CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: flux-source-controller, trivy-operator, buildkitd, skaffold, ko, gitsign, gh, docker, trivy, sigstore-scaffolding, crossplane, cosign, vexctl, neuvector-sigstore-interface, docker-cli-buildx, zot, falcoctl, spire-server, kyverno-notation-aws, kyverno, aactl, zarf,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: flux-source-controller, trivy-operator, buildkitd, skaffold, ko, gitsign, gh, docker, trivy, sigstore-scaffolding, crossplane, cosign, vexctl, neuvector-sigstore-interface, docker-cli-buildx, zot, falcoctl, spire-server, kyverno-notation-aws, kyverno, aactl, zarf,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: grype-fips, commercial-chainloop-backend, gitaly, google-guest-agent, consul-k8s-fips, percona-server-mongodb-operator-fips, k8sgpt, trivy, temporal, slsa-verifier, k3s, falcosidekick, openbao, rekor-fips, opentofu-fips, containerd-fips, loki-fips, image-factory,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: grype-fips, commercial-chainloop-backend, gitaly, google-guest-agent, consul-k8s-fips, percona-server-mongodb-operator-fips, k8sgpt, trivy, temporal, slsa-verifier, k3s, falcosidekick, openbao, rekor-fips, opentofu-fips, containerd-fips, loki-fips, image-factory,...

GHSA-4QG8-FJ49-PXJH vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, falcoctl-fips, gh, neuvector-sigstore-interface, zarf, tflint-fips, docker-cli-buildx, cosign, cg, aactl, crossplane-fips, kyverno-notation-aws, cosign-fips, skaffold-fips, gitsign, tkn, cloudbeat-fips, image-factory-fips, spire-server-fips,...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, falcoctl-fips, gh, neuvector-sigstore-interface, zarf, tflint-fips, docker-cli-buildx, cosign, cg, aactl, crossplane-fips, kyverno-notation-aws, cosign-fips, skaffold-fips, gitsign, tkn, cloudbeat-fips, image-factory-fips, spire-server-fips,...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: gh, slsa-verifier, cosign-fips, cosign...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: gh, slsa-verifier, cosign-fips, cosign...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: zarf, cosign, snyk-cli, cosign-fips, gatekeeper, k8sgpt, datadog-agent-fips, tfsec, spire-server-fips, kots, policy-controller-fips, zot, gatekeeper-fips, datadog-agent, kubescape, spire-server, kyverno, conftest, conftest-fips, opa, kyverno-fips, policy-controller...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: flux-helm-controller, dagger, falcoctl-fips, cadvisor-fips, helm, argo-workflows, k9s, newrelic-infrastructure-agent, zarf, cosign, timoni, aactl, crane, kubeflow-katib, ctop, cosign-fips, helm-operator-fips, pulumi, kubevela, buildkitd, scorecard, gitsign, k8sgpt,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, dagger, falcoctl-fips, cadvisor-fips, helm, argo-workflows, k9s, newrelic-infrastructure-agent, zarf, cosign, timoni, aactl, crane, kubeflow-katib, ctop, cosign-fips, helm-operator-fips, pulumi, kubevela, buildkitd, scorecard, gitsign, k8sgpt,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, falcoctl-fips, crossplane-provider-aws-iam, argo-workflows, melange, actions-runner-controller, crossplane-provider-aws-rds, zarf, cosign, flux-kustomize-controller, crossplane-provider-aws-eks, aactl, gitness, rclone, grype,...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, gitsign, vexctl, falco, tekton-chains, falcoctl, kubescape, cosign-fips...