GO-2026-4859 vulnerabilities

Vulnerabilities for packages: zot, guac, docker-cli-buildx, kubescape, buildah, trivy-operator, scorecard, podman, osv-scanner, skaffold, conftest, trivy, kaniko, docker-compose...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: kots, dagger, eksctl, newrelic-infrastructure-agent, opa-envoy, helm, kargo, skaffold, cilium-cli, chartmuseum, opa, ctop, kubescape, k8sgpt, rancher-fleet, flux-helm-controller, linkerd2, fuse-overlayfs-snapshotter, trivy, helm-push, spegel, zot, docker-cli-buildx,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, ctop, cadvisor, neuvector-scanner, buildah, grype, syft, docker, podman, grafana-alloy, k3s, kubernetes, runc, opentelemetry-collector-contrib...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: zot, guac, docker-cli-buildx, kubescape, buildah, trivy-operator, scorecard, podman, osv-scanner, skaffold, conftest, trivy, kaniko, docker-compose...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: melange, dagger, buf, helm-push, neuvector-scanner, grype, syft, docker, cri-tools, k3d, wolfictl, policy-controller, kaniko, harbor-scanner-trivy, docker-compose...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: ctop, cadvisor, neuvector-scanner, grype, buildah, kubernetes, opentelemetry-collector-contrib, wolfictl...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: kots, flux-image-automation-controller, dagger, apko, timoni, skaffold, kargo, pulumi, argo-events, argo-workflows, pulumi-kubernetes-operator, kubescape, k8sgpt, gptscript, scorecard, pulumi-language-yaml, nuclei, trivy, bom, zot, guac, syft, gitea, goreleaser, tfse...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kots, flux-image-automation-controller, dagger, apko, timoni, skaffold, kargo, pulumi, argo-events, argo-workflows, pulumi-kubernetes-operator, kubescape, k8sgpt, gptscript, scorecard, pulumi-language-yaml, nuclei, trivy, bom, zot, guac, syft, gitea, goreleaser, tfse...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: kots, flux-image-automation-controller, dagger, apko, skaffold, kargo, gitlab-runner, argo-events, argo-workflows, pulumi, pulumi-kubernetes-operator, kubescape, gitaly, gptscript, rancher-fleet, scorecard, pulumi-language-yaml, cerbos, nuclei, trivy, bom, zot, guac,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: kots, ko, rancher-machine, rancher-agent, skopeo, k8sgpt, podman, docker-credential-gcr, nuclei, trivy, zot, buildah, spire-server, trivy-operator, undock, nerdctl, grafana, portieris, rancher, aws-otel-collector, amazon-cloudwatch-agent-operator,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: kots, ko, rancher-machine, rancher-agent, newrelic-infrastructure-agent, apko, opentelemetry-collector, opentelemetry-collector-contrib, cluster-api, skopeo, k8sgpt, podman, docker-credential-gcr, nuclei, trivy, zot, buf, buildah, spire-server, goreleaser,...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: kots, ko, rancher-machine, rancher-agent, newrelic-infrastructure-agent, apko, opentelemetry-collector, opentelemetry-collector-contrib, cluster-api, skopeo, k8sgpt, podman, docker-credential-gcr, nuclei, trivy, zot, buf, buildah, spire-server, goreleaser,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: stakater-reloader, newrelic-infra-operator, flux-image-automation-controller, kubewatch, sftpgo-plugin-eventsearch, smarter-device-manager, nova, aws-privateca-issuer, oras, pluto, tailscale, fluxcd-kustomize-mutating-webhook, apko, karpenter, grafana-operator,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: gogatekeeper, nova, spqr, kube-logging-operator-custom-runner, conjur-cli, helm, aws-node-termination-handler, lazydocker, policy-controller, pulumi-kubernetes-operator, cluster-api, tofu-controller, ctop, newrelic-nri-statsd, controller-gen, prometheus-adapter,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: step, helm, skaffold, pulumi-kubernetes-operator, policy-controller, cilium-cli, opentelemetry-collector, flux-notification-controller, pulumi-language-yaml, crossplane-provider-azure-storage, trivy, nfpm, tflint, datadog-agent, terraform-provider-azurerm, istio, k3s...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: step, helm, skaffold, pulumi-kubernetes-operator, policy-controller, cilium-cli, opentelemetry-collector, flux-notification-controller, pulumi-language-yaml, crossplane-provider-azure-storage, trivy, crossplane-provider-aws-sqs, nfpm, tflint, datadog-agent,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: step, helm, skaffold, pulumi-kubernetes-operator, cilium-cli, opentelemetry-collector, pulumi-language-yaml, trivy, nfpm, istio, k3s, witness, zarf, argo-cd, act, gomplate, kubernetes-dashboard, external-secrets-operator, telegraf, dagger, kine, containerd, gitlab-ka...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gogatekeeper, pvc-autoresizer, amass, aws-privateca-issuer, nats-top, spqr, kube-logging-operator-custom-runner, langfuse, git-sync, conjur-cli, step, minio-object-browser, policy-controller, cilium-cli, gobuster, tofu-controller, flux-notification-controller,...

PT-2026-72129

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw exists when the SECURITY SCANNER V4 PSK pre-shared key is not configured. A remote unauthenticated attacker can send POST requests to the security scanner notification endpoint,...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-54542)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54542 advisory. 10.0.111-1.0.1 - Add support for Oracle Linux 10.0.111-1 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235478 Tenable has extract...