GO-2024-2978 vulnerabilities

Vulnerabilities for packages: gomplate, vcluster, falcosidekick, kwok, cert-manager-cmctl, temporal, kargo, dagger, dbmate, terraform-provider-google, zarf, rqlite, dex, cilium-cli, minio, opentelemetry-collector-contrib, terragrunt, k3d, pulumi-language-dotnet, spicedb, fulcio,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, zarf, skaffold, gitsign, vexctl, docker, buildkitd, ko, trivy-operator, gh, flux-source-controller, tekton-chains, cosign, spire-server, neuvector-sigstore-interface, teleport, kubescape, goreleaser, tkn, policy-controller, tflint, witness,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: step-issuer, kyverno-notation-aws, pulumi-language-yaml, opa-envoy, terraform-provider-google, skaffold, kubeflow-pipelines, pulumi, cert-exporter, dgraph, pulumi-language-dotnet, amass, caddy, pulumi-language-java, pulumi-kubernetes-operator,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: velero, py3-azure-identity, py3-cassandra-medusa, bank-vaults, harbor-registry, zarf, hugo-extended, timestamp-authority, airflow, argo-workflows, opentelemetry-collector-contrib, pulumi, rclone, rekor, terragrunt, buildkitd, hugo, fulcio, opentelemetry-collector,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, kubecolor, whereabouts, xcaddy, falcosidekick, terraform-provider-azapi, kafka-proxy, ip-masq-agent, etcd, helm-set-status, cloud-provider-vsphere, dbmate, harbor-registry, protoc-gen-go-grpc, gke-gcloud-auth-plugin,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, kubecolor, whereabouts, xcaddy, falcosidekick, terraform-provider-azapi, kafka-proxy, ip-masq-agent, etcd, helm-set-status, cloud-provider-vsphere, dbmate, harbor-registry, protoc-gen-go-grpc, gke-gcloud-auth-plugin,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: bank-vaults, harbor-registry, nsc, velero-plugin-for-microsoft-azure, ko, rancher-loglevel, gcsfuse, ghaudit, neuvector-sigstore-interface, rancher-helm, kpt, timoni, stern, envoy-ratelimit, cloud-provider-gcp-cloud-controller-manager, terraform-provider-time,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, kubecolor, whereabouts, xcaddy, falcosidekick, terraform-provider-azapi, kafka-proxy, ip-masq-agent, etcd, helm-set-status, cloud-provider-vsphere, dbmate, harbor-registry, protoc-gen-go-grpc, gke-gcloud-auth-plugin,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, kubecolor, whereabouts, xcaddy, falcosidekick, terraform-provider-azapi, kafka-proxy, ip-masq-agent, etcd, helm-set-status, cloud-provider-vsphere, dbmate, harbor-registry, gke-gcloud-auth-plugin, kube-logging-operator-custom-runner,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, kubecolor, whereabouts, xcaddy, falcosidekick, terraform-provider-azapi, kafka-proxy, ip-masq-agent, etcd, helm-set-status, cloud-provider-vsphere, dbmate, harbor-registry, protoc-gen-go-grpc, gke-gcloud-auth-plugin,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: descheduler, cass-operator, knative-client, aws-application-networking-k8s, op-geth, karma, bank-vaults, harbor-registry, nsc, velero-plugin-for-microsoft-azure, ko, rancher-loglevel, gcsfuse, ghaudit, addon-resizer, paranoia, rancher-fleet, gofumpt, rancher-helm, ko...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: descheduler, cilium, actions-runner-controller, cass-operator, crossplane-provider-aws-dynamodb, crossplane-provider-azure-storage, rancher, jaeger-operator, opa-envoy, bank-vaults, crossplane-provider-family-azure, dbmate, harbor-registry, act, gke-gcloud-auth-plugi...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, actions-runner-controller, buf, bank-vaults, crossplane-provider-family-azure, rqlite, nsc, kube-fluentd-operator, crossplane-provider-azure-sql, pulumi, eksctl, ko, crossplane-provider-azure, scorecard, tekton-chains, caddy, cosign...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, actions-runner-controller, cass-operator, crossplane-provider-azure-storage, falcosidekick, buf, ip-masq-agent, bank-vaults, crossplane-provider-family-azure, dagger, protoc-gen-go-grpc, rqlite, golangci-lint, skaffold, capslock,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: descheduler, cilium, cass-operator, rancher, op-geth, bank-vaults, harbor-registry, rqlite, velero-plugin-for-microsoft-azure, podman, ko, telegraf, gcsfuse, caddy, neuvector-sigstore-interface, rancher-helm, kserve-modelmesh-serving, k9s, kserve, sftpgo-plugin-auth,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: gomplate, temporal, kargo, bank-vaults, aactl, slsa-verifier, weaviate, skaffold, zarf, vexctl, timestamp-authority, dex, minio, cloudflared, argo-workflows, terragrunt, rekor, dgraph, ko, oauth2-proxy, rabbitmq-messaging-topology-operator, fulcio, apko,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, aactl, zarf, skaffold, gitsign, vexctl, ko, ratify, gh, flux-source-controller, tekton-chains, cosign, spire-server, neuvector-sigstore-interface, teleport, kubescape, goreleaser, tkn, policy-controller, tflint, witness, falcoctl, zot,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, aactl, slsa-verifier, zarf, kyverno, gitsign, undock, vexctl, podman, ratify, flux-source-controller, tekton-chains, cosign, falco-no-driver, kubescape, tkn, witness, falcoctl, buildah, kots, sigstore-scaffolding, skopeo, portieris...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: portieris, kyverno-notation-aws, xeol, aactl, slsa-verifier, zarf, skaffold, gitsign, undock, vexctl, timestamp-authority, docker-compose, rekor, podman, buildkitd, ko, trivy-operator, ratify, fulcio, gh, flux-source-controller, tekton-chains, cosign, falco-no-driver...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, aactl, slsa-verifier, zarf, skaffold, kyverno, vexctl, docker, buildkitd, ko, trivy-operator, ratify, gh, flux-source-controller, tekton-chains, cosign, spire-server, neuvector-sigstore-interface, teleport, kubescape, goreleaser, tkn,...