GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, runc, crossplane-provider-aws-elasticache, terraform-provider-acme, cluster-proportional-autoscaler, kyverno, cis-operator, continuity, kaniko, dask-gateway, kapp-controller, spark-operator, kube-vip, crossplane-provider-aws-memorydb, goreleaser,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cosign, crossplane-provider-aws-elasticache, terraform-provider-acme, kyverno, crossplane-provider-aws-memorydb, cluster-api-azure-controller, k8sgpt, apko, gptscript, hcloud, gitlab-pages, nerdctl, policy-controller, skaffold, cilium, falcoctl, terraform-provider-tl...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cosign, runc, crossplane-provider-aws-elasticache, go-licenses, http-echo, kapp-controller, kubernetes-dns-node-cache, dask-gateway, rancher-loglevel, spark-operator, sftpgo-plugin-kms, gatekeeper, goreleaser, kubeflow, minio-operator, kserve-modelmesh-serving,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cosign, kyverno, cluster-api-azure-controller, k8sgpt, apko, gptscript, hcloud, nerdctl, policy-controller, skaffold, cilium, falcoctl, terraform-provider-tls, step-issuer, flux-notification-controller, crossplane-provider-azure-authorization, podman, openbao,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: malcontent, trivy, zitadel, cloud-provider-azure-fips, cloud-provider-azure, gitlab-operator, scorecard, omni-fips, amazon-ssm-agent-fips, gitlab-operator-fips, slsa-verifier, gitness, helm-fips, envconsul-fips, helm-exporter-fips, knative-eventing-fips, etcd,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: malcontent, trivy, zitadel, cloud-provider-azure-fips, cloud-provider-azure, gitlab-operator, scorecard, omni-fips, amazon-ssm-agent-fips, gitlab-operator-fips, slsa-verifier, gitness, helm-fips, envconsul-fips, helm-exporter-fips, knative-eventing-fips, etcd,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: dagdotdev, bank-vaults, kube-vip, cloud-provider-aws, container-object-storage-interface, custom-pod-autoscaler-operator, ctop, kube-vip-cloud-provider, kuberay-operator, grafana-operator, kubeflow-katib, k8sgpt-operator, terraform-provider-time, shfmt, vault-k8s,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: dagdotdev, bank-vaults, kube-vip, cloud-provider-aws, container-object-storage-interface, custom-pod-autoscaler-operator, ctop, kube-vip-cloud-provider, kuberay-operator, grafana-operator, kubeflow-katib, k8sgpt-operator, terraform-provider-time, shfmt, vault-k8s,...