GO-2026-5005 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, nerdctl, containerd, minio, prometheus-operator, mattermost, opentelemetry-collector, flux, zot, cilium-cli, aactl, kine, rancher, knative-serving, prometheus, istio, podman, k3s, kaf, cilium, falco-no-driver, docker-cli-buildx, external-dn...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: syft, opentelemetry-collector, aactl, knative-serving, pulumi-language-yaml, gomplate, pulumi-language-dotnet, podman, gptscript, falco-no-driver, apko, external-dns, pulumi-language-java, docker-machine-driver-harvester, kots, kyverno, cert-manager, wolfictl, melang...

GO-2026-5018 vulnerabilities

Vulnerabilities for packages: rancher-machine, gh, syft, buildkitd, opentelemetry-collector, teleport, aactl, knative-serving, pulumi-language-yaml, atlantis, fulcio, gomplate, pulumi-language-dotnet, podman, terraform-provider-azurerm, tflint, gptscript, falco-no-driver, apko, external-dns,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: rancher-machine, terraform-provider-azapi, gh, syft, buildkitd, opentelemetry-collector, teleport, crossplane-provider-family-aws, aactl, cloudflared, knative-serving, pulumi-language-yaml, atlantis, fulcio, crossplane-provider-aws-memorydb, gomplate,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: rancher-machine, gh, syft, buildkitd, opentelemetry-collector, teleport, aactl, knative-serving, pulumi-language-yaml, atlantis, fulcio, gomplate, pulumi-language-dotnet, podman, terraform-provider-azurerm, tflint, gptscript, falco-no-driver, apko, external-dns,...

GO-2026-5020 vulnerabilities

Vulnerabilities for packages: rancher-machine, terraform-provider-azapi, gh, syft, buildkitd, opentelemetry-collector, teleport, crossplane-provider-family-aws, aactl, cloudflared, knative-serving, pulumi-language-yaml, atlantis, fulcio, crossplane-provider-aws-memorydb, gomplate,...

GO-2026-4871 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubewatch, kyverno-notation-aws, rancher-machine, cni-plugins, verticadb-operator, k8ssandra-client, opentelemetry-operator, terraform, terraform-provider-azapi, aws-s3-controller, spegel, renovate, kyverno-policy-reporter-kyverno-plugin, cert-exporter...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubewatch, kyverno-notation-aws, rancher-machine, verticadb-operator, k8ssandra-client, opentelemetry-operator, terraform, terraform-provider-azapi, aws-s3-controller, spegel, kyverno-policy-reporter-kyverno-plugin, cert-exporter, vault-secrets-webhook...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, nerdctl, containerd, minio, prometheus-operator, mattermost, trivy-operator, opentelemetry-collector, flux, skaffold, aactl, cilium-cli, kine, rancher, zot, knative-serving, prometheus, istio, k3s, flux-image-automation-controller, kaf,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: opentofu, external-secrets-operator, nerdctl, containerd, minio, syft, act, prometheus-operator, mattermost, terragrunt, opentelemetry-collector, trivy-operator, flux, skaffold, aactl, cilium-cli, kine, zarf, zot, dagger, knative-serving, prometheus,...

GO-2026-5023 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, nerdctl, containerd, minio, prometheus-operator, mattermost, trivy-operator, opentelemetry-collector, flux, skaffold, aactl, cilium-cli, kine, rancher, zot, knative-serving, prometheus, istio, k3s, flux-image-automation-controller, kaf,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, sftpgo, grafana, k8ssandra-client, tempo, conftest, buildkitd, tekton-pipelines, teleport, aws-flb-cloudwatch, aactl, vault-secrets-webhook, flyte, atlantis, karpenter, secrets-store-csi-driver-provider-azure, helm-operator,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, sftpgo, cni-plugins, aws-otel-collector, grafana, k8ssandra-client, tempo, conftest, ini-file, conjur-cli, buildkitd, tekton-pipelines, opentelemetry-collector, renovate, teleport, aws-flb-cloudwatch, cert-exporter, aactl,...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: rancher-machine, gh, syft, buildkitd, opentelemetry-collector, aactl, knative-serving, pulumi-language-yaml, gomplate, pulumi-language-dotnet, podman, gptscript, falco-no-driver, apko, external-dns, pulumi-language-java, docker-machine-driver-harvester, kots, kyverno...

GO-2026-5033 vulnerabilities

Vulnerabilities for packages: opentofu, external-secrets-operator, nerdctl, containerd, minio, prometheus-operator, mattermost, opentelemetry-collector, flux, zot, cilium-cli, aactl, kine, rancher, knative-serving, prometheus, istio, podman, k3s, kaf, cilium, falco-no-driver, docker-cli-buildx,...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, sftpgo, grafana, k8ssandra-client, conftest, teleport, aws-flb-cloudwatch, aactl, flyte, atlantis, karpenter, helm-operator, goreleaser, kpt, crossplane, coredns, falco-no-driver, rancher-webhook, nats, redka, gatekeeper, kots,...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, sftpgo, grafana, k8ssandra-client, tempo, conftest, conjur-cli, buildkitd, tekton-pipelines, teleport, aws-flb-cloudwatch, aactl, vault-secrets-webhook, flyte, karpenter, secrets-store-csi-driver-provider-azure, helm-operator,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, sftpgo, cni-plugins, aws-otel-collector, grafana, k8ssandra-client, tempo, conftest, ini-file, conjur-cli, buildkitd, tekton-pipelines, opentelemetry-collector, renovate, teleport, aws-flb-cloudwatch, cert-exporter, aactl,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubewatch, kyverno-notation-aws, rancher-machine, verticadb-operator, k8ssandra-client, opentelemetry-operator, terraform, terraform-provider-azapi, aws-s3-controller, spegel, kyverno-policy-reporter-kyverno-plugin, cert-exporter, vault-secrets-webhook...

GO-2026-5016 vulnerabilities

Vulnerabilities for packages: rancher-machine, gh, syft, buildkitd, opentelemetry-collector, aactl, knative-serving, pulumi-language-yaml, gomplate, pulumi-language-dotnet, podman, gptscript, falco-no-driver, apko, external-dns, pulumi-language-java, docker-machine-driver-harvester, kots, kyverno...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: mc, runc, tfsec, cert-manager-cmctl, opentofu, nerdctl, opensearch-k8s-operator, terraform, conftest, minio, mattermost, aws-flb-cloudwatch, aactl, cilium-cli, kine, dask-gateway, croc, fuse-overlayfs-snapshotter, helm-operator, k3s, src, xeol, goreleaser,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, vexctl, portieris, aactl, skopeo, podman, falcoctl, cosign, gitsign, kubescape, falco-no-driver, tekton-chains, flux-source-controller, undock, zarf, kots, kyverno, buildah, slsa-verifier, tkn, witness, ratify, sigstore-scaffolding...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, vexctl, ko, gh, buildkitd, trivy-operator, teleport, neuvector-sigstore-interface, skaffold, aactl, zot, goreleaser, falcoctl, cosign, tflint, crossplane, gitsign, kubescape, zarf, tekton-chains, flux-source-controller, spire-server,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, vexctl, ko, gh, teleport, neuvector-sigstore-interface, skaffold, aactl, zot, goreleaser, falcoctl, cosign, tflint, crossplane, gitsign, kubescape, zarf, tekton-chains, flux-source-controller, docker-cli-buildx, spire-server, policy-controller,...

GO-2026-5506 vulnerabilities

Vulnerabilities for packages: vexctl, rancher-machine, knative-client, k8ssandra-client, terraform, kubernetes-event-exporter, aactl, cloudflared, crossplane-provider-aws-memorydb, podman, src, promxy, crossplane-provider-aws-iam, falco-no-driver, external-dns, rancher-webhook, kapp,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: sops, hubble-ui, gke-gcloud-auth-plugin, protoc-gen-go-grpc, cni-plugins, cortex, petname, amass, gops, grpcurl, mage, kind, local-path-provisioner, k3d, sbom-scorecard, cass-operator, aws-flb-cloudwatch, configmap-reload, docker-credential-ecr-login, aactl,...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: rancher-machine, src-fingerprint, terraform, spegel, kyverno-policy-reporter-kyverno-plugin, vault-secrets-webhook, doppler-kubernetes-operator, nri-f5, kubernetes-release, x509-certificate-exporter, git-sync, helm-operator, nats-server-config-reloader,...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, rancher-machine, gcp-compute-persistent-disk-csi-driver, cluster-api-gcp-controller, src-fingerprint, verticadb-operator, terraform, conftest, dockerize, conjur-cli, spegel, nri-jmx, kube-bench, kubernetes-event-exporter,...

GO-2023-2383 vulnerabilities

Vulnerabilities for packages: sops, hubble-ui, gke-gcloud-auth-plugin, protoc-gen-go-grpc, cni-plugins, cortex, petname, amass, gops, grpcurl, mage, kind, local-path-provisioner, k3d, sbom-scorecard, cass-operator, aws-flb-cloudwatch, configmap-reload, docker-credential-ecr-login, aactl,...

GO-2026-4918 vulnerabilities

Vulnerabilities for packages: kubewatch, rancher-machine, verticadb-operator, k8ssandra-client, terraform, terraform-provider-azapi, aws-s3-controller, kyverno-policy-reporter-kyverno-plugin, cert-exporter, vault-secrets-webhook, doppler-kubernetes-operator, cluster-api-aws-controller, atlantis,...

GO-2026-4433 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubewatch, kyverno-notation-aws, rancher-machine, cni-plugins, src-fingerprint, verticadb-operator, k8ssandra-client, tempo, opentelemetry-operator, terraform, terraform-provider-azapi, aws-s3-controller, spegel, kyverno-policy-reporter-kyverno-plugin,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, vexctl, ko, portieris, gh, timestamp-authority, buildkitd, trivy-operator, neuvector-sigstore-interface, skaffold, aactl, zot, skopeo, fulcio, podman, xeol, goreleaser, falcoctl, cosign, tflint, crossplane, gitsign, guac, kubescape,...

GO-2026-4762 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, rancher-machine, verticadb-operator, k8ssandra-client, tempo, opentelemetry-operator, terraform, terraform-provider-azapi, spegel, grafana-image-renderer, vault-secrets-webhook, cluster-api-aws-controller, podman, helm-operator, kapp-controller,...

GO-2026-4945 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, sftpgo, vexctl, grafana, tempo, conftest, syft, sqlexporter, tekton-pipelines, teleport, aactl, vault-secrets-webhook, vitess, flyte, cloudflared, cluster-api-aws-controller, frp, fulcio, gomplate, podman, kubescape-operator, src, goreleaser,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: docker, kyverno-notation-aws, vexctl, ko, gh, buildkitd, trivy-operator, teleport, neuvector-sigstore-interface, skaffold, aactl, zot, goreleaser, falcoctl, cosign, tflint, crossplane, gitsign, kubescape, zarf, tekton-chains, flux-source-controller, docker-cli-buildx...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, rancher-machine, gcp-compute-persistent-disk-csi-driver, cluster-api-gcp-controller, src-fingerprint, verticadb-operator, wgcf, langfuse, terraform, conftest, dockerize, conjur-cli, spegel, kube-bench, kubernetes-event-exporter,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kots, vexctl, gitsign, aactl, slsa-verifier, skopeo, kubescape, witness, falco-no-driver, tekton-chains, zarf, sigstore-scaffolding, falcoctl, cosign...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: sops, sftpgo, juicefs, dbmate, amass, mariadb-operator, step-ca, trufflehog, minio, timestamp-authority, grafana-alloy, sqlexporter, terragrunt, mattermost, certificate-transparency, aactl, kine, tailscale, fulcio, nri-mysql, ksops, croc, kyverno-policy-reporter, k3s...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kyverno-notation-aws, vexctl, ko, nerdctl, trufflehog, gh, tekton-pipelines, k3d, trivy-operator, flux-helm-controller, incert, minio-operator, flux, teleport, aactl, vault-secrets-webhook, vitess, zot, knative-serving, dagdotdev, istio,...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: rancher-machine, verticadb-operator, src-fingerprint, terraform, spegel, kyverno-policy-reporter-kyverno-plugin, vault-secrets-webhook, doppler-kubernetes-operator, nri-f5, kubernetes-release, x509-certificate-exporter, git-sync, helm-operator,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, vexctl, ko, gh, buildkitd, trivy-operator, teleport, neuvector-sigstore-interface, skaffold, aactl, zot, goreleaser, falcoctl, cosign, tflint, crossplane, gitsign, kubescape, zarf, tekton-chains, flux-source-controller, spire-server,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: policy-controller, teleport, kyverno-notation-aws, gitsign, aactl, kyverno, zot, tkn, witness, flux-source-controller, ratify, goreleaser, falcoctl...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, src-fingerprint, grafana, syft, buildkitd, crossplane-provider-family-aws, aactl, pulumi-language-yaml, atlantis, crossplane-provider-aws-memorydb, gomplate, pulumi-language-dotnet, terraform-provider-azurerm, goreleaser, crossplane,...

GO-2025-4134 vulnerabilities

Vulnerabilities for packages: kafkaexporter, rancher-machine, src-fingerprint, k8ssandra-client, terraform, terraform-provider-azapi, spegel, cert-exporter, vault-secrets-webhook, cluster-api-aws-controller, atlantis, podman, helm-operator, kapp-controller, dynamic-localpv-provisioner, gobuster,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: docker, kyverno-notation-aws, vexctl, ko, gh, buildkitd, trivy-operator, teleport, neuvector-sigstore-interface, skaffold, aactl, zot, goreleaser, falcoctl, cosign, tflint, crossplane, gitsign, kubescape, zarf, tekton-chains, flux-source-controller, spire-server,...

GO-2025-4135 vulnerabilities

Vulnerabilities for packages: kafkaexporter, rancher-machine, src-fingerprint, terraform, terraform-provider-azapi, spegel, ollama, cert-exporter, vault-secrets-webhook, cluster-api-aws-controller, atlantis, podman, kapp-controller, dynamic-localpv-provisioner, gobuster, rancher-fleet, gptscript,...

GO-2026-4337 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubewatch, kyverno-notation-aws, rancher-machine, verticadb-operator, src-fingerprint, k8ssandra-client, tempo, opentelemetry-operator, terraform, terraform-provider-azapi, aws-s3-controller, spegel, kyverno-policy-reporter-kyverno-plugin,...

GO-2025-3754 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, vexctl, src-fingerprint, buildkitd, crossplane-provider-family-aws, aactl, crossplane-provider-azure, crossplane-provider-aws, atlantis, crossplane-provider-aws-memorydb, gomplate, pulumi-language-dotnet, terraform-provider-azurerm, goreleaser,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, cni-plugins, aws-otel-collector, portieris, tempo, nodetaint, terraform, conftest, terraform-provider-azapi, ini-file, buildkitd, glow, kube-bench, kubernetes-csi-external-health-monitor, render-template, aactl, nri-f5, fulcio,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubewatch, verticadb-operator, k8ssandra-client, terraform, terraform-provider-azapi, spegel, cert-exporter, doppler-kubernetes-operator, cluster-api-aws-controller, atlantis, kubernetes-release, podman, helm-operator, kapp-controller,...