GO-2025-3562 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GO-2026-4381 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GO-2026-5337 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kyverno...

GO-2026-4382 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GO-2026-5371 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, flux, flux-source-controller...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: spire-server, tfsec, cosign, kyverno-notation-aws, witness, policy-controller, trivy, conftest, kots...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: falcoctl, cosign, vexctl, witness, policy-controller, docker, trivy, tkn, teleport, flux-source-controller, neuvector-sigstore-interface, zarf, zot, gh, kyverno, buildkitd, kubescape, tflint, kyverno-notation-aws, gitsign, skaffold, spire-server, sigstore-scaffolding...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kyverno, zot, kubescape, ratify, kyverno-notation-aws, teleport, aactl, trivy, crossplane, trivy-operator, policy-controller, slsa-verifier...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: podman, kyverno, falcoctl, kubescape, ratify, kyverno-notation-aws, gitsign, undock, flux-source-controller, skopeo, witness, buildah, aactl, zarf, tekton-chains, kots, slsa-verifier...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: falcoctl, policy-controller, slsa-verifier, tkn, ratify, teleport, neuvector-sigstore-interface, zarf, kyverno, kubescape, tflint, kyverno-notation-aws, gitsign, spire-server, aactl, trivy-operator, ko, goreleaser, tekton-chains, crossplane...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: falcoctl, cosign, docker-cli-buildx, vexctl, witness, policy-controller, tkn, ratify, teleport, flux-source-controller, neuvector-sigstore-interface, zarf, zot, gh, kyverno, kubescape, tflint, kyverno-notation-aws, gitsign, skaffold, spire-server, aactl,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: rancher-machine, telegraf, descheduler, hydra, rancher-loglevel, crossplane-provider-aws-ec2, k3s, spire-controller-manager, mesosphere-vsphere-csi, gptscript, pguser, kserve-modelmesh-serving, mods, tofu-controller, container-object-storage-interface,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: kyverno, tkn, falcoctl, ratify, kyverno-notation-aws, gitsign, teleport, flux-source-controller, goreleaser, witness, aactl, policy-controller, zot...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: falcoctl, cosign, docker-cli-buildx, vexctl, witness, policy-controller, docker, trivy, slsa-verifier, tkn, ratify, teleport, flux-source-controller, neuvector-sigstore-interface, zarf, zot, gh, kyverno, buildkitd, kubescape, tflint, kyverno-notation-aws, gitsign,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: falcoctl, cosign, vexctl, witness, policy-controller, docker, trivy, slsa-verifier, tkn, ratify, teleport, flux-source-controller, neuvector-sigstore-interface, zarf, zot, gh, kyverno, buildkitd, kubescape, tflint, kyverno-notation-aws, gitsign, skaffold, aactl,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k3s, spire-controller-manager, tempo, gptscript, nri-mysql, grafana-alloy, terraform, spark-operator, ratify, kubernetes-dashboard-web, argo-events, flux, steampipe, kube-bench, libnvidia-container, timescaledb-tune, zot, dive, nri-haproxy, aws-otel-collector,...

CVE-2022-4993 HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation template

HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template. adderror hands its first argument to the language...

CVE-2022-4993 HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation template

HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template. adderror hands its first argument to the language...

AZL-95798 CVE-2026-53793 affecting package rsync for versions less than 3.5.0-1

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...