GO-2024-3141 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, k8sgpt, tfsec, cosign, zot, kots, snyk-cli, conftest, zarf, opa, kubescape...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: gptscript, ferretdb, osv-scanner, opencost, jaeger, datadog-agent, github-mcp-server...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, kyverno-notation-aws, tfsec, cosign, conftest, witness, kots, trivy...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, spicedb, terragrunt, opentelemetry-collector, restic, ferretdb, hubble-ui, conftest, sigstore-scaffolding, zarf, kwok, opa, temporal, zot, ksops, vcluster, k8sgpt, pulumi-language-dotnet, cert-manager-cmctl, gomplate, kots, trivy, kaniko, cilium-cli,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: tkn, policy-controller, zarf, sigstore-scaffolding, witness, tekton-chains, zot, docker, trivy-operator, gitsign, skaffold, falcoctl, goreleaser, neuvector-sigstore-interface, trivy, tflint, spire-server, kyverno-notation-aws, gh, teleport, kubescape, ko, buildkitd,...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: docker-compose, kubernetes-csi-external-resizer, kine, buildkitd, volume-modifier-for-k8s, temporal-server, k3s, cri-tools, kubernetes, envoy-ratelimit, metrics-server, temporal, kubevela, kubescape...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, opentelemetry-operator, cert-manager-istio-csr, cert-manager-cmctl, step-issuer, mariadb-operator, cert-manager-webhook-pdns, percona-server-mongodb-operator, cert-manager-csi-driver...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: gitsign, spire-server, mc, boring-registry, falcoctl, tekton-chains, kubescape, vexctl, minio...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: spire-server, mc, boring-registry, falcoctl, minio...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, cloud-sql-proxy, metrics-server, tempo, istio, node-problem-detector, splunk-otel-collector, k8sgpt, karma, amazon-cloudwatch-agent-operator, loki, certificate-transparency, prometheus-operator, prometheus-pushgateway, trillian, grafana,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: terragrunt, opentelemetry-collector, flux-kustomize-controller, tkn, policy-controller, wal-g, boring-registry, thanos, argo-workflows, trino, zarf, sigstore-scaffolding, sqlpad, tekton-chains, rekor, zot, ksops, flyte, flux-image-reflector-controller, falcoctl,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, argocd-image-updater, cloud-sql-proxy, nova, local-path-provisioner, vault-k8s, zarf, paranoia, rekor, temporal-ui-server, containerd, crossplane-provider-family-azure, glab, falco-no-driver, libnvidia-container,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: terragrunt, flux-kustomize-controller, tkn, aactl, argo-workflows, tekton-chains, rekor, gitsign, slsa-verifier, kots, spire-server, oauth2-proxy, cloudflared, kubescape, fulcio, cosign, sops, dex, flux-source-controller, vexctl...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: tkn, aactl, conftest, grype, zot, wolfictl, trivy, kaniko, cilium-cli, ctop, docker-compose, up, syft, spire-server, buf, crossplane, melange, kargo, kubescape, dagger, ko, buildkitd, cadvisor...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: tkn, policy-controller, aactl, zarf, tekton-chains, trivy-operator, gitsign, falcoctl, goreleaser, kyverno, neuvector-sigstore-interface, slsa-verifier, tflint, spire-server, crossplane, kyverno-notation-aws, teleport, kubescape, ko, ratify...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: slsa-verifier, tkn, policy-controller, spire-server, aactl, skaffold, apko, cosign, tekton-chains, melange, flux-source-controller, kubescape, ko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, argocd-image-updater, crossplane-provider-aws-iam, terraform-provider-tls, zarf, podman, fscrypt, wolfictl, containerd, crossplane-provider-family-azure, glab, falco-no-driver, crossplane-provider-aws-sqs, pulumi-language-dotnet,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, fluxcd-kustomize-mutating-webhook, stern, kubernetes-csi-driver-nfs, podman, fscrypt, timescaledb-parallel-copy, libnvidia-container, kserve-modelmesh-serving, vault-secrets-webhook, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tkn, policy-controller, aactl, zarf, sigstore-scaffolding, witness, tekton-chains, zot, gitsign, skaffold, falcoctl, goreleaser, neuvector-sigstore-interface, tflint, spire-server, docker-cli-buildx, kyverno-notation-aws, gh, teleport, kubescape, ko, cosign,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tkn, policy-controller, aactl, zarf, sigstore-scaffolding, witness, tekton-chains, zot, docker, trivy-operator, gitsign, skaffold, falcoctl, goreleaser, kyverno, neuvector-sigstore-interface, slsa-verifier, trivy, tflint, spire-server, crossplane, docker-cli-buildx,...