GO-2026-5013 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, cloudflared, pulumi-language-yaml, terraform-provider-tls, kaf, spire-server, crossplane-provider-aws-route53, crossplane-provider-aws-cloudformation, prometheus-operator, zarf, cloud-provider-aws,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: nri-mongodb, podinfo, kbld, neuvector-sigstore-interface, manifest-tool, nri-f5, spire-server, git-sync, terraform-mcp-server, crossplane-provider-aws-cloudformation, s5cmd, dex, terraform-provider-time, actions-runner-controller, wuzz,...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: tailscale, spicedb, trufflehog, sftpgo, telegraf, jitsucom-bulker, mariadb-operator, age, terragrunt, sqlexporter, step-kms-plugin, spire-server, amass, timestamp-authority, gitsign, sftpgo-plugin-eventstore, dex, envoy-gateway, grafana-alloy, sops, kine, db-operator...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: migrate, neuvector-sigstore-interface, emissary, harbor-cli, oauth2-proxy, nri-f5, terraform-mcp-server, dex, prometheus-operator, rabbitmq-default-user-credential-updater, rabbitmq-messaging-topology-operator, witness, dgraph, render-template, nri-rabbitmq, conftest...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: envoy-gateway, cg, timestamp-authority-fips, step-kms-plugin, hydra-fips, prometheus-mysqld-exporter-fips, kyverno-policy-reporter, juicefs, rekor-fips, telegraf, loki, mariadb-operator-fips, certificate-transparency-fips, kyverno, dex, age, dgraph,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: tailscale, spicedb, trufflehog, sftpgo, telegraf, jitsucom-bulker, mariadb-operator, age, terragrunt, sqlexporter, step-kms-plugin, spire-server, amass, timestamp-authority, gitsign, sftpgo-plugin-eventstore, dex, envoy-gateway, grafana-alloy, sops, kine, db-operator...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: k6, podinfo, kbld, neuvector-sigstore-interface, oauth2-proxy, terraform-provider-tls, kratos, php-fpmexporter, timestamp-authority, terraform-provider-time, grpc-health-probe, logstash-exporter, maru, sbom-convert, dgraph, gosu, go-licenses, azure-ipam, atlantis,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: k6, podinfo, oras, kbld, neuvector-sigstore-interface, manifest-tool, oauth2-proxy, terraform-provider-tls, kaf, kratos, php-fpmexporter, timestamp-authority, s5cmd, contour, terraform-provider-time, logstash-exporter, sonobuoy, git-credential-oauth, maru,...