GO-2025-3940 vulnerabilities

Vulnerabilities for packages: atlantis-fips, atlantis...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: bento, kubernetes-event-exporter-fips, goreleaser, atlantis-fips, peerdb-flow, bento-fips, kubewatch, kubernetes-event-exporter, argo-events-fips, kyverno-policy-reporter-fips, argo-cd, argo-rollouts, argo-rollouts-fips, ory-kratos-fips, argo-cd-fips, argo-events,...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: authservice, gitea, atlantis, kots, oauth2-proxy, splunk-otel-collector, falcosidekick, fluent-bit-plugin-loki...

GO-2025-3940 vulnerabilities

Vulnerabilities for packages: atlantis...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: atlantis, argo-rollouts, bento, argo-cd, kyverno-policy-reporter, argo-events, kubernetes-event-exporter, goreleaser, kubewatch...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, promxy, crossplane-provider-azure-authorization, tekton-chains, aws-node-termination-handler, q, terraform-docs, grafana-rollout-operator, kubescape, nri-prometheus, crossplane-provider-aws-cloudfront, cert-manager,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: ferretdb, crossplane-provider-azure-authorization, tekton-chains, terraform-docs, memcached-exporter, kubescape, nri-prometheus, boring-registry, crossplane-provider-aws-cloudfront, prometheus-pushgateway, crossplane-provider-aws-sqs, fulcio, argo-workflows,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, tekton-chains, kubescape, crossplane-provider-aws-cloudfront, cert-manager, crossplane-provider-aws-sqs, fulcio, glab, ksops, gatus, external-dns, flux-kustomize-controller, zot, argo-cd, buildkitd, ko,...

GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: go-spdk-helper-fips, crossplane-provider-aws-securityhub, hubble-fips, azurefile-csi, cluster-api-aws-controller, kapp-controller-fips, rancher-system-agent, sonobuoy, crossplane-provider-aws-cloudcontrol, kiali-fips, metrics-server-fips,...

CVE-2026-56852 vulnerabilities

Vulnerabilities for packages: go-spdk-helper-fips, crossplane-provider-aws-securityhub, hubble-fips, azurefile-csi, cluster-api-aws-controller, kapp-controller-fips, rancher-system-agent, sonobuoy, crossplane-provider-aws-cloudcontrol, kiali-fips, metrics-server-fips,...

GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: ferretdb, terraform-provider-kubernetes, crossplane-provider-azure-authorization, cluster-api-gcp-controller, kafka-proxy, q, tekton-chains, cloud-provider-vsphere, terraform-docs, kubescape, boring-registry, crossplane-provider-aws-cloudfront, cert-manager,...

CVE-2026-56852 vulnerabilities

Vulnerabilities for packages: ferretdb, terraform-provider-kubernetes, crossplane-provider-azure-authorization, cluster-api-gcp-controller, kafka-proxy, q, tekton-chains, cloud-provider-vsphere, terraform-docs, kubescape, boring-registry, crossplane-provider-aws-cloudfront, cert-manager,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, tekton-chains, kubescape, cert-manager, fulcio, glab, ksops, gatus, external-dns, flux-kustomize-controller, zot, argo-cd, buildkitd, ko, neuvector-sigstore-interface, rancher, kots, rootlesskit, k8sgpt, eksctl, syft, kaf,...

CLEANSTART-2026-TY63648 CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...

CLEANSTART-2026-WH33500 CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...

CLEANSTART-2026-WG17155 CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

Multiple security vulnerabilities affect the atlantis package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...

CLEANSTART-2026-UC40249 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-wjrx-6529-hcj3 applied in versions: 0.37.1-r0

Multiple security vulnerabilities affect the atlantis-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CZ64396 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-wjrx-6529-hcj3 applied in versions: 0.37.1-r1

Multiple security vulnerabilities affect the atlantis package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QX63233 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-wjrx-6529-hcj3 applied in versions: 0.37.1-r1

Multiple security vulnerabilities affect the atlantis package. These issues are resolved in later releases. See references for individual vulnerability details...

OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security

DARPA's AI Cyber Challenge AIxCC showed that cyber reasoning systems CRSs can go beyond vulnerability discovery to autonomously confirm and patch bugs: seven teams built such systems and open-sourced them after the competition. Yet all seven open-sourced CRSs remain largely unusable outside their...