GO-2026-5853 vulnerabilities

Vulnerabilities for packages: zarf, falco-no-driver, witness, undock, kots, buildah, prometheus-podman-exporter-fips, commercial-kyverno, ratify-fips, gitsign, chainctl, kubescape-server-fips, podman, tekton-chains, falcoctl-fips, podman-fips, flux-source-controller-fips, flux-source-controller,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: vitess, prometheus-operator, zarf, falco-no-driver, harbor-fips, cert-manager, trivy-fips, coder-fips, spire-server, commercial-expanso-edge, argo-workflows-fips, chisel-fips, knative-kafka-broker-fips, etcd-fips, snyk-cli, knative-serving, kubescape-server-fips,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: buildkitd, vexctl, cg, zarf, gh, goreleaser, witness, tflint, skaffold, cloudbeat-fips, spire-server-fips, trivy, trivy-fips, image-factory, spire-server, zot, ratify-fips, cosign-fips, gitsign, tflint-fips, trivy-operator-fips, ko-fips, chainctl,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: goreleaser, witness, cloudbeat-fips, zot, ratify-fips, gitsign, chainctl, policy-controller-fips, tkn, falcoctl-fips, flux-source-controller, kyverno-notation-aws, tekton-chains-fips, cloudbeat, kyverno-fips, policy-controller, kyverno-policy-reporter-plugins-kyverno...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: vexctl, zarf, gh, trivy, spire-server-fips, trivy-fips, wolfictl, spire-server, zot, cosign-fips, melange, gitsign, chainctl, policy-controller-fips, tekton-chains, tkn, falcoctl-fips, cosign, flux-source-controller-fips, flux-source-controller, tekton-chains-fips,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: cilium-fips, kube-metrics-adapter, vexctl, cortex, zarf, kubeflow-katib, kargo, actions-runner-controller, bank-vaults, boring-registry, dgraph, harbor-fips, velero-fips, trivy-fips, weaviate, minio-operator, crossplane-provider-azure-authorization,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: vexctl, zarf, goreleaser, skaffold, spire-server-fips, wolfictl, spire-server, zot, melange, gitsign, ko-fips, chainctl, policy-controller-fips, tekton-chains, tkn, falcoctl-fips, flux-source-controller, tekton-chains-fips, policy-controller,...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux, kyverno-notation-aws...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-docs, rancher-helm, cert-manager-cmctl, flux, tw, cluster-api-helm-controller, flux-source-controller, trivy, flux-helm-controller, cilium-cli, k9s, pluto, helm-operator, k8ssandra-client, zarf, zot, helm-push, kots, chart-testing, kubescape, eksctl, chartmuseum...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-push, zarf, kots, flux-source-controller, k9s, kubevela, flux-helm-controller, kubescape, trivy, eksctl, helm-operator, zot, chartmuseum, k8sgpt, up...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-push, zarf, kots, flux-source-controller, k9s, kubevela, flux-helm-controller, kubescape, trivy, eksctl, helm-operator, zot, chartmuseum, k8sgpt, up...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-push, kots, kuma, cert-manager-cmctl, flux, flux-source-controller, rancher-fleet, zarf...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, skaffold, newrelic-infrastructure-agent, gitness, up, flux-source-controller, trivy, flux-helm-controller, helm, kaniko, kubevela, k8sgpt, cilium-cli, k3d, grype, buildkitd, melange, zot, ctop, helm-push, kots, kubescape, eksctl...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: spire-server, skaffold, teleport, policy-controller, goreleaser, tekton-chains, tkn, neuvector-sigstore-interface, ko, witness, flux-source-controller, trivy, sigstore-scaffolding, cosign, tflint, vexctl, gh, kyverno-notation-aws, falcoctl, trivy-operator, buildkitd,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-docs, rancher-helm, cert-manager-cmctl, cerbos, tw, rancher-fleet, cluster-api-helm-controller, flux-source-controller, trivy, flux-helm-controller, k8sgpt, cilium-cli, envoy-gateway, k9s, linkerd2, istio, pluto, helm-operator, k8ssandra-client, zarf, zot,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: nuclei, skaffold, guac, snyk-cli, flux, scorecard, pulumi-kubernetes-operator, timoni, goreleaser, flux-source-controller, chezmoi, pulumi-language-dotnet, trivy, tfsec, argo-events, pulumi-language-yaml, k8sgpt, kaniko, kubevela, pulumi, k9s, wolfictl, grafana-alloy...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: nuclei, skaffold, guac, snyk-cli, flux, scorecard, pulumi-kubernetes-operator, timoni, goreleaser, flux-source-controller, chezmoi, pulumi-language-dotnet, trivy, tfsec, argo-events, pulumi-language-yaml, k8sgpt, kaniko, kubevela, pulumi, k9s, wolfictl, grafana-alloy...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: nuclei, skaffold, steampipe, guac, snyk-cli, teleport, flux, cerbos, scorecard, pulumi-kubernetes-operator, rancher-fleet, argo-cd, gitlab-runner, witness, flux-source-controller, chezmoi, pulumi-language-dotnet, trivy, tfsec, argo-events, pulumi-language-yaml, kanik...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: nuclei, spire-server, secrets-store-csi-driver-provider-azure, guac, restic, flux-image-reflector-controller, flux, airflow, prometheus-operator, step-ca, harbor-registry, goreleaser, policy-controller, boring-registry, hugo, hugo-extended, sqlpad, tekton-chains,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, slsa-verifier, tekton-chains, terragrunt, tkn, flux-source-controller, cosign, rekor, vexctl, flux-kustomize-controller, cloudflared, kots, fulcio, sops, dex, kubescape, argo-workflows, oauth2-proxy, gitsign...