GO-2026-5013 vulnerabilities

Vulnerabilities for packages: buildah, step-issuer, nfpm, gatus, k9s, src, crossplane-provider-aws-ec2, act, rancher, prometheus-operator, go-discover, external-secrets-operator, steampipe, zarf, crossplane-provider-aws-firehose, pulumi-language-dotnet, gh, snyk-cli, trivy, ko,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: buildah, kyverno, fscrypt, gitlab-kas, kubernetes-dashboard, podman, telegraf, istio, kaf, rancher, prometheus-operator, k3s, containerd, kubernetes, helm, cert-manager, minio, cilium, external-secrets-operator, loki, cloud-provider-aws, aactl, snyk-cli, flux,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, buildah, step-issuer, runc, azure-service-operator, gatus, juicefs, prometheus-operator, kuma, k8ssandra-client, conftest, temporal-server, kpt, zarf, dask-gateway, sftpgo-plugin-eventstore, secrets-store-csi-driver, kube-fluentd-operator,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: skaffold, kyverno, fscrypt, docker-machine-driver-harvester, osv-scanner, gitlab-kas, k9s, kubernetes-dashboard, gitea, telegraf, istio, kaf, rancher, flux-image-automation-controller, prometheus-operator, k3s, containerd, kubernetes, helm, cert-manager,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: skaffold, kyverno, fscrypt, osv-scanner, gitlab-kas, nfpm, k9s, kubernetes-dashboard, gitea, podman, telegraf, guac, istio, datadog-agent, grype, melange, kaf, chezmoi, act, witness, flux-image-automation-controller, prometheus-operator, k3s, containerd, kubernetes,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, helm-set-status, influx, verticadb-operator, k3d, act, kserve-rest-proxy, delve, s5cmd, cluster-api-provider-vsphere, kind, docker-credential-acr-env, weaviate, secrets-store-csi-driver, gitsign, dynamic-localpv-provisioner, nri-redis,...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: buildah, runc, nfpm, azure-service-operator, gatus, juicefs, act, prometheus-operator, k8ssandra-client, pgtimetable, conftest, kpt, zarf, dask-gateway, kube-fluentd-operator, ko, helm-operator, zot, karpenter, aws-flb-kinesis, prometheus-adapter, harbor, scorecard,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, buildah, crane, kubeflow, step-issuer, vitess, runc, nfpm, azure-service-operator, gatus, cargobump, victoriametrics-cluster, juicefs, influx, speedtest-go, k3d, act, nri-apache, delve, prometheus-operator, shfmt, kuma, k8ssandra-client,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: petname, mage, go-bindata, sops, configmap-reload, influx, slsa-verifier, grpcurl, smarter-device-manager, k3d, hubble-ui, render-template, go-licenses, docker-cli, kind, metrics-server, cni-plugins, amass, flannel-cni-plugin, sbom-scorecard, scorecard, aactl, gops,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: helm-set-status, flux-kustomize-controller, osv-scanner, timoni, runc, kubernetes-dashboard, flux-notification-controller, kubernetes-dns-node-cache, src, telegraf, kubernetes-dashboard-api, headlamp, tfsec, ferretdb, flux-image-automation-controller, k3s, traefik,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: skaffold, tflint, slsa-verifier, witness, tekton-chains, trivy-operator, vexctl, kyverno-notation-aws, goreleaser, zarf, gitsign, aactl, gh, trivy, ko, flux-source-controller, neuvector-sigstore-interface, spire-server, zot, cosign, falcoctl, teleport,...

GO-2023-2383 vulnerabilities

Vulnerabilities for packages: petname, mage, go-bindata, sops, configmap-reload, influx, slsa-verifier, grpcurl, smarter-device-manager, k3d, hubble-ui, render-template, go-licenses, docker-cli, kind, metrics-server, cni-plugins, amass, flannel-cni-plugin, sbom-scorecard, scorecard, aactl, gops,...

GO-2026-4918 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, helm-set-status, cilium-certgen, cluster-api-aws-controller, juicefs, influx, verticadb-operator, k3d, act, delve, vcluster, conftest, temporal-server, weaviate, secrets-store-csi-driver, dynamic-localpv-provisioner, external-dns,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, helm-set-status, kubernetes-csi-driver-nfs, temporal-ui-server, timoni, runc, podinfo, maru, azure-service-operator, gatus, sbomqs, kubernetes-csi-external-provisioner, git-sync, nri-haproxy, src, vault-k8s, juicefs, influx,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, helm-set-status, azure-service-operator, src, kubernetes-dashboard-auth, nri-haproxy, k3d, nri-apache, delve, prometheus-operator, harbor-cli, wgcf, cluster-api-provider-vsphere, dive, render-template, terraform-mcp-server, conftest, kind,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, helm-set-status, cluster-api-aws-controller, juicefs, influx, verticadb-operator, k3d, pombump, s5cmd, conftest, kind, weaviate, dynamic-localpv-provisioner, nri-redis, bom, wait-for-port, pguser, rclone, gomplate, argo-workflows, eksct...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth, git-sync, seaweedfs, rook, temporal-server, zarf, chartmuseum, weaviate, gitsign, trivy, ko, grafana-mimir, flux-source-controller, spire-server, zot, gitness, falcoctl, velero-plugin-for-microsoft-azure, crossplane-provider-azure-sql,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: skaffold, flux-notification-controller, crossplane-provider-azure-managedidentity, git-sync, gitea, kubernetes-dashboard-auth, octo-sts, flyte, secrets-store-csi-driver-provider-azure, guac, azcopy, kaniko, actions-runner-controller, k3s, bank-vaults, kubernetes,...

GO-2025-3487 vulnerabilities

Vulnerabilities for packages: buildah, step-issuer, temporal-ui-server, sbomqs, gatus, cluster-api-aws-controller, k9s, kubernetes-dashboard-auth, src, terraform-provider-google, crossplane-provider-aws, seaweedfs, crossplane-provider-aws-ec2, kube-vip, k3d, prometheus-operator, wgcf, go-discover...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, flux-helm-controller, flux-notification-controller, crossplane-provider-azure-managedidentity, kargo, ksops, sops, buildkitd, guac, slsa-verifier, kubevela, sigstore-scaffolding, k3d, flux-image-automation-controller, fulcio, k3s,...