GO-2026-4610 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, k3d, policy-controller, minio-operator, aactl, incert, kyverno-notation-aws, minio-operator-fips, crossplane-fips, ory-kratos, harbor-fips, kubeflow-katib, traefik-fips, neuvector-sigstore-interface-fips, bento, xeol, flux-source-watcher-fips,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: witness, policy-controller, ratify, buildkitd, gh, zarf, ratify-fips, kyverno-policy-reporter-plugins-kyverno-fips, teleport-operator-fips, skaffold, policy-controller-fips, reports-server, buildkitd-fips, cg, aactl, image-factory-fips, kyverno-notation-aws-fips,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: witness, policy-controller, ratify, buildkitd, gh, zarf, ratify-fips, kyverno-policy-reporter-plugins-kyverno-fips, teleport-operator-fips, skaffold, policy-controller-fips, reports-server, buildkitd-fips, cg, aactl, image-factory-fips, kyverno-notation-aws-fips,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, kubernetes-dashboard-auth-fips, amazon-cloudwatch-agent-fips, opentelemetry-collector-contrib-fips, azcopy-fips, policy-controller, terraform-provider-azapi, terraform-provider-azurerm, terragrunt, velero, minio-operator, fulcio, mc, grafana-mimi...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: policy-controller, gh, melange, zarf, policy-controller-fips, aactl, cosign, tkn, spire-server, neuvector-sigstore-interface, zot, trivy, sigstore-scaffolding, tekton-chains, falcoctl-fips, flux-source-controller-fips, cosign-fips, neuvector-sigstore-interface-fips,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, kubernetes-dashboard-auth-fips, opentelemetry-collector-contrib-fips, terraform-provider-azurerm, azcopy-fips, policy-controller, minio-operator, mc, skaffold, gitea-fips, doppler-kubernetes-operator, crossplane-provider-azure-storage, aactl,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gh, cosign...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: conftest, tfsec, zot, opa, k8sgpt, zarf, cosign, kots, spire-server, snyk-cli, policy-controller, kubescape...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: conftest, tfsec, witness, kots, spire-server, trivy, kyverno-notation-aws, policy-controller, cosign...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, zarf, witness, tkn, trivy, teleport, buildkitd, skaffold, flux-source-controller, gh, ko, goreleaser, neuvector-sigstore-interface, vexctl, falcoctl, sigstore-scaffolding, cosign, docker, tekton-chains, tflint, gitsign, spire-server,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, trivy-operator, weaviate, zot, aws-otel-collector, syft, sftpgo, azcopy, gatekeeper, etcd, k3d, kube-arangodb, cass-operator, falcosidekick, terragrunt, teleport, flyte, spicedb, cluster-api-ipam-provider-in-cluster, buildkitd, k3s, datadog-operato...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: controller-gen, aws-s3-controller, checksec, cluster-proportional-autoscaler, k3d, timoni, bazelisk, flyte, step-kms-plugin, buildkitd, capslock, yunikorn-web, xeol, neuvector-sigstore-interface, grpcurl, kube-metrics-adapter, yunikorn-k8shim, fluent-bit-plugin-loki,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: step-ca, opentelemetry-collector, zot, sqlpad, flux-kustomize-controller, argo-workflows, hugo, py3-azure-identity, zarf, boring-registry, tkn, trivy, guac, argo-events, spire-server, cortex, terragrunt, thanos, velero, flyte, grafana-agent-operator, hugo-extended,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, argo-workflows, tkn, terragrunt, flux-source-controller, slsa-verifier, dex, vexctl, oauth2-proxy, cosign, aactl, fulcio, tekton-chains, sops, cloudflared, gitsign, kots, rekor, spire-server, kubescape...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: weaviate, kpt, zot, gitness, k3d, timoni, buildkitd, k3s, kubewatch, git-lfs, kind, chartmuseum, flux-source-controller, vertical-pod-autoscaler, oauth2-proxy, grpcurl, newrelic-infrastructure-agent, secrets-store-csi-driver-provider-gcp, rqlite, nodetaint,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: slsa-verifier, ko, apko, tkn, tekton-chains, kubescape, melange, policy-controller, skaffold, aactl, spire-server, flux-source-controller, cosign...

GO-2026-5547 vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, dagger, zarf, ratify, tkn, trivy, guac, bom, teleport, buildkitd, skaffold, crossplane, gitlab-runner, gh, flux-source-controller, slsa-verifier, ko, goreleaser, neuvector-sigstore-interface, vexctl, falcoctl, cosign, docker, aactl, kyverno,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: slsa-verifier, vexctl, falcoctl, skopeo, falco-no-driver, sigstore-scaffolding, zarf, tekton-chains, kubescape, witness, gitsign, kots, aactl, cosign...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: skopeo, zarf, ratify, witness, tkn, undock, flux-source-controller, slsa-verifier, vexctl, falcoctl, podman, sigstore-scaffolding, cosign, aactl, tekton-chains, buildah, falco-no-driver, portieris, gitsign, kots, kyverno-notation-aws, kubescape...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, zarf, ratify, witness, tkn, trivy, teleport, buildkitd, skaffold, flux-source-controller, gh, slsa-verifier, ko, goreleaser, neuvector-sigstore-interface, vexctl, falcoctl, cosign, aactl, tekton-chains, tflint, gitsign, spire-server,...