GO-2025-3770 vulnerabilities

Vulnerabilities for packages: sftpgo, caddy, step-ca, step-issuer-fips, buf, cloudflared, rclone, gitness, dapr-fips, step-ca-fips, rclone-fips, kyverno-policy-reporter-ui-fips, kyverno-policy-reporter-ui, step-issuer, gogatekeeper, tkn, step-fips, telegraf, step, tkn-fips, caddy-fips, karma, dap...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: syft, temporal-fips, kyverno-policy-reporter-kyverno-plugin, logstash-exporter-fips, kubeflow-fips, gh, crossplane-provider-aws-eks, grafana-operator-fips, vexctl, nats, prometheus-elasticsearch-exporter-fips, conftest-fips, capslock, cfssl, azure-aad-pod-identity-mi...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: caddy, k8sgateway, kargo, kubernetes-dns-node-cache, kyverno-policy-reporter-ui, spegel, dkron, kubo, ipfs-cluster, traefik, frp, q, k3s...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: caddy, sftpgo, gitness, gogatekeeper, cloudflared, kyverno-policy-reporter-ui, step-issuer, step, step-ca, rclone, buf, tkn, karma...

GO-2026-5577 Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui...

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component

Summary Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that interpolation provides. The PropertyCard.vue component uses v-html for the else branch of the URL check, meaning any non-URL string value flows...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: caddy, k8sgateway, kargo, kubernetes-dns-node-cache, kyverno-policy-reporter-ui, spegel, dkron, kubo, ipfs-cluster, traefik, frp, q, k3s...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: caddy, frp, k3s, rke2-runtime, traefik, kubernetes-dns-node-cache, coredns-fips, coredns, eks-distro-fips, kyverno-policy-reporter-ui-fips, kubernetes-dns-node-cache-fips, kyverno-policy-reporter-ui, syncthing, kubo-fips, traefik-fips, ipfs-cluster-fips, spegel,...