GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, falcosidekick, temporal, ferretdb, tempo, dbmate, kots, spicedb, guac, cilium-cli, k3d, ksops, osv-scanner, sigstore-scaffolding, k8sgpt, minio, pulumi-language-dotnet, k3s, step, zarf, kubernetes-csi-driver-hostpath, spegel, step-ca,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: k9s, tfsec, argocd-image-updater, crossplane, gitea, pulumi, kots, goreleaser, scorecard, guac, osv-scanner, zarf, argo-workflows, task, k8sgpt, gptscript, chezmoi, argo-events, pulumi-language-dotnet, snyk-cli, pulumi-language-java, kubescape, apko, grype,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: k9s, tfsec, argocd-image-updater, crossplane, gitea, pulumi, kots, goreleaser, scorecard, guac, osv-scanner, zarf, argo-workflows, task, k8sgpt, gptscript, chezmoi, argo-events, pulumi-language-dotnet, snyk-cli, pulumi-language-java, kubescape, apko, grype,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: k9s, tfsec, teleport, argocd-image-updater, argo-cd, crossplane, gitea, pulumi, kots, scorecard, guac, osv-scanner, cerbos, argo-workflows, zarf, chezmoi, gptscript, argo-events, pulumi-language-dotnet, snyk-cli, pulumi-language-java, rancher-fleet, kubescape, apko,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: k9s, cilium, argo-cd, crossplane-provider-aws-cloudformation, telegraf, kots, chisel, cilium-cli, k8sgpt, gptscript, pulumi-language-dotnet, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-route53, splunk-otel-collector, fscrypt, go-discover, aactl,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, crossplane-provider-aws-cloudformation, telegraf, goreleaser, cilium-cli, pulumi-language-dotnet, crossplane-provider-aws-cloudwatchlogs, contour, crossplane-provider-aws-route53, splunk-otel-collector, terraform-provider-grafana, polaris,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, crossplane-provider-aws-cloudformation, telegraf, goreleaser, cilium-cli, pulumi-language-dotnet, crossplane-provider-aws-cloudwatchlogs, contour, crossplane-provider-aws-route53, splunk-otel-collector, terraform-provider-grafana, polaris,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: vault-k8s, secrets-store-csi-driver-provider-aws, kube-logging-operator, kube-oidc-proxy, crossplane-provider-aws-sqs, prometheus-postgres-exporter, atlantis-fips, smarter-device-manager-fips, flux-image-reflector-controller, fulcio-fips, hubble-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: scorecard, kubeflow-fips, kubernetes-csi-livenessprobe-fips, aws-efs-csi-driver-fips, aactl, slsa-verifier, kiam, bank-vaults-fips, cortex, kube-oidc-proxy, prometheus-stackdriver-exporter, plutono-fips, terraform-provider-sendgrid, kubevela,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dgraph, spark-operator, terraform-provider-sendgrid, kubescape, src, aactl, kubeflow, slsa-verifier, up, kubevela, buildkitd, scorecard, k3d, cortex...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: memcached-exporter, nghttp2, kots, k3d, stakater-reloader, pulumi-language-dotnet, weaviate, aactl, cosign, flux-helm-controller, ko, haproxy-ingress, certificate-transparency, kpt, buildkitd, kubevela, gomplate, rqlite, flux-source-controller, nri-prometheus,...