GO-2024-3141 vulnerabilities

Vulnerabilities for packages: opa, kots, snyk-cli, conftest, cosign, zarf, zot, tfsec, policy-controller, k8sgpt, spire-server, kubescape...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: kots, conftest, cosign, kyverno-notation-aws, witness, tfsec, trivy, policy-controller, spire-server...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, slsa-verifier, cosign...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: trivy-operator, cosign, buildkitd, kyverno-notation-aws, trivy, kyverno, spire-server, sigstore-scaffolding, goreleaser, flux-source-controller, tekton-chains, zarf, vexctl, tflint, docker, teleport, tkn, gh, ko, skaffold, policy-controller, crossplane,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, grype, docker-compose, traefik, azure-workload-identity-webhook, rke2-cloud-provider, k3d, kubescape-operator, k6, sops, kube-metrics-adapter, kine, prometheus, cloudprober, coredns, kubevela, opentofu, grafana-image-renderer, k8sgateway...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: redka, aws-signer-notation-plugin, spqr, wave, cadvisor, php-fpmexporter, sriov-network-device-plugin, gobuster, bom, openbao-k8s, nova, yunikorn-k8shim, ferretdb, spegel, terraform-provider-sendgrid, rancher-webhook, argo-rollouts, delve, stern,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: cosign, rekor, buildkitd, boring-registry, nuclei, py3-cassandra-medusa, tempo, trivy, guac, pulumi, sops, chezmoi, sigstore-scaffolding, rclone, goreleaser, flux-source-controller, spire-server, secrets-store-csi-driver-provider-azure, flux, tekton-chains, ksops,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: kots, cosign, rekor, sops, dex, spire-server, flux-source-controller, tekton-chains, vexctl, tkn, oauth2-proxy, cloudflared, terragrunt, slsa-verifier, kubescape, aactl, gitsign, argo-workflows, flux-kustomize-controller, fulcio...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, kube-state-metrics, k3d, secrets-store-csi-driver, gobuster, kubevela, cue, gitness, bom, fuse-overlayfs-snapshotter, chartmuseum, memcached-exporter, kubewatch, k8sgpt, kubernetes-ingress-defaultbackend, prometheus-operator,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: apko, tkn, aactl, tekton-chains, cosign, ko, skaffold, policy-controller, slsa-verifier, melange, spire-server, flux-source-controller, kubescape...

GO-2026-5547 vulnerabilities

Vulnerabilities for packages: trivy-operator, ratify, dagger, cosign, rekor, buildkitd, docker-compose, kyverno-notation-aws, trivy, kyverno, guac, spire-server, flux-source-controller, goreleaser, tekton-chains, zarf, vexctl, tflint, docker, bom, teleport, tkn, gh, ko, skaffold, policy-controlle...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: ratify, cosign, kyverno-notation-aws, kyverno, spire-server, sigstore-scaffolding, goreleaser, flux-source-controller, tekton-chains, zarf, vexctl, tflint, teleport, tkn, gh, ko, skaffold, policy-controller, crossplane, neuvector-sigstore-interface, kubescape, aactl,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: kots, ratify, cosign, kyverno-notation-aws, kyverno, portieris, sigstore-scaffolding, flux-source-controller, tekton-chains, zarf, vexctl, podman, skopeo, tkn, undock, slsa-verifier, kubescape, buildah, aactl, gitsign, witness, falcoctl, falco-no-driver...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: trivy-operator, ratify, cosign, buildkitd, kyverno-notation-aws, trivy, kyverno, spire-server, goreleaser, flux-source-controller, tekton-chains, zarf, vexctl, tflint, teleport, tkn, gh, ko, skaffold, policy-controller, crossplane, slsa-verifier,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: trivy-operator, ratify, cosign, buildkitd, kyverno-notation-aws, trivy, kyverno, spire-server, sigstore-scaffolding, goreleaser, flux-source-controller, tekton-chains, zarf, vexctl, tflint, docker, teleport, tkn, gh, ko, skaffold, policy-controller, crossplane,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kubescape, kots, aactl, tekton-chains, gitsign, cosign, zarf, vexctl, witness, sigstore-scaffolding, slsa-verifier, falcoctl, skopeo, falco-no-driver...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: trivy-operator, ratify, cosign, buildkitd, kyverno-notation-aws, trivy, kyverno, spire-server, goreleaser, flux-source-controller, tekton-chains, zarf, vexctl, tflint, teleport, tkn, gh, ko, skaffold, policy-controller, crossplane, slsa-verifier,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: trivy-operator, ratify, cosign, rekor, buildkitd, kyverno-notation-aws, trivy, kyverno, spire-server, sigstore-scaffolding, goreleaser, flux-source-controller, tekton-chains, zarf, vexctl, tflint, docker, teleport, tkn, gh, ko, skaffold, policy-controller, crossplane...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: trufflehog, nri-kafka, redka, aws-signer-notation-plugin, kubernetes-dashboard-api, bom, fuse-overlayfs-snapshotter, openbao-k8s, nova, yunikorn-k8shim, kubewatch, metallb, kubernetes-dns-node-cache, spegel, cloudnative-pg, polaris, terraform-provider-sendgrid, dex,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: cosign, rekor, trivy, wolfictl, spire-server, sigstore-scaffolding, flux-source-controller, tekton-chains, zarf, vexctl, melange, tkn, gh, policy-controller, slsa-verifier, neuvector-sigstore-interface, kubescape, apko, aactl, gitsign, zot, falcoctl...