GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kaniko, opa, conftest, step, spegel, k3d, ksops, gomplate, sops, step-ca, trivy, minio, cilium-cli, melange, zarf, hubble-ui, spire-server, k3s, smarter-device-manager, guac, kubernetes-csi-driver-hostpath, sigstore-scaffolding, dex, dbmate, grafana-agent-operator,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: falcoctl, trivy, zarf, witness, gh, spire-server, sigstore-scaffolding, flux-source-controller, cosign, neuvector-sigstore-interface, policy-controller, teleport, tkn, kubescape, crossplane, goreleaser, buildkitd, zot, kyverno-notation-aws, trivy-operator, tflint,...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: kubevela, temporal-server, k3s, kubernetes, kine, kubernetes-csi-external-resizer, kubescape, volume-modifier-for-k8s, cri-tools, docker-compose, metrics-server, buildkitd, envoy-ratelimit, temporal...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: mc, spire-server, falcoctl, boring-registry, minio...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: mc, spire-server, falcoctl, kubescape, vexctl, tekton-chains, boring-registry, minio, gitsign...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer, cert-manager-istio-csr, opentelemetry-operator, cert-manager-csi-driver, mariadb-operator...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: minio, prometheus-pushgateway, datadog-agent, minio-operator, mc, prometheus-operator, grafana, fluent-bit-plugin-loki, metrics-server, trillian, cloud-sql-proxy, karma, splunk-otel-collector, loki, amazon-cloudwatch-agent-operator, istio, opentelemetry-collector,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: py3-azure-identity, step, falcoctl, hugo, flyte, flux-kustomize-controller, py3-cassandra-medusa, rook, ksops, rclone, sops, trivy, step-ca, thanos, nuclei, up, zarf, sqlpad, hugo-extended, spire-server, chezmoi, flux-image-reflector-controller, guac,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flux-kustomize-controller, sops, spire-server, dex, flux-source-controller, cosign, aactl, tkn, kubescape, argo-workflows, oauth2-proxy, fulcio, kots, tekton-chains, rekor, vexctl, terragrunt, gitsign, cloudflared...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: q, continuity, flux-kustomize-controller, ctop, neuvector-dbgen, prometheus-adapter, apache-exporter, nri-discovery-kubernetes, step-ca, apisix-ingress-controller, harbor-scanner-trivy, golangci-lint, spire-server, crossplane-provider-aws-sns, local-path-provisioner,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: kaniko, conftest, ctop, up, trivy, cilium-cli, cadvisor, melange, spire-server, syft, docker-compose, aactl, dagger, kargo, tkn, grype, kubescape, crossplane, wolfictl, buildkitd, buf, zot, ko...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, tkn, slsa-verifier, kubescape, flux-source-controller, tekton-chains, cosign, apko, policy-controller, melange, aactl, ko...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, ratify, zarf, spire-server, neuvector-sigstore-interface, policy-controller, aactl, teleport, tkn, kubescape, crossplane, goreleaser, kyverno-notation-aws, trivy-operator, tflint, kyverno, tekton-chains, gitsign, ko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, cilium-cli, gh, spire-server, crossplane-provider-aws-sns, go-discover, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, neuvector-sigstore-interface, kubernetes-dashboard, buildah, mods, aactl,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: falcoctl, ratify, zarf, witness, gh, spire-server, sigstore-scaffolding, flux-source-controller, cosign, neuvector-sigstore-interface, policy-controller, aactl, teleport, tkn, docker-cli-buildx, kubescape, crossplane, goreleaser, zot, kyverno-notation-aws, tflint,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, trivy, ratify, zarf, witness, gh, spire-server, sigstore-scaffolding, flux-source-controller, cosign, neuvector-sigstore-interface, policy-controller, aactl, teleport, tkn, docker-cli-buildx, kubescape, crossplane, goreleaser, buildkitd, zot,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, cloud-provider-vsphere, gitleaks, flux-kustomize-controller, ctop, apache-exporter, kyverno-policy-reporter-ui, cilium-cli, langfuse, golangci-lint, spire-server, crossplane-provider-aws-sns, local-path-provisioner, vault-k8s, mountpoint-s3-csi-driver,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, trivy, ratify, zarf, witness, gh, spire-server, sigstore-scaffolding, flux-source-controller, cosign, neuvector-sigstore-interface, policy-controller, aactl, teleport, tkn, kubescape, crossplane, goreleaser, buildkitd, zot,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, cloud-provider-vsphere, kubecolor, render-template, cilium-cli, polaris, cluster-api-helm-controller, nri-haproxy, cluster-api-provider-vsphere, neuvector-sigstore-interface, nri-consul, kubernetes-dashboard, aactl, argo-events,...