GO-2026-5017 vulnerabilities

Vulnerabilities for packages: helm, podman, melange, gh, nfpm, guac, chisel, kine, loki, argo-events, prometheus, cilium-cli, gptscript, witness, kyverno, zarf, gitlab-kas, snyk-cli, nuclei, flux-source-controller, gitlab-runner, trivy, act, pulumi-language-yaml, telegraf, syft, kaf, nerdctl,...

GO-2026-5018 vulnerabilities

Vulnerabilities for packages: helm, podman, melange, gh, nfpm, guac, kargo, policy-controller, tkn, crossplane-provider-family-azure, chisel, kine, vault-benchmark, loki, argo-events, prometheus, crossplane-provider-azure-sql, cilium-cli, crossplane-provider-azure-storage, gptscript, witness,...

GO-2026-5023 vulnerabilities

Vulnerabilities for packages: helm, opentelemetry-collector, flux, flux-source-controller, rancher-agent, kubescape, kubernetes-dashboard, snyk-cli, trivy, telegraf, spire-server, kaf, nerdctl, chisel, mattermost, kine, cilium, loki, skaffold, containerd, zot, kubernetes, osv-scanner, kots,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: helm, opentelemetry-collector, flux, flux-source-controller, rancher-agent, kubescape, kubernetes-dashboard, snyk-cli, trivy, telegraf, spire-server, kaf, nerdctl, chisel, mattermost, kine, cilium, loki, skaffold, containerd, zot, kubernetes, osv-scanner,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, cluster-proportional-autoscaler, kubo, metrics-server, nfpm, guac, otel-cli, consul-k8s, controller-gen, litestream, go, tetragon, grafana-alloy, tkn, octo-sts, tigera-operator, knative-eventing, vault-benchmark, lvm-driver, argo-events,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, cluster-proportional-autoscaler, kubo, metrics-server, nfpm, guac, otel-cli, consul-k8s, controller-gen, litestream, go, tetragon, grafana-alloy, tkn, octo-sts, tigera-operator, vitess, gatekeeper, lvm-driver, vault-benchmark, argo-events,...

GO-2026-5547 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, dagger, slsa-verifier, flux-source-controller, gh, guac, gitlab-runner, kubescape, policy-controller, trivy, docker-cli-buildx, neuvector-sigstore-interface, tkn, gitsign, spire-server, vexctl, cosign, docker-compose, skaffold, zot,...

GO-2026-4870 vulnerabilities

Vulnerabilities for packages: podman, cluster-proportional-autoscaler, mailpit, trillian, docker-machine-driver-linode, policy-controller, kubebuilder, terraform-provider-sendgrid, nri-mssql, swagger, boring-registry, crossplane-provider-family-azure, node-problem-detector, maru, amass, lvm-drive...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: helm, podman, melange, nfpm, guac, kine, loki, argo-events, prometheus, cilium-cli, gptscript, witness, kyverno, zarf, gitlab-kas, snyk-cli, nuclei, flux-source-controller, trivy, act, pulumi-language-yaml, telegraf, syft, kaf, nerdctl, terragrunt, pulumi,...

GO-2026-5020 vulnerabilities

Vulnerabilities for packages: helm, podman, crossplane-provider-keycloak, melange, gh, docker-machine-driver-linode, guac, nfpm, kargo, policy-controller, tkn, cloudflared, crossplane-provider-family-azure, chisel, crossplane-provider-aws-kinesis, kine, vault-benchmark, loki, argo-events,...

GO-2026-5033 vulnerabilities

Vulnerabilities for packages: helm, podman, opentelemetry-collector, flux, rancher-agent, kubernetes-dashboard, snyk-cli, docker-cli-buildx, telegraf, spire-server, kaf, nerdctl, mattermost, kine, cilium, loki, containerd, zot, kubernetes, prometheus, minio, k3s, aactl, cloud-provider-aws, builda...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: helm, kubevela, redka, karma, coredns, flux, kube-fluentd-operator, kubo, k8s-device-plugin, juicefs, kubernetes-dashboard, go, grafana-alloy, aws-flb-firehose, trino, kaf, nerdctl, mattermost, runc, containerd, zot, kubernetes, prometheus, argo-cd,...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, metrics-server, nfpm, go, grafana-alloy, tkn, argo-events, prometheus, flyte, crossplane, kubernetes-csi-external-attacher, cilium-cli, pgtimetable, k8sgpt, kyverno, zarf, dask-gateway, thanos, timestamp-authority, kubevela, coredns, slsa-verifie...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, cluster-proportional-autoscaler, kubo, metrics-server, nfpm, guac, otel-cli, consul-k8s, controller-gen, litestream, go, tetragon, grafana-alloy, tkn, octo-sts, tigera-operator, vitess, gatekeeper, lvm-driver, vault-benchmark, argo-events,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, kubo, metrics-server, otel-cli, guac, litestream, tetragon, go, grafana-alloy, tkn, octo-sts, knative-eventing, vault-benchmark, lvm-driver, argo-events, kubernetes-csi-driver-nfs, kubeflow-katib, prometheus, apache-exporter, flyte, crossplane,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: helm, podman, opentelemetry-collector, flux, rancher-agent, kubernetes-dashboard, snyk-cli, docker-cli-buildx, telegraf, spire-server, kaf, nerdctl, mattermost, kine, cilium, loki, containerd, zot, kubernetes, prometheus, minio, k3s, aactl, cloud-provider-aws, builda...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: helm, podman, crossplane-provider-keycloak, melange, gh, docker-machine-driver-linode, guac, nfpm, kargo, policy-controller, tkn, cloudflared, crossplane-provider-family-azure, chisel, crossplane-provider-aws-kinesis, kine, vault-benchmark, loki, argo-events,...

GO-2026-4871 vulnerabilities

Vulnerabilities for packages: podman, cluster-proportional-autoscaler, howdy-yall, mailpit, trillian, docker-machine-driver-linode, policy-controller, kubebuilder, terraform-provider-sendgrid, nri-mssql, swagger, boring-registry, crossplane-provider-family-azure, node-problem-detector, maru, amas...

GO-2026-4865 vulnerabilities

Vulnerabilities for packages: helm, crossplane-provider-keycloak, spegel, trillian, gh, docker-machine-driver-linode, otel-cli, kargo, policy-controller, litestream, tetragon, go, sriov-network-device-plugin, terraform-provider-sendgrid, kubernetes-csi-node-driver-registrar, tkn, kwok, chartmuseu...

GO-2023-2383 vulnerabilities

Vulnerabilities for packages: slsa-verifier, metrics-server, go-md2man, scorecard, go-licenses, kind, sops, helm-push, aws-flb-firehose, nsc, sbom-scorecard, sonobuoy, wait-for-port, oras, petname, amass, gobuster, hubble-ui, nri-discovery-kubernetes, nats, k3d,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: helm, kor, helm-operator, kubo, spegel, k8sgateway, docker-machine-driver-linode, guac, kubelet-csr-approver, nri-redis, policy-controller, git-sync, litestream, tetragon, sriov-network-device-plugin, cluster-api-ipam-provider-in-cluster, podinfo, langfuse, swagger,...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: kubo, docker-machine-driver-linode, policy-controller, swagger, boring-registry, maru, amass, lvm-driver, kubernetes-csi-driver-nfs, kubernetes-dashboard-metrics-scraper, cloud-provider-vsphere, opensearch-k8s-operator, apache-exporter, percona-server-mongodb-operato...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: helm, helm-operator, redka, src, gitness, kubo, k8sgateway, scorecard, flux-kustomize-controller, kubernetes-dashboard, vale, newrelic-fluent-bit-output, steampipe, ingress-nginx-controller, tfsec, spire-server, mc, nerdctl, cert-manager-cmctl, kine, cosign,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, podman, slsa-verifier, portieris, flux-source-controller, gh, guac, kubescape, policy-controller, fulcio, trivy, neuvector-sigstore-interface, tkn, gitsign, spire-server, vexctl, cosign, docker-compose, skaffold, undock, sigstore-scaffolding, zo...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: step-ca, nuclei, trillian, envoy-gateway, nri-mysql, fulcio, juicefs, step, argo-workflows, flux-kustomize-controller, sops, certificate-transparency, grafana-alloy, tkn, age, hydra, kyverno-policy-reporter, gitsign, spire-server, terragrunt, mariadb-operator,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, dagdotdev, incert, flux, slsa-verifier, gh, guac, scorecard, harbor, kargo, policy-controller, istio, argo-workflows, flux-kustomize-controller, trivy, kwok, gitsign, spire-server, nerdctl, lazydocker, vexctl, vitess, vcluster, cosign,...

GO-2026-4762 vulnerabilities

Vulnerabilities for packages: podman, kubo, trillian, metrics-server, policy-controller, terraform-provider-sendgrid, boring-registry, crossplane-provider-family-azure, node-problem-detector, lvm-driver, argo-events, kubernetes-csi-driver-nfs, cloud-provider-vsphere, crossplane-provider-aws-sqs,...

GO-2026-5506 vulnerabilities

Vulnerabilities for packages: podman, kargo, consul-k8s, litestream, tetragon, cluster-api-ipam-provider-in-cluster, kubernetes-csi-node-driver-registrar, chartmuseum, cloudflared, crossplane-provider-family-azure, node-problem-detector, crossplane-provider-aws-kinesis, vexctl, argo-events,...

GO-2026-4918 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, kubo, trillian, metrics-server, nri-mssql, boring-registry, crossplane-provider-family-azure, lvm-driver, argo-events, kubernetes-dashboard-metrics-scraper, crossplane-provider-aws-sqs, karpenter, opensearch-k8s-operator,...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: kubo, docker-machine-driver-linode, policy-controller, swagger, boring-registry, maru, amass, lvm-driver, kubernetes-csi-driver-nfs, kubernetes-dashboard-metrics-scraper, cloud-provider-vsphere, opensearch-k8s-operator, apache-exporter, percona-server-mongodb-operato...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: helm, kor, helm-operator, kubo, spegel, k8sgateway, docker-machine-driver-linode, guac, kubelet-csr-approver, policy-controller, git-sync, litestream, tetragon, sriov-network-device-plugin, cluster-api-ipam-provider-in-cluster, podinfo, swagger, calico,...

GO-2026-4433 vulnerabilities

Vulnerabilities for packages: podman, cluster-proportional-autoscaler, mailpit, kubo, trillian, metrics-server, docker-machine-driver-linode, kubebuilder, terraform-provider-sendgrid, nri-mssql, swagger, boring-registry, node-problem-detector, maru, amass, lvm-driver, argo-events,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, slsa-verifier, flux-source-controller, gh, kubescape, policy-controller, trivy, neuvector-sigstore-interface, tkn, gitsign, spire-server, vexctl, cosign, skaffold, zot, trivy-operator, aactl, teleport, tflint, falcoctl, ratify, witness,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: slsa-verifier, metrics-server, go-md2man, scorecard, go-licenses, kind, sops, helm-push, aws-flb-firehose, nsc, sbom-scorecard, sonobuoy, wait-for-port, oras, petname, amass, gobuster, hubble-ui, nri-discovery-kubernetes, nats, k3d,...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: helm, crossplane-provider-keycloak, melange, nfpm, guac, policy-controller, grafana-alloy, boring-registry, crossplane-provider-family-azure, crossplane-provider-aws-kinesis, extism, argo-events, crossplane-provider-aws-kms, trufflehog, crossplane-provider-aws-sqs,...

GO-2026-4945 vulnerabilities

Vulnerabilities for packages: podman, terraform-provider-google, kubo, melange, trillian, guac, kargo, consul-k8s, policy-controller, cloudprober, grafana-alloy, tkn, octo-sts, boring-registry, cloudflared, knative-eventing, vexctl, vitess, vault-benchmark, loki, trufflehog, seaweedfs, rekor,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, flux-source-controller, gh, kubescape, policy-controller, docker-cli-buildx, neuvector-sigstore-interface, tkn, gitsign, spire-server, vexctl, cosign, skaffold, sigstore-scaffolding, zot, aactl, teleport, tflint, falcoctl, ratify, witness,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: tkn, falcoctl, kyverno-notation-aws, ratify, gitsign, witness, flux-source-controller, goreleaser, policy-controller, aactl, teleport, zot...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, podman, slsa-verifier, portieris, flux-source-controller, kubescape, tkn, gitsign, vexctl, cosign, undock, sigstore-scaffolding, aactl, buildah, falcoctl, ratify, witness, zarf, skopeo, tekton-chains, falco-no-driver, kots...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: falcoctl, gitsign, slsa-verifier, witness, kubescape, vexctl, zarf, cosign, aactl, skopeo, tekton-chains, falco-no-driver, kots, sigstore-scaffolding...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, slsa-verifier, flux-source-controller, gh, kubescape, policy-controller, trivy, neuvector-sigstore-interface, tkn, gitsign, spire-server, vexctl, cosign, skaffold, zot, trivy-operator, aactl, teleport, tflint, falcoctl, ratify, witness,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, slsa-verifier, flux-source-controller, gh, kubescape, policy-controller, trivy, docker-cli-buildx, neuvector-sigstore-interface, tkn, gitsign, spire-server, vexctl, cosign, skaffold, sigstore-scaffolding, zot, trivy-operator, aactl, crossplane,...

GO-2025-3595 vulnerabilities

Vulnerabilities for packages: podman, cluster-proportional-autoscaler, metrics-server, docker-machine-driver-linode, terraform-provider-sendgrid, crossplane-provider-family-azure, amass, lvm-driver, argo-events, kubernetes-csi-driver-nfs, kubernetes-dashboard-metrics-scraper,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: podman, cluster-proportional-autoscaler, kubo, trillian, metrics-server, policy-controller, kubebuilder, terraform-provider-sendgrid, nri-mssql, swagger, boring-registry, crossplane-provider-family-azure, amass, kubernetes-csi-driver-nfs,...

GO-2026-4337 vulnerabilities

Vulnerabilities for packages: podman, cluster-proportional-autoscaler, mailpit, kubo, trillian, metrics-server, docker-machine-driver-linode, kubebuilder, terraform-provider-sendgrid, nri-mssql, swagger, boring-registry, node-problem-detector, maru, amass, lvm-driver, argo-events,...

GO-2025-3503 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, trillian, metrics-server, policy-controller, terraform-provider-sendgrid, boring-registry, crossplane-provider-family-azure, lvm-driver, argo-events, kubernetes-csi-driver-nfs, kubernetes-dashboard-metrics-scraper,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: podman, cluster-proportional-autoscaler, trillian, metrics-server, policy-controller, crossplane-provider-family-azure, lvm-driver, argo-events, kubernetes-csi-driver-nfs, kubernetes-dashboard-metrics-scraper, crossplane-provider-aws-sqs, opensearch-k8s-operator,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, mailpit, metrics-server, policy-controller, terraform-provider-sendgrid, nri-mssql, swagger, crossplane-provider-family-azure, maru, amass, lvm-driver, kubernetes-csi-driver-nfs, kubernetes-dashboard-metrics-scraper,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: guac, kargo, policy-controller, git-sync, grafana-alloy, tkn, chartmuseum, octo-sts, boring-registry, crossplane-provider-family-azure, vexctl, kine, mongo-tools, kubeflow-katib, trufflehog, seaweedfs, rekor, prometheus, flyte, crossplane-provider-azure-sql,...

GO-2025-3754 vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, guac, policy-controller, grafana-alloy, tkn, crossplane-provider-family-azure, crossplane-provider-aws-kinesis, vexctl, extism, argo-events, crossplane-provider-aws-kms, trufflehog, crossplane-provider-aws-sqs,...