GO-2026-4947 vulnerabilities

Vulnerabilities for packages: xeol, kafkaexporter, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, prometheus, kubewatch, migrate, cloud-provider-azure, helm-push, nsc, apache-exporter, dfc, kubernetes-csi-external-attacher, step-kms-plugin, litestream, mockery, kubernetes-replicator,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: knative-serving, minio, cert-manager, nerdctl, kaf, kyverno, flux, mattermost, opentelemetry-collector, prometheus, cloud-provider-aws, zot, kubescape, spire-server, gitlab-kas, telegraf, cilium-cli, rancher, aactl, docker-machine-driver-harvester, loki, snyk-cli,...

GO-2026-5023 vulnerabilities

Vulnerabilities for packages: knative-serving, minio, cert-manager, nerdctl, kaf, kyverno, flux, mattermost, opentelemetry-collector, prometheus, cloud-provider-aws, zot, kubescape, spire-server, gitlab-kas, telegraf, cilium-cli, rancher, aactl, loki, snyk-cli, cilium, k3s, trivy-operator, fscryp...

GO-2026-4871 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, cni-plugins, xeol, kafkaexporter, iptables-wrappers, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, prometheus, kubewatch, migrate, cloud-provider-azure, helm-push, nsc, apache-exporter, dfc,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: opentofu, knative-serving, minio, pulumi, cert-manager, guac, kaf, nerdctl, kyverno, chezmoi, flux, grype, pulumi-language-dotnet, mattermost, opentelemetry-collector, witness, prometheus, cloud-provider-aws, syft, kubescape, zot, nfpm, spire-server, gitlab-kas,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: sonobuoy, guac, kubeflow-katib, nri-nginx, cni-plugins, xeol, amazon-cloudwatch-agent, kbld, renovate, kubernetes-csi-driver-nfs, ko, sftpgo-plugin-auth, secrets-store-csi-driver, prometheus, argo-workflows, runc, migrate, nats, cloud-provider-azure, metrics-server,...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: sonobuoy, guac, kubeflow-katib, xeol, kubernetes-csi-driver-nfs, ko, sftpgo-plugin-auth, secrets-store-csi-driver, prometheus, argo-workflows, runc, migrate, nats, cloud-provider-azure, metrics-server, tempo, kubernetes-csi-external-attacher, litestream, gatekeeper,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: xeol, kafkaexporter, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, prometheus, kubewatch, migrate, cloud-provider-azure, helm-push, nsc, apache-exporter, dfc, kubernetes-csi-external-attacher, step-kms-plugin, litestream, mockery, kubernetes-replicator,...

GO-2026-5033 vulnerabilities

Vulnerabilities for packages: opentofu, knative-serving, minio, cert-manager, nerdctl, kaf, kyverno, flux, mattermost, opentelemetry-collector, prometheus, cloud-provider-aws, zot, spire-server, gitlab-kas, telegraf, cilium-cli, rancher, aactl, loki, snyk-cli, cilium, k3s, fscrypt, helm, podman,...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: ko, prometheus, runc, nats, cloud-provider-azure, metrics-server, kubernetes-csi-external-attacher, gatekeeper, tkn, helm, prometheus-operator, k8ssandra-client, skopeo, conftest, kubernetes-dashboard, datadog-agent, nuclei, aws-flb-kinesis, cert-manager, nerdctl, ka...

GO-2026-5016 vulnerabilities

Vulnerabilities for packages: guac, grype, witness, prometheus, syft, spire-server, wal-g, loki, trivy-operator, argocd-image-updater, fscrypt, helm, external-dns, prometheus-operator, kine, skaffold, osv-scanner, kubernetes-dashboard, external-secrets-operator, datadog-agent, nuclei,...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: guac, grype, witness, prometheus, syft, spire-server, wal-g, loki, trivy-operator, argocd-image-updater, fscrypt, helm, external-dns, prometheus-operator, kine, skaffold, osv-scanner, kubernetes-dashboard, external-secrets-operator, datadog-agent, nuclei,...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: xeol, kubernetes-csi-driver-nfs, restic, apache-exporter, kubernetes-csi-external-attacher, step-kms-plugin, litestream, kubernetes-replicator, external-dns, terraform-provider-pagerduty, policy-controller, rabbitmq-messaging-topology-operator, ksops,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, trivy-operator, tkn, zarf, flux-source-controller, gh, skaffold, slsa-verifier, trivy, policy-controller...

GO-2026-5506 vulnerabilities

Vulnerabilities for packages: kapp, kubernetes-csi-driver-nfs, ko, argo-rollouts, envoy-ratelimit, prometheus, kubernetes-csi-driver-hostpath, crossplane-provider-aws-route53, promxy, spark-operator, litestream, crossplane-provider-aws-sns, argocd-image-updater, kubernetes-event-exporter,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis, configmap-reload, sonobuoy, kubeflow-katib, oras, cortex, cni-plugins, docker-cli, ip-masq-agent, kind, mage, go-bindata, petname, dgraph, grpcurl, nats, aactl, helm-push, metrics-server, nri-discovery-kubernetes, nsc, flannel-cni-plugin,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, sigstore-scaffolding, witness, kubescape, tekton-chains, aactl, cosign, tkn, podman, zarf, falco-no-driver, flux-source-controller, skopeo, buildah, slsa-verifier, ratify, kots, undock, portieris, vexctl, falcoctl...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, sigstore-scaffolding, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, tkn, zarf, flux-source-controller, gh, docker-cli-buildx, skaffold,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: opentofu, aws-flb-kinesis, k8sgateway, mc, kubeflow-katib, hubble, minio, nerdctl, vale, xeol, src, headlamp, mattermost, opensearch-k8s-operator, rancher-helm, runc, spire-server, telegraf, cilium-cli, terraform, aactl, steampipe, cosign, timoni, k3s,...

GO-2026-4762 vulnerabilities

Vulnerabilities for packages: trufflehog, velero-plugin-for-microsoft-azure, xeol, grype, kubernetes-csi-driver-nfs, fluent-operator, argo-rollouts, envoy-ratelimit, prometheus, restic, crossplane-provider-aws-route53, fulcio, docker-compose, migrate, cloud-provider-azure, loki, helm-push, tempo,...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: k8sgateway, sonobuoy, guac, kubeflow-katib, kuberlr, xeol, kbld, kapp, kubernetes-csi-driver-nfs, nri-jmx, podinfo, secrets-store-csi-driver, sftpgo-plugin-auth, src-fingerprint, kubernetes-csi-driver-hostpath, restic, runc, spire-server, neuvector-sigstore-interface...

GO-2026-4433 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, cni-plugins, xeol, grype, kafkaexporter, iptables-wrappers, fluent-operator, argo-rollouts, envoy-ratelimit, kubernetes-csi-driver-nfs, prometheus, restic, crossplane-provider-aws-route53, kubewatch, fulcio, docker-compose, migrate,...

GO-2023-2383 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis, configmap-reload, sonobuoy, kubeflow-katib, oras, cortex, cni-plugins, docker-cli, ip-masq-agent, kind, mage, go-bindata, petname, dgraph, grpcurl, nats, aactl, helm-push, metrics-server, nri-discovery-kubernetes, nsc, flannel-cni-plugin,...

GO-2026-4945 vulnerabilities

Vulnerabilities for packages: trufflehog, guac, envconsul, xeol, grype, ko, witness, restic, syft, argo-workflows, kaniko, spire-server, sqlexporter, fulcio, neuvector-sigstore-interface, migrate, loki, tempo, step-kms-plugin, trivy-operator, weaviate, tkn, octo-sts, sftpgo-plugin-kms, skopeo,...

GO-2026-4918 vulnerabilities

Vulnerabilities for packages: trufflehog, velero-plugin-for-microsoft-azure, xeol, fluent-operator, argo-rollouts, prometheus, restic, crossplane-provider-aws-route53, kubewatch, fulcio, migrate, cloud-provider-azure, loki, helm-push, apache-exporter, kubernetes-csi-external-attacher,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, guac, xeol, kyverno, sigstore-scaffolding, ko, witness, timestamp-authority, zot, kubescape, spire-server, tekton-chains, fulcio, crossplane, docker-compose, neuvector-sigstore-interface, aactl, cosign, tflint, trivy-operator, tkn,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: gitsign, falco-no-driver, kots, zarf, aactl, cosign, skopeo, sigstore-scaffolding, witness, slsa-verifier, vexctl, kubescape, tekton-chains, falcoctl...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, aactl, flux-source-controller, kyverno, teleport, witness, falcoctl, tkn, policy-controller, zot, ratify, goreleaser...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: trufflehog, guac, xeol, grype, witness, argo-rollouts, src-fingerprint, syft, argo-workflows, crossplane-provider-aws-route53, wal-g, actions-runner-controller, helm-push, crossplane-provider-aws-sns, crossplane-provider-keycloak, trivy-operator, argocd-image-updater...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: xeol, kubernetes-csi-driver-nfs, restic, apache-exporter, kubernetes-csi-external-attacher, step-kms-plugin, litestream, kubernetes-replicator, external-dns, terraform-provider-pagerduty, policy-controller, rabbitmq-messaging-topology-operator, ksops,...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: gitsign, trufflehog, minio, chezmoi, openbao, seaweedfs, mattermost, witness, openfga, timestamp-authority, cerbos, tailscale, argo-workflows, temporal-server, spire-server, envoy-gateway, sqlexporter, fulcio, dgraph, telegraf, aactl, jitsucom-bulker, loki,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k8sgateway, sonobuoy, guac, kubeflow-katib, kuberlr, nri-nginx, xeol, esbuild, kbld, kapp, kubernetes-csi-driver-nfs, podinfo, sftpgo-plugin-auth, secrets-store-csi-driver, src-fingerprint, restic, runc, spire-server, neuvector-sigstore-interface,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, sigstore-scaffolding, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, trivy-operator, tkn, zarf, docker, flux-source-controller, gh, docker-cli-buildx,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, knative-serving, trufflehog, incert, guac, kubeflow-katib, nerdctl, xeol, kyverno, kbld, flux, paranoia, harbor, ko, witness, vcluster, zot, argo-workflows, spire-server, tekton-chains, crossplane, aactl, cosign, kubescape-operator,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, trivy-operator, tkn, zarf, flux-source-controller, gh, skaffold, slsa-verifier, trivy, policy-controller...

GO-2025-4134 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, xeol, grype, kafkaexporter, argo-rollouts, restic, crossplane-provider-aws, crossplane-provider-aws-route53, fulcio, docker-compose, migrate, helm-push, nsc, apache-exporter, kubernetes-csi-external-attacher, litestream, external-dn...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, sigstore-scaffolding, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, trivy-operator, tkn, zarf, docker, flux-source-controller, gh, skaffold,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k8sgateway, guac, kubeflow-katib, envconsul, cni-plugins, kuberlr, nri-nginx, kapp, kubernetes-csi-external-health-monitor, kubernetes-csi-driver-nfs, ko, witness, prometheus, pluto, kubernetes-csi-driver-hostpath, fulcio, neuvector-sigstore-interface, migrate, wal-g...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, sigstore-scaffolding, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, trivy-operator, tkn, zarf, docker, flux-source-controller, gh, skaffold,...

GO-2026-4337 vulnerabilities

Vulnerabilities for packages: xeol, grype, kafkaexporter, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, prometheus, restic, crossplane-provider-aws-route53, kubewatch, fulcio, docker-compose, migrate, tempo, nsc, apache-exporter, dfc, kubernetes-csi-external-attacher, step-kms-plugin...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, cni-plugins, grype, kafkaexporter, kubernetes-csi-driver-nfs, fluent-operator, prometheus, restic, kubewatch, fulcio, helm-push, tempo, kubernetes-csi-external-attacher, step-kms-plugin, litestream, flannel-cni-plugin,...

GO-2025-4135 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, xeol, grype, kafkaexporter, argo-rollouts, restic, crossplane-provider-aws, crossplane-provider-aws-route53, fulcio, docker-compose, migrate, helm-push, nsc, apache-exporter, kubernetes-csi-external-attacher, ollama, step-kms-plugin...

GO-2025-3754 vulnerabilities

Vulnerabilities for packages: trufflehog, guac, xeol, argo-rollouts, src-fingerprint, crossplane-provider-aws, argo-workflows, crossplane-provider-aws-route53, neuvector-sigstore-interface, wal-g, actions-runner-controller, crossplane-provider-aws-sns, crossplane-provider-keycloak, tkn,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: trufflehog, xeol, kafkaexporter, kubernetes-csi-driver-nfs, restic, kubewatch, fulcio, migrate, helm-push, apache-exporter, kubernetes-replicator, trust-manager, opentelemetry-collector-contrib, policy-controller, rabbitmq-messaging-topology-operator, temporal, ksops...

GO-2025-4155 vulnerabilities

Vulnerabilities for packages: grype, kafkaexporter, kubernetes-csi-driver-nfs, restic, migrate, helm-push, tempo, nsc, apache-exporter, dfc, kubernetes-csi-external-attacher, flannel-cni-plugin, mockery, kubernetes-replicator, external-dns, opentelemetry-collector-contrib, policy-controller,...

GO-2025-3829 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, kubeflow-katib, xeol, docker-credential-gcr, rancher-machine, prometheus, amazon-cloudwatch-agent-operator, crossplane, aactl, cluster-api-helm-controller, promxy, k3s, lazydocker, rancher-agent, harbor-scanner-trivy, ctop, k3d, kpt, skaffold, bom,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: gitsign, sigstore-scaffolding, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, aactl, cosign, wolfictl, tkn, melange, zarf, flux-source-controller, gh, slsa-verifier, trivy, policy-controller, apko, vexctl, rekor, falcoctl...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: trufflehog, velero-plugin-for-microsoft-azure, xeol, grype, kubernetes-csi-driver-nfs, fluent-operator, argo-rollouts, prometheus, restic, crossplane-provider-aws, crossplane-provider-aws-route53, kubewatch, fulcio, docker-compose, helm-push, tempo,...

GO-2025-3503 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, cni-plugins, xeol, kafkaexporter, kubernetes-csi-driver-nfs, fluent-operator, argo-rollouts, envoy-ratelimit, prometheus, restic, crossplane-provider-aws, crossplane-provider-aws-route53, kubewatch, fulcio, docker-compose, helm-push...

GO-2025-3595 vulnerabilities

Vulnerabilities for packages: trufflehog, velero-plugin-for-microsoft-azure, cni-plugins, xeol, kafkaexporter, kubernetes-csi-driver-nfs, fluent-operator, argo-rollouts, envoy-ratelimit, prometheus, restic, crossplane-provider-aws, crossplane-provider-aws-route53, kubewatch, fulcio, docker-compos...