GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno, docker-cli-buildx, zot, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, aactl, crossplane, spire-server, vexctl, cosign, policy-controller, falcoctl, kyverno-notation-aws, witness, goreleaser, sigstore-scaffolding, zarf,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: tkn, kyverno-notation-aws, kyverno, witness, goreleaser, gitsign, zot, teleport, ratify, policy-controller, aactl, flux-source-controller, falcoctl...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, docker-cli-buildx, trivy-operator, zot, buildkitd, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, aactl, crossplane, spire-server, vexctl, trivy, cosign, policy-controller, docker, falcoctl,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kubescape, skopeo, slsa-verifier, witness, vexctl, gitsign, sigstore-scaffolding, kots, zarf, falco-no-driver, aactl, cosign, tekton-chains, falcoctl...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, trivy-operator, zot, buildkitd, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, aactl, crossplane, spire-server, vexctl, trivy, cosign, policy-controller, docker, falcoctl, kyverno-notation-aws, witness, rekor,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, scorecard, skopeo, slsa-verifier, sops, opentelemetry-collector, zot, guac, fulcio, buildkitd, src-fingerprint, nuclei, step-ca, flux-image-automation-controller, rook, tkn, kubescape, flux-image-reflector-controller, gh, gitsign,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: zarf, policy-controller, policy-controller-fips, neuvector-sigstore-interface, image-factory, trivy-fips, kubescape-server, image-factory-fips, teleport-operator-fips, tekton-chains, crossplane-fips, docker-fips, falcoctl-fips, kubescape-server-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: act, calico-fips, buildah-fips, crossplane-provider-azure-web, flux, kubernetes-dashboard, ko, crossplane-aws-provider, commercial-grafana, crossplane-provider-azure-authorization, flux-image-automation-controller, mapotf, flux-source-controller-fips, rancher-machine...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, terraform-provider-tls, prometheus, pulumi-language-dotnet, opentelemetry-collector, k8sgpt, cloud-provider-aws, external-secrets-operator, rancher-machine, tflint, buildah, steampipe, chezmoi, gh, neuvector-sigstore-interface, pulumi,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: argo-rollouts, cloudnative-pg, cilium, docker-cli-buildx, kubernetes-dashboard-api, k8sgpt, headlamp, rancher, argo-cd, cilium-cli, kots, consul-k8s, rancher-fleet, jitsucom-bulker, sonobuoy, kube-arangodb, kubescape, postgres-operator, velero, eksctl, kpt, kwok,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: argo-rollouts, cloudnative-pg, cilium, docker-cli-buildx, kubernetes-dashboard-api, k8sgpt, headlamp, rancher, argo-cd, cilium-cli, kots, consul-k8s, rancher-fleet, jitsucom-bulker, sonobuoy, kube-arangodb, kubescape, postgres-operator, velero, eksctl, kpt, kwok,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, docker-cli-buildx, trivy-operator, zot, buildkitd, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, aactl, crossplane, spire-server, vexctl, trivy, cosign, policy-controller, docker, falcoctl,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, docker-cli-buildx, trivy-operator, zot, buildkitd, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, aactl, crossplane, spire-server, vexctl, trivy, cosign, policy-controller, docker, falcoctl,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: terraform-provider-tls, argo-rollouts, runc, prometheus, cert-manager-cmctl, spqr, keda, crossplane-provider-keycloak, filebrowser, libnvidia-container, cloud-provider-aws, external-secrets-operator, falco-no-driver, cis-operator, promxy, dgraph, buildah,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: harbor-registry-fips, flux, step, external-secrets-fips, restic, druid, trino, buildkitd, rekor, flux-image-reflector-controller, falcoctl-fips, hugo-extended, step-ca-fips, cortex-fips, falcoctl, flyte, fulcio, thanos-fips, tempo,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, sops, opentelemetry-collector, k8sgpt, step, trino, guac, fulcio, restic, boring-registry, buildkitd, zot, nuclei, wal-g, step-ca, rook, tkn, chezmoi, druid, kubescape, velero, py3-azure-identity, airflow, flux-image-reflector-controller,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: vexctl, zarf, wolfictl, apko, ko, policy-controller, policy-controller-fips, neuvector-sigstore-interface, tekton-chains, chainctl, ko-fips, skaffold, falcoctl-fips, tkn-fips, gitsign, flux-source-controller, spire-server, melange, falcoctl, zot, slsa-verifier,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: slsa-verifier, zot, ko, tkn, kubescape, gitsign, neuvector-sigstore-interface, skaffold, wolfictl, aactl, spire-server, vexctl, melange, policy-controller, falcoctl, apko, goreleaser, zarf, tekton-chains, flux-source-controller...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: slsa-verifier, zot, ko, tkn, kubescape, gitsign, neuvector-sigstore-interface, skaffold, wolfictl, aactl, spire-server, vexctl, melange, policy-controller, falcoctl, apko, goreleaser, zarf, tekton-chains, flux-source-controller...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: slsa-verifier, zot, ko, tkn, kubescape, gitsign, neuvector-sigstore-interface, skaffold, wolfictl, aactl, spire-server, vexctl, melange, policy-controller, falcoctl, apko, goreleaser, zarf, tekton-chains, flux-source-controller...