advisory-database

GitHub Advisory Database A database of CVEs and GitHub-originated security advisories affecting the open source world. The database is free and open source and is a tool for and by the community. Submit pull requests to help improve our database of software vulnerability information for all. Goal...

osv-scanner v2.6.0

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: gptscript, opencost-fips, gitlab-workhorse-ce-fips, jaeger-fips, flux-operator, datadog-agent, opencost, datadog-agent-fips, flux-operator-fips, gitlab-workhorse-ce, jaeger, osv-scanner, github-mcp-server, ferretdb...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: opencost-fips, gitlab-workhorse-ce-fips, jaeger-fips, flux-operator, datadog-agent, opencost, glab, datadog-agent-fips, flux-operator-fips, gitlab-workhorse-ce, jaeger, osv-scanner, livekit-cli, ferretdb...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: podman, trivy, docker-compose, buildah-fips, cloudbeat, podman-fips, cloudbeat-fips, guac, trivy-operator-fips, docker-fips, skaffold-fips, docker-compose-fips, trivy-fips, osv-scanner, docker-cli-buildx, kubescape, conftest-fips, kaniko-fips, buildah, kaniko,...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: jaeger, osv-scanner, glab, opencost, ferretdb...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: jaeger, gptscript, osv-scanner, opencost, github-mcp-server, ferretdb...

GO-2026-4773 vulnerabilities

Vulnerabilities for packages: jaeger, osv-scanner, glab, opencost, ferretdb...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: zarf, tflint, kubernetes-csi-driver-hostpath, dex, gomplate, osv-scanner, opentelemetry-collector-contrib, terraform-docs, k3d, sigstore-scaffolding, step, terragrunt, k8sgpt, cloudnative-pg, grafana-mimir, ferretdb, cert-manager-cmctl, spegel,...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: zarf, osv-scanner, docker-cli-buildx, neuvector-scanner, k8sgpt, linkerd2, cert-manager-cmctl, spegel, melange, helm-operator, kaniko, kargo, docker-compose, kubevela, fuse-overlayfs-snapshotter, flux-helm-controller, zot, kubescape, grype, flux-source-controller,...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: kubescape, scorecard, trivy-operator, kaniko, docker-compose, trivy, buildah, osv-scanner, guac, skaffold, docker-cli-buildx, conftest, podman, zot...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: kubescape, scorecard, trivy-operator, kaniko, docker-compose, trivy, buildah, osv-scanner, guac, skaffold, docker-cli-buildx, conftest, podman, zot...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: zarf, pulumi-kubernetes-operator, argo-events, gptscript, pulumi, osv-scanner, k8sgpt, go-licenses, melange, chezmoi, kaniko, kargo, snyk-cli, kubevela, zot, kubescape, grafana-alloy, timoni, goreleaser, grype, flux-source-controller, src-fingerprint,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: zarf, pulumi-kubernetes-operator, argo-events, gptscript, pulumi, osv-scanner, k8sgpt, go-licenses, melange, chezmoi, kaniko, kargo, snyk-cli, kubevela, zot, kubescape, grafana-alloy, timoni, goreleaser, grype, flux-source-controller, src-fingerprint,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: steampipe, zarf, pulumi-kubernetes-operator, argo-events, gptscript, pulumi, gomplate, osv-scanner, kyverno, melange, cerbos, chezmoi, trivy-operator, kaniko, kargo, snyk-cli, kubevela, gitaly, zot, trufflehog, kubescape, grafana-alloy, grype, flux-source-controller,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, ko, cri-tools, kpt, grafana, osv-scanner, amazon-cloudwatch-agent-operator, rancher, trivy-operator, opentelemetry-operator, docker-credential-gcr, undock, zot, grafana-alloy, portieris, aws-otel-collector, trivy, buildah, rancher-agent,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, traefik, zarf, pulumi, cluster-api, ko, cri-tools, kpt, buf, grafana, osv-scanner, opentelemetry-collector-contrib, neuvector-scanner, k8sgpt, splunk-otel-collector, amazon-cloudwatch-agent-operator, rancher, melange, trivy-operator, openfga,...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, traefik, zarf, pulumi, cluster-api, ko, cri-tools, kpt, buf, grafana, osv-scanner, opentelemetry-collector-contrib, neuvector-scanner, k8sgpt, splunk-otel-collector, amazon-cloudwatch-agent-operator, rancher, melange, trivy-operator, openfga,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection, supercronic, victoriametrics-cluster, osv-scanner, nfs-subdir-external-provisioner, victoriametrics, ingress-nginx-controller, envoy-ratelimit, polaris, nodetaint, volume-modifier-for-k8s, dataplaneapi, mariadb-operator, gh, malconten...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, temporal-server, terraform-provider-azurerm, cluster-api, cloud-provider-aws, victoriametrics-cluster, osv-scanner, nri-haproxy, authservice, aws-node-termination-handler, rancher-webhook, envconsul, cloudnative-pg, litefs, frp, kube-state-metrics,...