GO-2026-5547 vulnerabilities

Vulnerabilities for packages: goreleaser, teleport, flux-source-controller, kubescape, bom, gitlab-runner, docker, trivy, ko, gh, rekor, gitsign, kyverno-notation-aws, crossplane, aactl, tflint, zarf, dagger, guac, neuvector-sigstore-interface, tekton-chains, slsa-verifier, policy-controller,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kubescape, podman, portieris, gitsign, kyverno-notation-aws, aactl, zarf, falco-no-driver, witness, tekton-chains, sigstore-scaffolding, slsa-verifier, ratify, vexctl, undock, falcoctl, buildah, cosign, kots, skopeo, tkn...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: goreleaser, teleport, flux-source-controller, kubescape, trivy, ko, gh, gitsign, kyverno-notation-aws, aactl, tflint, zarf, witness, neuvector-sigstore-interface, tekton-chains, slsa-verifier, policy-controller, ratify, vexctl, skaffold, buildkitd, falcoctl,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: goreleaser, teleport, flux-source-controller, kubescape, ko, gh, gitsign, kyverno-notation-aws, aactl, tflint, zarf, witness, neuvector-sigstore-interface, tekton-chains, sigstore-scaffolding, policy-controller, ratify, docker-cli-buildx, vexctl, skaffold, falcoctl,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: goreleaser, teleport, flux-source-controller, kubescape, trivy, ko, gh, gitsign, kyverno-notation-aws, aactl, tflint, zarf, witness, neuvector-sigstore-interface, tekton-chains, slsa-verifier, policy-controller, ratify, vexctl, skaffold, buildkitd, falcoctl,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: goreleaser, teleport, flux-source-controller, kubescape, docker, trivy, ko, gh, gitsign, kyverno-notation-aws, crossplane, aactl, tflint, zarf, witness, neuvector-sigstore-interface, tekton-chains, sigstore-scaffolding, slsa-verifier, policy-controller, kyverno,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: gitsign, tekton-chains, sigstore-scaffolding, slsa-verifier, kubescape, cosign, aactl, kots, vexctl, zarf, falco-no-driver, skopeo, witness, falcoctl...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: goreleaser, teleport, flux-source-controller, kubescape, docker, trivy, ko, gh, rekor, gitsign, kyverno-notation-aws, aactl, tflint, zarf, witness, neuvector-sigstore-interface, tekton-chains, sigstore-scaffolding, slsa-verifier, policy-controller, ratify, vexctl,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: k8sgpt, glow, prometheus-operator, spicedb, weaviate, nri-nagios, http-echo, trust-manager, kubernetes-release, terraform, witness, conftest, dive, minio-operator, kind, rook, yq, step, sqlexporter, buildkitd, splunk-otel-collector, falco-exporter, configmap-reload,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kubescape, melange, trivy, wolfictl, gh, rekor, gitsign, aactl, zarf, neuvector-sigstore-interface, tekton-chains, sigstore-scaffolding, slsa-verifier, policy-controller, vexctl, falcoctl, spire-server, zot, cosign, tkn, apko...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: k8sgpt, prometheus-operator, chezmoi, spark-operator, crossplane-provider-aws-s3, kubernetes-csi-external-resizer, weaviate, trust-manager, crossplane-provider-family-aws, terraform, terraform-provider-acme, gostatsd, conftest, minio-operator, nri-kubernetes, rook,...

GO-2024-2888 vulnerabilities

Vulnerabilities for packages: kustomize, regclient, k8sgpt, prometheus-operator, chezmoi, spicedb, weaviate, nri-nagios, http-echo, trust-manager, terraform, ctop, gostatsd, conftest, dive, nri-kubernetes, kind, rook, yq, cadvisor, step, buildkitd, configmap-reload, skopeo, go-licenses,...

GO-2025-3447 vulnerabilities

Vulnerabilities for packages: kustomize, regclient, k8sgpt, glow, prometheus-operator, chezmoi, spark-operator, spicedb, crossplane-provider-aws-s3, kubernetes-csi-external-resizer, git-sync, weaviate, nri-nagios, http-echo, linkerd2-proxy-init, trust-manager, kubernetes-release,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: goreleaser, flux-source-controller, crossplane-provider-family-azure, kubescape, crossplane-provider-azure-managedidentity, ksops, step-ca, gh, crossplane-provider-azure-sql, opentelemetry-collector-contrib, pulumi, fulcio, flux, kubernetes-event-exporter, rekor,...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: goreleaser, flux-source-controller, kubescape, melange, ko, wolfictl, gitsign, aactl, zarf, neuvector-sigstore-interface, tekton-chains, slsa-verifier, policy-controller, vexctl, skaffold, falcoctl, spire-server, zot, tkn, apko...

CLEANSTART-2026-RN13668 Security fixes in cosign 2.6.4-r2

Package cosign version 2.6.4-r2 fixes 2 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-SK52724 Security fixes in cosign 3.1.2-r1

Package cosign version 3.1.2-r1 fixes 9 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-49835, ghsa-9c54-x2g4-v92j...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.3-0.1.hum1 aarch64, x8664 cosign-3.1.3-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.2-0.3.hum1 aarch64, x8664 cosign-3.1.2-0.3.hum1.src src Security Fixes: cosign: CVE-2026-56852...

GHSA-WQQC-JJCQ-VFXM vulnerabilities

Vulnerabilities for packages: tbot, teleport-operator-fips, falcoctl, flux-source-controller, cloudbeat-fips, kyverno, trivy-fips, cosign, neuvector-sigstore-interface-fips, skaffold, skaffold-fips, falcoctl-fips, kyverno-notation-aws-fips, tkn-fips, ko, trivy-operator, commercial-kyverno,...