GO-2025-3384 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

GO-2023-1704 vulnerabilities

Vulnerabilities for packages: go, kubeflow-katib...

GO-2026-4409 vulnerabilities

Vulnerabilities for packages: wolfictl...

GO-2025-3953 vulnerabilities

Vulnerabilities for packages: temporal...

GO-2026-4465 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2023-2020 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, promxy...

GO-2025-3607 vulnerabilities

Vulnerabilities for packages: tailscale, harbor...

GO-2023-1703 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go...

GO-2020-0005 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: tempo, aws-otel-collector, keda, istio, grafana-pyroscope, loki, trillian, minio-operator, mcp-grafana, minio-object-browser, cloud-sql-proxy, jaeger, datadog-agent, karma, splunk-otel-collector, prometheus-pushgateway, certificate-transparency, telegraf, mc, minio...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: metrics-server, node-problem-detector, tempo, aws-otel-collector, keda, opentelemetry-collector, istio, loki, trillian, grafana, minio-operator, fluent-bit-plugin-loki, cloud-sql-proxy, k8sgpt, prometheus, jaeger, prometheus-operator, datadog-agent, karma,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gatus, gostatsd, rancher-webhook, dapr, bento, kubescape-operator, tekton-chains, crossplane-provider-aws-cloudfront, argo-events, prometheus-adapter, zarf, timoni, aws-node-termination-handler, istio, kube-bench, step-issuer, flannel,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gatus, apko, tekton-chains, crossplane-provider-aws-cloudfront, argo-events, zarf, flux-source-controller, istio, step-issuer, ko, crossplane-provider-aws-eks, terraform-provider-acme, traefik, kots, docker-cli-buildx, docker-compose,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gostatsd, gatus, cfssl, bento, http-echo, kubescape-operator, kyverno-policy-reporter-ui, crossplane-provider-aws-cloudfront, kube-vip-cloud-provider, docker-credential-ecr-login, timoni, kube-bench, kubernetes-csi-external-attacher, pvc-autoresizer, hydra, flannel,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tempo, tekton-chains, argo-events, kube-bench, ko, cis-operator, kubernetes-csi-driver-nfs, docker-credential-gcr, delve, kubernetes-csi-external-health-monitor, hubble, mockgen, docker-cli-buildx, aws-privateca-issuer, cloud-sql-proxy, grafana-alloy,...

GO-2025-4135 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gatus, rke2-cloud-provider, prometheus-adapter, aws-node-termination-handler, mariadb-operator, dynamic-localpv-provisioner, mailpit, gitleaks, kubernetes-csi-external-provisioner, goreleaser, docker-cli-buildx,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: buildkitd, crossplane-provider-family-azure, actions-runner-controller, skopeo, spire-server, sigstore-scaffolding, tekton-chains, tkn, argo-events, crossplane-provider-azure-storage, terraform, flux-source-controller, opentelemetry-collector,...

CVE-2026-16810

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'dataqueryCondition' parameter in all versions up to, and including, 3.2.0 due to insufficient escaping on the user supplied parameter...

CVE-2026-15205

The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...

CVE-2026-12743

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...