GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, policy-controller, kaf, kargo, spire-server, terraform-provider-azapi, docker-compose, trivy-operator, cloudflared, vault-benchmark, kine, crossplane-provider-azure-sql, flux-kustomize-controller, crossplane-provider-aws-kinesis,...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: envoy-gateway, sftpgo, dex, grafana-alloy, jitsucom-bulker, tailscale, wolfictl, juicefs, spire-server, witness, mattermost, spicedb, apko, gitsign, seaweedfs, crossplane-provider-sql, nuclei, temporal, kots, openfga, step-kms-plugin, certificate-transparency,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, aws-privateca-issuer, policy-controller, swagger, cortex, kubelet-csr-approver, juicefs, spire-server, kserve-modelmesh-serving, spire-controller-manager, crossplane-provider-sql, whereabouts, postgres-operator,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: dive, aws-privateca-issuer, gcsfuse, swagger, kubernetes-dashboard-auth, lazydocker, terraform-provider-azapi, docker-machine-driver-harvester, spire-controller-manager, helm-push, terraform, rabbitmq-messaging-topology-operator, nri-mysql, azure-service-operator,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: envoy-gateway, sftpgo, dex, grafana-alloy, jitsucom-bulker, tailscale, wolfictl, juicefs, spire-server, witness, mattermost, spicedb, apko, gitsign, seaweedfs, crossplane-provider-sql, nuclei, temporal, kots, openfga, step-kms-plugin, certificate-transparency,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: dive, cortex, crane, sbom-convert, age, smarter-device-manager, container-object-storage-interface, k6, rancher-webhook, xcover, timoni, atlantis, kube-logging-operator, velero-plugin-for-microsoft-azure, cargobump, sbom-scorecard, kpt, kube-bench, wave, hey, s5cmd,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...