GO-2025-3749 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, trillian, metrics-server, docker-machine-driver-linode, kubebuilder, terraform-provider-sendgrid, boring-registry, maru, amass, kubernetes-csi-driver-nfs, kubernetes-dashboard-metrics-scraper, opensearch-k8s-operator,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, trillian, metrics-server, docker-machine-driver-linode, kubebuilder, terraform-provider-sendgrid, boring-registry, maru, amass, kubernetes-csi-driver-nfs, kubernetes-dashboard-metrics-scraper, opensearch-k8s-operator,...

GO-2025-3956 vulnerabilities

Vulnerabilities for packages: dagdotdev, terraform-provider-time, kuberay-operator, php-fpmexporter, checksec, k8sgpt-operator, rancher-machine, newrelic-fluent-bit-output, kserve-rest-proxy, shfmt, gitsign, octo-sts, kube-vip-cloud-provider, vexctl, vault-benchmark, grafana-operator, lvm-driver,...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, mailpit, kubo, trillian, metrics-server, policy-controller, terraform-provider-sendgrid, nri-mssql, swagger, boring-registry, maru, amass, lvm-driver, kubernetes-dashboard-metrics-scraper, cloud-provider-vsphere, karpenter,...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: kubevela, dagger, melange, flux, nuclei, nfpm, pulumi-language-java, guac, gitlab-runner, kargo, kubescape, scorecard, argo-workflows, trivy, src-fingerprint, act, grafana-alloy, pulumi-language-yaml, grype, steampipe, gitaly, kaniko, tfsec, gitsign, syft,...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: kubevela, dagger, melange, flux, nuclei, flux-source-controller, pulumi-language-java, guac, gitlab-runner, kargo, kubescape, scorecard, argo-workflows, trivy, src-fingerprint, act, grafana-alloy, pulumi-language-yaml, grype, steampipe, gitaly, kaniko, tfsec, gitsign...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: kubevela, dagger, melange, flux, nuclei, nfpm, pulumi-language-java, guac, gitlab-runner, kargo, kubescape, scorecard, argo-workflows, trivy, src-fingerprint, act, grafana-alloy, pulumi-language-yaml, grype, steampipe, gitaly, kaniko, tfsec, gitsign, syft,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: helm, kor, helm-operator, cluster-proportional-autoscaler, ollama, melange, terraform-provider-google, trillian, gh, metrics-server, guac, kargo, policy-controller, terraform-provider-sendgrid, tkn, kwok, chartmuseum, boring-registry, cloudflared,...

GO-2024-2512 vulnerabilities

Vulnerabilities for packages: helm, kubevela, helm-operator, kpt, dagger, flux, slsa-verifier, guac, kubescape, kargo, newrelic-infrastructure-agent, policy-controller, scorecard, argo-workflows, rancher-machine, k9s, trivy, chartmuseum, gitsign, nerdctl, pulumi, vexctl, up, cosign, skaffold, k3d...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: kubevela, dagger, melange, flux, nuclei, flux-source-controller, nfpm, guac, pulumi-language-java, gitlab-runner, kargo, kubescape, scorecard, argo-workflows, trivy, src-fingerprint, act, grafana-alloy, pulumi-language-yaml, grype, steampipe, gitaly, kaniko, tfsec,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, ratify, slsa-verifier, trivy-operator, kyverno, kubescape, policy-controller, aactl, crossplane, trivy, teleport, zot...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: helm, cluster-proportional-autoscaler, kubo, metrics-server, aws-nuke, docker-machine-driver-linode, guac, nri-redis, consul-k8s, policy-controller, docker-credential-acr-env, controller-gen, litestream, go, cert-manager-webhook-pdns, tetragon,...

GO-2026-5158 vulnerabilities

Vulnerabilities for packages: podman, helm-operator, terraform-provider-google, crossplane-provider-keycloak, kubo, spegel, k8sgateway, metrics-server, guac, otel-cli, kargo, consul-k8s, policy-controller, cloudprober, tetragon, cert-manager-webhook-pdns, grafana-alloy,...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, falcoctl, tflint, kyverno-notation-aws, ratify, tkn, gitsign, trivy-operator, kubescape, kyverno, policy-controller, zarf, aactl, crossplane, tekton-chains, trivy...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: podman, kubo, trillian, metrics-server, policy-controller, terraform-provider-sendgrid, boring-registry, crossplane-provider-family-azure, node-problem-detector, amass, lvm-driver, argo-events, kubernetes-csi-driver-nfs, cloud-provider-vsphere,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, terraform-provider-google, crossplane-provider-keycloak, kubo, melange, gh, aws-nuke, metrics-server, grafana-alloy, nsc, vexctl, kine, fuse-overlayfs-snapshotter, loki, seaweedfs, cilium-cli, pgtimetable, dataplaneapi,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno-notation-aws, podman, ratify, gitsign, undock, slsa-verifier, witness, flux-source-controller, kubescape, kyverno, zarf, aactl, skopeo, tekton-chains, buildah, falco-no-driver, kots...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: tkn, ratify, kyverno-notation-aws, slsa-verifier, trivy-operator, kyverno, vexctl, ko, aactl, tekton-chains, trivy, skaffold, teleport, zot...

GO-2026-5851 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, falcoctl, tflint, kyverno-notation-aws, ratify, tkn, gitsign, spire-server, trivy-operator, goreleaser, kubescape, kyverno, policy-controller, zarf, aactl, crossplane, tekton-chains, trivy...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, slsa-verifier, kubescape, policy-controller, neuvector-sigstore-interface, tkn, gitsign, spire-server, trivy-operator, aactl, crossplane, teleport, tflint, falcoctl, ratify, goreleaser, kyverno, zarf, ko, tekton-chains...

GO-2026-5970 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, terraform-provider-google, crossplane-provider-keycloak, kubo, trillian, gh, docker-machine-driver-linode, k8sgateway, metrics-server, nfpm, otel-cli, policy-controller, cloudprober, controller-gen, kubebuilder, grafana-alloy, nsc,...

GO-2026-5841 vulnerabilities

Vulnerabilities for packages: helm, flux, falco-no-driver, telegraf, spire-server, kaf, nerdctl, kine, loki, containerd, zot, k3d, minio, k3s, aactl, kyverno, snyk-cli, prometheus-operator, kots...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: helm, cluster-proportional-autoscaler, metrics-server, consul-k8s, policy-controller, go, cert-manager-webhook-pdns, cluster-api-ipam-provider-in-cluster, grafana-alloy, kube-bench, crossplane-provider-family-azure, crossplane-provider-aws-kinesis, knative-eventing,...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: kubo, cloudprober, grafana-alloy, tkn, octo-sts, knative-eventing, gatekeeper, loki, jaeger, prometheus, flyte, distribution, harbor-registry, gitlab-kas, tekton-pipelines, thanos, envoy-gateway, grafana-image-renderer, argo-workflows, opentelemetry-operator, gitaly,...

GO-2026-5426 vulnerabilities

Vulnerabilities for packages: helm-operator, terraform-provider-google, kubo, melange, spegel, trillian, k8sgateway, metrics-server, guac, otel-cli, policy-controller, cloudprober, cert-manager-webhook-pdns, cluster-api-ipam-provider-in-cluster, grafana-alloy, podinfo,...

GO-2023-1765 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, aactl...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: kpt, bom, aactl, kubernetes-dashboard, argocd-image-updater...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: helm, ollama, trillian, metrics-server, terraform-provider-sendgrid, tkn, chartmuseum, fuse-overlayfs-snapshotter, hugo, kubernetes-dashboard-metrics-scraper, kubeflow-katib, bom, kube-state-metrics, dive, nfs-subdir-external-provisioner, git-lfs, k8sgpt, dex,...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: helm, ollama, trillian, metrics-server, go, terraform-provider-sendgrid, tkn, chartmuseum, amass, fuse-overlayfs-snapshotter, hugo, kubernetes-dashboard-metrics-scraper, kubeflow-katib, bom, kube-state-metrics, dive, nfs-subdir-external-provisioner, git-lfs, k8sgpt,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: helm, ollama, melange, trillian, gh, metrics-server, docker-credential-acr-env, terraform-provider-sendgrid, nsc, tkn, nri-mssql, boring-registry, cloudflared, crossplane-provider-family-azure, vexctl, amass, hugo, terraform-docs, mongo-tools, kubeflow-katib, bom,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: step-ca, grpc-health-probe, melange, slsa-verifier, flux-source-controller, guac, kubescape, kargo, policy-controller, fulcio, step, argo-workflows, flux-kustomize-controller, kubernetes-dashboard, sops, tkn, gitsign, spire-server, nerdctl, cloudflared, terragrunt,...

GO-2023-1754 vulnerabilities

Vulnerabilities for packages: apko, ko, aactl...

GO-2023-1795 vulnerabilities

Vulnerabilities for packages: skaffold, aactl...

GO-2023-2153 vulnerabilities

Vulnerabilities for packages: kubevela, kubeflow, src, cortex, slsa-verifier, kubescape, scorecard, spark-operator, buildkitd, terraform-provider-sendgrid, up, aactl, dgraph, k3d...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: tkn, apko, spire-server, melange, slsa-verifier, flux-source-controller, kubescape, policy-controller, ko, cosign, aactl, tekton-chains, skaffold...

GO-2024-2453 vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-aws-cloudformation, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, terraform-provider-google, gitness, flux, melange, slsa-verifier, flux-source-controller, pulumi-language-java, rclone, kubescape, scorecard,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flux-source-controller, kubescape, fulcio, argo-workflows, flux-kustomize-controller, sops, tkn, gitsign, spire-server, cloudflared, terragrunt, vexctl, cosign, rekor, aactl, oauth2-proxy, dex, tekton-chains, kots...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: dagger, melange, kubescape, kargo, trivy, grype, tkn, kaniko, spire-server, syft, up, docker-compose, zot, wolfictl, aactl, crossplane, cilium-cli, cadvisor, conftest, buf, buildkitd, ko, ctop...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: helm, cluster-proportional-autoscaler, kubo, metrics-server, aws-nuke, docker-machine-driver-linode, guac, consul-k8s, policy-controller, docker-credential-acr-env, controller-gen, litestream, go, cert-manager-webhook-pdns, tetragon,...

GO-2026-4979 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, cluster-proportional-autoscaler, kubo, metrics-server, nfpm, guac, otel-cli, consul-k8s, controller-gen, litestream, go, tetragon, grafana-alloy, tkn, octo-sts, tigera-operator, vitess, gatekeeper, lvm-driver, vault-benchmark, argo-events,...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, kubo, metrics-server, otel-cli, guac, litestream, tetragon, go, grafana-alloy, tkn, octo-sts, knative-eventing, vault-benchmark, lvm-driver, argo-events, kubernetes-csi-driver-nfs, kubeflow-katib, prometheus, apache-exporter, flyte, crossplane,...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, kubo, metrics-server, otel-cli, guac, litestream, tetragon, go, grafana-alloy, tkn, octo-sts, tigera-operator, knative-eventing, vault-benchmark, lvm-driver, argo-events, kubernetes-csi-driver-nfs, kubeflow-katib, prometheus, flyte, crossplane,...

GO-2026-4865 vulnerabilities

Vulnerabilities for packages: helm, crossplane-provider-keycloak, spegel, trillian, gh, docker-machine-driver-linode, otel-cli, kargo, policy-controller, litestream, tetragon, go, sriov-network-device-plugin, terraform-provider-sendgrid, kubernetes-csi-node-driver-registrar, tkn, kwok, chartmuseu...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: podman, cluster-proportional-autoscaler, mailpit, trillian, docker-machine-driver-linode, policy-controller, kubebuilder, terraform-provider-sendgrid, nri-mssql, swagger, boring-registry, crossplane-provider-family-azure, node-problem-detector, maru, amass, lvm-drive...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: helm, podman, melange, gh, nfpm, guac, kargo, policy-controller, tkn, crossplane-provider-family-azure, chisel, kine, vault-benchmark, loki, argo-events, prometheus, crossplane-provider-azure-sql, cilium-cli, crossplane-provider-azure-storage, gptscript, witness,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: helm, redka, coredns, flux, kube-fluentd-operator, kubescape, k8s-device-plugin, kubernetes-dashboard, snyk-cli, go, aws-flb-firehose, newrelic-fluent-bit-output, ingress-nginx-controller, gitaly, spire-server, kaf, nerdctl, gitlab-pages, mattermost, kine, cilium,...

GO-2026-4869 vulnerabilities

Vulnerabilities for packages: helm, podman, mailpit, spegel, gh, kargo, policy-controller, go, sriov-network-device-plugin, nsc, tkn, chartmuseum, kine, extism, fuse-overlayfs-snapshotter, vault-benchmark, kubernetes-csi-driver-nfs, regclient, seaweedfs, bom, prometheus, dive, crossplane,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: helm, podman, opentelemetry-collector, flux, rancher-agent, kubernetes-dashboard, snyk-cli, docker-cli-buildx, telegraf, spire-server, kaf, nerdctl, mattermost, kine, cilium, loki, containerd, zot, kubernetes, prometheus, minio, k3s, aactl, cloud-provider-aws, builda...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: helm, podman, opentelemetry-collector, dagger, melange, flux, nuclei, flux-source-controller, nfpm, guac, pulumi-language-java, kubescape, scorecard, kubernetes-dashboard, snyk-cli, trivy, act, pulumi-language-yaml, grype, telegraf, spire-server, kaf, nerdctl,...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: helm, podman, melange, gh, nfpm, guac, chisel, kine, loki, argo-events, prometheus, cilium-cli, gptscript, witness, kyverno, zarf, gitlab-kas, snyk-cli, nuclei, flux-source-controller, gitlab-runner, trivy, act, pulumi-language-yaml, telegraf, syft, kaf, nerdctl,...