GO-2026-4864 vulnerabilities

Vulnerabilities for packages: chezmoi, gitaly, gitlab-pages, kubescape, cilium, flux, argo-cd, helm, kots, external-secrets-operator, kaf, kubernetes-dashboard, zot, libnvidia-container, mattermost, istio, cloud-provider-aws, kyverno, aactl, cert-manager, k3s, redka, fscrypt, coredns, external-dn...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: sops, tkn, spqr, dagger, trino, kuma, argo-cd, cloud-provider-azure, helm, azure-service-operator, metrics-server, zot, contour, istio, kubernetes-csi-external-attacher, k3s, kubo, redka, prometheus-operator, kube-fluentd-operator, prometheus, ko, vault-benchmark,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, flux-source-controller, opentelemetry-collector, kubescape, containerd, cilium, flux, trivy-operator, docker-machine-driver-harvester, helm, kots, external-secrets-operator, kaf, kubernetes-dashboard, zot, mattermost, istio,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: act, chezmoi, flux-image-automation-controller, flux-source-controller, nfpm, apko, opentelemetry-collector, syft, kubescape, containerd, cilium, dagger, flux, pulumi, trivy-operator, argo-cd, helm, kots, external-secrets-operator, kaf, kubernetes-dashboard, melange,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: sops, nfpm, tkn, spqr, renovate, opentelemetry-collector, delve, addon-resizer, local-static-provisioner, dagger, trino, regclient, kuma, argo-cd, cloud-provider-azure, helm, azure-service-operator, metrics-server, zot, tw, datadog-agent, controller-gen, contour,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: nfpm, tkn, nri-kafka, opentelemetry-collector, addon-resizer, nri-mssql, argo-cd, external-secrets-operator, rabbitmq-messaging-topology-operator, zot, istio, wal-g, calico, docker-credential-acr-env, aws-application-networking-k8s, aws-nuke, argocd-image-updater,...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: nfpm, tkn, trino, argo-cd, cloud-provider-azure, helm, azure-service-operator, metrics-server, zot, datadog-agent, istio, nats, kubernetes-csi-external-attacher, k3s, redka, prometheus-operator, kube-fluentd-operator, prometheus, ko, kubernetes, undock, crossplane,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: sops, nri-discovery-kubernetes, go-md2man, cortex, gke-gcloud-auth-plugin, nsc, oras, kubernetes-dashboard-metrics-scraper, go-bindata, wait-for-port, grpcurl, k3d, dgraph, helm-push, metrics-server, ip-masq-agent, sonobuoy, cass-operator, nats, gosu,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, tfsec, bom, bento, gitness, kubernetes-dns-node-cache, terraform, flux-notification-controller, helm-set-status, helm, kubernetes-dashboard, conftest, mattermost, vale, helm-operator, xeol, flux-kustomize-controller, aactl, croc,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tkn, kubescape, neuvector-sigstore-interface, vexctl, trivy-operator, teleport, tekton-chains, falcoctl, zot, kyverno-notation-aws, aactl, cosign, tflint, zarf, trivy, goreleaser, gitsign, gh, ko, skaffold, ratify, buildkitd, slsa-verifier,...

GO-2026-4918 vulnerabilities

Vulnerabilities for packages: nfpm, tkn, addon-resizer, cilium-certgen, dagger, nri-mssql, argo-cd, newrelic-nri-kube-events, external-secrets-operator, metrics-server, zot, istio, wal-g, aws-application-networking-k8s, kubo, argocd-image-updater, kyverno-policy-reporter-ui,...

GO-2023-2383 vulnerabilities

Vulnerabilities for packages: sops, nri-discovery-kubernetes, go-md2man, cortex, gke-gcloud-auth-plugin, nsc, oras, kubernetes-dashboard-metrics-scraper, go-bindata, wait-for-port, grpcurl, k3d, dgraph, helm-push, metrics-server, ip-masq-agent, sonobuoy, cass-operator, nats, gosu,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: sops, spqr, tfsec, temporal-ui-server, gogatekeeper, crossplane-provider-aws-lambda, neuvector-sigstore-interface, local-static-provisioner, spire-controller-manager, terraform, flux-notification-controller, kuma, helm-set-status, kustomize, helm,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tkn, opa, delve, neuvector-sigstore-interface, polaris, spire-controller-manager, portieris, terraform, regclient, helm-set-status, dgraph, azure-service-operator, wire-go, helm-push, rabbitmq-messaging-topology-operator, zot, controller-gen, wal-g,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: overmind, rekor, sqlexporter, nri-kafka, opa, opentelemetry-collector, dagger, nri-mssql, newrelic-nri-kube-events, metrics-server, glab, rabbitmq-messaging-topology-operator, zot, op-geth, kubo, aws-nuke, argocd-image-updater, docker, docker-cli-buildx, undock,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: sops, distribution, flux-source-controller, rekor, rook, seaweedfs, tkn, kaniko, sqlexporter, velero-plugin-for-microsoft-azure, opentelemetry-collector, vexctl, terraform, flux-notification-controller, dgraph, glab, zot, wal-g, op-geth, terraform-provider-azurerm,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tkn, kaniko, flux-image-reflector-controller, kubescape, argo-rollouts, vexctl, actions-runner-controller, terraform, flux-notification-controller, secrets-store-csi-driver-provider-azure, grafana-alloy, bank-vaults, tekton-chains, kots,...

GO-2025-3487 vulnerabilities

Vulnerabilities for packages: sops, distribution, flux-source-controller, rekor, rook, seaweedfs, tkn, kaniko, ollama, nri-kafka, spqr, sqlexporter, opentelemetry-collector, mkcert, crossplane-provider-aws-lambda, syft, neuvector-sigstore-interface, temporal-ui-server, local-static-provisioner,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: sops, flux-image-automation-controller, flux-source-controller, rekor, rook, tkn, flux-image-reflector-controller, opentelemetry-collector, kubescape, neuvector-sigstore-interface, vexctl, actions-runner-controller, pulumi, flux, flux-notification-controller,...

CVE-2026-73842

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, and 1.2.0-rc.2, internal/cluster-gateway/server.go exposed /api/proxy/, /api/exec/, and /api/wirelogs/ on an internal listener without requiring a client certificate or token, allowing any...