GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dbmate, step-ca, k3d, pulumi-language-dotnet, step, rqlite, trivy, grafana-mimir, cloudnative-pg, kube-rbac-proxy, kwok, certificate-transparency, guac, hubble-ui, cert-manager-cmctl, opentelemetry-collector-contrib, cilium-cli, restic, k8sgpt, ferretdb, temporal,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: tkn, trivy, kubescape, witness, kyverno, ko, neuvector-sigstore-interface, trivy-operator, buildkitd, falcoctl, teleport, tflint, skaffold, goreleaser, gitsign, policy-controller, sigstore-scaffolding, tekton-chains, cosign, zot, gh, spire-server, vexctl,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: pulumi, step-ca, step, pulumi-language-dotnet, kubeflow-pipelines, grafana-mimir, amass, pulumi-kubernetes-operator, opa, caddy, spark-operator, skaffold, portieris, sigstore-scaffolding, sriov-network-device-plugin, flux-image-reflector-controller,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: oras, atlantis, nsc, temporal, helm-push, pvc-autoresizer, aws-s3-controller, swagger, q, pguser, http-echo, cert-exporter, ferretdb, terraform-provider-kubernetes, wait-for-port, vertical-pod-autoscaler, dataplaneapi, protoc-gen-go, terraform-provider-tls,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: pulumi, step-ca, step, tkn, trivy, grafana-mimir, fluent-bit-plugin-loki, kubescape, nuclei, wal-g, sqlpad, guac, timestamp-authority, restic, opentelemetry-collector-contrib, secrets-store-csi-driver-provider-azure, up, k8sgpt, buildkitd, prometheus-operator, chezmo...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: hello-world-golang, skopeo, cargobump, terraform-provider-sendgrid, k3d, sbom-scorecard, tfsec, kubernetes-event-exporter, timescaledb-parallel-copy, otel-cli, prometheus-adapter, oauth2-proxy, kwok, oras, certificate-transparency, stakater-reloader, atlantis,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: hello-world-golang, skopeo, cargobump, terraform-provider-sendgrid, k3d, sbom-scorecard, tfsec, kubernetes-event-exporter, timescaledb-parallel-copy, otel-cli, prometheus-adapter, oauth2-proxy, kwok, oras, certificate-transparency, stakater-reloader, atlantis,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: hello-world-golang, skopeo, cargobump, terraform-provider-sendgrid, k3d, sbom-scorecard, tfsec, kubernetes-event-exporter, timescaledb-parallel-copy, otel-cli, prometheus-adapter, oauth2-proxy, kwok, oras, certificate-transparency, stakater-reloader, atlantis,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: hello-world-golang, skopeo, cargobump, terraform-provider-sendgrid, k3d, sbom-scorecard, tfsec, kubernetes-event-exporter, timescaledb-parallel-copy, otel-cli, prometheus-adapter, oauth2-proxy, kwok, oras, certificate-transparency, stakater-reloader, atlantis,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: hello-world-golang, skopeo, cargobump, terraform-provider-sendgrid, k3d, sbom-scorecard, tfsec, kubernetes-event-exporter, timescaledb-parallel-copy, otel-cli, prometheus-adapter, oauth2-proxy, kwok, oras, certificate-transparency, stakater-reloader, atlantis,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, oras, cass-operator, nsc, hubble, temporal, helm-push, nri-nagios, gatus, sftpgo-plugin-auth, pvc-autoresizer, influx, kyverno-policy-reporter-kyverno-plugin, cloud-provider-aws, fuse-overlayfs-snapshotter, http-echo, opencost,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: libssh, skopeo, actions-runner-controller, terraform-provider-sendgrid, k3d, rqlite, kubeflow-pipelines, kubernetes-event-exporter, kubernetes, prometheus-adapter, oauth2-proxy, certificate-transparency, atlantis, cloudflared, nsc, ko,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: skopeo, actions-runner-controller, kiali, kubeflow-pipelines, kubernetes-event-exporter, kubernetes, kubernetes-csi-external-snapshotter, omnibump, prometheus-adapter, argocd-image-updater, crossplane-provider-aws-firehose, cass-operator, stakater-reloader, atlantis,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: skopeo, actions-runner-controller, terraform-provider-sendgrid, k3d, rqlite, kubeflow-pipelines, kubernetes-event-exporter, kubernetes, nuclei, prometheus-adapter, crossplane-provider-aws-firehose, oauth2-proxy, kwok, cass-operator, certificate-transparency,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, hubble, temporal, helm-push, rancher-agent, gatus, sftpgo-plugin-auth, victoriametrics-operator, flux-image-reflector-controller, argo-workflows, datadog-agent, cloud-provider-aws,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: skopeo, step-ca, kubernetes-dashboard, step, tkn, kubescape, wolfictl, oauth2-proxy, kube-rbac-proxy, slsa-verifier, cloudflared, guac, ko, rabbitmq-messaging-topology-operator, timestamp-authority, nerdctl, temporal, falcoctl, caddy, minio, rook, goreleaser, skaffol...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tkn, ratify, kubescape, witness, kyverno, ko, neuvector-sigstore-interface, falcoctl, teleport, tflint, skaffold, goreleaser, gitsign, policy-controller, sigstore-scaffolding, aactl, tekton-chains, cosign, zot, gh, spire-server, vexctl, kyverno-notation-aws,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: skopeo, tkn, ratify, kubescape, slsa-verifier, witness, kyverno, falco-no-driver, falcoctl, portieris, gitsign, sigstore-scaffolding, kots, aactl, tekton-chains, cosign, undock, buildah, vexctl, kyverno-notation-aws, flux-source-controller, podman, zarf...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: skopeo, tkn, trivy, ratify, kubescape, slsa-verifier, witness, kyverno, guac, docker-compose, ko, falco-no-driver, timestamp-authority, neuvector-sigstore-interface, trivy-operator, buildkitd, falcoctl, tflint, skaffold, goreleaser, portieris, gitsign,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tkn, trivy, ratify, kubescape, slsa-verifier, witness, kyverno, ko, neuvector-sigstore-interface, trivy-operator, buildkitd, falcoctl, teleport, tflint, skaffold, goreleaser, gitsign, policy-controller, sigstore-scaffolding, aactl, tekton-chains, cosign, zot, gh,...