osv-scanner

OSV-Scannerを使用して、プロジェクトの依存関係に影響する既存の脆弱性を発見しましょう。 OSV-Scannerは、OSVデータベースへの公式サポート付きフロントエンドと、プロジェクトの依存関係リストをそれらに影響する脆弱性に結び付けるOSV-ScalibrへのCLIインターフェースを提供します。 OSV-Scannerは、幅広いプロジェクトタイプ、パッケージマネージャー、機能をサポートしています。これらに限定されません： 言語: C/C++、Dart、Elixir、Go、Java、Javascript、PHP、Python、R、Ruby、Rust。 パッケージマネージャー:...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, jaeger-fips, gptscript, opencost, github-mcp-server, datadog-agent, datadog-agent-fips, jaeger, opencost-fips, ferretdb, flux-operator-fips, flux-operator, osv-scanner, gitlab-workhorse-ce-fips...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, glab, jaeger-fips, opencost, datadog-agent, datadog-agent-fips, jaeger, opencost-fips, livekit-cli, ferretdb, flux-operator-fips, flux-operator, osv-scanner, gitlab-workhorse-ce-fips...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: kubescape, skaffold, docker-fips, buildah, docker-compose-fips, docker-cli-buildx-fips, kaniko-fips, podman, trivy-operator, osv-scanner, docker-cli-buildx, conftest, kubescape-server-fips, trivy, kaniko, guac, livekit-cli, buildah-fips, cloudbeat-fips, trivy-fips,...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: jaeger, opencost, osv-scanner, ferretdb, datadog-agent, glab...

GO-2026-4773 vulnerabilities

Vulnerabilities for packages: jaeger, opencost, osv-scanner, ferretdb, datadog-agent, glab...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: jaeger, gptscript, opencost, github-mcp-server, osv-scanner, ferretdb, datadog-agent...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k3d, ksops, kargo, pulumi-language-dotnet, step, terragrunt, opentelemetry-collector-contrib, dex, spegel, restic, smarter-device-manager, cert-manager-cmctl, gomplate, grafana-mimir, sigstore-scaffolding, minio, spicedb, spire-server,...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: kargo, skaffold, spegel, rancher-fleet, helm, nerdctl, cert-manager-cmctl, syft, helm-operator, newrelic-infrastructure-agent, kubevela, docker, buildkitd, k8ssandra-client, dagger, fuse-overlayfs-snapshotter, melange, docker-compose, opa, grype, kaniko, helm-push,...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kubescape, guac, skaffold, trivy, zot, podman, scorecard, trivy-operator, buildah, docker-compose, osv-scanner, kaniko, conftest...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kubescape, guac, skaffold, trivy, zot, podman, scorecard, trivy-operator, buildah, docker-compose, osv-scanner, kaniko, conftest...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kargo, pulumi-language-dotnet, skaffold, bom, nuclei, flux, chezmoi, syft, grafana-alloy, pulumi-language-java, kubevela, go-licenses, dagger, k9s, melange, scorecard, src-fingerprint, flux-image-automation-controller, grype, timoni, kaniko, gitea, trivy, task,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: kargo, pulumi-language-dotnet, skaffold, bom, nuclei, flux, chezmoi, syft, grafana-alloy, pulumi-language-java, kubevela, go-licenses, dagger, k9s, melange, scorecard, src-fingerprint, flux-image-automation-controller, grype, timoni, kaniko, gitea, trivy, task,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: ko, nuclei, portieris, trivy-operator, nerdctl, buildah, undock, skopeo, docker-credential-gcr, rancher-machine, spire-server, rancher-agent, podman, kpt, cri-tools, amazon-cloudwatch-agent-operator, trivy, k8sgpt, rancher, opentelemetry-operator, grafana,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, ko, opentelemetry-collector-contrib, cluster-api, nuclei, portieris, trivy-operator, nerdctl, buildah, undock, skopeo, newrelic-infrastructure-agent, docker-credential-gcr, docker, rancher-machine, spire-server, opentelemetry-collector,...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, ko, opentelemetry-collector-contrib, cluster-api, nuclei, portieris, trivy-operator, nerdctl, buildah, undock, skopeo, newrelic-infrastructure-agent, docker-credential-gcr, docker, rancher-machine, spire-server, opentelemetry-collector,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection, hubble, envoy-ratelimit, aws-privateca-issuer, flux-notification-controller, tailscale, smarter-device-manager, flux, nfs-subdir-external-provisioner, actions-runner-controller, dataplaneapi, secrets-store-csi-driver-provider-aws,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, crossplane-provider-aws-sns, ksops, coredns, cloud-provider-azure, neuvector-dbgen, act, controller-gen, atlantis, nri-prometheus, redpanda, terraform-provider-grafana, speedtest-go, gomplate, kyverno, spqr, chisel, grafana-alloy,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, ksops, act, flux-notification-controller, atlantis, prometheus-operator, nerdctl, gomplate, chezmoi, kyverno, chisel, syft, crossplane-provider-aws-cloudwatchlogs, terraform-provider-acme, spire-server, podman, steampipe, dagger,...