GO-2026-4569 vulnerabilities

Vulnerabilities for packages: datadog-agent, jaeger, flux-operator-fips, flux-operator, opencost, ferretdb, github-mcp-server, gptscript, opencost-fips, osv-scanner, gitlab-workhorse-ce-fips, datadog-agent-fips, jaeger-fips, gitlab-workhorse-ce...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: datadog-agent, jaeger, flux-operator-fips, flux-operator, opencost, ferretdb, livekit-cli, opencost-fips, osv-scanner, gitlab-workhorse-ce-fips, datadog-agent-fips, jaeger-fips, gitlab-workhorse-ce, glab...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: zot, trivy-operator, skaffold-fips, guac, docker-compose, kubescape-server-fips, buildah, conftest, skaffold, cloudbeat-fips, conftest-fips, podman, docker-fips, livekit-cli, docker-compose-fips, trivy-fips, kaniko, kaniko-fips, trivy, docker-cli-buildx-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: traefik-fips, cilium, flux-source-controller, commercial-expanso-edge, external-secrets-operator-fips, minio, skaffold, cilium-cli, cloudbeat-fips, flux-fips, knative-kafka-broker, kube-arangodb-fips, kubevela-fips, grafana, spire-server, drone, mattermost-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: sops, rootlesskit, crossplane-provider-azure-storage, age, opentofu, apko, nuclei, atlantis, snyk-cli, terraform-provider-tls, pulumi, trivy, chisel, nfpm, pulumi-language-java, zot, crossplane-provider-azure-managedidentity, istio, gptscript,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: rancher, kubernetes-dashboard, fscrypt, skaffold, snyk-cli, flux, trivy, chisel, k3s, prometheus-operator, kubescape, helm, loki, osv-scanner, zot, flux-source-controller, knative-serving, kaf, argocd-image-updater, istio, gitea, trivy-operator,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: redpanda-console, dagger, flux-source-controller, xeol-fips, cg, external-secrets-operator-fips, skaffold, pulumi-language-yaml, cloudbeat-fips, flux-fips, gomplate-fips, mapotf-fips, kubevela-fips, grafana, gitaly, pulumi, gitaly-fips, src-fingerprint, argo-cd,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: chartmuseum, docker, docker-cli-buildx, kubevela, skaffold, spegel, syft, kaniko, trivy, k3s, kubescape, helm, ctop, osv-scanner, k8ssandra-client, rancher-fleet, zot, flux-source-controller, cert-manager-cmctl, dagger, fuse-overlayfs-snapshotter, kargo, linkerd2,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, flux-source-controller, cosign-fips, k3d, cfssl, go-md2man, nats-server, cri-tools, aws-efs-csi-driver, dynamic-localpv-provisioner-fips, go, ko-fips, bank-vaults-fips, kubewatch, spark-operator, wireguard-go, kwok, karpenter, eck-operator, frp...

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various projects. The Go-based tool, powered by the Open Source Vulnerabilities OSV database, is designed to connect "a project's list of dependenci...