GO-2025-3381 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, flux-source-controller, flux...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: tw, k8ssandra-client, chartmuseum, helm-docs, pluto, cert-manager-cmctl, kots, trivy, helm-push, k9s, chart-testing, rancher-helm, flux-helm-controller, zarf, zot, cluster-api-helm-controller, helm-operator, flux-source-controller, flux, kubescape, eksctl, cilium-cli...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kubescape, kubevela, kots, k8sgpt, trivy, helm-push, flux-helm-controller, up, zarf, zot, helm-operator, eksctl, k9s, cilium-cli, chartmuseum, flux-source-controller...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, rancher-fleet, kots, helm-push, zarf, kuma, cilium-cli, flux-source-controller, flux...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kubescape, kubevela, kots, k8sgpt, trivy, helm-push, flux-helm-controller, up, zarf, zot, helm-operator, eksctl, k9s, cilium-cli, chartmuseum, flux-source-controller...

GO-2026-5029 vulnerabilities

Vulnerabilities for packages: kyverno, snyk-cli, helm, crossplane-provider-azure-storage, mattermost, crossplane-provider-azure-authorization, kots, caddy, grafana-pyroscope, hydra, kubernetes-dashboard, glab, minio, telegraf, kine, nerdctl, kubernetes, traefik, falco-no-driver, zot,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: k8sgpt, buildkitd, helm, kubevela, kots, ctop, trivy, helm-push, up, newrelic-infrastructure-agent, skaffold, flux-helm-controller, zot, k3d, fuse-overlayfs-snapshotter, flux-source-controller, kubescape, grype, eksctl, kaniko, cilium-cli, melange, gitness...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: ko, gitsign, buildkitd, tkn, spire-server, tekton-chains, trivy, gh, docker, skaffold, witness, kyverno-notation-aws, zot, zarf, policy-controller, sigstore-scaffolding, goreleaser, teleport, flux-source-controller, trivy-operator, tflint, kubescape, cosign, falcoctl...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: istio, k8sgpt, tw, k8ssandra-client, chartmuseum, helm-docs, envoy-gateway, pluto, cert-manager-cmctl, kots, trivy, helm-push, k9s, rancher-fleet, chart-testing, kargo, rancher-helm, flux-helm-controller, zarf, zot, cluster-api-helm-controller, helm-operator,...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: go-licenses, scorecard, gitsign, src-fingerprint, goreleaser, nuclei, pulumi-kubernetes-operator, bom, gitness...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: apko, argocd-image-updater, k8sgpt, go-licenses, scorecard, guac, flux-kustomize-controller, pulumi-language-java, gitsign, src-fingerprint, dagger, argo-workflows, nuclei, snyk-cli, grafana-alloy, kubevela, flux-image-automation-controller, kots, trivy, crossplane,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: apko, argocd-image-updater, k8sgpt, go-licenses, scorecard, guac, flux-kustomize-controller, pulumi-language-java, gitsign, src-fingerprint, dagger, argo-workflows, nuclei, snyk-cli, grafana-alloy, kubevela, flux-image-automation-controller, kots, trivy, crossplane,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: apko, argocd-image-updater, scorecard, guac, pulumi-language-java, kyverno, gitsign, src-fingerprint, dagger, argo-workflows, nuclei, snyk-cli, nfpm, xeol, gomplate, grafana-alloy, kubevela, flux-image-automation-controller, kots, trivy, steampipe, gitaly, crossplane...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: rancher, ko, docker-credential-gcr, nuclei, skopeo, spire-server, envoy-gateway, grafana-alloy, portieris, kots, cri-tools, kpt, trivy, aws-otel-collector, opentelemetry-operator, nerdctl, buildah, grafana, zot, osv-scanner, trivy-operator, rancher-agent,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sops, timestamp-authority, cortex, harbor-registry, k8sgpt, fulcio, guac, flux-kustomize-controller, hugo, argo-workflows, buildkitd, fluent-bit-plugin-loki, nuclei, tkn, spire-server, sqlpad, ksops, velero, secrets-store-csi-driver-provider-azure, tekton-chains,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: sops, fulcio, flux-kustomize-controller, gitsign, argo-workflows, tkn, spire-server, vexctl, tekton-chains, slsa-verifier, kots, cloudflared, aactl, rekor, flux-source-controller, kubescape, cosign, terragrunt, oauth2-proxy, dex...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: apko, argocd-image-updater, scorecard, guac, pulumi-language-java, kyverno, gitsign, src-fingerprint, external-secrets-operator, dagger, argo-workflows, nuclei, snyk-cli, nfpm, xeol, gomplate, grafana-alloy, kubevela, flux-image-automation-controller, kots, trivy,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: tekton-chains, aactl, kubescape, buildah, kots, slsa-verifier, kyverno-notation-aws, podman, falco-no-driver, zarf, kyverno, gitsign, ratify, falcoctl, skopeo, flux-source-controller, witness, undock...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: tekton-chains, aactl, cosign, apko, kubescape, slsa-verifier, spire-server, ko, policy-controller, tkn, melange, flux-source-controller, skaffold...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: rancher, scorecard, pulumi-language-java, external-secrets-operator, buildkitd, nuclei, step-kms-plugin, helm, crossplane-provider-aws-lambda, tekton-chains, crossplane-provider-azure-storage, trivy, gh, crossplane-provider-aws-s3, skaffold, witness, kine, atlantis,...