GO-2026-5763 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, spire-server, witness, gitsign, trivy-operator, vexctl, kyverno-notation-aws, buildkitd, flux-source-controller, tflint, kubescape, crossplane, skaffold, zarf, trivy, teleport, docker, goreleaser, tkn, gh, sigstore-scaffolding,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: policy-controller, falcoctl, kyverno-notation-aws, ratify, teleport, zot, aactl, goreleaser, witness, gitsign, tkn, kyverno, flux-source-controller...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, skopeo, slsa-verifier, falcoctl, kubescape, aactl, witness, gitsign, vexctl, zarf, falco-no-driver, tekton-chains, kots, cosign...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, spire-server, witness, gitsign, trivy-operator, vexctl, kyverno-notation-aws, buildkitd, flux-source-controller, tflint, kubescape, crossplane, skaffold, rekor, zarf, trivy, teleport, docker, goreleaser, tkn, gh,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: dive, aws-privateca-issuer, gcsfuse, swagger, kubernetes-dashboard-auth, lazydocker, terraform-provider-azapi, docker-machine-driver-harvester, spire-controller-manager, helm-push, terraform, rabbitmq-messaging-topology-operator, nri-mysql, azure-service-operator,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, policy-controller, flux-image-reflector-controller, tekton-chains, kargo, spire-server, crossplane-provider-family-azure, gitsign, vexctl, buildkitd, flux-source-controller, nuclei, opentelemetry-collector,...

CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: commercial-kyverno, policy-controller, kyverno-notation-aws, kubescape, cloudbeat-fips, policy-controller-fips, crossplane, slsa-verifier, aactl, kubescape-server, trivy-operator-fips, trivy-operator, chainctl, teleport, chainctl-fips, cloudbeat, kyverno,...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: commercial-kyverno, policy-controller, kyverno-notation-aws, kubescape, cloudbeat-fips, policy-controller-fips, crossplane, slsa-verifier, aactl, kubescape-server, trivy-operator-fips, trivy-operator, chainctl, teleport, chainctl-fips, cloudbeat, kyverno,...

CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: policy-controller, slsa-verifier, kyverno-notation-aws, teleport, kubescape, crossplane, zot, aactl, trivy-operator, kyverno, ratify, trivy...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: policy-controller, slsa-verifier, kyverno-notation-aws, teleport, kubescape, crossplane, zot, aactl, trivy-operator, kyverno, ratify, trivy...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kuma, flux-image-automation-controller, kubernetes, gitlab-rails-ce-fips, gitlab-kas, omnictl-multiarch, vault-fips, knative-serving-fips, prometheus-mongodb-exporter, traefik-fips, flux-source-controller, helm, cilium, argo-workflows, argo-cd, opentelemetry-collecto...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: policy-controller, kaf, kargo, spire-server, docker-machine-driver-harvester, trivy-operator, age, vault-benchmark, kine, crossplane-provider-azure-sql, flux-kustomize-controller, argocd-image-updater, loki, crossplane-provider-azure-managedidentity, cilium, gitea,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, flux-image-automation-controller, gitlab-kas, kaf, nerdctl, cert-manager, spire-server, external-dns, mattermost, cilium-cli, trivy-operator, flux-source-controller, kots, opentelemetry-collector, knative-serving, chisel, kubescape, kine,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, gitlab-kas, kaf, nerdctl, cert-manager, spire-server, external-dns, mattermost, cilium-cli, kots, opentelemetry-collector, knative-serving, kine, telegraf, rancher, fscrypt, prometheus, snyk-cli, loki, prometheus-operator, cilium, podman, istio,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, gitlab-kas, aws-flb-kinesis, libnvidia-container, kaf, nerdctl, cert-manager, aws-flb-firehose, spire-server, external-dns, mattermost, cilium-cli, datadog-agent, kube-fluentd-operator, kubernetes-csi-node-driver-registrar, kots, kubescape, kine...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, spire-server, witness, gitsign, trivy-operator, vexctl, kyverno-notation-aws, buildkitd, flux-source-controller, tflint, kubescape, crossplane, skaffold, rekor, zarf, trivy, teleport, docker, goreleaser, tkn, gh,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, spire-server, witness, gitsign, trivy-operator, vexctl, kyverno-notation-aws, buildkitd, flux-source-controller, tflint, kubescape, crossplane, skaffold, rekor, zarf, trivy, teleport, docker, goreleaser, tkn, gh,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, spire-server, witness, gitsign, trivy-operator, vexctl, kyverno-notation-aws, buildkitd, flux-source-controller, tflint, kubescape, crossplane, skaffold, rekor, zarf, trivy, teleport, docker, goreleaser, tkn, gh,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, spire-server, witness, gitsign, trivy-operator, vexctl, kyverno-notation-aws, buildkitd, flux-source-controller, tflint, kubescape, crossplane, skaffold, rekor, zarf, trivy, teleport, docker, goreleaser, tkn, gh,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: image-factory-fips, tkn-fips, teleport-operator-fips, ko, tekton-chains, policy-controller, spire-server-fips, falcoctl-fips, sigstore-scaffolding-fips, neuvector-sigstore-interface, kyverno-notation-aws, kubescape, rekor-fips, tflint-fips, cloudbeat-fips,...