GO-2026-5853 vulnerabilities

Vulnerabilities for packages: zarf, falco-no-driver, witness, undock, kots, buildah, prometheus-podman-exporter-fips, commercial-kyverno, ratify-fips, gitsign, chainctl, kubescape-server-fips, podman, tekton-chains, falcoctl-fips, podman-fips, flux-source-controller-fips, flux-source-controller,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: vitess, prometheus-operator, zarf, falco-no-driver, harbor-fips, cert-manager, trivy-fips, coder-fips, spire-server, commercial-expanso-edge, argo-workflows-fips, chisel-fips, knative-kafka-broker-fips, etcd-fips, snyk-cli, knative-serving, kubescape-server-fips,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: buildkitd, vexctl, cg, zarf, gh, goreleaser, witness, tflint, skaffold, cloudbeat-fips, spire-server-fips, trivy, trivy-fips, image-factory, spire-server, zot, ratify-fips, cosign-fips, gitsign, tflint-fips, trivy-operator-fips, ko-fips, chainctl,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: goreleaser, witness, cloudbeat-fips, zot, ratify-fips, gitsign, chainctl, policy-controller-fips, tkn, falcoctl-fips, flux-source-controller, kyverno-notation-aws, tekton-chains-fips, cloudbeat, kyverno-fips, policy-controller, kyverno-policy-reporter-plugins-kyverno...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: vexctl, zarf, gh, trivy, spire-server-fips, trivy-fips, wolfictl, spire-server, zot, cosign-fips, melange, gitsign, chainctl, policy-controller-fips, tekton-chains, tkn, falcoctl-fips, cosign, flux-source-controller-fips, flux-source-controller, tekton-chains-fips,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: cilium-fips, kube-metrics-adapter, vexctl, cortex, zarf, kubeflow-katib, kargo, actions-runner-controller, bank-vaults, boring-registry, dgraph, harbor-fips, velero-fips, trivy-fips, weaviate, minio-operator, crossplane-provider-azure-authorization,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: vexctl, zarf, goreleaser, skaffold, spire-server-fips, wolfictl, spire-server, zot, melange, gitsign, ko-fips, chainctl, policy-controller-fips, tekton-chains, tkn, falcoctl-fips, flux-source-controller, tekton-chains-fips, policy-controller,...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, flux-source-controller, flux...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: rancher-helm, kubescape, pluto, k9s, k8ssandra-client, cert-manager-cmctl, flux, helm-operator, cluster-api-helm-controller, zarf, zot, flux-source-controller, eksctl, chart-testing, flux-helm-controller, helm-push, helm-docs, trivy, kots, tw, cilium-cli, chartmuseum...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: eksctl, up, helm-operator, k9s, flux-helm-controller, kubescape, cilium-cli, helm-push, k8sgpt, trivy, kubevela, kots, zarf, zot, flux-source-controller, chartmuseum...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: kuma, flux, cilium-cli, helm-push, rancher-fleet, zarf, flux-source-controller, kots, cert-manager-cmctl...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: eksctl, up, helm-operator, k9s, flux-helm-controller, kubescape, cilium-cli, helm-push, k8sgpt, trivy, kubevela, kots, zarf, zot, flux-source-controller, chartmuseum...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: melange, kubescape, newrelic-infrastructure-agent, up, skaffold, zot, flux-source-controller, buildkitd, kaniko, eksctl, ctop, fuse-overlayfs-snapshotter, flux-helm-controller, helm-push, trivy, kots, helm, cilium-cli, gitness, k8sgpt, kubevela, k3d, grype...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: spire-server, trivy-operator, docker, teleport, kubescape, vexctl, witness, policy-controller, falcoctl, gh, neuvector-sigstore-interface, zarf, skaffold, zot, flux-source-controller, buildkitd, tflint, tkn, kyverno-notation-aws, cosign, trivy, gitsign, goreleaser, k...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-helm, pluto, linkerd2, kargo, k9s, k8ssandra-client, cert-manager-cmctl, helm-operator, cluster-api-helm-controller, zarf, zot, flux-source-controller, eksctl, chart-testing, flux-helm-controller, envoy-gateway, helm-docs, helm-push, istio, trivy, kots, cerbo...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gptscript, argocd-image-updater, melange, pulumi-kubernetes-operator, kubescape, nuclei, dagger, kargo, k9s, task, pulumi-language-yaml, tfsec, flux-image-automation-controller, grafana-alloy, guac, chezmoi, flux, src-fingerprint, wolfictl, zarf, skaffold, zot,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gptscript, argocd-image-updater, melange, pulumi-kubernetes-operator, kubescape, nuclei, dagger, kargo, k9s, task, pulumi-language-yaml, tfsec, flux-image-automation-controller, grafana-alloy, guac, chezmoi, flux, src-fingerprint, wolfictl, zarf, skaffold, zot,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: gptscript, trivy-operator, argo-cd, argocd-image-updater, melange, pulumi-kubernetes-operator, teleport, kubescape, nuclei, osv-scanner, dagger, nfpm, witness, kargo, k9s, external-secrets-operator, pulumi-language-yaml, tfsec, flux-image-automation-controller,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: spire-server, rekor, boring-registry, restic, kubescape, nuclei, flux-image-reflector-controller, py3-cassandra-medusa, terragrunt, timestamp-authority, policy-controller, py3-azure-identity, falcoctl, rook, up, guac, druid, airflow, chezmoi, flux, grafana-mimir,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: spire-server, rekor, kubescape, aactl, cloudflared, terragrunt, vexctl, sops, flux-source-controller, flux-kustomize-controller, tkn, cosign, slsa-verifier, oauth2-proxy, kots, dex, argo-workflows, fulcio, gitsign, tekton-chains...