GO-2024-2554 vulnerabilities

Vulnerabilities for packages: k8sgpt, flux-source-controller, flux-helm-controller, kubevela, trivy, kots, cilium-cli, zarf, zot, eksctl, up, chartmuseum, k9s, kubescape, helm-operator, helm-push...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cerbos, trivy, kots, rancher-fleet-fips, harbor, chart-testing, chartmuseum, rancher-helm, cert-manager-cmctl, consul-k8s-fips, kargo, flux-source-controller-fips, linkerd2, tw, helm-push, k8sgpt, harbor-fips, chart-testing-fips, linkerd2-fips, trivy-operator-fips,...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: k8sgpt, flux-source-controller, flux-helm-controller, kubevela, trivy, kots, cilium-cli, zarf, zot, eksctl, up, chartmuseum, k9s, kubescape, helm-operator, helm-push...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux-source-controller, zarf, kots, cilium-cli, kuma, rancher-fleet-fips, flux-fips, flux, rancher-fleet, helm-push, cert-manager-cmctl, helm-diff-fips, flux-source-controller-fips, gitlab-operator-fips, cert-manager-cmctl-fips, zarf-fips, gitlab-operator, helm-diff...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: metacontroller, flux-operator, loki-fips, polaris, victorialogs, grafana-rollout-operator, grafana-operator, cluster-autoscaler-fips, flux-operator-fips, steampipe, amazon-k8s-cni-fips, flux-image-automation-controller, omnictl-multiarch, podinfo,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: metacontroller, flux-operator, loki-fips, polaris, victorialogs, grafana-rollout-operator, grafana-operator, cluster-autoscaler-fips, flux-operator-fips, steampipe, amazon-k8s-cni-fips, flux-image-automation-controller, omnictl-multiarch, podinfo,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: bom, grafana-alloy-fips, flux-kustomize-controller, trivy, kots, argo-workflows-fips, goreleaser, scorecard, pulumi-language-java, skaffold, kargo, flux-source-controller-fips, guac, kubescape, chainctl, snyk-cli, argocd-image-updater-fips, melange,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, newrelic-infrastructure-agent-fips, kubescape-operator, livekit-cli, rancher-helm, skaffold, gogatekeeper, helm-diff-fips, kubescape, opa-envoy, tekton-pipelines-fips, wolfictl, cg, cloudbeat-fips, syft, gitlab-rails-ce, neuvector-scanner-fips,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, newrelic-infrastructure-agent-fips, kubescape-operator, livekit-cli, rancher-helm, skaffold, gogatekeeper, helm-diff-fips, kubescape, opa-envoy, tekton-pipelines-fips, wolfictl, cg, cloudbeat-fips, syft, gitlab-rails-ce, neuvector-scanner-fips,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: timestamp-authority, seaweedfs, guac, opa-envoy, wolfictl, cg, swagger, opentofu-fips, syft, podinfo, grafana-alloy, envoy-gateway, boring-registry-fips, kyverno-policy-reporter-ui, tkn, istio-fips, atlantis, grafana-fips, k9s, thanos-fips,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, kube-oidc-proxy, skaffold, vault-csi-provider, dex-k8s-authenticator, trillian, prometheus-node-exporter, volume-modifier-for-k8s-fips, kube-logging-operator, prometheus-mongodb-exporter, prometheus-postgres-exporter-fips, tkn,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: rekor, kube-oidc-proxy, step-ca, timestamp-authority, skaffold, vault-csi-provider, guac, kubescape, wolfictl, fulcio, rekor-fips, tkn, oauth2-proxy, bank-vaults-fips, sigstore-scaffolding-fips, external-secrets-fips, rabbitmq-messaging-topology-operator,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tekton-chains, ko, spire-server, spire-server-fips, policy-controller, falcoctl-fips, apko, melange, skaffold, kubescape, slsa-verifier, tkn, cosign, aactl...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, kots, prometheus-podman-exporter, kyverno-notation-aws-fips, flux-source-controller-fips, kubescape, chainctl, skopeo, falcoctl, tekton-chains, skopeo-fips, tekton-chains-fips, kyverno, buildah-fips, prometheus-podman-exporter-fips, zarf,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: commercial-grafana, frankenphp-8.4, tekton-pipelines-fips, frankenphp-8.3, opentofu-fips, gitlab-rails-ce, tigera-operator, knative-kafka-broker-fips, prometheus-mongodb-exporter, loki, tekton-pipelines, grafana-fips, knative-serving-fips, terraform, vault-fips,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: commercial-grafana, skaffold, frankenphp-8.4, tekton-pipelines-fips, kubescape, coder, frankenphp-8.3, cloudbeat-fips, opentofu-fips, gitlab-rails-ce, tigera-operator, knative-kafka-broker-fips, prometheus-mongodb-exporter, loki, seaweedfs-rocksdb, tekton-pipelines,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: cloudbeat, trivy, goreleaser, policy-controller, neuvector-sigstore-interface, buildkitd, image-factory, skaffold, kyverno-notation-aws-fips, flux-source-controller-fips, buildkitd-fips, crossplane-fips, chainctl, cg, kubescape, image-factory-fips, cloudbeat-fips, gh...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: cloudbeat, goreleaser, policy-controller, kyverno-notation-aws-fips, chainctl, image-factory-fips, cloudbeat-fips, tekton-chains-fips, kyverno, tkn, kyverno-policy-reporter-plugins-kyverno, zot, tkn-fips, teleport, policy-controller-fips, kyverno-notation-aws, witnes...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: cloudbeat, kubescape-server, trivy, kubescape-server-fips, goreleaser, policy-controller, neuvector-sigstore-interface, buildkitd, image-factory, skaffold, kyverno-notation-aws-fips, flux-source-controller-fips, buildkitd-fips, crossplane-fips, chainctl, cg, kubescap...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: trivy, rekor, policy-controller, neuvector-sigstore-interface, flux-source-controller-fips, kubescape, wolfictl, chainctl, melange, gh, tekton-chains, sigstore-scaffolding, tekton-chains-fips, tkn, cosign, spire-server-fips, zot, sigstore-scaffolding-fips, zarf,...