GO-2026-5005 vulnerabilities

Vulnerabilities for packages: flux, kyverno, k3s, kubernetes-dashboard, rancher-agent, rancher, kaf, cilium-cli, docker-cli-buildx, kine, kots, gitlab-kas, podman, snyk-cli, zot, cert-manager, spire-server, kubernetes, buildah, telegraf, loki, containerd, minio, prometheus-operator,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flyte, nfpm, opencost, splunk-otel-collector, k8ssandra-client, kubernetes-dashboard, cloud-provider-azure, kube-fluentd-operator, aws-flb-cloudwatch, kubernetes-csi-external-attacher, cert-manager, tekton-chains, buildah, telegraf, crossplane, harbor,...

GO-2026-4979 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flyte, metacontroller, migrate, nfpm, controller-gen, opencost, hey, hivemind, splunk-otel-collector, local-static-provisioner, lvm-driver, k8ssandra-client, kubernetes-dashboard, terraform-provider-acme, cloud-provider-azure, tetragon,...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: slsa-verifier, knative-eventing, flyte, migrate, opencost, splunk-otel-collector, lvm-driver, kubernetes-dashboard, terraform-provider-acme, cloud-provider-azure, tetragon, kube-fluentd-operator, jitsucom-bulker, aws-flb-cloudwatch, kubernetes-csi-external-attacher,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: slsa-verifier, knative-eventing, flyte, metacontroller, migrate, nfpm, controller-gen, opencost, hey, splunk-otel-collector, local-static-provisioner, lvm-driver, k8ssandra-client, kubernetes-dashboard, terraform-provider-acme, cloud-provider-azure, tetragon,...

GO-2026-5018 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, nfpm, fulcio, splunk-otel-collector, syft, kubernetes-dashboard, docker-machine-driver-harvester, terraform-provider-azurerm, crossplane-provider-azure-storage, crossplane-provider-azure-sql, flux-image-automation-controller,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, aws-flb-firehose, kubevela, flux, kyverno, k3s, kubernetes-dashboard, kube-fluentd-operator, coredns, libnvidia-container, kaf, cilium-cli, grafana, kubo, kots, aws-flb-cloudwatch, karma, zot, cert-manager, hubble, kubernetes, telegraf,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flyte, metacontroller, migrate, nfpm, controller-gen, opencost, hey, hivemind, splunk-otel-collector, local-static-provisioner, lvm-driver, k8ssandra-client, kubernetes-dashboard, terraform-provider-acme, cloud-provider-azure, tetragon,...

GO-2026-4871 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, extism, opencost, hey, hivemind, oras, dfc, sriov-network-device-plugin, velero-plugin-for-csi, kubernetes-dashboard, envconsul, kuberay-operator, kube-fluentd-operator, gitsign, terraform-mcp-server, terraform-provider-azuread,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: flux-source-controller, gitea, flux, trivy-operator, kyverno, k3s, kubernetes-dashboard, rancher-agent, docker-machine-driver-harvester, kubescape, rancher, kaf, cilium-cli, kine, kots, flux-image-automation-controller, gitlab-kas, snyk-cli, zot, cert-manager,...

GO-2026-5023 vulnerabilities

Vulnerabilities for packages: flux-source-controller, gitea, flux, trivy-operator, kyverno, k3s, kubernetes-dashboard, rancher-agent, kubescape, rancher, kaf, cilium-cli, kine, kots, flux-image-automation-controller, gitlab-kas, snyk-cli, zot, cert-manager, spire-server, kubernetes,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: slsa-verifier, knative-eventing, flyte, migrate, opencost, splunk-otel-collector, lvm-driver, k8ssandra-client, kubernetes-dashboard, terraform-provider-acme, cloud-provider-azure, tetragon, kube-fluentd-operator, jitsucom-bulker, aws-flb-cloudwatch,...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, opencost, hey, oras, dfc, sriov-network-device-plugin, kubernetes-dashboard, envconsul, kuberay-operator, kube-fluentd-operator, gitsign, terraform-mcp-server, terraform-provider-azuread, chezmoi, nova, direnv, neuvector-dbgen, sbomqs,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: flux-source-controller, opentofu, gitea, gptscript, guac, nfpm, flux, scorecard, terragrunt, trivy-operator, splunk-otel-collector, argo-events, kyverno, k3s, syft, kubernetes-dashboard, kubescape, pulumi-kubernetes-operator, kaf, cilium-cli, kine, nuclei, kots,...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flyte, nfpm, opencost, splunk-otel-collector, k8ssandra-client, kubernetes-dashboard, cloud-provider-azure, kube-fluentd-operator, aws-flb-cloudwatch, kubernetes-csi-external-attacher, cert-manager, tekton-chains, buildah, telegraf, crossplane, harbor,...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: slsa-verifier, knative-eventing, flyte, migrate, opencost, splunk-otel-collector, lvm-driver, k8ssandra-client, kubernetes-dashboard, terraform-provider-acme, cloud-provider-azure, tetragon, kube-fluentd-operator, jitsucom-bulker, aws-flb-cloudwatch, nova,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flyte, metacontroller, migrate, nfpm, controller-gen, opencost, hey, hivemind, splunk-otel-collector, local-static-provisioner, lvm-driver, k8ssandra-client, kubernetes-dashboard, terraform-provider-acme, cloud-provider-azure, tetragon,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, opencost, hey, oras, dfc, sriov-network-device-plugin, kubernetes-dashboard, envconsul, kuberay-operator, kube-fluentd-operator, gitsign, terraform-mcp-server, terraform-provider-azuread, chezmoi, nova, direnv, neuvector-dbgen, sbomqs,...

GO-2026-5016 vulnerabilities

Vulnerabilities for packages: flux-source-controller, nfpm, splunk-otel-collector, syft, kubernetes-dashboard, docker-machine-driver-harvester, flux-image-automation-controller, chezmoi, podman, cert-manager, spire-server, gitlab-runner, argocd-image-updater, docker, telegraf, melange, cilium, k9...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: flux-source-controller, nfpm, splunk-otel-collector, syft, kubernetes-dashboard, docker-machine-driver-harvester, flux-image-automation-controller, chezmoi, podman, cert-manager, spire-server, gitlab-runner, argocd-image-updater, docker, telegraf, melange, cilium, k9...

GO-2026-5033 vulnerabilities

Vulnerabilities for packages: opentofu, flux, kyverno, k3s, kubernetes-dashboard, rancher-agent, rancher, kaf, cilium-cli, docker-cli-buildx, kine, kots, gitlab-kas, podman, snyk-cli, zot, cert-manager, spire-server, kubernetes, buildah, telegraf, loki, containerd, minio, prometheus-operator,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: helm-operator, opentofu, newrelic-fluent-bit-output, steampipe, traefik, xeol, k8sgateway, goreleaser, ferretdb, k3s, vale, kubernetes-dashboard, thanos-operator, croc, rancher-helm, redis-operator, kubeflow-katib, cilium-cli, kubo, kine,...

GO-2026-5506 vulnerabilities

Vulnerabilities for packages: slsa-verifier, dataplaneapi, k8ssandra-client, rancher-webhook, tetragon, kuberay-operator, docker-machine-driver-harvester, crossplane-provider-azure-storage, crossplane-provider-azure-sql, crossplane-provider-aws-sqs, flux-image-automation-controller, podman,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: slsa-verifier, metrics-server, aws-flb-firehose, configmap-reload, go-licenses, gosu, wait-for-port, oras, flannel-cni-plugin, hey, scorecard, nri-discovery-kubernetes, kubernetes-dashboard-metrics-scraper, kubeflow-katib, influx, mage, sops, aws-flb-cloudwatch,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, tkn, tflint, policy-controller, trivy-operator, goreleaser, teleport, neuvector-sigstore-interface, kubescape, ratify, gitsign, ko, zot, spire-server, tekton-chains, vexctl, witness, zarf, aactl, cosign, kyverno-notation-aws, gh...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, opencost, hey, hivemind, sriov-network-device-plugin, kubernetes-dashboard, kuberay-operator, terraform-mcp-server, kubernetes-dns-node-cache, sbomqs, spire-server, terraform-provider-pagerduty, hubble-ui, timescaledb-tune,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, skopeo, portieris, tkn, kubescape, ratify, gitsign, kots, podman, tekton-chains, vexctl, buildah, witness, undock, zarf, aactl, sigstore-scaffolding, cosign, kyverno-notation-aws, falco-no-driver, falcoctl...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tkn, tflint, policy-controller, goreleaser, teleport, neuvector-sigstore-interface, kubescape, ratify, gitsign, docker-cli-buildx, ko, zot, spire-server, tekton-chains, vexctl, witness, zarf, aactl, sigstore-scaffolding, cosign,...

GO-2026-4433 vulnerabilities

Vulnerabilities for packages: gotestsum, kuberlr, extism, oras, hey, hivemind, velero-plugin-for-csi, dfc, sriov-network-device-plugin, kubernetes-dashboard, envconsul, kuberay-operator, kube-fluentd-operator, gitsign, terraform-mcp-server, grafana-image-renderer, terraform-provider-azuread,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, skopeo, portieris, tkn, xeol, guac, tflint, policy-controller, rekor, trivy-operator, fulcio, goreleaser, docker-compose, neuvector-sigstore-interface, kubescape, ratify, gitsign, ko, kots, podman, timestamp-authority, zot,...

GO-2026-4762 vulnerabilities

Vulnerabilities for packages: slsa-verifier, opencost, velero-plugin-for-csi, sriov-network-device-plugin, gitsign, grafana-image-renderer, terraform-provider-azuread, kubernetes-dns-node-cache, trufflehog, spire-server, tekton-chains, buildah, crossplane-provider-aws-route53,...

GO-2026-4945 vulnerabilities

Vulnerabilities for packages: flux-source-controller, knative-eventing, slsa-verifier, vcluster, flyte, migrate, opencost, fulcio, splunk-otel-collector, rook, syft, envconsul, terraform-provider-acme, gitsign, jitsucom-bulker, terraform-provider-google, podman, cert-manager, gogatekeeper,...

GO-2026-4918 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, opencost, hey, velero-plugin-for-csi, kubernetes-dashboard, envconsul, kuberay-operator, kube-fluentd-operator, nova, trufflehog, tekton-chains, crossplane-provider-aws-route53, aws-s3-controller, harbor, cilium, grafana-rollout-operator,...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, metacontroller, kubernetes-csi-external-resizer, ghaudit, opencost, hey, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, local-static-provisioner, lvm-driver, ytt, kubernetes-dashboard,...

GO-2023-2383 vulnerabilities

Vulnerabilities for packages: slsa-verifier, metrics-server, aws-flb-firehose, configmap-reload, go-licenses, gosu, wait-for-port, oras, flannel-cni-plugin, hey, scorecard, nri-discovery-kubernetes, kubernetes-dashboard-metrics-scraper, kubeflow-katib, influx, mage, sops, aws-flb-cloudwatch,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, metacontroller, kubernetes-csi-external-resizer, ghaudit, opencost, hey, nri-haproxy, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, local-static-provisioner, lvm-driver, ytt,...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: flux-source-controller, vcluster, extism, nfpm, syft, terraform-provider-azurerm, gitsign, crossplane-provider-azure-storage, crossplane-provider-azure-sql, terraform-provider-azuread, crossplane-provider-aws-sqs, flux-image-automation-controller,...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, opencost, hey, hivemind, sriov-network-device-plugin, kubernetes-dashboard, kuberay-operator, terraform-mcp-server, kubernetes-dns-node-cache, sbomqs, spire-server, terraform-provider-pagerduty, hubble-ui, timescaledb-tune,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, tkn, tflint, policy-controller, trivy-operator, goreleaser, teleport, neuvector-sigstore-interface, kubescape, ratify, gitsign, ko, zot, spire-server, tekton-chains, vexctl, witness, zarf, aactl, cosign, kyverno-notation-aws, gh...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, gitea, tkn, sftpgo, step-ca, step, rekor, terragrunt, fulcio, splunk-otel-collector, k3s, ksops, crossplane-provider-sql, step-issuer, temporal, dex, temporal-server, croc, kubeflow-pipelines, ratify, gitsign, step-kms-plugin, argo-workflows,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kbld, vcluster, traefik, xeol, kargo, guac, minio-operator, flux, policy-controller, trivy-operator, vitess, rancher-system-agent, kyverno, k3s, teleport, kubeflow-katib, gitsign, kubescape-operator, argo-workflows, openbao, rke2-cloud-provider,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: flux-source-controller, aactl, ratify, tkn, witness, gitsign, kyverno-notation-aws, policy-controller, goreleaser, teleport, zot, falcoctl...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, tkn, tflint, policy-controller, trivy-operator, goreleaser, teleport, kyverno, neuvector-sigstore-interface, kubescape, ratify, gitsign, docker-cli-buildx, ko, zot, spire-server, tekton-chains, vexctl, docker, witness, crossplan...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: slsa-verifier, tekton-chains, vexctl, zarf, aactl, kubescape, sigstore-scaffolding, skopeo, gitsign, cosign, witness, kots, falco-no-driver, falcoctl...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, tkn, tflint, policy-controller, rekor, trivy-operator, goreleaser, teleport, neuvector-sigstore-interface, kubescape, ratify, gitsign, ko, zot, spire-server, tekton-chains, vexctl, docker, witness, zarf, aactl,...

GO-2025-4134 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kube-rbac-proxy, flyte, migrate, nfpm, kubernetes-csi-external-resizer, opencost, oras, fulcio, nfs-subdir-external-provisioner, azure-workload-identity-webhook, helm-mapkubeapis, local-static-provisioner, k8ssandra-client, rook,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, extism, opencost, hey, hivemind, oras, velero-plugin-for-csi, sriov-network-device-plugin, kubernetes-dashboard, kube-fluentd-operator, kubernetes-dns-node-cache, direnv, neuvector-dbgen, sbomqs, spire-server, tekton-chains, buildah,...

GO-2025-4155 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gotestsum, kuberlr, opencost, hey, oras, dfc, sriov-network-device-plugin, kubernetes-dashboard, kuberay-operator, kube-fluentd-operator, gitsign, terraform-mcp-server, grafana-image-renderer, terraform-provider-azuread, nova, kubernetes-dns-node-cache...

GO-2025-4135 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flyte, migrate, nfpm, kubernetes-csi-external-resizer, opencost, oras, fulcio, ollama, azure-workload-identity-webhook, helm-mapkubeapis, local-static-provisioner, rook, syft, kubernetes-dashboard, buf, kube-fluentd-operator,...

GO-2025-3754 vulnerabilities

Vulnerabilities for packages: vcluster, extism, terraform-provider-azurerm, gitsign, crossplane-provider-azure-storage, crossplane-provider-azure-sql, crossplane-provider-aws-sqs, crossplane-provider-aws-iam, crossplane-provider-aws-kms, trufflehog, tekton-chains, argocd-image-updater,...