GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gitlab-runner, terragrunt, cloudflared, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, skaffold, witness, crossplane-provider-aws-sqs, prometheus-operator, gitlab-pages, spire-server, tkn, pulumi-kubernetes-operator, zarf, prometheus,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: gitlab-runner, terragrunt, skaffold, witness, prometheus-operator, spire-server, tkn, pulumi-kubernetes-operator, zarf, prometheus, crossplane-provider-azure-storage, istio, policy-controller, nfpm, fulcio, step-kms-plugin, docker, dagger, kine, steampipe,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gitlab-runner, influx, db-operator, mongodb-kubernetes-operator, juicefs, pvc-autoresizer, restic, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, whereabouts, yunikorn-k8shim, calico, git-lfs, s5cmd, k8sgateway, extism, undock, hubble-ui,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, docker-machine-driver-harvester, knative-kafka-broker-fips, frankenphp-8.2, vault, drone-fips, nemo, argo-cd-fips, prometheus, frankenphp-8.5, cloudbeat, harbor-fips, external-secrets-operator-fips, gitlab-kas, chisel-fips, cloudbeat-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gitlab-runner, terragrunt, skaffold, witness, prometheus-operator, spire-server, tkn, pulumi-kubernetes-operator, zarf, prometheus, crossplane-provider-azure-storage, istio, policy-controller, nfpm, fulcio, step-kms-plugin, docker, dagger, kine, steampipe,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kyverno, fscrypt, flux-source-controller, aactl, external-dns, flux, trivy, chisel, skaffold, cilium, mattermost, cilium-cli, opentelemetry-collector, minio, prometheus-operator, k3s, nerdctl, k9s, spire-server, helm, zarf, argocd-image-updater, kaf, snyk-cli,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: grype-fips, guac, google-osconfig-agent, grype, nemo, syft-fips, argo-cd-fips, cloudbeat, wolfictl, gomplate, jfrog-cli, external-secrets-operator-fips, trufflehog, kaniko-fips, kaniko, cloudbeat-fips, skaffold, rancher-fleet-fips, amazon-ssm-agent-fips, witness, kot...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: ctop, buildkitd, flux-source-controller, linkerd2, wolfictl, kargo, trivy, skaffold, chartmuseum, cilium-cli, fuse-overlayfs-snapshotter, kaniko, helm-push, cluster-api-helm-controller, zot, newrelic-infrastructure-agent, k3s, k8sgpt, nerdctl, helm, neuvector-scanner...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: kube-bench, mongo-tools, caddy-fips, ip-masq-agent, opentelemetry-collector-contrib-fips, dockerize, helm-operator-fips, guac, wave-fips, flux-notification-controller, kustomize, caddy, extism, step-fips, trust-manager, trust-manager-fips, croc, s5cmd, dive,...

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various projects. The Go-based tool, powered by the Open Source Vulnerabilities OSV database, is designed to connect "a project's list of dependenci...