GO-2024-2609 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, nri-mssql, go-md2man, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, tflint, cni-plugins, vertical-pod-autoscaler, grafana-operator, src-fingerprint, temporal-ui-server, vite, nri-kafka, metallb, ytt, terraform-docs,...

GO-2024-2599 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, nri-mssql, go-md2man, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, tflint, cni-plugins, vertical-pod-autoscaler, grafana-operator, src-fingerprint, temporal-ui-server, vite, nri-kafka, metallb, ytt, terraform-docs,...

GO-2024-2610 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, nri-mssql, go-md2man, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, tflint, cni-plugins, vertical-pod-autoscaler, grafana-operator, src-fingerprint, temporal-ui-server, vite, nri-kafka, metallb, ytt, terraform-docs,...

GO-2025-3956 vulnerabilities

Vulnerabilities for packages: octo-sts, vault-benchmark, gitsign, sftpgo-plugin-geoipfilter, k8sgpt-operator, dagdotdev, pvc-autoresizer, grafana-operator, vexctl, bank-vaults, linkerd2-proxy-init, sftpgo-plugin-pubsub, cloud-provider-aws, custom-pod-autoscaler-operator, git-lfs,...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: nodetaint, spicedb-operator, restic, temporal-ui-server, kyverno, falcosidekick, crossplane-provider-aws-firehose, k8sgateway, kubeflow, terraform-provider-azapi, grafana-agent-operator, ghaudit, kustomize, descheduler, newrelic-fluent-bit-output, tekton-chains, vale...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: bom, helm-docs, conjur-cli, restic, src-fingerprint, kyverno, kubernetes-dns-node-cache, smarter-device-manager, crossplane-provider-aws-firehose, kubeflow, thanos, terraform-provider-azapi, kustomize, newrelic-fluent-bit-output, docker-cli, vale, terragrunt, coredns...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, spicedb-operator, bom, conjur-cli, restic, src-fingerprint, temporal-ui-server, kyverno, falcosidekick, fluent-bit-plugin-loki, kubernetes-dns-node-cache, docker-machine-driver-linode, crossplane-provider-aws-firehose, k8sgateway,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: kubescape, rekor, gitsign, vexctl, tkn, cloudflared, aactl, spire-server, flux-source-controller, flux-kustomize-controller, slsa-verifier, tekton-chains, sops, argo-workflows, terragrunt, oauth2-proxy, cosign, dex, fulcio, kots...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: buildkitd, nri-mssql, dynamic-localpv-provisioner, bom, atlantis, src-fingerprint, temporal-ui-server, conftest, nri-kafka, crossplane-provider-azure-sql, terraform-docs, nsc, k8sgpt, kubeflow, k3s, grype, libssh, flux-source-controller, flux-kustomize-controller,...

GO-2023-2153 vulnerabilities

Vulnerabilities for packages: dgraph, kubescape, buildkitd, up, scorecard, spark-operator, cortex, slsa-verifier, src, terraform-provider-sendgrid, kubeflow, kubevela, aactl, k3d...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: kubescape, steampipe, pulumi-language-java, bom, gitaly, zarf, argo-cd, witness, crossplane, external-secrets-operator, kubevela, gitsign, argocd-image-updater, teleport, gitea, zot, src-fingerprint, argo-events, kyverno, osv-scanner, k9s, skaffold,...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: spicedb-operator, dynamic-localpv-provisioner, fuse-overlayfs-snapshotter, zarf, vertical-pod-autoscaler, kiali, crossplane-provider-aws-s3, grafana-operator, step-issuer, kyverno, net-kourier, crossplane-provider-azure-sql, tofu-controller,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-mssql, spicedb-operator, dynamic-localpv-provisioner, fuse-overlayfs-snapshotter, zarf, conjur-cli, vertical-pod-autoscaler, kiali, crossplane-provider-aws-s3, sftpgo-plugin-geoipfilter, grafana-operator, step-issuer, atlantis, src-fingerprint, temporal-ui-server...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: nri-mssql, spicedb-operator, dynamic-localpv-provisioner, fuse-overlayfs-snapshotter, zarf, conjur-cli, vertical-pod-autoscaler, kiali, crossplane-provider-aws-s3, sftpgo-plugin-geoipfilter, grafana-operator, step-issuer, atlantis, src-fingerprint, temporal-ui-server...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, vertical-pod-autoscaler, atlantis, kubernetes-dns-node-cache, k8sgpt, kubeflow, grpcurl, k3s, flux-source-controller, flux-kustomize-controller, slsa-verifier, tekton-chains, weaviate...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, dynamic-localpv-provisioner, fuse-overlayfs-snapshotter, zarf, tflint, vertical-pod-autoscaler, restic, crossplane-provider-aws-s3, grafana-operator, atlantis, temporal-ui-server, conftest, falcosidekick, metallb, crossplane-provider-azure-sql,...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: kubescape, steampipe, pulumi-language-java, bom, gitaly, zarf, argo-cd, witness, crossplane, external-secrets-operator, kubevela, gitsign, argocd-image-updater, teleport, gitea, zot, src-fingerprint, argo-events, kyverno, osv-scanner, k9s, skaffold,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: kubescape, buildkitd, up, ko, crossplane, zot, conftest, syft, tkn, aactl, kaniko, buf, docker-compose, spire-server, wolfictl, dagger, grype, cilium-cli, kargo, melange, trivy, cadvisor, ctop...

GO-2026-5158 vulnerabilities

Vulnerabilities for packages: spicedb-operator, zarf, tflint, vertical-pod-autoscaler, kiali, restic, crossplane-provider-aws-s3, spegel, step-issuer, terraform-mcp-server, cloud-provider-gcp-cloud-controller-manager, conftest, kyverno, falcosidekick, metallb, litestream,...

GO-2026-5841 vulnerabilities

Vulnerabilities for packages: minio, spire-server, telegraf, kyverno, flux, containerd, loki, nerdctl, kaf, snyk-cli, zot, prometheus-operator, kots, aactl, k3d, kine, k3s...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: aactl, bom, argocd-image-updater, kubernetes-dashboard, kpt...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kubescape, ratify, trivy-operator, kyverno, slsa-verifier, teleport, trivy, crossplane, zot, policy-controller, aactl, kyverno-notation-aws...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: buildkitd, kiali, terraform-mcp-server, falcosidekick, net-kourier, fluent-bit-plugin-loki, jaeger, thanos, opentelemetry-operator, weaviate, tekton-pipelines, argo-workflows, terragrunt, knative-eventing, envoy-ratelimit, kserve, opa, grafana-rollout-operator, zot,...

GO-2023-1795 vulnerabilities

Vulnerabilities for packages: skaffold, aactl...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kubescape, ratify, skopeo, kyverno, podman, aactl, flux-source-controller, slsa-verifier, zarf, tekton-chains, undock, witness, falcoctl, kots, gitsign, buildah, kyverno-notation-aws...

GO-2024-2453 vulnerabilities

Vulnerabilities for packages: kubescape, crossplane-provider-aws-cloudfront, pulumi-language-java, zarf, crossplane, zot, kubevela, crossplane-provider-aws-dynamodb, gitsign, crossplane-provider-aws-s3, crossplane-provider-aws-ec2, vexctl, skaffold, syft, flux-image-automation-controller,...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: kubescape, ratify, trivy-operator, neuvector-sigstore-interface, kyverno, tkn, zarf, tekton-chains, tflint, falcoctl, trivy, crossplane, gitsign, aactl, policy-controller, kyverno-notation-aws...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: kubescape, skopeo, rabbitmq-messaging-topology-operator, rekor, temporal, zarf, ko, zot, grpc-health-probe, gitsign, kubernetes-dashboard, vexctl, minio, bank-vaults, temporal-ui-server, skaffold, tkn, cloudflared, aactl, policy-controller, rook, step-ca,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: spicedb-operator, fuse-overlayfs-snapshotter, zarf, fscrypt, sftpgo-plugin-geoipfilter, step-issuer, kyverno, nsc, terraform-provider-azapi, k3s, kustomize, grype, flux-source-controller, flux-kustomize-controller, tekton-chains, cloudnative-pg,...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: ratify, trivy-operator, kyverno, skaffold, tkn, slsa-verifier, tekton-chains, teleport, trivy, ko, crossplane, zot, aactl, kyverno-notation-aws, vexctl...

GO-2023-1765 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, aactl...

GO-2026-5426 vulnerabilities

Vulnerabilities for packages: buildkitd, spicedb-operator, zarf, tflint, kiali, restic, crossplane-provider-aws-s3, spegel, step-issuer, terraform-mcp-server, cloud-provider-gcp-cloud-controller-manager, conftest, kyverno, falcosidekick, metallb, litestream, crossplane-provider-azure-sql,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, tflint, ko, crossplane, gitsign, teleport, neuvector-sigstore-interface, kyverno, tkn, policy-controller, aactl, kyverno-notation-aws, spire-server, trivy-operator, slsa-verifier, tekton-chains, goreleaser, ratify, falcoctl...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: kubescape, steampipe, pulumi-language-java, bom, gitaly, zarf, argo-cd, witness, crossplane, external-secrets-operator, kubevela, gitsign, argocd-image-updater, teleport, gitea, zot, src-fingerprint, argo-events, kyverno, osv-scanner, k9s, skaffold,...

GO-2026-5851 vulnerabilities

Vulnerabilities for packages: goreleaser, kubescape, ratify, neuvector-sigstore-interface, kyverno, spire-server, trivy-operator, tkn, zarf, tekton-chains, tflint, falcoctl, trivy, crossplane, gitsign, aactl, policy-controller, kyverno-notation-aws...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: buildkitd, spicedb-operator, restic, temporal-ui-server, kyverno, falcosidekick, fluent-bit-plugin-loki, terraform-docs, kubernetes-dns-node-cache, smarter-device-manager, crossplane-provider-aws-firehose, k8sgateway, kubeflow, thanos, terraform-provider-azapi,...

GO-2026-5970 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, zarf, cilium-certgen, conjur-cli, minio-object-browser, kiali, crossplane-provider-aws-s3, grafana-operator, step-issuer, atlantis, temporal-ui-server, terraform-mcp-server, conftest, kyverno, nri-kafka, falcosidekick,...

GO-2023-1754 vulnerabilities

Vulnerabilities for packages: ko, apko, aactl...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, vertical-pod-autoscaler, k8sgpt, kubeflow, grpcurl, k3s, flux-source-controller, flux-kustomize-controller, weaviate, flux-image-reflector-controller, wireguard-go, hugo,...

GO-2024-2512 vulnerabilities

Vulnerabilities for packages: kubescape, skopeo, buildkitd, up, helm-operator, crane, bom, zarf, cri-tools, zot, kubevela, gitsign, flux-helm-controller, helm, k3d, vexctl, skaffold, timoni, k9s, newrelic-infrastructure-agent, pulumi, k8sgpt, aactl, policy-controller, k3s, eksctl, dagger, flux,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: kubescape, steampipe, pulumi-language-java, bom, gitaly, zarf, argo-cd, witness, crossplane, external-secrets-operator, kubevela, gitsign, argocd-image-updater, teleport, gitea, zot, src-fingerprint, argo-events, kyverno, osv-scanner, k9s, skaffold,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: kubescape, spire-server, skaffold, melange, tkn, flux-source-controller, cosign, slsa-verifier, tekton-chains, ko, policy-controller, aactl, apko...

GO-2026-4979 vulnerabilities

Vulnerabilities for packages: buildkitd, helm-docs, zarf, cilium-certgen, conjur-cli, cni-plugins, minio-object-browser, sftpgo-plugin-geoipfilter, grafana-operator, step-issuer, atlantis, conftest, kyverno, litestream, fluent-bit-plugin-loki, manifest-tool, migrate, k8sgpt, dbmate, kubeflow,...

GO-2026-4865 vulnerabilities

Vulnerabilities for packages: spicedb-operator, bom, fuse-overlayfs-snapshotter, fscrypt, minio-object-browser, sftpgo-plugin-geoipfilter, wave, spegel, step-issuer, atlantis, temporal-ui-server, kyverno, net-kourier, litestream, crossplane-provider-azure-sql, terraform-docs,...

GO-2026-4870 vulnerabilities

Vulnerabilities for packages: nodetaint, spicedb-operator, bom, conjur-cli, temporal-ui-server, kyverno, terraform-docs, docker-machine-driver-linode, kubeflow, terraform-provider-azapi, grafana-agent-operator, ghaudit, kustomize, descheduler, newrelic-fluent-bit-output, docker-cli, vale, coredns...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: zarf, fscrypt, step-issuer, kyverno, k3s, grype, flux-source-controller, rancher, terragrunt, gptscript, kine, step, scorecard, trivy, argo-cd, witness, zot, gitea, minio, argo-events, skaffold, flux-image-automation-controller, prometheus, pulumi-language-yaml,...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: buildkitd, zarf, minio-object-browser, sftpgo-plugin-geoipfilter, step-issuer, atlantis, conftest, kyverno, litestream, fluent-bit-plugin-loki, migrate, k8sgpt, dbmate, thanos, k3s, aws-flb-firehose, vault-secrets-webhook, opencost, slsa-verifier, tekton-pipelines,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: zarf, cilium-certgen, minio-object-browser, grafana-operator, atlantis, conftest, kyverno, fluent-bit-plugin-loki, k8sgpt, thanos, k3s, aws-flb-firehose, opencost, slsa-verifier, tekton-chains, goreleaser, coredns, scorecard, timestamp-authority, helm-operator,...

GO-2026-5547 vulnerabilities

Vulnerabilities for packages: kubescape, buildkitd, rekor, docker, bom, zarf, tflint, ko, crossplane, zot, gitsign, teleport, gh, vexctl, neuvector-sigstore-interface, kyverno, skaffold, tkn, policy-controller, aactl, gitlab-runner, kyverno-notation-aws, docker-compose, spire-server,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: podman, containerd, fscrypt, zot, external-secrets-operator, falco-no-driver, kubernetes-dashboard, helm, minio, istio, cilium, kyverno, prometheus, cloud-provider-aws, aactl, k3s, spire-server, flux, opentelemetry-collector, cilium-cli, kaf, prometheus-operator,...