484 matches found
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: tkn, gitsign, teleport, policy-controller, spire-server, aactl, witness, kyverno-notation-aws, neuvector-sigstore-interface, falcoctl, flux-source-controller, skaffold, kubescape, vexctl, tflint, ko, ratify, goreleaser, zot, gh, docker-cli-buildx, tekton-chains,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: tkn, docker, gitsign, teleport, trivy, policy-controller, spire-server, aactl, buildkitd, crossplane, witness, kyverno-notation-aws, neuvector-sigstore-interface, falcoctl, flux-source-controller, skaffold, kubescape, vexctl, tflint, ko, ratify, slsa-verifier,...
GO-2026-4355 vulnerabilities
Vulnerabilities for packages: tkn, gitsign, teleport, trivy, policy-controller, spire-server, aactl, buildkitd, witness, kyverno-notation-aws, neuvector-sigstore-interface, falcoctl, flux-source-controller, skaffold, kubescape, vexctl, tflint, ko, ratify, slsa-verifier, goreleaser, zot, gh,...
GO-2026-4349 vulnerabilities
Vulnerabilities for packages: tkn, docker, gitsign, teleport, trivy, policy-controller, spire-server, aactl, buildkitd, witness, kyverno-notation-aws, neuvector-sigstore-interface, falcoctl, flux-source-controller, skaffold, kubescape, vexctl, tflint, ko, ratify, slsa-verifier, goreleaser, zot, g...
GO-2025-3849 vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, kratos, openfga, paranoia, aws-eks-pod-identity-agent, aws-flb-cloudwatch, polaris, cass-operator, kine, influx, op-geth, yunikorn-k8shim, aws-node-termination-handler, kube-state-metrics, crossplane-provider-azure-managedidentity,...
GO-2024-3166 vulnerabilities
Vulnerabilities for packages: tkn, gitsign, trivy, policy-controller, spire-server, aactl, apko, wolfictl, neuvector-sigstore-interface, falcoctl, flux-source-controller, kubescape, vexctl, melange, slsa-verifier, zot, gh, tekton-chains, sigstore-scaffolding, rekor, zarf, cosign...
GO-2025-3488 vulnerabilities
Vulnerabilities for packages: prometheus-alertmanager, rabbitmq-cluster-operator, openfga, azcopy, temporal-server, vertical-pod-autoscaler, nodetaint, nri-kubernetes, cass-operator, opentelemetry-operator, kyverno-policy-reporter-kyverno-plugin, yunikorn-k8shim, kube-vip, fluent-operator,...
GO-2025-3447 vulnerabilities
Vulnerabilities for packages: buildah, docker-credential-acr-env, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, openfga, paranoia, azcopy, aws-flb-cloudwatch, temporal-server, vertical-pod-autoscaler, nodetaint, nri-kubernetes, nsc, cass-operator,...
GO-2024-2888 vulnerabilities
Vulnerabilities for packages: buildah, docker-credential-acr-env, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, paranoia, aws-flb-cloudwatch, nodetaint, nri-kubernetes, nsc, cass-operator, influx, kyverno-policy-reporter-kyverno-plugin, kube-vip, terraform-docs,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: rook, tkn, gitsign, timestamp-authority, crossplane-provider-family-azure, grafana-mimir, ksops, step-ca, policy-controller, spire-server, aactl, buildkitd, flux-helm-controller, argo-events, actions-runner-controller, nuclei, flux-image-reflector-controller, pulumi,...
GO-2024-2718 vulnerabilities
Vulnerabilities for packages: tkn, gitsign, policy-controller, spire-server, aactl, apko, wolfictl, neuvector-sigstore-interface, falcoctl, flux-source-controller, skaffold, kubescape, vexctl, ko, melange, slsa-verifier, goreleaser, zot, tekton-chains, zarf...
CLEANSTART-2026-SK52724 Security fixes in cosign 3.1.2-r1
Package cosign version 3.1.2-r1 fixes 9 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-49835, ghsa-9c54-x2g4-v92j...
CLEANSTART-2026-RN13668 Security fixes in cosign 2.6.4-r2
Package cosign version 2.6.4-r2 fixes 2 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.3-0.1.hum1 aarch64, x8664 cosign-3.1.3-0.1.hum1.src src...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.2-0.3.hum1 aarch64, x8664 cosign-3.1.2-0.3.hum1.src src Security Fixes: cosign: CVE-2026-56852...
cosign v3.1.3
cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: tbot, policy-controller, goreleaser, teleport-operator-fips, skaffold, policy-controller-fips, kubescape-server-fips, docker-fips, aactl, kyverno-notation-aws-fips, trivy-operator-fips, cloudbeat, cosign, ko-fips, kyverno, tkn, kyverno-notation-aws, spire-server,...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: tbot, policy-controller, goreleaser, teleport-operator-fips, skaffold, policy-controller-fips, kubescape-server-fips, docker-fips, aactl, kyverno-notation-aws-fips, trivy-operator-fips, cloudbeat, cosign, ko-fips, kyverno, tkn, kyverno-notation-aws, spire-server,...