GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, cluster-api, crossplane-provider-aws-route53, ctop, terraform-provider-acme, kubo, tofu-controller, sftpgo-plugin-pubsub, docker-machine-driver-harvester, tekton-pipelines, kube-vip, chisel, crossplane-provider-azure-managedidentity, ksops,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, terraform-provider-acme, apko, go-discover, external-dns, prometheus-operator, chisel, crossplane-provider-azure-managedidentity, ksops, pulumi-language-yaml, zarf, osv-scanner, flux-kustomize-controller, crossplane-provider-aws-s3,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ctop, kuberlr, kubo, tofu-controller, sftpgo-plugin-pubsub, yace, external-dns, lvm-driver, chisel, ksops, osv-scanner, vale, flux-kustomize-controller, crossplane-provider-aws-s3, scorecard, blobfuse2, gke-gcloud-auth-plugin, kubernetes-replicator, rancher-telemetry...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: apko, docker-machine-driver-harvester, go-discover, external-dns, prometheus-operator, chisel, crossplane-provider-azure-managedidentity, ksops, pulumi-language-yaml, zarf, osv-scanner, flux-kustomize-controller, caddy, scorecard, containerd, grype, zot,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: opentofu-fips, grafana, amazon-ecs-agent-fips, kube-state-metrics, ipfs-cluster, gitlab-kas-fips, kube-arangodb-fips, mailpit, seaweedfs, rancher-helm, mattermost, traefik, commercial-chainloop-backend, envconsul, flux-helm-controller-fips, gitlab-workhorse-ce-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: opentofu-fips, grafana, amazon-ecs-agent-fips, kube-state-metrics, ipfs-cluster, gitlab-kas-fips, kube-arangodb-fips, mailpit, seaweedfs, rancher-helm, mattermost, traefik, commercial-chainloop-backend, envconsul, flux-helm-controller-fips, gitlab-workhorse-ce-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: gitsign, ctop, local-path-provisioner, sftpgo-plugin-pubsub, cloud-provider-aws, gostatsd, kube-vip, nats, addon-resizer, lvm-driver, checksec, blobfuse2, kuberay-operator, octo-sts, confluent-common-docker, newrelic-fluent-bit-output, grafana-operator,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: gitsign, ctop, local-path-provisioner, sftpgo-plugin-pubsub, cloud-provider-aws, gostatsd, kube-vip, nats, addon-resizer, lvm-driver, checksec, blobfuse2, kuberay-operator, octo-sts, confluent-common-docker, newrelic-fluent-bit-output, grafana-operator,...