1846 matches found
GO-2026-5025 vulnerabilities
Vulnerabilities for packages: gptscript, telegraf, crossplane-provider-azure-storage, fq, crossplane-provider-aws-elasticache, grafana-pyroscope, kots, kubernetes-dashboard, terraform-provider-acme, vale, kine, crossplane-provider-azure-authorization, glab, gitea, nerdctl, caddy,...
GO-2026-5028 vulnerabilities
Vulnerabilities for packages: gptscript, telegraf, crossplane-provider-azure-storage, fq, crossplane-provider-aws-elasticache, grafana-pyroscope, kots, kubernetes-dashboard, terraform-provider-acme, vale, kine, crossplane-provider-azure-authorization, glab, gitea, nerdctl, caddy,...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: ip-masq-agent, spark-operator, kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, prometheus-adapter...
GO-2026-5662 vulnerabilities
Vulnerabilities for packages: loki, telegraf, grafana-pyroscope, trillian, tempo, istio, karma, cloud-sql-proxy, minio, minio-operator, keda, jaeger, datadog-agent, mcp-grafana, mc, minio-object-browser, certificate-transparency, prometheus-pushgateway, splunk-otel-collector, aws-otel-collector...
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: grafana, loki, trillian, k8sgpt, amazon-cloudwatch-agent-operator, tempo, metrics-server, prometheus-operator, istio, karma, cloud-sql-proxy, minio, minio-operator, keda, jaeger, datadog-agent, mc, certificate-transparency, prometheus-pushgateway,...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: flyte, restic, chezmoi, sqlpad, sops, terragrunt, goreleaser, timestamp-authority, airflow, fulcio, policy-controller, opentelemetry-collector-contrib, wal-g, buildkitd, k8sgpt, druid, kubescape, prometheus-operator, secrets-store-csi-driver-provider-azure, tkn,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: temporal-server, nri-consul, chisel, pgpool2exporter, runc, terraform-provider-acme, conftest, temporal, emissary, omnibump, containerd, rancher-webhook, prometheus-adapter, crossplane-provider-aws-lambda, terraform-provider-grafana, azure-workload-identity-webhook,...
GO-2026-5841 vulnerabilities
Vulnerabilities for packages: zot, flux, loki, minio, telegraf, aactl, kots, kyverno, kaf, spire-server, k3s, k3d, prometheus-operator, kine, containerd, snyk-cli, nerdctl...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: chisel, loki, nfpm, terraform-provider-acme, kine, containerd, crossplane-provider-aws-lambda, wal-g, caddy, crossplane-provider-family-azure, crossplane-provider-aws-ec2, kubescape, crossplane-provider-aws-memorydb, terraform-provider-tls, istio, kargo, zot, flux,...
GO-2026-4976 vulnerabilities
Vulnerabilities for packages: grafana, telegraf, aws-flb-firehose, kots, kubernetes-dashboard, runc, k8s-device-plugin, argo-cd, containerd, redka, nerdctl, coredns, juicefs, kubevela, prometheus-operator, istio, karma, dask-gateway, mattermost, go, zot, aws-flb-cloudwatch, falco-no-driver, flux,...
GO-2026-5005 vulnerabilities
Vulnerabilities for packages: loki, telegraf, kots, kubernetes-dashboard, kine, containerd, buildah, rancher, nerdctl, podman, fscrypt, prometheus-operator, gitlab-kas, istio, mattermost, snyk-cli, zot, external-secrets-operator, docker-cli-buildx, falco-no-driver, flux, kyverno, minio,...
GO-2026-5014 vulnerabilities
Vulnerabilities for packages: chisel, loki, telegraf, kots, kubernetes-dashboard, kine, containerd, gitea, rancher, nerdctl, flux-image-automation-controller, fscrypt, k9s, kubescape, prometheus-operator, gitlab-kas, istio, flux-source-controller, mattermost, docker-machine-driver-harvester,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: nri-consul, conftest, emissary, nri-redis, helm-operator, containerd, helm-set-status, wait-for-port, wal-g, ini-file, caddy, controller-gen, nri-apache, kubernetes-dashboard-api, docker-machine-driver-harvester, harbor-cli, lazydocker, cloud-sql-proxy,...
GO-2025-3488 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-csi, cadvisor, wal-g, crossplane-provider-family-azure, sonobuoy, victoriametrics, redis-operator, zot, docker-compose, argo-events, litestream, gitness, crossplane-provider-family-aws, frp, kaf, cilium-cli, crossplane-provider-aws, flyte,...
GO-2024-3107 vulnerabilities
Vulnerabilities for packages: nri-nagios, oras, nri-redis, kine, php-fpmexporter, velero-plugin-for-csi, cadvisor, wait-for-port, caddy, crossplane-provider-family-azure, sonobuoy, http-echo, victoriametrics, zot, docker-compose, helm-docs, litestream, gitness, crossplane-provider-family-aws, frp...
GO-2024-2825 vulnerabilities
Vulnerabilities for packages: runc, docker-credential-ecr-login, oras, conftest, dockerize, helm-operator, php-fpmexporter, trillian, kubernetes-ingress-defaultbackend, cadvisor, mkcert, prometheus-adapter, kafkaexporter, wait-for-port, flannel, caddy, nri-prometheus, kubernetes-dns-node-cache,...
CVE-2026-73654 Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPathoperation.key.setnewMetadata, value in...
CVE-2026-67990
basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user's browser to submit requests that are forwarded to enabled upstream write or management...