GO-2024-2800 vulnerabilities

Vulnerabilities for packages: zarf, zot, tfsec, k9s, tflint, conftest, terraform, kubescape...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy, zot, kots, k8ssandra-client, rancher-helm, flux-helm-controller, chart-testing, helm-docs, zarf, cluster-api-helm-controller, tw, cert-manager-cmctl, helm-operator, eksctl, helm-push, flux, cilium-cli, pluto, flux-source-controller, k9s, kubescape...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-operator, kubevela, up, zarf, chartmuseum, eksctl, trivy, zot, flux-source-controller, k8sgpt, k9s, helm-push, kots, kubescape, flux-helm-controller...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: opa, smarter-device-manager, dagger, trivy, zot, terraform-provider-google, gomplate, step-ca, grpc-health-probe, vcluster, k8sgpt, falcosidekick, sigstore-scaffolding, hubble-ui, dbmate, guac, grafana-mimir, kots, terragrunt, cloudnative-pg,...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-operator, kubevela, up, zarf, chartmuseum, eksctl, trivy, zot, flux-source-controller, k8sgpt, k9s, helm-push, kots, kubescape, flux-helm-controller...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cilium-cli, cert-manager-cmctl, zarf, rancher-fleet, flux-source-controller, helm-push, kuma, kots, flux...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: undock, zarf, filebrowser, gptscript, kubescape, k9s, trufflehog, chezmoi, grype, nuclei, wolfictl, kots, gitleaks, syft...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: cilium-cli, cert-manager-cmctl, zarf, rancher-fleet, flux-source-controller, helm-push, kuma, kots, flux...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: skopeo, trivy, zot, grype, podman, kots, buildkitd, zarf, k3s, syft, kubernetes, docker, runc, wolfictl, skaffold, nerdctl, k3d, ctop, newrelic-infrastructure-agent, k9s, cadvisor, kaniko, kubescape...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: cosign, gh, trivy, zot, falcoctl, sigstore-scaffolding, ko, buildkitd, neuvector-sigstore-interface, policy-controller, zarf, spire-server, teleport, trivy-operator, kyverno-notation-aws, vexctl, docker, gitsign, tkn, skaffold, tekton-chains, witness,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy, zot, k8sgpt, kots, k8ssandra-client, rancher-helm, flux-helm-controller, chart-testing, helm-docs, zarf, cerbos, cluster-api-helm-controller, tw, linkerd2, cert-manager-cmctl, helm-operator, eksctl, rancher-fleet, istio, helm-push, cilium-cli,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: bom, argocd-image-updater, kubevela, scorecard, dagger, trivy, zot, gitea, flux-kustomize-controller, k8sgpt, flux-image-automation-controller, grype, guac, argo-events, kots, zarf, timoni, task, src-fingerprint, crossplane, nuclei, melange, syft, apko, kargo,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: bom, argocd-image-updater, kubevela, scorecard, dagger, trivy, zot, gitea, flux-kustomize-controller, k8sgpt, flux-image-automation-controller, grype, guac, argo-events, kots, zarf, timoni, task, src-fingerprint, crossplane, nuclei, melange, syft, apko, kargo,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: bom, argocd-image-updater, kubevela, scorecard, dagger, trivy, zot, gomplate, gitea, flux-image-automation-controller, grype, trufflehog, guac, steampipe, argo-events, kots, zarf, cerbos, teleport, src-fingerprint, crossplane, nfpm, nuclei, melange, syft,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: harbor-registry, cosign, prometheus-operator, rook, py3-azure-identity, trivy, airflow, falcoctl, step-ca, zot, flux-kustomize-controller, k8sgpt, sigstore-scaffolding, guac, druid, argo-events, buildkitd, grafana-mimir, terragrunt, rekor, policy-controller, zarf,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, buildah, undock, slsa-verifier, skopeo, tekton-chains, falcoctl, witness, zarf, flux-source-controller, kyverno, ratify, gitsign, podman, kots, kubescape, aactl...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: trivy-operator, kyverno-notation-aws, neuvector-sigstore-interface, policy-controller, zarf, trivy, tekton-chains, falcoctl, tflint, crossplane, ratify, gitsign, kyverno, kubescape, tkn, aactl...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: falcoctl, ko, neuvector-sigstore-interface, policy-controller, zarf, spire-server, teleport, crossplane, aactl, trivy-operator, kyverno-notation-aws, ratify, gitsign, tkn, kyverno, tekton-chains, tflint, slsa-verifier, kubescape, goreleaser...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, flux-notification-controller, prometheus-operator, buildah, dagger, zot, docker-compose, gomplate, gitea, docker-machine-driver-linode, podman, argo-events, buildkitd, crossplane-provider-aws-sns, crossplane-provider-aws-dynamodb,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: cosign, gh, zot, falcoctl, docker-cli-buildx, sigstore-scaffolding, ko, neuvector-sigstore-interface, policy-controller, zarf, spire-server, teleport, aactl, kyverno-notation-aws, vexctl, ratify, gitsign, tkn, skaffold, tekton-chains, witness, flux-source-controller,...