GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: deck, rancher-pushprox, harvester-fips, gitlab-runner-fips, bank-vaults, crossplane-provider-aws-location, falco-exporter-fips, pluto, scorecard, opentelemetry-operator-fips, fleet-server-fips, go-sqlcmd, rancher-agent, rqlite-fips, json-exporter, grype,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: sops, flux-kustomize-controller, age, litestream, grafana-fips, flux-kustomize-controller-fips, chezmoi, sops-fips, ksops, age-fips, grafana...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dbmate, vcluster, zot, terraform-docs, kwok, gomplate, cilium-cli, terragrunt, minio, melange, conftest, opa, pulumi-language-dotnet, restic, spire-server, trivy, sigstore-scaffolding, kots, terraform-provider-google, k8sgpt, opentelemetry-collector, fulcio,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: py3-azure-identity, buildkitd, zot, rekor, policy-controller, py3-cassandra-medusa, airflow, terragrunt, sqlpad, restic, spire-server, trino, harbor-registry, hugo, bank-vaults, sigstore-scaffolding, trivy, cortex, kubescape, k8sgpt, argo-workflows,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: litestream, age, flux-kustomize-controller, chezmoi, ksops, sops...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: buildkitd, zot, scorecard, rekor, skopeo, policy-controller, gomplate, kubevela, terragrunt, crossplane-provider-family-azure, spire-server, gh, bank-vaults, sigstore-scaffolding, neuvector-sigstore-interface, vexctl, terraform, crossplane-provider-azure-authorizatio...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gomplate, gptscript, melange, trivy, openbao, istio, gitlab-runner, gitea, crossplane-provider-azure-authorization, kubernetes, gatus, hcloud, k8sgpt, glab, flux-kustomize-controller, fulcio, argo-cd, aactl, prometheus, mods, step-kms-plugin, kine,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: tw, crossplane-provider-aws-kms, crossplane-provider-aws-rds, gomplate, crossplane-provider-aws-sqs, docker-compose, crossplane-provider-aws-eks, gptscript, melange, trivy, openbao, istio, src, terraform-provider-azapi, gitlab-runner, gitea,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: external-secrets-operator, bento, grafana-pyroscope, datadog-agent, cilium, promxy, consul-k8s, cortex, teleport, kubescape, ratify, argo-cd, weaviate, tetragon, thanos, hubble, grafana-agent-operator, grafana, ksops, juicefs, tekton-chains, slsa-verifier,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, bento, grafana-pyroscope, datadog-agent, cilium, promxy, consul-k8s, cortex, teleport, kubescape, ratify, argo-cd, weaviate, tetragon, thanos, hubble, grafana-agent-operator, grafana, ksops, juicefs, tekton-chains, slsa-verifier,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-aws-rds, gomplate, crossplane-provider-aws-sqs, kubevela, crossplane-provider-aws-eks, gptscript, melange, trivy, openbao, gitlab-runner, gitea, crossplane-provider-azure-authorization, flux-kustomize-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-aws-rds, gomplate, crossplane-provider-aws-sqs, kubevela, crossplane-provider-aws-eks, gptscript, melange, trivy, openbao, gitlab-runner, gitea, crossplane-provider-azure-authorization, flux-kustomize-controller,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, helm-set-status, gops, otel-cli, gomplate, kubeflow-pipelines, gptscript, kubernetes-csi-external-attacher, restic, sqlexporter, harbor-registry, openbao, op-geth, hcloud, thanos-operator, stakater-reloader, kor, k8sgpt-operator, hydra,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: gomplate, distribution, melange, trivy, harbor-registry, openbao, istio, gatus, flux-kustomize-controller, fulcio, hydra, temporal-ui-server, grafana-mimir, aactl, step-kms-plugin, opentofu, neuvector-scanner, splunk-otel-collector, step, grafana-alloy, kargo, cosign...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: gomplate, distribution, melange, trivy, harbor-registry, openbao, istio, gatus, flux-kustomize-controller, fulcio, hydra, temporal-ui-server, grafana-mimir, aactl, step-kms-plugin, opentofu, neuvector-scanner, splunk-otel-collector, step, grafana-alloy, kargo, cosign...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: sops, flux-kustomize-controller, age, litestream, grafana-fips, flux-kustomize-controller-fips, chezmoi, sops-fips, ksops, age-fips, grafana...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: py3-azure-identity, buildkitd, zot, rekor, policy-controller, py3-cassandra-medusa, airflow, terragrunt, sqlpad, restic, spire-server, trino, harbor-registry, hugo, bank-vaults, sigstore-scaffolding, trivy, cortex, kubescape, k8sgpt, argo-workflows,...