GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, goreleaser, cosign, kyverno-notation-aws, spire-server, vexctl, teleport, witness, skaffold, ko, ratify, zot, sigstore-scaffolding, kubescape, gh, policy-controller, neuvector-sigstore-interface, gitsign, falcoctl, zarf, tflint,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: tkn, goreleaser, ratify, teleport, kyverno-notation-aws, zot, gitsign, falcoctl, flux-source-controller, policy-controller, witness, aactl...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, trivy-operator, goreleaser, cosign, kyverno-notation-aws, buildkitd, kyverno, spire-server, vexctl, teleport, witness, skaffold, ko, ratify, zot, sigstore-scaffolding, kubescape, gh, policy-controller, neuvector-sigstore-interface, docker, gitsign...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: tekton-chains, falco-no-driver, cosign, sigstore-scaffolding, slsa-verifier, kubescape, witness, gitsign, falcoctl, kots, vexctl, zarf, skopeo, aactl...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, trivy-operator, goreleaser, cosign, kyverno-notation-aws, buildkitd, spire-server, vexctl, teleport, witness, skaffold, ko, ratify, zot, sigstore-scaffolding, kubescape, gh, policy-controller, neuvector-sigstore-interface, rekor, docker, gitsign,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kargo, tekton-chains, tkn, goreleaser, ksops, cosign, crossplane-provider-azure, kubernetes-event-exporter, kubevela, buildkitd, flux, pulumi, glab, flux-helm-controller, spire-server, vexctl, actions-runner-controller, flux-image-reflector-controller, step-ca, k3d,...

CLEANSTART-2026-QB53926 Security fixes in falcoctl 0.11.0-r1

Package falcoctl version 0.11.0-r1 fixes 1 vulnerabilities: ghsa-whqx-f9j3-ch6m...

PT-2026-85997

Package falcoctl version 0.11.0-r1 fixes 1 vulnerabilities: ghsa-whqx-f9j3-ch6m...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: crossplane, cloudbeat, kubescape-server, falcoctl, kyverno-fips, trivy-fips, tflint-fips, crossplane-fips, aactl, tflint, tkn-fips, neuvector-sigstore-interface-fips, trivy-operator, image-factory, kyverno, kyverno-notation-aws-fips, ratify, tbot, zarf-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, gitlab-rails-ce, age, crossplane, kine, knative-serving-fips, snyk-cli, sops, prometheus-podman-exporter, crossplane-provider-azure-purview, gitlab-kas, step-issuer-fips, podman, seaweedfs-rocksdb, crossplane-provider-family-azure, fulci...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: rancher-agent, tekton-chains, trivy-operator, kyverno, pulumi, rootlesskit, gatus, rancher, ko, istio, syft, kots, gh, k9s, gomplate, crossplane-provider-family-azure, step-kms-plugin, cloud-provider-aws, docker, eksctl, crossplane-provider-azure-sql, k8sgpt, sops,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kargo, rancher-agent, trivy-operator, jitsucom-bulker, argo-workflows, kubevela, cluster-api, percona-server-mongodb-operator, kube-arangodb, terraform-provider-kubernetes, cilium, cri-tools, teleport, hubble, gitlab-runner, rancher, gitlab-kas, emissary, headlamp,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kargo, rancher-agent, trivy-operator, jitsucom-bulker, argo-workflows, kubevela, cluster-api, percona-server-mongodb-operator, kube-arangodb, terraform-provider-kubernetes, cilium, cri-tools, teleport, hubble, gitlab-runner, rancher, gitlab-kas, emissary, headlamp,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, trivy-operator, goreleaser, cosign, kyverno-notation-aws, buildkitd, kyverno, spire-server, vexctl, teleport, witness, skaffold, ko, ratify, zot, sigstore-scaffolding, kubescape, gh, policy-controller, neuvector-sigstore-interface, docker, gitsign...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, trivy-operator, goreleaser, cosign, kyverno-notation-aws, buildkitd, kyverno, spire-server, vexctl, teleport, witness, skaffold, ko, ratify, zot, sigstore-scaffolding, kubescape, gh, policy-controller, neuvector-sigstore-interface, docker, gitsign...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: coredns, rancher-agent, trivy-operator, kubernetes-dashboard-auth, argo-workflows, kyverno-notation-aws, kyverno, flux-helm-controller, grpcurl, terraform-provider-kubernetes, gatus, cri-tools, kyverno-policy-reporter-ui, rancher,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: sops, goreleaser, airflow, request-1276, fulcio, tkn-fips, cortex, vault, terragrunt, policy-controller, falcoctl-fips, sqlpad, cosign-fips, druid, chezmoi, trino, buildkitd, flux-kustomize-controller, step, cortex-fips, kubescape, spire-server-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, prometheus-operator, goreleaser, argo-workflows, cosign, ksops, restic, buildkitd, flux, pulumi, spire-server, flux-image-reflector-controller, step-ca, hugo, fulcio, step, bank-vaults, secrets-store-csi-driver-provider-azure, up, chezmoi,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: flux-source-controller, zot, falcoctl, goreleaser, aactl, wolfictl, tkn-fips, chainctl, ko-fips, skaffold, policy-controller, apko, falcoctl-fips, tekton-chains, zarf, tkn, spire-server, vexctl, gitsign, kubescape, melange, tekton-chains-fips,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, goreleaser, spire-server, vexctl, skaffold, ko, zot, kubescape, policy-controller, neuvector-sigstore-interface, melange, gitsign, apko, slsa-verifier, falcoctl, zarf, flux-source-controller, wolfictl, aactl...