GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: crossplane, ko, buildkitd, trivy-operator, zarf, flux-source-controller, trivy, sigstore-scaffolding, tekton-chains, witness, skaffold, docker, tkn, policy-controller, cosign, falcoctl, kyverno, gh, tflint, kyverno-notation-aws, spire-server, goreleaser, aactl, zot,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: crossplane, ko, buildkitd, trivy-operator, zarf, flux-source-controller, trivy, sigstore-scaffolding, tekton-chains, witness, skaffold, docker, tkn, policy-controller, cosign, falcoctl, kyverno, gh, tflint, kyverno-notation-aws, spire-server, goreleaser, aactl, zot,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: sqlexporter, openbao-fips, vault-csi-provider, gitsign, kaniko-fips, podman-fips, livekit-server-fips, velero, external-secrets-operator, cloudflared, boring-registry-fips, sigstore-scaffolding, grype-db, telegraf, argo-workflows-fips, steampipe,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: sqlexporter, openbao-fips, vault-csi-provider, gitsign, kaniko-fips, podman-fips, livekit-server-fips, velero, external-secrets-operator, cloudflared, boring-registry-fips, sigstore-scaffolding, grype-db, telegraf, argo-workflows-fips, steampipe,...

GHSA-4QG8-FJ49-PXJH vulnerabilities

Vulnerabilities for packages: ko, ko-fips, chainctl, zarf, tflint, policy-controller, crossplane, kyverno-notation-aws-fips, teleport-operator-fips, tkn-fips, image-factory-fips, falcoctl-fips, tekton-chains, skaffold, tkn, cosign, gitsign, falcoctl, neuvector-sigstore-interface, tflint-fips,...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: ko, ko-fips, chainctl, zarf, tflint, policy-controller, crossplane, kyverno-notation-aws-fips, teleport-operator-fips, tkn-fips, image-factory-fips, falcoctl-fips, tekton-chains, skaffold, tkn, cosign, gitsign, falcoctl, neuvector-sigstore-interface, tflint-fips,...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: cosign, slsa-verifier, gh, cosign-fips...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: cosign, slsa-verifier, gh, cosign-fips...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: zarf, policy-controller, datadog-agent-fips, cosign, conftest-fips, kyverno-fips, gatekeeper, policy-controller-fips, kubescape, spire-server-fips, kyverno, snyk-cli, cosign-fips, opa, kots, conftest, k8sgpt, datadog-agent, tfsec, zot, gatekeeper-fips, spire-server...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, kpt, flux-image-reflector-controller, ko-fips, k3d, chartmuseum, zarf, nerdctl, policy-controller, datadog-agent-fips, buildkitd, loki, tekton-chains, falcoctl-fips, cadvisor-fips, cri-tools, argo-workflows, k9s, skaffold, cosign, ctop, falcoctl,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, kpt, flux-image-reflector-controller, ko-fips, k3d, chartmuseum, zarf, nerdctl, policy-controller, datadog-agent-fips, buildkitd, loki, tekton-chains, falcoctl-fips, cadvisor-fips, cri-tools, argo-workflows, k9s, skaffold, cosign, ctop, falcoctl,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, flux-source-controller, crossplane-provider-aws, crossplane-provider-aws-firehose, zarf, crossplane-provider-aws-cloudformation, policy-controller, syft, wolfictl, crossplane, gomplate, crossplane-provider-aws-sns, falcoctl-fips, argo-workflows,...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: gitsign, vexctl, falco, falcoctl-fips, kubescape, tekton-chains, falcoctl, cosign-fips...