GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, flux-source-controller, k9s, kots, flux-helm-controller, trivy, helm-operator, k8sgpt, cilium-cli, kubescape, zarf, helm-push, zot, up, chartmuseum...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cerbos-fips, chartmuseum-fips, kots, flux-fips, flux-helm-controller-fips, k8sgpt, linkerd2, zot, chartmuseum, istio, teleport, harbor-fips, rancher-fleet-fips, flux-helm-controller, trivy-fips, envoy-gateway-fips, flux, pluto, cilium-cli, harbor, kargo, k9s,...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-source-controller-fips, rancher-fleet-fips, kots, cert-manager-cmctl-fips, cert-manager-cmctl, flux, zarf-fips, flux-fips, helm-diff, cilium-cli, gitlab-operator-fips, rancher-fleet, helm-diff-fips, zarf, helm-push, kuma, gitlab-operator...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, flux-source-controller, k9s, kots, flux-helm-controller, trivy, helm-operator, k8sgpt, cilium-cli, kubescape, zarf, helm-push, zot, up, chartmuseum...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: gatekeeper, kots, google-osconfig-agent, zot, chartmuseum, livekit-cli, steampipe, rancher-fleet-fips, flux-helm-controller, cilium-cli, kaniko, cluster-api-helm-controller-fips, chainctl, docker-compose, nerdctl-fips, opa-fips-envoy, eksctl, headlamp-fips,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argo-workflows, amazon-ssm-agent, kubevela, flux-image-automation-controller, timoni, bom, kots, gitsign, chezmoi, gptscript, kaniko-fips, k8sgpt, pulumi, argo-workflows-fips, argo-events-fips, pulumi-language-java, go-licenses, zot,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: gatekeeper, kots, google-osconfig-agent, zot, chartmuseum, livekit-cli, steampipe, rancher-fleet-fips, flux-helm-controller, cilium-cli, kaniko, cluster-api-helm-controller-fips, chainctl, docker-compose, nerdctl-fips, opa-fips-envoy, eksctl, headlamp-fips,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: cert-manager-fips, gotenberg, flux-image-automation-controller, grafana-operator-fips, loki-fips, nova-fips, flux-fips, flux-notification-controller, omnictl-multiarch, terragrunt, metacontroller, polaris, steampipe, flux-helm-controller, go, pluto,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: cert-manager-fips, gotenberg, flux-image-automation-controller, grafana-operator-fips, loki-fips, nova-fips, flux-fips, flux-notification-controller, omnictl-multiarch, terragrunt, metacontroller, polaris, steampipe, flux-helm-controller, go, pluto,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, tkn-fips, hcloud, cosign, kots, kube-bench-fips, argo-workflows-fips, opentelemetry-collector-contrib-fips, falcoctl-fips, istio, aws-otel-collector-fips, steampipe, grafana-alloy, pluto, agentbeat-fips, cilium-cli, cluster-api,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: slsa-verifier, spire-server, tkn, skaffold, flux-source-controller, melange, cosign, apko, ko, spire-server-fips, aactl, kubescape, tekton-chains, falcoctl-fips, policy-controller...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: yq, cosign, minio, kots, dgraph, vertical-pod-autoscaler, prometheus-stackdriver-exporter, aws-load-balancer-controller, zot, chartmuseum, gobuster, kaf, prometheus-mongodb-exporter, prometheus-pushgateway, flux-helm-controller, flux, volume-modifier-for-k8s-fips,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: cosign, minio, kots, dgraph, argo-workflows-fips, falcoctl-fips, zot, grpc-health-probe, gomplate-fips, rook, spire-server, step-ca, ko, cosign-fips, kube-rbac-proxy-fips, vexctl, kubescape, sops, gitsign, caddy, temporal, cloudflared, sigstore-scaffolding,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kubescape-server, kots, gitsign, tekton-chains-fips, kyverno-fips, podman, portieris-fips, falcoctl-fips, prometheus-podman-exporter-fips, undock, kyverno, falco-no-driver, falcoctl, kubescape-server-fips, kyverno-notation-aws, buildah-fips...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: cilium, frankenphp-8.2, minio, gatekeeper, kots, podman, argo-workflows-fips, knative-kafka-broker, backup-restore-operator, zot, istio, kaf, prometheus-mongodb-exporter, kine, flux, gitlab-workhorse-ce, cilium-cli, keda-fips, tigera-operator, spire-server, vault-fip...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: cilium, frankenphp-8.2, minio, gatekeeper, kots, argo-workflows-fips, knative-kafka-broker, backup-restore-operator, zot, istio, kaf, prometheus-mongodb-exporter, argocd-image-updater, kine, flux, gitlab-workhorse-ce, cilium-cli, keda-fips, tigera-operator,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, tkn-fips, gitsign, tekton-chains-fips, kyverno-fips, kyverno-policy-reporter-plugins-kyverno, falcoctl-fips, zot, image-factory-fips, cloudbeat-fips, kyverno, teleport, falcoctl, kyverno-notation-aws, chainctl, goreleaser, cloudbeat,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, skaffold-fips, tkn-fips, ko-fips, cosign, gitsign, tekton-chains-fips, kyverno-fips, kyverno-policy-reporter-plugins-kyverno-fips, kyverno-policy-reporter-plugins-kyverno, falcoctl-fips, zot, image-factory-fips, cloudbeat-fips, kyverno,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, skaffold-fips, tkn-fips, ko-fips, kubescape-server, cosign, docker-cli-buildx, sigstore-scaffolding-fips, gitsign, tekton-chains-fips, kyverno-fips, kyverno-policy-reporter-plugins-kyverno-fips, kyverno-policy-reporter-plugins-kyverno,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: tkn-fips, cosign, sigstore-scaffolding-fips, gitsign, tekton-chains-fips, falcoctl-fips, zot, sigstore-scaffolding, falcoctl, apko, chainctl, slsa-verifier, spire-server, melange, trivy, spire-server-fips, zarf, gh, tekton-chains, cosign-fips,...