GO-2024-3166 vulnerabilities

Vulnerabilities for packages: slsa-verifier, zot, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, aactl, wolfictl, spire-server, vexctl, melange, trivy, cosign, policy-controller, falcoctl, rekor, apko, sigstore-scaffolding, zarf, tekton-chains, flux-source-controller...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, scorecard, skopeo, slsa-verifier, sops, opentelemetry-collector, zot, guac, fulcio, buildkitd, src-fingerprint, nuclei, step-ca, flux-image-automation-controller, rook, tkn, kubescape, flux-image-reflector-controller, gh, gitsign,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape, kyverno, skopeo, slsa-verifier, witness, gitsign, kots, zarf, undock, podman, ratify, buildah, aactl, flux-source-controller, tekton-chains, falcoctl...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape, kyverno, skopeo, slsa-verifier, witness, gitsign, kots, zarf, undock, podman, ratify, buildah, aactl, flux-source-controller, tekton-chains, falcoctl...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, portieris-fips, undock, buildah-fips, zarf, flux-source-controller-fips, kubescape-server, podman-fips, skopeo, tekton-chains, chainctl, witness, falcoctl-fips, kubescape-server-fips, gitsign, kyverno-fips, flux-source-controller,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, portieris-fips, undock, buildah-fips, zarf, flux-source-controller-fips, kubescape-server, podman-fips, skopeo, tekton-chains, chainctl, witness, falcoctl-fips, kubescape-server-fips, gitsign, kyverno-fips, flux-source-controller,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: calico-fips, flux, flux-image-automation-controller, commercial-grafana, flux-source-controller-fips, snyk-cli, mattermost-fips, cloud-provider-aws, kubernetes-dashboard, elastic-agent-fips, gitlab-rails-ce, harbor, frankenphp-8.2, prometheus-mongodb-exporter,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: act, calico-fips, buildah-fips, crossplane-provider-azure-web, flux, kubernetes-dashboard, ko, crossplane-aws-provider, commercial-grafana, crossplane-provider-azure-authorization, flux-image-automation-controller, mapotf, flux-source-controller-fips, rancher-machine...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: calico-fips, flux, flux-image-automation-controller, commercial-grafana, flux-source-controller-fips, snyk-cli, mattermost-fips, cloud-provider-aws, kubernetes-dashboard, elastic-agent-fips, gitlab-rails-ce, harbor, frankenphp-8.2, prometheus-mongodb-exporter,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: act, calico-fips, flux, flux-image-automation-controller, commercial-grafana, mapotf, flux-source-controller-fips, terraform-fips, snyk-cli, mattermost-fips, cloud-provider-aws, podman-fips, kubernetes-dashboard, elastic-agent-fips, gitlab-rails-ce, harbor,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: act, calico-fips, flux, rancher-machine, flux-image-automation-controller, commercial-grafana, mapotf, flux-source-controller-fips, terraform-fips, snyk-cli, mattermost-fips, cloud-provider-aws, podman-fips, buildkitd, kubernetes-dashboard, elastic-agent-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, terraform-provider-tls, prometheus, pulumi-language-dotnet, opentelemetry-collector, k8sgpt, cloud-provider-aws, external-secrets-operator, rancher-machine, tflint, buildah, steampipe, chezmoi, gh, neuvector-sigstore-interface, pulumi,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: kyverno, scorecard, pulumi-language-dotnet, trufflehog, gitaly, zot, grafana-alloy, guac, argo-cd, kots, external-secrets-operator, src-fingerprint, nuclei, rancher-fleet, pulumi-language-yaml, flux-image-automation-controller, steampipe, kubescape, xeol, gitsign,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: act, flux, flux-image-automation-controller, mapotf, snyk-cli, gitlab-rails-ce, skaffold, witness, coder-fips, grype-fips, pulumi-language-yaml, gitsign, syft-fips, k9s, gitlab-rails-ce-fips, argocd-image-updater, crossplane, chainctl-fips, trufflehog-fips,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, docker-cli-buildx, trivy-operator, zot, guac, buildkitd, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, gitlab-runner, aactl, crossplane, spire-server, bom, vexctl, trivy, cosign, policy-controller, docker,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: ko, flux-source-controller-fips, neuvector-sigstore-interface, buildkitd, ko-fips, rekor, skaffold, falcoctl-fips, neuvector-sigstore-interface-fips, gitsign, docker-cli-buildx, kyverno-notation-aws-fips, falcoctl, crossplane, chainctl-fips, slsa-verifier, guac,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, docker-cli-buildx, trivy-operator, zot, buildkitd, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, aactl, crossplane, spire-server, vexctl, trivy, cosign, policy-controller, docker, falcoctl,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, docker-cli-buildx, trivy-operator, zot, buildkitd, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, aactl, crossplane, spire-server, vexctl, trivy, cosign, policy-controller, docker, falcoctl,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, local-path-provisioner, aws-load-balancer-controller, omnibump, supercronic, volume-modifier-for-k8s, external-secrets-operator, kubewatch, dgraph, malcontent, flux-image-automation-controller, dbmate, newrelic-infra-operator, victoriametrics,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: terraform-provider-tls, argo-rollouts, runc, prometheus, cert-manager-cmctl, spqr, keda, crossplane-provider-keycloak, filebrowser, libnvidia-container, cloud-provider-aws, external-secrets-operator, falco-no-driver, cis-operator, promxy, dgraph, buildah,...