GO-2024-2978 vulnerabilities

Vulnerabilities for packages: terragrunt, kwok, terraform-docs, k8sgpt-operator, terraform-provider-google, sigstore-scaffolding, grafana-mimir, k8sgpt, ksops, kubernetes-csi-driver-hostpath, osv-scanner, kaniko, zot, smarter-device-manager, hubble-ui, opentelemetry-collector, conftest, kots, gua...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: cosign, crossplane, goreleaser, kyverno-notation-aws, vexctl, trivy-operator, sigstore-scaffolding, flux-source-controller, teleport, ko, gh, policy-controller, zot, falcoctl, gitsign, tekton-chains, docker, tkn, tflint, kyverno, kubescape, spire-server,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: spark-operator, step-issuer, kyverno-notation-aws, cluster-proportional-autoscaler, pulumi-language-yaml, terraform-provider-google, nfs-subdir-external-provisioner, sigstore-scaffolding, kubeflow-pipelines, flyte, grafana-mimir, cert-exporter, amass, portieris,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: chezmoi, terragrunt, trino, argo-workflows, cosign, boring-registry, goreleaser, druid, rclone, sigstore-scaffolding, rook, flux-source-controller, flyte, fluent-bit-plugin-loki, grafana-mimir, k8sgpt, ksops, prometheus-operator, airflow, policy-controller,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, terraform-provider-random, aws-signer-notation-plugin, gops, cadvisor, cri-tools, gotestsum, newrelic-nri-statsd, yunikorn-k8shim, hello-world-golang, fq, flyte, petname, xcaddy, kubernetes-csi-driver-hostpath, ini-file, opentofu,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, pluto, terraform-provider-random, nats-top, kubernetes-release, cri-tools, gotestsum, newrelic-nri-statsd, yunikorn-k8shim, hello-world-golang, fq, flyte, petname, xcaddy, ini-file, nri-mysql, speedtest-go, bank-vaults, lazydocker, glow,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: terragrunt, atlantis, cadvisor, nats, flux-source-controller, fq, k8sgpt, zot, conftest, step, gitness, bank-vaults, flux-image-reflector-controller, src-fingerprint, step-ca, helm, tekton-chains, dockerize, temporal-ui-server, kubernetes, kube-rbac-proxy,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: k9s, terragrunt, kubernetes-csi-node-driver-registrar, jitsucom-bulker, sealed-secrets, pgpool2exporter, nri-kubernetes, cert-manager-webhook-pdns, atlantis, cri-tools, crossplane-provider-aws-sns, newrelic-nri-statsd, spicedb-operator, cert-exporter, flyte,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: kustomize, k9s, terragrunt, kwok, pgpool2exporter, nri-kubernetes, atlantis, cadvisor, cri-tools, crossplane-provider-aws-sns, nats, flux-source-controller, protoc-gen-go-grpc, cert-exporter, k8sgpt, helm-operator, kubernetes-csi-driver-hostpath, zot, conftest, step,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: terragrunt, nerdctl, argo-workflows, cosign, goreleaser, vexctl, oauth2-proxy, sigstore-scaffolding, rook, flux-source-controller, cloudflared, wolfictl, ko, weaviate, policy-controller, zot, kots, melange, falcoctl, guac, step, gitsign, kubernetes-dashboard,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cadvisor, cri-tools, yunikorn-k8shim, flux-source-controller, flyte, kubernetes-csi-driver-hostpath, mattermost, opentofu, bank-vaults, tekton-chains, podman, datadog-agent, cloudprober, crossplane-provider-aws-cloudwatchlogs,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: cosign, crossplane, goreleaser, kyverno-notation-aws, vexctl, sigstore-scaffolding, flux-source-controller, teleport, ko, gh, policy-controller, zot, falcoctl, gitsign, tekton-chains, tkn, tflint, docker-cli-buildx, kyverno, ratify, kubescape, spire-server,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: undock, cosign, vexctl, kyverno-notation-aws, sigstore-scaffolding, flux-source-controller, falco-no-driver, portieris, kots, falcoctl, gitsign, tekton-chains, podman, tkn, kyverno, ratify, kubescape, skopeo, buildah, zarf, aactl, witness, slsa-verifier...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: undock, cosign, crossplane, docker-compose, kyverno-notation-aws, goreleaser, trivy-operator, vexctl, sigstore-scaffolding, flux-source-controller, falco-no-driver, ko, portieris, gh, policy-controller, zot, kots, falcoctl, guac, gitsign, timestamp-authority,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: cosign, crossplane, goreleaser, kyverno-notation-aws, vexctl, trivy-operator, sigstore-scaffolding, flux-source-controller, teleport, ko, gh, policy-controller, zot, falcoctl, gitsign, tekton-chains, docker, tkn, tflint, docker-cli-buildx, kyverno, ratify, kubescape,...