fips,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: slsa-verifier, spire-server-fips, melange, zarf, chainctl, spire-server, kubescape, policy-controller-fips, tekton-chains-fips, flux-source-controller, falcoctl, skaffold, wolfictl, policy-controller, tkn-fips, falcoctl-fips, apko, tkn, ko, tekton-chains, ko-fips,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: k9s, kubeflow-katib, argo-workflows, slsa-verifier, flux-image-reflector-controller, pulumi, flux, trivy, chartmuseum, newrelic-infrastructure-agent, cri-tools, kubevela, kargo, zarf, flux-helm-controller, crane, k3d, rancher-machine, cosign, cosign-fips, kubescape,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: k9s, kubeflow-katib, argo-workflows, slsa-verifier, flux-image-reflector-controller, pulumi, flux, trivy, chartmuseum, newrelic-infrastructure-agent, cri-tools, kubevela, kargo, zarf, flux-helm-controller, crane, k3d, rancher-machine, cosign, cosign-fips, kubescape,...