GO-2025-3787 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, dagger, kyverno-policy-reporter, chart-testing, grype, grype-db, nri-kubernetes, seaweedfs, dataplaneapi, neuvector-sigstore-interface-fips, steampipe, opentelemetry-collector-contrib, opentelemetry-operator-fips, grype-fips, kube-bench, traefik,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: rancher-security-scan-fips, gosu, controller-gen, falcosidekick-fips, hivemind, prometheus-postgres-exporter-fips, gitlab-rails-ce, ipfs-cluster, metacontroller, vertical-pod-autoscaler, maru, stampdalf, dynamic-localpv-provisioner, conjur-cli, configmap-reload,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: rancher-security-scan-fips, gosu, controller-gen, falcosidekick-fips, hivemind, prometheus-postgres-exporter-fips, gitlab-rails-ce, ipfs-cluster, metacontroller, vertical-pod-autoscaler, maru, stampdalf, dynamic-localpv-provisioner, conjur-cli, configmap-reload,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: rancher-security-scan-fips, gosu, controller-gen, falcosidekick-fips, hivemind, prometheus-postgres-exporter-fips, gitlab-rails-ce, ipfs-cluster, metacontroller, vertical-pod-autoscaler, maru, stampdalf, dynamic-localpv-provisioner, conjur-cli, configmap-reload,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: terragrunt-fips, memcached-exporter-fips, gosu, aws-fsx-csi-driver, helm-exporter, crossplane-provider-aws-cloudfront, json-exporter, ingress-nginx-controller-fips, kubo, prometheus-postgres-exporter-fips, aws-efs-csi-driver-fips, opentelemetry-collector-contrib,...

GO-2025-3828 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.8, kubeflow-katib, nvidia-nsight-compute-12.9, nvidia-nsight-compute-13.0, nvidia-nsight-compute-13.1, newrelic-fluent-bit-output, agentbeat, nvidia-nsight-compute-13.2, nemo...

GO-2025-4006 vulnerabilities

Vulnerabilities for packages: rancher-security-scan-fips, gosu, controller-gen, falcosidekick-fips, hivemind, prometheus-postgres-exporter-fips, gitlab-rails-ce, ipfs-cluster, metacontroller, vertical-pod-autoscaler, maru, stampdalf, dynamic-localpv-provisioner, conjur-cli, configmap-reload,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: rancher-security-scan-fips, gosu, controller-gen, falcosidekick-fips, hivemind, prometheus-postgres-exporter-fips, gitlab-rails-ce, ipfs-cluster, metacontroller, vertical-pod-autoscaler, maru, stampdalf, dynamic-localpv-provisioner, conjur-cli, configmap-reload,...

GO-2025-4173 vulnerabilities

Vulnerabilities for packages: dapr, minio-fips, bento, influxd, beats, elastic-agent, beats-fips, falcosidekick, minio, elastic-agent-fips, agentbeat-fips, dapr-fips, zabbix-agent2, telegraf, agentbeat, zabbix-agent2-fips, falcosidekick-fips...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: chezmoi, sops-fips, flux-kustomize-controller, flux-kustomize-controller-fips, sops, age, grafana, age-fips, ksops, litestream...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: trust-manager, ytt, memcached-exporter-fips, gosu, esbuild, node-feature-discovery-fips, controller-gen, falcosidekick-fips, hivemind, prometheus-postgres-exporter-fips, aws-efs-csi-driver-fips, neuvector-scanner-fips, secrets-store-csi-driver-provider-azure-fips,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: dagger, wait-for-port, scorecard, volume-modifier-for-k8s-fips, hubble-ui, kyverno-policy-reporter, ytt, nri-couchbase, cass-operator-fips-no-pvc-delete, sbomqs, gosu, up, esbuild, grype, prometheus-adapter-fips, kube-rbac-proxy-fips, controller-gen, dataplaneapi,...

GO-2024-2600 vulnerabilities

Vulnerabilities for packages: dagger, wait-for-port, scorecard, volume-modifier-for-k8s-fips, hubble-ui, kyverno-policy-reporter, ytt, nri-couchbase, cass-operator-fips-no-pvc-delete, sbomqs, gosu, up, esbuild, grype, prometheus-adapter-fips, kube-rbac-proxy-fips, controller-gen, dataplaneapi,...

GO-2024-2610 vulnerabilities

Vulnerabilities for packages: dagger, wait-for-port, scorecard, volume-modifier-for-k8s-fips, hubble-ui, kyverno-policy-reporter, ytt, nri-couchbase, cass-operator-fips-no-pvc-delete, sbomqs, gosu, up, esbuild, grype, prometheus-adapter-fips, kube-rbac-proxy-fips, controller-gen, dataplaneapi,...

GO-2025-4175 vulnerabilities

Vulnerabilities for packages: actions-runner-controller-fips, kargo, prometheus-pgbouncer-exporter-fips, ingress-nginx-controller-fips, prometheus-postgres-exporter-fips, aws-efs-csi-driver-fips, opentelemetry-collector-contrib, ipfs-cluster, nri-haproxy, boring-registry-fips, rancher-helm,...

GO-2025-3956 vulnerabilities

Vulnerabilities for packages: rancher-machine, memcached-exporter-fips, custom-pod-autoscaler-operator, nvidia-nsight-compute-13.0, addon-resizer, terraform-provider-tls-fips, wazero-fips, hivemind, shfmt, nvidia-nsight-compute-12.8, git-lfs, secrets-store-csi-driver-fips,...

GO-2024-2748 vulnerabilities

Vulnerabilities for packages: actions-runner-controller-fips, volume-modifier-for-k8s-fips, kyverno-policy-reporter, trust-manager, cass-operator-fips-no-pvc-delete, prometheus-adapter-fips, kube-rbac-proxy-fips, nri-kubernetes, eksctl, falcosidekick-fips, kwok,...

GO-2024-2609 vulnerabilities

Vulnerabilities for packages: dagger, wait-for-port, scorecard, volume-modifier-for-k8s-fips, hubble-ui, kyverno-policy-reporter, ytt, nri-couchbase, cass-operator-fips-no-pvc-delete, sbomqs, gosu, up, esbuild, grype, prometheus-adapter-fips, kube-rbac-proxy-fips, controller-gen, dataplaneapi,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: trust-manager, ytt, gosu, esbuild, node-feature-discovery-fips, controller-gen, falcosidekick-fips, hivemind, prometheus-postgres-exporter-fips, aws-efs-csi-driver-fips, neuvector-scanner-fips, secrets-store-csi-driver-provider-azure-fips, croc, step-fips, maru,...

GO-2024-2599 vulnerabilities

Vulnerabilities for packages: dagger, wait-for-port, scorecard, volume-modifier-for-k8s-fips, hubble-ui, kyverno-policy-reporter, ytt, nri-couchbase, cass-operator-fips-no-pvc-delete, sbomqs, gosu, up, esbuild, grype, prometheus-adapter-fips, kube-rbac-proxy-fips, controller-gen, dataplaneapi,...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: ytt, kargo, crossplane-provider-aws-cloudfront, ingress-nginx-controller-fips, tempo-fips, crossplane-provider-aws-deploy, ipfs-cluster, crossplane-provider-aws-detective, crossplane-provider-aws-mq, envoy-ai-gateway-fips, langfuse-fips, undock, tkn, step-fips,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: actions-runner-controller-fips, terragrunt-fips, rancher-security-scan-fips, ytt, memcached-exporter-fips, gosu, aws-fsx-csi-driver, node-feature-discovery-fips, containerd-fips, helm-exporter, controller-gen, crossplane-provider-aws-cloudfront, json-exporter,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: actions-runner-controller-fips, volume-modifier-for-k8s-fips, dataplaneapi, k8s-metacollector-fips, nova, ingress-nginx-controller-fips, metacontroller, rabbitmq-messaging-topology-operator, flux-operator-fips, fluxcd-kustomize-mutating-webhook-fips,...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: application-gateway-kubernetes-ingress-fips, trust-manager, velero-plugin-for-gcp, crossplane-provider-aws-cloudfront, ingress-nginx-controller-fips, tempo-fips, crossplane-provider-aws-deploy, opentelemetry-collector-contrib, ipfs-cluster,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: actions-runner-controller-fips, terragrunt-fips, rancher-security-scan-fips, ytt, memcached-exporter-fips, gosu, aws-fsx-csi-driver, node-feature-discovery-fips, containerd-fips, helm-exporter, controller-gen, crossplane-provider-aws-cloudfront, json-exporter,...

GO-2023-1795 vulnerabilities

Vulnerabilities for packages: skaffold, aactl...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s-fips, trust-manager, prometheus-adapter-fips, prometheus-postgres-exporter-fips, skaffold, metacontroller, ollama, timoni, tkn, kubeflow-fips, vertical-pod-autoscaler, dynamic-localpv-provisioner, pulumi-language-dotnet,...

GO-2023-1754 vulnerabilities

Vulnerabilities for packages: ko, aactl, apko...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: tekton-chains, terragrunt, vexctl, kubescape, fulcio-fips, kots, cosign, dex, tkn, spire-server, sops, argo-workflows, cosign-fips, aactl, rekor, timestamp-authority-fips, slsa-verifier, flux-source-controller, bank-vaults-fips, fulcio, flux-kustomize-controller,...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, kpt, argocd-image-updater-fips, bom, aactl, argocd-image-updater...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s-fips, trust-manager, up, prometheus-adapter-fips, prometheus-postgres-exporter-fips, aws-efs-csi-driver-fips, skaffold, metacontroller, kubernetes-ingress-defaultbackend, ollama, timoni, tkn, kubeflow-fips, vertical-pod-autoscaler,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: trust-manager, kargo, crossplane-provider-aws-cloudfront, falcosidekick-fips, prometheus-postgres-exporter-fips, aws-efs-csi-driver-fips, metacontroller, tkn, vertical-pod-autoscaler, dynamic-localpv-provisioner, configmap-reload, pulumi-language-dotnet,...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: terragrunt-fips, dagger, scorecard, terragrunt, xeol, kargo, grype, argocd-image-updater, grype-db, mapotf-fips, trufflehog-fips, steampipe, coder-fips, gitlab-rails-ce, grype-fips, skaffold, packer-fips, upwind-agent, pulumi-language-dotnet, trufflehog, chainctl,...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: terragrunt-fips, dagger, scorecard, terragrunt, xeol, kargo, grype, argocd-image-updater, grype-db, mapotf-fips, trufflehog-fips, steampipe, gitlab-rails-ce, grype-fips, skaffold, packer-fips, upwind-agent, pulumi-language-dotnet, trufflehog, chainctl,...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: terragrunt-fips, dagger, scorecard, terragrunt, xeol, kargo, grype, argocd-image-updater, grype-db, mapotf-fips, trufflehog-fips, steampipe, coder-fips, gitlab-rails-ce, grype-fips, skaffold, packer-fips, upwind-agent, pulumi-language-dotnet, trufflehog, chainctl,...

GO-2023-1765 vulnerabilities

Vulnerabilities for packages: aactl, pulumi-language-java...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: tekton-chains, apko, skaffold, spire-server, spire-server-fips, cosign, kubescape, falcoctl-fips, aactl, policy-controller, tkn, ko, slsa-verifier, flux-source-controller, melange...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: terragrunt, kargo, kube-rbac-proxy-fips, vault, skaffold, rabbitmq-messaging-topology-operator, tkn, policy-controller-fips, rekor, bank-vaults-fips, spire-server-fips, bank-vaults, external-secrets-fips, kubescape, timestamp-authority, apko, guac, kots,...

GO-2024-2512 vulnerabilities

Vulnerabilities for packages: tekton-chains, rancher-machine, k8sgpt, dagger, zot, scorecard, goreleaser, vexctl, buildkitd, helm-operator, kargo, kubescape, up, helm-fips, zarf, newrelic-infrastructure-agent, eksctl, flux, k3s, trivy, falcoctl, guac, helm-operator-fips, kots, cadvisor, skaffold,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: zot, dagger, conftest, kaniko, buildkitd, kargo, kubescape, up, conftest-fips, grype, wolfictl, trivy, cadvisor, syft, loki, prometheus, tkn, ctop, spire-server, docker-compose, crossplane, aactl, buf, melange, spire-server-fips, cadvisor-fips, cilium-cli, ko...

GO-2026-5970 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudtrail, crossplane-provider-aws-amplify-fips, commercial-nginx-ingress, harvester, crossplane-provider-aws-devicefarm-fips, controller-gen, crossplane-provider-aws-cloudfront, crossplane-provider-aws-secretsmanager, json-exporter,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: terragrunt-fips, dagger, scorecard, terragrunt, xeol, kargo, grype, argocd-image-updater, grype-db, mapotf-fips, trufflehog-fips, steampipe, coder-fips, gitlab-rails-ce, grype-fips, skaffold, packer-fips, upwind-agent, pulumi-language-dotnet, trufflehog, chainctl,...

GO-2026-5841 vulnerabilities

Vulnerabilities for packages: zot, reports-server, terraform, minio, commercial-kyverno, cert-manager, prometheus-mongodb-exporter, flux, k3s, omnictl-multiarch, kots, loki, prometheus, backup-restore-operator, telegraf, kine, omnictl-multiarch-fips, upwind-agent, kyverno, spire-server, zitadel,...

GO-2024-2453 vulnerabilities

Vulnerabilities for packages: tekton-chains, zot, boring-registry, scorecard, kaniko, goreleaser, terragrunt, vexctl, actions-runner-controller, kubescape, crossplane-provider-aws-s3, grype, zarf, crossplane-provider-aws-cloudfront, crossplane-provider-family-aws, crossplane-provider-aws-firehose...

GO-2023-2153 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, scorecard, volume-modifier-for-k8s-fips, buildkitd, kubescape, up, conftest-fips, prometheus-adapter-fips, dgraph, prometheus-stackdriver-exporter, cortex, terraform-provider-sendgrid-fips, aws-efs-csi-driver-fips, plutono-fips,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: scorecard, kyverno-policy-reporter, terragrunt, up, grype, prometheus-adapter-fips, cortex, eksctl, secrets-store-csi-driver-provider-azure, prometheus-postgres-exporter-fips, ollama, tkn, kubeflow-fips, dynamic-localpv-provisioner, ferretdb,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: tekton-chains, buildah-fips, kyverno-notation-aws-fips, commercial-kyverno, kubescape, zarf, prometheus-podman-exporter-fips, falcoctl, ratify-fips, kots, kubescape-server, skopeo-fips, undock, kyverno-fips, skopeo, flux-source-controller-fips, podman-fips, buildah,...

GO-2026-5851 vulnerabilities

Vulnerabilities for packages: tekton-chains, tbot, teleport-operator-fips, trivy-operator, tkn-fips, cloudbeat-fips, goreleaser, kyverno-notation-aws-fips, commercial-kyverno, kubescape, zarf, neuvector-sigstore-interface-fips, trivy, falcoctl, ratify-fips, teleport, kubescape-server,...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: tekton-chains, tbot, teleport-operator-fips, trivy-operator, tkn-fips, cloudbeat-fips, kyverno-notation-aws-fips, commercial-kyverno, kubescape, zarf, neuvector-sigstore-interface-fips, trivy, falcoctl, ratify-fips, teleport, kubescape-server, crossplane-fips,...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: tekton-chains, zot, trivy-operator, tkn-fips, cloudbeat-fips, vexctl, kyverno-notation-aws-fips, commercial-kyverno, kyverno-policy-reporter-plugins-kyverno, trivy, ratify-fips, teleport, skaffold, crossplane-fips, tkn, kyverno-fips, trivy-fips, kyverno-notation-aws,...