37765 matches found
CVE-2026-22555
A flaw was found in Gitea. An API Application Programming Interface endpoint responsible for forking repositories into an organization failed to properly check if a user had the necessary permissions to create repositories within that organization. This allowed a read-only organization member to...
GO-2024-2982 vulnerabilities
Vulnerabilities for packages: vault...
GO-2023-1793 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver, vault-csi-provider...
GO-2026-5723 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2026-5602 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2026-5377 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2024-2454 vulnerabilities
Vulnerabilities for packages: gitsign, falcoctl-fips, spire-server-fips, minio, vexctl, kubescape, external-secrets-fips, falcoctl, mc, boring-registry, tekton-chains, spire-server, cosign-fips...
GO-2024-2632 vulnerabilities
Vulnerabilities for packages: minio-fips, mc-fips, falcoctl-fips, spire-server-fips, minio, boring-registry-fips, external-secrets-fips, falcoctl, mc, boring-registry, spire-server...
GO-2026-5693 vulnerabilities
Vulnerabilities for packages: gitaly, argo-cd-fips, upwind-agent, terragrunt, flux-fips, argo-cd, flux, grafana, gitlab-rails-ce-fips, grafana-fips, guac, teleport, nemo, external-secrets-operator, terragrunt-fips, external-secrets-operator-fips, gitlab-rails-ce...
GO-2026-5543 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, seaweedfs, grafana-fips, openbao-fips, external-secrets-operator, ldap2pg, cert-manager-openshift-routes, cloudbeat-fips, harbor-fips, nuclei, gitlab-runner-fips, k6, kyverno-notation-aws-fips, trufflehog-fips, grafana,...
GO-2024-2611 vulnerabilities
Vulnerabilities for packages: crossplane, nerdctl, apisix-ingress-controller, nuclei, kube-fluentd-operator, buf, helm, kubernetes-csi-external-provisioner, runc, kube-state-metrics, gitsign, crossplane-provider-azure-managedidentity, cosign, bank-vaults, ollama, helm-operator-fips,...
GO-2024-2631 vulnerabilities
Vulnerabilities for packages: nerdctl, sops, temporal, fulcio-fips, ko, falcoctl, gitsign, gomplate-fips, cosign, sigstore-scaffolding, bank-vaults, oauth2-proxy, k3s, slsa-verifier, ko-fips, vault-csi-provider, kubernetes-dashboard, neuvector-fips, zarf, kots, step, external-secrets-fips,...
GO-2026-5014 vulnerabilities
Vulnerabilities for packages: nerdctl, osv-scanner, grafana-fips, zarf-fips, cloud-provider-aws, external-secrets-operator, snyk-cli, cloudbeat-fips, harbor-fips, helm, kubernetes-fips, kaf, frankenphp-8.5, kube-state-metrics, kubevela-fips, fscrypt, gitlab-kas, grafana,...
GO-2026-4864 vulnerabilities
Vulnerabilities for packages: nerdctl, azure-aad-pod-identity-mic, kube-arangodb, grafana-fips, karpenter-fips, cloud-provider-aws, cilium-envoy-fips, docker-cli-fips, external-secrets-operator, jaeger, jaeger-fips, snyk-cli, k8s-device-plugin, harbor-fips, gitlab-workhorse-ce,...
GO-2025-3553 vulnerabilities
Vulnerabilities for packages: crossplane, azure-aad-pod-identity-mic, seaweedfs, flyte, secrets-store-csi-driver-provider-azure, grafana-fips, wal-g, openbao-fips, hydra-fips, sops, boring-registry, sftpgo-plugin-pubsub, harbor-fips, fulcio-fips, flux-notification-controller-fips, ko,...
GO-2023-1793 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver...
GO-2026-5602 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2022-0635 vulnerabilities
Vulnerabilities for packages: external-secrets-operator, opentelemetry-collector, kots, zot, loki, k3d, mattermost...