GO-2024-2978 vulnerabilities

Vulnerabilities for packages: osv-scanner, kaniko, sops, k3s, sigstore-scaffolding, terraform-docs, kwok, fulcio, melange, tempo, opentelemetry-collector, dex, grafana-mimir, ferretdb, k8sgpt-operator, kots, kube-rbac-proxy, grafana-agent-operator, certificate-transparency, spicedb,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: kubescape, sigstore-scaffolding, docker, cosign, ko, crossplane, tekton-chains, kyverno, witness, goreleaser, neuvector-sigstore-interface, tkn, trivy-operator, buildkitd, gh, teleport, tflint, flux-source-controller, policy-controller, zarf, trivy,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, amass, pulumi-language-java, kubeflow-pipelines, grafana-mimir, flux-image-reflector-controller, spark-operator, opa, step, dgraph, cluster-proportional-autoscaler, pulumi-language-yaml, nfs-subdir-external-provisioner, step-ca, caddy, portieris...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: cosign, terraform-docs, tempo, kubernetes-csi-external-health-monitor, bazelisk, hello-world-golang, kube-rbac-proxy, petname, kubecolor, gobuster, ipfs-cluster, git-credential-oauth, terraform-provider-time, trivy, xeol, checksec, docker-credential-ecr-login,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: juicefs, src-fingerprint, istio, sops, ghaudit, wave, chartmuseum, terraform-docs, slsa-verifier, govulncheck, nova, step-kms-plugin, terraform-provider-azapi, bazelisk, hello-world-golang, kafka-proxy, protoc-gen-go, crane, cloud-provider-vsphere, kube-rbac-proxy,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: juicefs, src-fingerprint, istio, sops, ghaudit, wave, chartmuseum, wazero, terraform-docs, slsa-verifier, govulncheck, nova, step-kms-plugin, terraform-provider-azapi, bazelisk, hello-world-golang, kafka-proxy, protoc-gen-go, crane, cloud-provider-vsphere,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: cortex, sops, sqlpad, velero, kubescape, sigstore-scaffolding, timestamp-authority, cosign, druid, tekton-chains, prometheus-operator, fulcio, hugo-extended, tempo, goreleaser, grafana-mimir, opentelemetry-collector, rclone, flux-image-reflector-controller,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: juicefs, src-fingerprint, istio, sops, ghaudit, wave, chartmuseum, wazero, terraform-docs, slsa-verifier, govulncheck, nova, step-kms-plugin, terraform-provider-azapi, bazelisk, hello-world-golang, kafka-proxy, protoc-gen-go, crane, cloud-provider-vsphere,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: juicefs, src-fingerprint, istio, sops, ghaudit, wave, chartmuseum, wazero, terraform-docs, slsa-verifier, govulncheck, nova, step-kms-plugin, terraform-provider-azapi, bazelisk, hello-world-golang, kafka-proxy, protoc-gen-go, crane, cloud-provider-vsphere,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: juicefs, src-fingerprint, istio, sops, ghaudit, wave, chartmuseum, wazero, terraform-docs, slsa-verifier, govulncheck, nova, step-kms-plugin, terraform-provider-azapi, bazelisk, hello-world-golang, kafka-proxy, protoc-gen-go, crane, cloud-provider-vsphere,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: cni-plugins, sftpgo-plugin-auth, gofumpt, newrelic-fluent-bit-output, docker, nats-top, terraform-docs, bazelisk, hello-world-golang, aws-privateca-issuer, kube-rbac-proxy, petname, kubecolor, clickhouse-operator, kserve-modelmesh-serving, gobuster, harbor-cli,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: cortex, src-fingerprint, sops, frp, cosign, terraform-docs, slsa-verifier, kube-rbac-proxy, eksctl, scorecard, gobuster, buf, helm, crossplane-provider-aws, nri-mssql, step-ca, flux-source-controller, prometheus-alertmanager, trillian, cloudflared,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cortex, src-fingerprint, istio, sops, frp, sftpgo-plugin-auth, knative-serving, terraform-docs, slsa-verifier, govulncheck, kyverno, nova, kubernetes-csi-external-snapshotter, goreleaser, kubo, nri-haproxy, crossplane-provider-aws-cloudformation,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: cortex, helm-operator, sops, frp, crossplane-provider-aws-eks, docker, cosign, chartmuseum, influx, terraform-docs, slsa-verifier, goreleaser, crossplane-provider-aws-cloudformation, crossplane-provider-aws-iam, spicedb, eksctl, kustomize,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: gitlab-kas, sftpgo-plugin-auth, knative-serving, docker, cosign, terraform-docs, kubernetes-csi-external-snapshotter, openfga, goreleaser, kubo, tempo, crossplane-provider-aws-iam, kube-rbac-proxy, spicedb, gitaly, kserve-modelmesh-serving, wal-g,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: sops, frp, kubescape, sigstore-scaffolding, timestamp-authority, cosign, ko, slsa-verifier, apko, tekton-chains, fulcio, melange, goreleaser, dex, kots, kube-rbac-proxy, kubernetes-dashboard, tkn, guac, step, dgraph, terragrunt, rekor, weaviate, step-ca,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kubescape, sigstore-scaffolding, cosign, ko, docker-cli-buildx, crossplane, tekton-chains, kyverno, witness, ratify, goreleaser, neuvector-sigstore-interface, tkn, gh, teleport, tflint, aactl, flux-source-controller, policy-controller, zarf, kyverno-notation-aws,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: kubescape, sigstore-scaffolding, cosign, slsa-verifier, tekton-chains, kyverno, witness, ratify, kots, tkn, buildah, aactl, flux-source-controller, falco-no-driver, zarf, portieris, podman, kyverno-notation-aws, undock, vexctl, gitsign, falcoctl, skopeo...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: kubescape, sigstore-scaffolding, timestamp-authority, cosign, ko, crossplane, slsa-verifier, kyverno, tekton-chains, fulcio, witness, ratify, goreleaser, kots, neuvector-sigstore-interface, tkn, trivy-operator, guac, buildah, buildkitd, gh, rekor, tflint, aactl,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kubescape, sigstore-scaffolding, docker, cosign, ko, docker-cli-buildx, crossplane, slsa-verifier, kyverno, tekton-chains, witness, ratify, goreleaser, neuvector-sigstore-interface, tkn, trivy-operator, buildkitd, gh, teleport, tflint, aactl, flux-source-controller,...