GO-2026-4977 vulnerabilities

Vulnerabilities for packages: k3s, azure-service-operator, timestamp-authority, cortex, containerd, minio, pgtimetable, zot, tekton-chains, dask-gateway, libnvidia-container, conftest, act, argo-cd, aactl, falco-no-driver, crossplane, karpenter, kaf, minio-object-browser, grafana-pyroscope, flyte...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, cortex, go-licenses, sbom-scorecard, croc, timescaledb-tune, crossplane-provider-aws-dynamodb, headlamp, vault-secrets-webhook, nri-redis, protoc-gen-go, litestream, petname, timoni, cloud-provider-aws, nri-memcached, metacontroller,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: flux-source-controller, ratify, zarf, podman, gitsign, sigstore-scaffolding, kubescape, slsa-verifier, vexctl, undock, portieris, tekton-chains, kyverno-notation-aws, buildah, falcoctl, tkn, cosign, aactl, falco-no-driver, skopeo, witness, kots...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: policy-controller, buildkitd, trivy-operator, trivy, spire-server, flux-source-controller, ratify, zarf, ko, gitsign, tflint, kubescape, slsa-verifier, vexctl, zot, tekton-chains, gh, kyverno-notation-aws, neuvector-sigstore-interface, falcoctl, tkn, goreleaser,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: k8sgateway, k3s, cert-manager-cmctl, opentofu, osv-scanner, rancher-helm, helm, kubernetes-dashboard-api, spire-server, kubo, hubble, steampipe, eksctl, thanos-operator, gitness, kubeflow-katib, nerdctl, mattermost, runc, src, opensearch-k8s-operator,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, flux-source-controller, ratify, zarf, ko, gitsign, sigstore-scaffolding, tflint, kubescape, vexctl, zot, docker-cli-buildx, tekton-chains, gh, kyverno-notation-aws, neuvector-sigstore-interface, falcoctl, tkn, goreleaser, cosign, aact...

GO-2026-5506 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, amazon-cloudwatch-agent-operator, db-operator, go-discover, cilium, emissary, neuvector-scanner, dex, crossplane-provider-aws-kms, crossplane-provider-aws-dynamodb, gitlab-runner, step, step-issuer, rancher-machine, litestream,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: oras, wait-for-port, go-md2man, cni-plugins, docker-cli, docker-credential-ecr-login, kubernetes-dashboard-metrics-scraper, sops, gops, amass, mage, influx, protoc-gen-go-grpc, cortex, helm-push, local-path-provisioner, nats, grpcurl, go-licenses, kubeflow-katib,...

GO-2023-2383 vulnerabilities

Vulnerabilities for packages: oras, wait-for-port, go-md2man, cni-plugins, docker-cli, docker-credential-ecr-login, kubernetes-dashboard-metrics-scraper, sops, gops, amass, mage, influx, protoc-gen-go-grpc, cortex, helm-push, local-path-provisioner, nats, grpcurl, go-licenses, kubeflow-katib,...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: git-lfs, k3s, k8sgateway, sftpgo-plugin-pubsub, azure-service-operator, amazon-cloudwatch-agent-operator, timescaledb-parallel-copy, nats-top, db-operator, s5cmd, kubernetes-dashboard-api, cortex, fluxcd-kustomize-mutating-webhook, go-licenses, kubeflow, swagger,...

GO-2026-4433 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, amazon-cloudwatch-agent-operator, crane, regclient, cortex, gofumpt, go-licenses, sbom-scorecard, croc, q, timescaledb-tune, crossplane-provider-aws-dynamodb, vault-secrets-webhook, nova, nri-redis, protoc-gen-go, litestream,...

GO-2026-4762 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-cloudwatch-agent-operator, cortex, emissary, terraform-provider-aws, crossplane-provider-aws-dynamodb, headlamp, tekton-chains, vault-secrets-webhook, litestream, node-feature-discovery, cloud-provider-aws, docker-compose, cilium-envoy,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: policy-controller, buildkitd, trivy-operator, timestamp-authority, trivy, rekor, spire-server, flux-source-controller, ratify, zarf, podman, ko, fulcio, gitsign, sigstore-scaffolding, tflint, kubescape, slsa-verifier, vexctl, zot, undock, xeol, portieris,...

GO-2026-4918 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-cloudwatch-agent-operator, crane, regclient, cortex, emissary, croc, q, crossplane-provider-aws-dynamodb, headlamp, tekton-chains, vault-secrets-webhook, nova, litestream, libnvidia-container, rook, node-feature-discovery, timoni, cloud-provider-aws...

GO-2026-4945 vulnerabilities

Vulnerabilities for packages: tw, k3s, dagdotdev, timestamp-authority, apko, grafana-mimir, containerd, sqlexporter, cilium, gitsign, sigstore-scaffolding, vcluster, neuvector-scanner, dagger, ksops, minio, dex, migrate, zot, headlamp, gitlab-runner, step, spire-controller-manager, tekton-chains,...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, cortex, go-licenses, sbom-scorecard, croc, timescaledb-tune, crossplane-provider-aws-dynamodb, headlamp, vault-secrets-webhook, nri-redis, protoc-gen-go, litestream, petname, timoni, cloud-provider-aws, nri-memcached, metacontroller,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: policy-controller, buildkitd, trivy-operator, trivy, spire-server, flux-source-controller, ratify, zarf, ko, gitsign, tflint, kubescape, slsa-verifier, vexctl, zot, tekton-chains, gh, kyverno-notation-aws, neuvector-sigstore-interface, falcoctl, tkn, goreleaser,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: falcoctl, policy-controller, goreleaser, aactl, ratify, tkn, kyverno-notation-aws, gitsign, witness, flux-source-controller, zot, teleport...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: apko, gitsign, terraform-provider-pagerduty, vcluster, dagger, ksops, q, crossplane-provider-aws-kms, zot, crossplane-provider-aws-dynamodb, gitlab-runner, kyverno-notation-aws, terraform-provider-azurerm, cluster-api, cerbos, pulumi-language-java, argo-cd, aactl,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: git-lfs, k3s, k8sgateway, sftpgo-plugin-pubsub, azure-service-operator, amazon-cloudwatch-agent-operator, timescaledb-parallel-copy, nats-top, db-operator, s5cmd, kubernetes-dashboard-api, cortex, fluxcd-kustomize-mutating-webhook, go-licenses, kubeflow, swagger,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: falcoctl, kubescape, zarf, cosign, aactl, tekton-chains, falco-no-driver, skopeo, gitsign, sigstore-scaffolding, witness, kots, slsa-verifier, vexctl...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: k3s, chezmoi, timestamp-authority, db-operator, sops, rekor, amass, certificate-transparency, apko, age, juicefs, kubeflow-pipelines, spire-server, openfga, ratify, argo-workflows, seaweedfs, mattermost, sqlexporter, tailscale, grafana-alloy, fulcio, dbmate, gitsign,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: policy-controller, k3s, dagdotdev, osv-scanner, incert, trivy-operator, rke2-cloud-provider, flux, kubescape-operator, trivy, spire-server, dive, eksctl, rancher-fleet, argo-workflows, kubeflow-katib, nerdctl, k9s, kyverno, ko, manifest-tool, vendir, gitsign, vcluste...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: policy-controller, buildkitd, trivy-operator, docker, trivy, spire-server, flux-source-controller, ratify, zarf, kyverno, ko, gitsign, sigstore-scaffolding, tflint, kubescape, slsa-verifier, vexctl, zot, docker-cli-buildx, tekton-chains, gh, kyverno-notation-aws,...

GO-2025-4134 vulnerabilities

Vulnerabilities for packages: git-lfs, k3s, dagdotdev, k8sgateway, sftpgo-plugin-pubsub, amazon-cloudwatch-agent-operator, chezmoi, nats-top, aws-node-termination-handler, db-operator, timestamp-authority, go-discover, pdfcpu, kube-state-metrics, certificate-transparency, hcloud, buf, containerd,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: policy-controller, buildkitd, trivy-operator, docker, trivy, rekor, spire-server, flux-source-controller, ratify, zarf, ko, gitsign, sigstore-scaffolding, tflint, kubescape, slsa-verifier, vexctl, zot, tekton-chains, gh, kyverno-notation-aws,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, amazon-cloudwatch-agent-operator, crane, regclient, cortex, go-licenses, sbom-scorecard, emissary, croc, q, tekton-chains, kaniko, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, timoni, nri-memcached, nri-rabbitmq,...

GO-2025-3754 vulnerabilities

Vulnerabilities for packages: go-licenses, gitsign, terraform-provider-pagerduty, vcluster, ksops, q, crossplane-provider-aws-kms, crossplane-provider-aws-dynamodb, tekton-chains, kyverno-notation-aws, terraform-provider-azurerm, pulumi-language-java, aactl, crossplane, pulumi-language-dotnet,...

GO-2026-4337 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-cloudwatch-agent-operator, crane, regclient, cortex, go-licenses, croc, q, crossplane-provider-aws-dynamodb, vault-secrets-webhook, nova, nri-redis, litestream, libnvidia-container, node-feature-discovery, timoni, cloud-provider-aws, docker-compose,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: wait-for-port, cortex, gofumpt, sbom-scorecard, croc, kaniko, nova, nri-redis, petname, rook, nri-memcached, nri-rabbitmq, rke2-cloud-provider, k8ssandra-client, cert-manager-csi-driver, openbao-k8s, cluster-api-azure-controller, rancher-telemetry,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k8sgateway, cis-operator, k3s, azure-service-operator, amazon-cloudwatch-agent-operator, wait-for-port, regclient, cni-plugins, kubernetes-dashboard-api, fzf, nri-apache, containerd, swagger, harbor-cli, emissary, timescaledb-tune, dex, migrate, zot, nri-nginx,...

GO-2025-4135 vulnerabilities

Vulnerabilities for packages: ollama, git-lfs, k3s, dagdotdev, k8sgateway, mailpit, amazon-cloudwatch-agent-operator, sftpgo-plugin-pubsub, chezmoi, nats-top, aws-node-termination-handler, db-operator, timescaledb-parallel-copy, timestamp-authority, go-discover, kube-state-metrics,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: policy-controller, buildkitd, trivy-operator, docker, trivy, rekor, spire-server, flux-source-controller, ratify, zarf, ko, gitsign, sigstore-scaffolding, tflint, kubescape, slsa-verifier, vexctl, zot, tekton-chains, gh, kyverno-notation-aws,...

GO-2025-4155 vulnerabilities

Vulnerabilities for packages: regclient, go-licenses, q, headlamp, tekton-chains, hugo, nova, nri-redis, petname, node-feature-discovery, terraform-provider-google, nri-memcached, nri-rabbitmq, rke2-cloud-provider, k8ssandra-client, openbao-k8s, rancher-telemetry, pulumi-kubernetes-operator, opa,...

GO-2025-3503 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-cloudwatch-agent-operator, cortex, go-licenses, emissary, croc, q, crossplane-provider-aws-dynamodb, tekton-chains, kaniko, hugo, litestream, rook, timoni, cloud-provider-aws, docker-compose, terraform-provider-google, metacontroller,...

GO-2025-3595 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-cloudwatch-agent-operator, cortex, go-licenses, emissary, croc, q, crossplane-provider-aws-dynamodb, tekton-chains, vault-secrets-webhook, kaniko, litestream, timoni, docker-compose, terraform-provider-google, metacontroller, clickhouse-operator,...

GO-2025-3829 vulnerabilities

Vulnerabilities for packages: k3s, amazon-cloudwatch-agent-operator, kubeflow-katib, newrelic-infrastructure-agent, helm-mapkubeapis, prometheus, undock, xeol, helm-set-status, portieris, cluster-api-helm-controller, rancher-machine, kpt, rancher-agent, docker-credential-gcr, ctop, k3d, openbao,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: policy-controller, trivy, rekor, apko, spire-server, flux-source-controller, zarf, gitsign, sigstore-scaffolding, kubescape, slsa-verifier, vexctl, zot, melange, tekton-chains, wolfictl, gh, neuvector-sigstore-interface, falcoctl, tkn, cosign, aactl...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-cloudwatch-agent-operator, cortex, emissary, crossplane-provider-aws-dynamodb, tekton-chains, kaniko, litestream, rook, timoni, cloud-provider-aws, docker-compose, terraform-provider-google, metacontroller, k8ssandra-client, openbao-k8s, argo-events...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: k3s, sftpgo-plugin-pubsub, amazon-cloudwatch-agent-operator, chezmoi, timestamp-authority, cortex, grafana-mimir, sqlexporter, kyverno-policy-reporter-ui, gitsign, sigstore-scaffolding, ksops, minio, zot, step, tekton-chains, kaniko, kyverno-notation-aws,...

GO-2024-3005 vulnerabilities

Vulnerabilities for packages: policy-controller, k3s, cert-manager-cmctl, buildkitd, dagdotdev, flux, helm, syft, trivy, apko, helm-push, flux-source-controller, dive, buf, eksctl, rancher-fleet, argo-workflows, kubeflow-katib, nerdctl, up, k9s, zarf, grafana-alloy, k8sgpt, ko, gitsign, vcluster,...

GO-2024-2824 vulnerabilities

Vulnerabilities for packages: git-lfs, wait-for-port, crane, regclient, s5cmd, stern, kube-state-metrics, certificate-transparency, cortex, hcloud, go-licenses, harbor-cli, govulncheck, kyverno-policy-reporter-ui, local-static-provisioner, croc, ksops, neuvector-scanner, q, dex, hello-world-golan...

GO-2024-2888 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, crane, regclient, cortex, go-licenses, sbom-scorecard, croc, q, terraform-provider-aws, tekton-chains, kaniko, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, rook, timoni, docker-compose, terraform-provider-google,...

GO-2024-2887 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, crane, regclient, cortex, go-licenses, sbom-scorecard, croc, q, terraform-provider-aws, tekton-chains, kaniko, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, rook, timoni, docker-compose, terraform-provider-google,...

GO-2024-3106 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, crane, regclient, cortex, go-licenses, sbom-scorecard, croc, q, terraform-provider-aws, crossplane-provider-aws-dynamodb, tekton-chains, kaniko, hugo, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, rook, timoni,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, crane, regclient, cortex, go-licenses, sbom-scorecard, croc, q, terraform-provider-aws, crossplane-provider-aws-dynamodb, tekton-chains, kaniko, hugo, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, rook, timoni,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: policy-controller, k3s, buildkitd, flyte, docker, argo-events, trivy, crossplane-provider-azure-storage, flux-source-controller, crossplane-provider-family-azure, zarf, argo-rollouts, argo-workflows, git-sync, kubeflow-katib, weaviate,...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-cloudwatch-agent-operator, cortex, go-licenses, emissary, croc, q, terraform-provider-aws, crossplane-provider-aws-dynamodb, tekton-chains, kaniko, hugo, litestream, rook, timoni, cloud-provider-aws, docker-compose, terraform-provider-google,...

GO-2025-3447 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-cloudwatch-agent-operator, crane, regclient, cortex, go-licenses, sbom-scorecard, emissary, croc, q, crossplane-provider-aws-dynamodb, tekton-chains, kaniko, hugo, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, rook, timoni,...

GO-2025-3485 vulnerabilities

Vulnerabilities for packages: k3s, dagdotdev, timestamp-authority, apko, grafana-mimir, containerd, gitsign, sigstore-scaffolding, neuvector-scanner, dagger, ksops, minio, dex, zot, step, spire-controller-manager, tekton-chains, step-issuer, kyverno-notation-aws, distribution, rook, aactl, flyte,...