GO-2025-4012 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: govulncheck, buf, yunikorn-web, ctop, clickhouse-operator, mkcert, litefs, newrelic-fluent-bit-output, kubernetes-csi-external-attacher, prometheus-adapter, trust-manager, azure-workload-identity-webhook, prometheus-pushgateway, op-geth, thanos-operator, capslock,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: gatekeeper, yunikorn-web, ctop, crossplane-provider-aws-sqs, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, ksops, kubernetes, thanos, litefs, syft, tetragon, newrelic-fluent-bit-output,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: govulncheck, osv-scanner, grafana-rollout-operator, libnvidia-container, crossplane, cri-tools, azcopy, crossplane-provider-aws-memorydb, ctop, kubescape, crossplane-provider-aws-sqs, vault-k8s, amazon-cloudwatch-agent-operator, harbor-registry,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, buf, kubescape, terraform-provider-aws, vault-k8s, kubeflow-katib, nri-mssql, aactl, melange, kubernetes, zot, crossplane-provider-azure, gitsign, buildkitd, local-path-provisioner, prometheus-adapter, grype, wireguard-go, fq, nri-kafka, gh,...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, kubescape, vault-k8s, kubeflow-katib, aactl, aws-efs-csi-driver, k8sgpt-operator, dive, hey, pulumi-language-java, zot, crossplane-provider-azure, flux-notification-controller, buildkitd, metacontroller, secrets-store-csi-driver-provider-gcp,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, kubernetes-dashboard, terraform-docs, cri-tools, buf, envoy-ratelimit, crossplane-provider-aws-memorydb, ctop, kubescape, crossplane-provider-aws-sqs, terraform-provider-aws, helm-operator, vault-k8s, kubeflow-katib, aactl, aws-efs-csi-driver...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane, ratify, ko, slsa-verifier, trivy-operator, teleport, kubescape, goreleaser, aactl, kyverno-notation-aws, tkn, gitsign, falcoctl, tflint, policy-controller, neuvector-sigstore-interface, zarf, kyverno, tekton-chains...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: spire-server, rekor, step-ca, gomplate, kubernetes-dashboard, ko, temporal, slsa-verifier, rabbitmq-messaging-topology-operator, kubescape, tekton-chains, goreleaser, wolfictl, oauth2-proxy, temporal-ui-server, guac, aactl, weaviate, melange, skopeo, zot, tkn,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: gatekeeper, crossplane-provider-aws-sqs, terraform-provider-aws, amazon-cloudwatch-agent-operator, node-problem-detector, ksops, kubernetes, thanos, zot, opa-envoy, syft, tetragon, kubernetes-csi-external-attacher, jaeger, prometheus-adapter, grype, spicedb, op-geth,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: osv-scanner, kubernetes-dashboard, crossplane-provider-aws-memorydb, kubescape, crossplane-provider-aws-sqs, gatus, containerd, buildah, aactl, melange, pulumi-language-java, ksops, kubernetes, zot, act, flux-notification-controller, syft, buildkitd, hcloud, chezmoi,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: ratify, slsa-verifier, kubescape, buildah, aactl, skopeo, kyverno-notation-aws, undock, tkn, falcoctl, gitsign, zarf, podman, kots, vexctl, witness, flux-source-controller, cosign, sigstore-scaffolding, portieris, kyverno, falco-no-driver, tekton-chains...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane, ratify, ko, slsa-verifier, trivy-operator, teleport, kubescape, goreleaser, aactl, zot, kyverno-notation-aws, tkn, trivy, falcoctl, gitsign, buildkitd, tflint, policy-controller, neuvector-sigstore-interface, zarf, vexctl, witness, skaffold,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane, ratify, ko, teleport, kubescape, goreleaser, aactl, zot, kyverno-notation-aws, tkn, falcoctl, gitsign, tflint, policy-controller, neuvector-sigstore-interface, zarf, vexctl, witness, skaffold, flux-source-controller, cosign, gh,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: spire-server, rekor, crossplane, ratify, ko, slsa-verifier, trivy-operator, kubescape, tekton-chains, goreleaser, buildah, guac, aactl, skopeo, zot, kyverno-notation-aws, undock, tkn, trivy, falcoctl, gitsign, buildkitd, tflint, policy-controller, xeol, docker-compos...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kots, vexctl, witness, aactl, skopeo, slsa-verifier, cosign, sigstore-scaffolding, kubescape, falcoctl, gitsign, zarf, falco-no-driver, tekton-chains...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane, ratify, ko, docker, slsa-verifier, trivy-operator, teleport, kubescape, goreleaser, aactl, zot, kyverno-notation-aws, tkn, trivy, falcoctl, gitsign, buildkitd, tflint, policy-controller, neuvector-sigstore-interface, zarf, vexctl, witness,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: spire-server, rekor, crossplane, ratify, ko, docker, slsa-verifier, trivy-operator, teleport, kubescape, goreleaser, aactl, zot, kyverno-notation-aws, tkn, trivy, falcoctl, gitsign, buildkitd, tflint, policy-controller, neuvector-sigstore-interface, zarf, vexctl,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: buf, yunikorn-web, mkcert, nri-mssql, ksops, gitlab-cng, kubernetes, thanos, zot, newrelic-fluent-bit-output, trust-manager, azure-workload-identity-webhook, spicedb, op-geth, flux-kustomize-controller, kine, cert-manager-csi-driver, fulcio, karma,...

GO-2025-4155 vulnerabilities

Vulnerabilities for packages: govulncheck, ctop, mkcert, nri-mssql, github-mcp-server, ksops, kubernetes, thanos, opa-envoy, syft, newrelic-fluent-bit-output, kubernetes-csi-external-attacher, prometheus-adapter, grype, spicedb, op-geth, thanos-operator, mockery, grafana-operator, kine, karma,...