GO-2024-2978 vulnerabilities

Vulnerabilities for packages: cilium-cli, kargo, k3d, sigstore-scaffolding, zarf, restic, ferretdb, smarter-device-manager, temporal, grpc-health-probe, opentelemetry-collector, step, dagger, pulumi-language-dotnet, hubble-ui, terraform-docs, tempo, tflint, fulcio, grafana-mimir, opa, spicedb, zo...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: chezmoi, kargo, pulumi-language-java, grype, gitea, snyk-cli, zarf, goreleaser, scorecard, k9s, dagger, apko, argocd-image-updater, kubescape, pulumi-language-dotnet, argo-workflows, skaffold, flux-image-automation-controller, pulumi-language-yaml,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: chezmoi, kargo, pulumi-language-java, grype, gitea, snyk-cli, zarf, goreleaser, scorecard, k9s, dagger, apko, argocd-image-updater, kubescape, pulumi-language-dotnet, argo-workflows, skaffold, flux-image-automation-controller, pulumi-language-yaml,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: chezmoi, kargo, pulumi-language-java, grype, gitea, snyk-cli, zarf, scorecard, cerbos, external-secrets-operator, k9s, gitaly, trufflehog, gitlab-runner, apko, argocd-image-updater, dagger, kubescape, pulumi-language-dotnet, steampipe, argo-workflows, skaffold, nfpm,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cilium-cli, kargo, crossplane-provider-azure-sql, gitea, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, loki, openbao, opentelemetry-collector, k9s, flux-notification-controller, dagger, apko, argocd-image-updater, kubescape, steampipe,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: cilium-cli, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, opentelemetry-collector, kyverno-policy-reporter, apko, ollama, cluster-api-azure-controller, opa, zot, opentelemetry-collector-contrib, kube-vip, dex, external-dns, crossplane-provider-aws-ia...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: cilium-cli, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, opentelemetry-collector, kyverno-policy-reporter, apko, ollama, cluster-api-azure-controller, opa, zot, opentelemetry-collector-contrib, kube-vip, dex, external-dns, crossplane-provider-aws-ia...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: logstash-exporter-fips, prometheus-node-exporter-fips, pulumi, prometheus-node-exporter, kube-bench, kargo, rabbitmq-messaging-topology-operator, capslock, rekor, kots, stakater-reloader, rook, timestamp-authority-fips, crossplane-provider-aws-elasticache,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, bank-vaults-fips, kubernetes-csi-livenessprobe-fips, metrics-server-fips, terraform-provider-sendgrid, up, slsa-verifier, aws-efs-csi-driver-fips, cortex, prometheus-blackbox-exporter, kubescape, kube-oidc-proxy, smarter-device-manager-fips, plutono-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubescape, k3d, dgraph, kubeflow, slsa-verifier, up, scorecard, terraform-provider-sendgrid, aactl, cortex, spark-operator, kubevela, src, buildkitd...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nginx-stable, aws-efs-csi-driver, flux-notification-controller, kubescape, ollama, metacontroller, dex, gobuster, kubeflow-katib, nri-prometheus, spark-operator, minio, kaf, wireguard-go, memcached-exporter, slsa-verifier, rqlite, src, kubewatch, frp,...