CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: cosign, goreleaser, policy-controller, ko-fips, slsa-verifier, spire-server, buildkitd-fips, trivy-operator-fips, crossplane, vexctl, gitsign, kyverno, rekor, tekton-chains-fips, tkn, neuvector-sigstore-interface-fips, kyverno-policy-reporter-plugins-kyverno-fips,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: cosign, goreleaser, policy-controller, ko-fips, slsa-verifier, spire-server, buildkitd-fips, trivy-operator-fips, crossplane, vexctl, gitsign, kyverno, rekor, tekton-chains-fips, tkn, neuvector-sigstore-interface-fips, kyverno-policy-reporter-plugins-kyverno-fips,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: cosign, goreleaser, policy-controller, ko-fips, slsa-verifier, spire-server, buildkitd-fips, trivy-operator-fips, crossplane, vexctl, gitsign, kyverno, rekor, tekton-chains-fips, tkn, neuvector-sigstore-interface-fips, kyverno-policy-reporter-plugins-kyverno-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer, gogatekeeper, nats-top, spqr, nri-redis, buildkitd, harbor, newrelic-k8s-metadata-injection, nginx-prometheus-exporter, task, frp, kiali, jaeger-operator, terraform-provider-tls, gitlab-kas, grafana-agent-operator, php-fpmexporter, kube-vip,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: harbor-cli, docker-credential-gcr, argo-events, prometheus-operator, tkn, src, wait-for-port, nodetaint, terraform-provider-azapi, spire-controller-manager, containerd, cloud-sql-proxy, rancher-agent, kube-logging-operator, blob-csi, nri-f5,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: bento, prometheus, crossplane, lazydocker, helm-mapkubeapis, ctop, newrelic-infrastructure-agent, xeol, rancher-machine, kubeflow-katib, cluster-api-helm-controller, falcoctl, skaffold, rancher-agent, aactl, opentelemetry-operator, kpt, openbao, undock,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: xeol-fips, cluster-api-fips, crossplane, docker-credential-gcr, kubeflow-katib, promxy-fips, rancher-machine, opentelemetry-operator-fips, docker-credential-gcr-fips, k3d, neuvector-scanner-fips, gitlab-rails-ce, k3s, vault, falcoctl-fips, rancher,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: prometheus, step-ca, spqr, crossplane-provider-aws-ec2, bank-vaults, velero, docker-machine-driver-linode, newrelic-k8s-metadata-injection, nginx-prometheus-exporter, task, frp, kwok, jaeger-operator, crossplane-provider-azure-sql, tw, terraform-provider-tls,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: prometheus, linkerd2-proxy-init, shfmt, spqr, nri-redis, bank-vaults, velero, buildkitd, nginx-prometheus-exporter, task, frp, kwok, jaeger-operator, crossplane-provider-azure-sql, kyverno-policy-reporter, tw, terraform-provider-tls, grafana-agent-operator,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: prometheus, linkerd2-proxy-init, shfmt, spqr, nri-redis, bank-vaults, velero, buildkitd, nginx-prometheus-exporter, task, frp, kwok, jaeger-operator, crossplane-provider-azure-sql, kyverno-policy-reporter, tw, terraform-provider-tls, grafana-agent-operator,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: packer, prometheus-podman-exporter-fips, promxy-fips, kyverno-policy-reporter-ui-fips, kubernetes-dashboard-auth-fips, containerd, step-issuer, kaniko, tailscale, kube-logging-operator, kubernetes-csi-external-provisioner, bank-vaults-fips, git-sync,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: prometheus, flux-image-automation-controller, guac, op-geth, openfga, step-ca, flux-source-controller, rclone, bank-vaults, boring-registry, velero, buildkitd, flux-notification-controller, k8sgpt, rook, sftpgo-plugin-pubsub, crossplane-provider-azure-sql,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: cosign, cass-operator-fips-no-pvc-delete, oras, prometheus-mongodb-exporter-fips, harbor-cli, karpenter-fips, redka, docker-credential-gcr, prometheus-alertmanager-fips, etcd, wait-for-port, prometheus-postgres-exporter, src, falcosidekick-fips, terraform-docs,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: goreleaser, policy-controller, ko-fips, slsa-verifier, spire-server, vexctl, gitsign, tekton-chains-fips, tkn, falcoctl-fips, neuvector-sigstore-interface, falcoctl, policy-controller-fips, zarf, tekton-chains, zot, chainctl, apko, kubescape, aactl, skaffold, tkn-fip...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: tkn, flux-source-controller, neuvector-sigstore-interface, slsa-verifier, zarf, wolfictl, vexctl, falcoctl, skaffold, policy-controller, aactl, melange, kubescape, apko, zot, tekton-chains, ko, gitsign, goreleaser, spire-server...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: tkn, flux-source-controller, neuvector-sigstore-interface, slsa-verifier, zarf, wolfictl, vexctl, falcoctl, skaffold, policy-controller, aactl, melange, kubescape, apko, zot, tekton-chains, ko, gitsign, goreleaser, spire-server...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: tkn, flux-source-controller, neuvector-sigstore-interface, slsa-verifier, zarf, wolfictl, vexctl, falcoctl, skaffold, policy-controller, aactl, melange, kubescape, apko, zot, tekton-chains, ko, gitsign, goreleaser, spire-server...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: goreleaser, policy-controller, ko-fips, slsa-verifier, spire-server, vexctl, gitsign, tekton-chains-fips, tkn, falcoctl-fips, neuvector-sigstore-interface, falcoctl, policy-controller-fips, zarf, tekton-chains, zot, chainctl, apko, kubescape, aactl, skaffold, tkn-fip...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: tkn, flux-source-controller, neuvector-sigstore-interface, slsa-verifier, zarf, wolfictl, vexctl, falcoctl, skaffold, policy-controller, aactl, melange, kubescape, apko, zot, tekton-chains, ko, gitsign, goreleaser, spire-server...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: goreleaser, policy-controller, ko-fips, slsa-verifier, spire-server, vexctl, gitsign, tekton-chains-fips, tkn, falcoctl-fips, neuvector-sigstore-interface, falcoctl, policy-controller-fips, zarf, tekton-chains, zot, chainctl, apko, kubescape, aactl, skaffold, tkn-fip...