GO-2026-5856 vulnerabilities

Vulnerabilities for packages: kubewatch, kyverno-notation-aws, rancher-machine, verticadb-operator, src-fingerprint, tempo, opentelemetry-operator, terraform, terraform-provider-azapi, aws-s3-controller, kyverno-policy-reporter-kyverno-plugin, cert-exporter, doppler-kubernetes-operator,...

GO-2025-3956 vulnerabilities

Vulnerabilities for packages: grafana-operator, kube-vip, vexctl, octo-sts, rancher-machine, pvc-autoresizer, vault-k8s, local-path-provisioner, sftpgo-plugin-geoipfilter, docker-credential-ecr-login, mongodb-kubernetes-operator, shfmt, kserve-rest-proxy, php-fpmexporter, dagdotdev, ctop,...

GO-2024-2599 vulnerabilities

Vulnerabilities for packages: kubewatch, protoc-gen-go-grpc, vexctl, cni-plugins, src-fingerprint, nodetaint, terraform, dockerize, gops, gh, mage, buildkitd, yq, kube-bench, kubernetes-event-exporter, kyverno-policy-reporter-kyverno-plugin, aws-flb-cloudwatch, render-template, cert-exporter,...

GO-2024-2609 vulnerabilities

Vulnerabilities for packages: kubewatch, protoc-gen-go-grpc, vexctl, cni-plugins, src-fingerprint, nodetaint, terraform, dockerize, gops, gh, mage, buildkitd, yq, kube-bench, kubernetes-event-exporter, kyverno-policy-reporter-kyverno-plugin, aws-flb-cloudwatch, render-template, cert-exporter,...

GO-2024-2610 vulnerabilities

Vulnerabilities for packages: kubewatch, protoc-gen-go-grpc, vexctl, cni-plugins, src-fingerprint, nodetaint, terraform, dockerize, gops, gh, mage, buildkitd, yq, kube-bench, kubernetes-event-exporter, kyverno-policy-reporter-kyverno-plugin, aws-flb-cloudwatch, render-template, cert-exporter,...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: grafana, kube-bench, kubernetes-event-exporter, kyverno-policy-reporter-kyverno-plugin, crossplane-provider-family-aws, cert-exporter, aactl, flyte, karpenter, crossplane-provider-aws-memorydb, kubescape-operator, kapp-controller, crossplane,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: src-fingerprint, grafana, conftest, conjur-cli, kube-bench, kubernetes-event-exporter, kyverno-policy-reporter-kyverno-plugin, aws-flb-cloudwatch, crossplane-provider-family-aws, cert-exporter, aactl, flyte, frp, knative-serving, victoriametrics-cluster, atlantis,...

GO-2023-2153 vulnerabilities

Vulnerabilities for packages: up, dgraph, spark-operator, aactl, slsa-verifier, cortex, src, terraform-provider-sendgrid, kubescape, scorecard, buildkitd, kubeflow, k3d, kubevela...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: sops, vexctl, oauth2-proxy, terragrunt, aactl, cloudflared, fulcio, argo-workflows, cosign, gitsign, kubescape, tekton-chains, flux-source-controller, spire-server, dex, kots, flux-kustomize-controller, slsa-verifier, tkn, rekor...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: kubewatch, vexctl, src-fingerprint, terraform, conftest, dockerize, gh, buildkitd, kubernetes-event-exporter, ollama, aactl, crossplane-provider-azure, frp, cloudflared, crossplane-provider-aws, atlantis, fulcio, gomplate, secrets-store-csi-driver-provider-azure, src...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: tfsec, external-secrets-operator, src-fingerprint, trufflehog, grafana-alloy, syft, act, terragrunt, trivy-operator, teleport, flux, skaffold, zot, dagger, pulumi-language-yaml, gitaly, gomplate, pulumi-language-dotnet, xeol, argo-workflows, nuclei, goreleaser,...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, grafana, tempo, opentelemetry-operator, buildkitd, tekton-pipelines, opentelemetry-collector, teleport, grafana-image-renderer, aactl, flyte, knative-serving, kubescape-operator, prometheus-alertmanager, knative-eventing, opa-envoy, hydra,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kots, kyverno-notation-aws, gitsign, aactl, buildah, kyverno, slsa-verifier, skopeo, kubescape, witness, zarf, tekton-chains, flux-source-controller, undock, podman, ratify, falcoctl...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: crossplane, neuvector-sigstore-interface, kyverno-notation-aws, gitsign, aactl, kyverno, policy-controller, trivy, kubescape, tkn, zarf, tekton-chains, trivy-operator, ratify, falcoctl, tflint...

GO-2026-5841 vulnerabilities

Vulnerabilities for packages: kaf, flux, kots, aactl, kyverno, kine, zot, nerdctl, containerd, loki, minio, spire-server, snyk-cli, k3s, telegraf, k3d, prometheus-operator...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: kpt, argocd-image-updater, aactl, bom, kubernetes-dashboard...

GO-2024-2453 vulnerabilities

Vulnerabilities for packages: sops, crossplane-provider-aws-kinesis, vexctl, grype, actions-runner-controller, syft, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, terragrunt, crossplane-provider-family-aws, flux, skaffold, aactl, zot, crossplane-provider-aws,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: kubewatch, protoc-gen-go-grpc, vexctl, nodetaint, terraform, conftest, gh, syft, buildkitd, kube-bench, kubernetes-event-exporter, kyverno-policy-reporter-kyverno-plugin, crossplane-provider-family-aws, ollama, cert-exporter, aactl, crossplane-provider-azure,...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: kubewatch, nodetaint, terraform, buildkitd, yq, ollama, aactl, crossplane-provider-azure, frp, crossplane-provider-aws, pulumi-language-yaml, atlantis, gomplate, pulumi-language-dotnet, src, prometheus-alertmanager, kpt, dynamic-localpv-provisioner, gobuster, dive,...

GO-2023-1795 vulnerabilities

Vulnerabilities for packages: skaffold, aactl...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: ko, conftest, syft, buildkitd, zot, cilium-cli, aactl, dagger, ctop, crossplane, kaniko, kubescape, docker-compose, spire-server, kargo, cadvisor, up, trivy, wolfictl, tkn, melange, buf, grype...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: src-fingerprint, grafana, conftest, conjur-cli, kube-bench, kubernetes-event-exporter, kyverno-policy-reporter-kyverno-plugin, aws-flb-cloudwatch, crossplane-provider-family-aws, cert-exporter, aactl, flyte, frp, knative-serving, victoriametrics-cluster, atlantis,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: crossplane, policy-controller, kyverno-notation-aws, teleport, kyverno, aactl, slsa-verifier, zot, trivy, kubescape, ratify, trivy-operator...

GO-2026-5158 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubernetes-csi-external-attacher, rancher-machine, gcp-compute-persistent-disk-csi-driver, cluster-api-gcp-controller, aws-otel-collector, grafana, k8ssandra-client, knative-client, tempo, conftest, syft, spegel, sqlexporter, tekton-pipelines,...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: tfsec, external-secrets-operator, src-fingerprint, trufflehog, grafana-alloy, syft, act, terragrunt, trivy-operator, teleport, flux, skaffold, zot, dagger, pulumi-language-yaml, gitaly, gomplate, pulumi-language-dotnet, xeol, argo-workflows, nuclei, goreleaser,...

GO-2023-1754 vulnerabilities

Vulnerabilities for packages: apko, aactl, ko...

GO-2023-1765 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, aactl...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: kubewatch, nodetaint, terraform, buildkitd, yq, ollama, aactl, crossplane-provider-azure, frp, crossplane-provider-aws, pulumi-language-yaml, gomplate, pulumi-language-dotnet, src, prometheus-alertmanager, kpt, dynamic-localpv-provisioner, gobuster, dive,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: policy-controller, skaffold, aactl, ko, slsa-verifier, kubescape, tkn, melange, tekton-chains, apko, flux-source-controller, spire-server, cosign...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: sops, vexctl, ko, nerdctl, step-ca, minio, timestamp-authority, oauth2-proxy, kube-rbac-proxy, terragrunt, skaffold, aactl, zot, frp, cloudflared, skopeo, fulcio, gomplate, k3s, argo-workflows, goreleaser, falcoctl, temporal-ui-server, cosign, gitsign, guac, kubescap...

GO-2024-2512 vulnerabilities

Vulnerabilities for packages: vexctl, rancher-machine, nerdctl, buildkitd, k3d, flux-helm-controller, flux, skaffold, aactl, zot, dagger, skopeo, ctop, helm-operator, k3s, argo-workflows, goreleaser, falcoctl, kubevela, cosign, docker-credential-gcr, kpt, eksctl, gitsign, k8sgpt, guac, bom,...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: tfsec, external-secrets-operator, src-fingerprint, trufflehog, grafana-alloy, syft, act, terragrunt, trivy-operator, teleport, flux, skaffold, zot, dagger, pulumi-language-yaml, gitaly, gomplate, pulumi-language-dotnet, xeol, argo-workflows, nuclei, goreleaser,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: tfsec, external-secrets-operator, src-fingerprint, trufflehog, grafana-alloy, syft, act, terragrunt, trivy-operator, teleport, flux, skaffold, zot, dagger, pulumi-language-yaml, gitaly, gomplate, pulumi-language-dotnet, xeol, argo-workflows, nuclei, goreleaser,...

GO-2026-5426 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubernetes-csi-external-attacher, sftpgo, gcp-compute-persistent-disk-csi-driver, cluster-api-gcp-controller, aws-otel-collector, grafana, k8ssandra-client, verticadb-operator, tempo, opentelemetry-operator, conftest, syft, buildkitd, spegel,...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: crossplane, teleport, kyverno-notation-aws, skaffold, kyverno, aactl, ko, slsa-verifier, vexctl, trivy, zot, tkn, tekton-chains, ratify, trivy-operator...

GO-2026-5851 vulnerabilities

Vulnerabilities for packages: crossplane, neuvector-sigstore-interface, kyverno-notation-aws, gitsign, aactl, kyverno, policy-controller, trivy, kubescape, tkn, zarf, tekton-chains, spire-server, trivy-operator, ratify, goreleaser, falcoctl, tflint...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, ko, trivy-operator, teleport, neuvector-sigstore-interface, aactl, goreleaser, falcoctl, tflint, crossplane, gitsign, kubescape, zarf, tekton-chains, spire-server, policy-controller, kyverno, slsa-verifier, tkn, ratify...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, rancher-machine, verticadb-operator, tempo, opentelemetry-operator, terraform, terraform-provider-azapi, spegel, vault-secrets-webhook, cluster-api-aws-controller, podman, helm-operator, kapp-controller, dynamic-localpv-provisioner, hydra, apko,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: vexctl, sftpgo, terraform-provider-azapi, gh, syft, sqlexporter, opentelemetry-collector, grafana-image-renderer, aactl, pulumi-language-yaml, helm-operator, terraform-provider-azurerm, coredns, rancher-fleet, falco-no-driver, external-dns, pulumi-language-java,...

GO-2026-5970 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubernetes-csi-external-attacher, kyverno-notation-aws, rancher-machine, cluster-api-gcp-controller, aws-otel-collector, grafana, k8ssandra-client, portieris, smokescreen, verticadb-operator, terraform, conftest, gh, conjur-cli, sqlexporter, glow, yq,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: runc, juicefs, grafana, fluent-bit-plugin-loki, nerdctl, containerd, minio, grafana-alloy, prometheus-operator, mattermost, go, aws-flb-cloudwatch, flux, zot, aactl, cilium-cli, trino, dask-gateway, prometheus, istio, karpenter, kube-fluentd-operator, k3s, kubo,...

GO-2026-4979 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, sftpgo, cni-plugins, aws-otel-collector, grafana, k8ssandra-client, tempo, conftest, ini-file, conjur-cli, buildkitd, tekton-pipelines, opentelemetry-collector, renovate, teleport, aws-flb-cloudwatch, cert-exporter, aactl,...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, sftpgo, grafana, tempo, conftest, buildkitd, tekton-pipelines, teleport, aws-flb-cloudwatch, aactl, vault-secrets-webhook, flyte, atlantis, karpenter, secrets-store-csi-driver-provider-azure, helm-operator, goreleaser, kpt, crossplan...

GO-2026-5547 vulnerabilities

Vulnerabilities for packages: docker, kyverno-notation-aws, vexctl, ko, gh, buildkitd, trivy-operator, teleport, neuvector-sigstore-interface, skaffold, aactl, zot, dagger, goreleaser, falcoctl, cosign, tflint, crossplane, gitsign, guac, bom, kubescape, docker-compose, tekton-chains,...

GO-2026-4865 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubernetes-csi-external-attacher, rancher-machine, sftpgo, verticadb-operator, vexctl, grafana, k8ssandra-client, knative-client, opentelemetry-operator, terraform, terraform-provider-azapi, gh, syft, spegel, kubernetes-event-exporter,...

GO-2026-4870 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubewatch, kyverno-notation-aws, rancher-machine, verticadb-operator, k8ssandra-client, opentelemetry-operator, terraform, terraform-provider-azapi, aws-s3-controller, spegel, kyverno-policy-reporter-kyverno-plugin, cert-exporter, vault-secrets-webhook...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, sftpgo, aws-otel-collector, grafana, k8ssandra-client, tempo, conftest, conjur-cli, buildkitd, tekton-pipelines, opentelemetry-collector, teleport, aws-flb-cloudwatch, cert-exporter, aactl, vault-secrets-webhook, flyte,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, sftpgo, grafana, k8ssandra-client, conftest, teleport, aws-flb-cloudwatch, aactl, flyte, atlantis, karpenter, helm-operator, goreleaser, kpt, crossplane, coredns, falco-no-driver, rancher-webhook, nats, redka, gatekeeper, kots,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: runc, external-secrets-operator, aws-flb-kinesis, nerdctl, prometheus-operator, mattermost, go, aws-flb-cloudwatch, flux, zot, aactl, cilium-cli, kine, dask-gateway, prometheus, istio, karpenter, gitaly, fuse-overlayfs-snapshotter, kube-fluentd-operator, k3s, argo-cd...

GO-2026-4869 vulnerabilities

Vulnerabilities for packages: rancher-machine, k8ssandra-client, terraform, gh, syft, spegel, aws-flb-cloudwatch, aactl, pulumi-language-yaml, atlantis, karpenter, podman, goreleaser, kpt, crossplane, opa-envoy, coredns, dive, rancher-fleet, falco-no-driver, apko, external-dns,...