GO-2026-5751 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2025-4023 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: apko, bom, melange, ko, ctop, up, helm...

GO-2026-4559 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, splunk-otel-collector, ollama, terraform-provider-acme, crossplane-provider-aws-sqs, chezmoi, crossplane-provider-aws-iam, nova, crossplane-provider-aws-kms, gitlab-runner, melange, crossplane-provider-aws-route53, crossplane-provider-aws-firehose,...

GO-2023-1930 vulnerabilities

Vulnerabilities for packages: argo-events...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: trillian, step-ca, argo-workflows, step, kots, caddy...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2026-4970 vulnerabilities

Vulnerabilities for packages: opentofu, dataplaneapi, traefik, flux, rekor, kyverno, k3s, kubernetes-dashboard, kube-fluentd-operator, libnvidia-container, kubeflow-katib, cilium-cli, docker-cli-buildx, kine, kots, caddy, grype, snyk-cli, timestamp-authority, cert-manager, apko, hubble, kubernete...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: vcluster, flyte, migrate, jaeger-operator, kubernetes-csi-external-resizer, opencost, fulcio, azure-workload-identity-webhook, syft, cloud-provider-azure, grafana-image-renderer, node-feature-discovery, terraform-provider-google, prometheus-alertmanager,...

GO-2026-4526 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws, crossplane-provider-aws-ec2, crossplane-provider-aws-memorydb, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudformation, crossplane-provider-azure-managedidentity,...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: skopeo, portieris, trivy-operator, docker-credential-gcr, rancher-agent, opentelemetry-operator, rancher, grafana, ko, nuclei, kots, podman, zot, spire-server, buildah, envoy-gateway, cri-tools, aws-otel-collector, kpt, datadog-agent, amazon-cloudwatch-agent, undock,...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: skopeo, portieris, trivy-operator, docker-credential-gcr, rancher-agent, opentelemetry-operator, rancher, grafana, ko, nuclei, kots, podman, zot, spire-server, buildah, envoy-gateway, cri-tools, aws-otel-collector, kpt, datadog-agent, amazon-cloudwatch-agent, undock,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: skopeo, portieris, trivy-operator, docker-credential-gcr, rancher-agent, opentelemetry-operator, rancher, grafana, ko, nuclei, kots, podman, zot, spire-server, buildah, envoy-gateway, osv-scanner, cri-tools, aws-otel-collector, kpt, datadog-agent,...

GO-2026-5381 vulnerabilities

Vulnerabilities for packages: metrics-server, fluent-bit-plugin-loki, minio-operator, splunk-otel-collector, jaeger, cloud-sql-proxy, opentelemetry-operator, grafana, keda, opentelemetry-collector-contrib, node-problem-detector, karma, prometheus-pushgateway, telegraf, loki, minio,...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: slsa-verifier, thanos, migrate, splunk-otel-collector, teleport, ferretdb, ksops, tetragon, weaviate, kubescape, ratify, kubescape-operator, grafana, opentelemetry-collector-contrib, trufflehog, dapr, tekton-chains, hubble, wal-g, consul-k8s,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: flux-source-controller, dataplaneapi, splunk-otel-collector, syft, terraform-provider-acme, wgcf, jitsucom-bulker, terraform-mcp-server, spire-server, tekton-chains, dive, aws-otel-collector, crossplane, k9s, zarf, seaweedfs, openfga, kyverno-notation-aws, glow,...

GO-2026-5710 vulnerabilities

Vulnerabilities for packages: metrics-server, fluent-bit-plugin-loki, minio-operator, jaeger, cloud-sql-proxy, grafana, keda, node-problem-detector, karma, prometheus-pushgateway, loki, minio, aws-otel-collector, prometheus-operator, certificate-transparency, mc, k8sgpt, datadog-agent, tempo,...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: kargo, k8sgateway, splunk-otel-collector, jaeger, k3s, vale, kubeflow-pipelines, coredns, argo-workflows, kine, opentelemetry-collector-contrib, kserve, verticadb-operator, aws-otel-collector, k8sgpt, datadog-agent, nats, amazon-cloudwatch-agent, argo-rollouts,...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: bento, opentelemetry-collector-contrib, grafana-alloy, jitsucom-bulker, sqlexporter, cluster-api-aws-controller, splunk-otel-collector, argo-events, amazon-cloudwatch-agent...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: metrics-server, fluent-bit-plugin-loki, minio-operator, splunk-otel-collector, jaeger, cloud-sql-proxy, grafana, keda, node-problem-detector, karma, prometheus-pushgateway, loki, minio, aws-otel-collector, prometheus-operator, certificate-transparency, mc, k8sgpt,...

GO-2026-5764 vulnerabilities

Vulnerabilities for packages: vcluster, opencost, syft, terraform-provider-acme, jitsucom-bulker, crossplane-provider-aws-sqs, crossplane-provider-aws-iam, crossplane-provider-aws-kms, trufflehog, spire-server, gitlab-runner, docker, telegraf, vault-env, crossplane-provider-aws-route53,...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: argo-rollouts, kubeflow-pipelines, opentelemetry-collector, kargo, grafana-alloy, argo-workflows, nats, splunk-otel-collector, k8sgpt, opentelemetry-collector-contrib, amazon-cloudwatch-agent...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: skopeo, portieris, traefik, trivy-operator, docker-credential-gcr, goreleaser, splunk-otel-collector, newrelic-infrastructure-agent, buf, rancher-agent, nerdctl, cluster-api, opentelemetry-operator, rancher, grafana, ko, nuclei, kots, podman, gatekeeper,...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: rancher-agent, pulumi, kubevela, promxy, k3s, amazon-cloudwatch-agent-operator...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: skopeo, portieris, traefik, trivy-operator, docker-credential-gcr, goreleaser, splunk-otel-collector, newrelic-infrastructure-agent, buf, rancher-agent, nerdctl, cluster-api, opentelemetry-operator, rancher, grafana, ko, nuclei, kots, podman, gatekeeper,...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy, pulumi, amazon-cloudwatch-agent-operator...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: flux-source-controller, knative-eventing, dataplaneapi, kube-rbac-proxy, migrate, kubernetes-csi-external-resizer, opencost, sriov-network-device-plugin, rook, lvm-driver, syft, kubernetes-dashboard, tetragon, kube-fluentd-operator, terraform-provider-azuread,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: opa-envoy, grafana-mimir, portieris, flyte, step-ca, step, sriov-network-device-plugin, nfs-subdir-external-provisioner, step-issuer, kubeflow-pipelines, pulumi-kubernetes-operator, spark-operator, cert-exporter, terraform-provider-google, caddy, pulumi-language-java...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: temporal-server, trillian, step-ca, argo-workflows, step, kine, kube-bench, kots, amass, caddy, spicedb, ferretdb, k3s, src...

GO-2026-5004 vulnerabilities

Vulnerabilities for packages: steampipe, kuma, sftpgo, flyte, step-ca, migrate, step, splunk-otel-collector, ferretdb, k3s, step-issuer, temporal, pgtimetable, temporal-server, kubeflow-pipelines, rke2-cloud-provider, argo-workflows, jitsucom-bulker, openbao, grafana, kine, keda, kots, kube-bench...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, kube-rbac-proxy, extism, flyte, metacontroller, controller-gen, ghaudit, hey, hivemind, fulcio, dfc, oras, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, helm-mapkubeapis,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, kube-rbac-proxy, extism, flyte, metacontroller, controller-gen, ghaudit, hey, hivemind, fulcio, dfc, oras, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, helm-mapkubeapis,...

GO-2025-4015 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, kube-rbac-proxy, extism, flyte, metacontroller, controller-gen, ghaudit, hey, hivemind, fulcio, dfc, oras, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, helm-mapkubeapis, envconsul,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, kube-rbac-proxy, extism, flyte, metacontroller, controller-gen, ghaudit, hey, hivemind, fulcio, dfc, oras, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, helm-mapkubeapis,...

GO-2025-4006 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, kube-rbac-proxy, extism, flyte, metacontroller, controller-gen, ghaudit, hey, hivemind, fulcio, dfc, oras, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, helm-mapkubeapis,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, extism, oras, hey, hivemind, velero-plugin-for-csi, dfc, sriov-network-device-plugin, envconsul, terraform-provider-azuread, nova, direnv, neuvector-dbgen, prometheus-pushgateway, aws-s3-controller, harbor, timescaledb-tune,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, kube-rbac-proxy, extism, flyte, metacontroller, controller-gen, ghaudit, hey, hivemind, fulcio, dfc, oras, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, helm-mapkubeapis,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-source-controller, bank-vaults, tkn, fluent-bit-plugin-loki, grafana-mimir, flyte, step-ca, thanos, guac, step, flux, policy-controller, rekor, terragrunt, boring-registry, goreleaser, fulcio, argo-events, rook, ksops, restic, kubescape, argo-workflows, velero,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, kube-rbac-proxy, extism, flyte, metacontroller, controller-gen, ghaudit, hey, hivemind, fulcio, dfc, oras, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, helm-mapkubeapis,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, kube-rbac-proxy, extism, flyte, metacontroller, controller-gen, ghaudit, hey, hivemind, fulcio, dfc, oras, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, helm-mapkubeapis,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, kube-rbac-proxy, extism, flyte, metacontroller, controller-gen, ghaudit, hey, hivemind, fulcio, dfc, oras, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, helm-mapkubeapis,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: clickhouse-operator, flux-source-controller, dataplaneapi, metacontroller, aws-load-balancer-controller, github-mcp-server, flux, newrelic-k8s-metadata-injection, oras, goreleaser, envoy-ratelimit, nfs-subdir-external-provisioner, malcontent, nodetaint, temporal,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: kuberlr, opencost, oras, sriov-network-device-plugin, kubernetes-dashboard, kuberay-operator, kube-fluentd-operator, terraform-provider-azuread, nova, kubernetes-dns-node-cache, neuvector-dbgen, sbomqs, buildah, prometheus-pushgateway, crossplane-provider-aws-route53...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: slsa-verifier, dataplaneapi, kube-rbac-proxy, kubernetes-csi-external-resizer, controller-gen, oras, hey, nri-haproxy, nfs-subdir-external-provisioner, ytt, kubernetes-dashboard, kuberay-operator, supercronic, kubernetes-dashboard-metrics-scraper, mage,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, opencost, hey, hivemind, oras, velero-plugin-for-csi, sriov-network-device-plugin, kubernetes-dashboard, envconsul, kuberay-operator, kube-fluentd-operator, terraform-mcp-server, terraform-provider-azuread, kubernetes-dns-node-cache...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: age, sops, flux-kustomize-controller, chezmoi, litestream, ksops...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, opencost, hey, hivemind, oras, velero-plugin-for-csi, sriov-network-device-plugin, kubernetes-dashboard, envconsul, kuberay-operator, kube-fluentd-operator, terraform-mcp-server, terraform-provider-azuread, kubernetes-dns-node-cache...

GO-2024-2600 vulnerabilities

Vulnerabilities for packages: slsa-verifier, dataplaneapi, kube-rbac-proxy, kubernetes-csi-external-resizer, controller-gen, oras, hey, nri-haproxy, nfs-subdir-external-provisioner, ytt, kubernetes-dashboard, kuberay-operator, supercronic, kubernetes-dashboard-metrics-scraper, mage,...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, opencost, hey, envconsul, kuberay-operator, kube-fluentd-operator, gitsign, terraform-provider-azuread, nova, direnv, neuvector-dbgen, sbomqs, spire-server, tekton-chains, trufflehog, crossplane-provider-aws-route53,...