GO-2024-2719 vulnerabilities

Vulnerabilities for packages: tkn, gitsign, falcoctl-fips, spire-server-fips, policy-controller, spire-server, aactl, apko, ko-fips, wolfictl, neuvector-sigstore-interface, falcoctl, flux-source-controller, skaffold, kubescape, vexctl, ko, melange, slsa-verifier, goreleaser, zot, chainctl,...

GO-2026-4962 vulnerabilities

Vulnerabilities for packages: mattermost...

GO-2025-3565 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: flux, flux-source-controller, kyverno-notation-aws...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: tw, chartmuseum, rancher-helm, flux, eksctl, zot, trivy, cilium-cli, helm-operator, kubescape, flux-source-controller, pluto, k8ssandra-client, cluster-api-helm-controller, flux-helm-controller, helm-push, k9s, cert-manager-cmctl, chart-testing, kots, zarf, helm-docs...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux, kuma, rancher-fleet, helm-push, cert-manager-cmctl, cilium-cli, flux-source-controller, zarf, kots...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: chartmuseum, k8sgpt, flux-helm-controller, helm-push, k9s, zot, kubevela, cilium-cli, helm-operator, up, kubescape, flux-source-controller, eksctl, zarf, kots, trivy...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: chartmuseum, k8sgpt, flux-helm-controller, helm-push, k9s, zot, kubevela, cilium-cli, helm-operator, up, kubescape, flux-source-controller, eksctl, zarf, kots, trivy...

GO-2026-5029 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, terraform-provider-acme, ingress-nginx-controller, hydra, nerdctl, karpenter, crossplane-provider-azure-storage, step-issuer, flux, glab, kyverno, hubble, caddy, vale, crossplane-provider-aws-elasticache, mattermost, step, zot,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: tw, chartmuseum, rancher-helm, k8sgpt, kargo, cerbos, eksctl, zot, trivy, rancher-fleet, cilium-cli, helm-operator, flux-source-controller, pluto, k8ssandra-client, cluster-api-helm-controller, envoy-gateway, flux-helm-controller, helm-push, istio, k9s,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: k3d, buildkitd, kaniko, melange, skaffold, k8sgpt, newrelic-infrastructure-agent, up, eksctl, zot, trivy, grype, cilium-cli, fuse-overlayfs-snapshotter, helm, kubescape, flux-source-controller, ctop, gitness, flux-helm-controller, helm-push, kubevela, kots...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: policy-controller, buildkitd, gh, goreleaser, zarf, skaffold, docker, cosign, tkn, witness, trivy-operator, kyverno-notation-aws, spire-server, neuvector-sigstore-interface, vexctl, zot, trivy, sigstore-scaffolding, tekton-chains, teleport, kubescape,...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: bom, gitness, src-fingerprint, pulumi-kubernetes-operator, go-licenses, goreleaser, nuclei, gitsign, scorecard...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, flux-image-automation-controller, src-fingerprint, kaniko, melange, zarf, go-licenses, syft, skaffold, guac, flux-kustomize-controller, timoni, flux, tfsec, pulumi-language-dotnet, k8sgpt, grafana-alloy, kargo, pulumi-kubernetes-operator, pulumi...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, flux-image-automation-controller, src-fingerprint, kaniko, melange, zarf, go-licenses, syft, skaffold, guac, flux-kustomize-controller, timoni, flux, tfsec, pulumi-language-dotnet, k8sgpt, grafana-alloy, kargo, pulumi-kubernetes-operator, pulumi...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, external-secrets-operator, flux-image-automation-controller, src-fingerprint, kaniko, melange, zarf, syft, skaffold, guac, gomplate, flux, tfsec, pulumi-language-dotnet, steampipe, grafana-alloy, kargo, argo-cd, kyverno, pulumi, gitlab-runner,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: nerdctl, amazon-cloudwatch-agent-operator, datadog-agent, grafana-alloy, docker-credential-gcr, cri-tools, amazon-cloudwatch-agent, spire-server, trivy-operator, grafana, nuclei, zot, trivy, rancher-machine, skopeo, portieris, rancher, opentelemetry-operator, kpt, ko...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: velero, policy-controller, buildkitd, terragrunt, fulcio, step-ca, grafana-mimir, harbor-registry, py3-azure-identity, guac, flux-kustomize-controller, cortex, restic, flux, ksops, rook, k8sgpt, cosign, druid, hugo-extended, pulumi, sops, spire-server, tkn, up,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: aactl, falco-no-driver, skopeo, tekton-chains, ratify, zarf, kyverno, slsa-verifier, undock, witness, kyverno-notation-aws, kubescape, buildah, flux-source-controller, falcoctl, gitsign, kots, podman...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, external-secrets-operator, flux-image-automation-controller, src-fingerprint, kaniko, melange, terragrunt, syft, zarf, skaffold, guac, gomplate, flux, tfsec, pulumi-language-dotnet, steampipe, grafana-alloy, kargo, argo-cd, kyverno, pulumi,...