GO-2025-4192 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, goreleaser, aactl, policy-controller, gitsign, sigstore-scaffolding, zot, falcoctl, spire-server, tekton-chains, kyverno-notation-aws, teleport, gh, flux-source-controller, kubescape, witness, vexctl, docker-cli-buildx, tkn, ratify,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, goreleaser, kyverno, aactl, policy-controller, gitsign, sigstore-scaffolding, zot, falcoctl, trivy-operator, crossplane, spire-server, tekton-chains, kyverno-notation-aws, teleport, gh, slsa-verifier, flux-source-controller, kubescape,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, step, rancher-telemetry, ksops, sriov-network-device-plugin, goreleaser, kubernetes-dashboard-api, policy-controller, kubo, flux-image-automation-controller, headlamp, nri-f5, hubble-ui, aws-flb-cloudwatch, paranoia, external-dns, extism...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: falcoctl, tkn, ratify, goreleaser, aactl, policy-controller, gitsign, flux-source-controller, witness, kyverno-notation-aws, teleport, zot...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, goreleaser, aactl, policy-controller, gitsign, sigstore-scaffolding, zot, falcoctl, trivy-operator, spire-server, rekor, tekton-chains, kyverno-notation-aws, teleport, gh, slsa-verifier, flux-source-controller, kubescape, witness, vexctl...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, kubernetes-dashboard-api, headlamp, nri-f5, oauth2-proxy, cluster-api-azure-controller, cerbos, helm-push, k3d, swagger, regclient, kyverno-notation-aws, k8sgpt, kubernetes-csi-driver-nfs, nri-memcached, src, kubernetes-dashboard, dive,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, wolfictl, melange, aactl, policy-controller, gitsign, sigstore-scaffolding, apko, zot, falcoctl, spire-server, rekor, tekton-chains, gh, slsa-verifier, flux-source-controller, kubescape, vexctl, tkn, trivy, zarf, cosign...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, ksops, goreleaser, kubernetes-event-exporter, aactl, policy-controller, argo-events, flux-image-automation-controller, gitsign, sigstore-scaffolding, rook, crossplane-provider-family-azure, terragrunt, zot,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-PM77605 Security fixes in flux-notification-controller-fips 1.9.2-r0

Package flux-notification-controller-fips version 1.9.2-r0 fixes 6 vulnerabilities: CVE-2023-3955, CVE-2023-3676, CVE-2019-11250, ghsa-gcjh-h69q-9w9g, ghsa-259r-337f-4rfw...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, amazon-ssm-agent-fips, nemo, k9s, snyk-cli, pulumi-language-java, mapotf-fips, argo-cd-fips, grype, argo-events, grafana-fips, gitaly-fips, gomplate-fips, kubevela-fips, bom, packer, kyverno-fips, pulumi-kubernetes-operator, rancher-fleet,...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, amazon-ssm-agent-fips, nemo, k9s, snyk-cli, pulumi-language-java, mapotf-fips, argo-cd-fips, grype, argo-events, grafana-fips, gitaly-fips, gomplate-fips, kubevela-fips, bom, packer, kyverno-fips, pulumi-kubernetes-operator, rancher-fleet,...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, amazon-ssm-agent-fips, nemo, k9s, snyk-cli, pulumi-language-java, mapotf-fips, argo-cd-fips, grype, argo-events, grafana-fips, gitaly-fips, gomplate-fips, kubevela-fips, bom, packer, kyverno-fips, pulumi-kubernetes-operator, rancher-fleet,...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, amazon-ssm-agent-fips, nemo, k9s, snyk-cli, pulumi-language-java, mapotf-fips, argo-cd-fips, grype, argo-events, grafana-fips, gitaly-fips, gomplate-fips, kubevela-fips, bom, packer, kyverno-fips, pulumi-kubernetes-operator, rancher-fleet,...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: act, external-secrets-operator, goreleaser, kyverno, argo-events, flux-image-automation-controller, gitsign, grype, xeol, boring-registry, dagger, nfpm, kaniko, zot, rancher-fleet, trivy-operator, cerbos, kubevela, argocd-image-updater, crossplane, nuclei,...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: act, external-secrets-operator, goreleaser, kyverno, argo-events, flux-image-automation-controller, gitsign, grype, xeol, boring-registry, dagger, nfpm, kaniko, zot, rancher-fleet, trivy-operator, cerbos, kubevela, argocd-image-updater, crossplane, nuclei,...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: act, external-secrets-operator, goreleaser, kyverno, argo-events, flux-image-automation-controller, gitsign, grype, xeol, boring-registry, dagger, nfpm, kaniko, zot, rancher-fleet, trivy-operator, cerbos, kubevela, argocd-image-updater, crossplane, nuclei,...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: act, external-secrets-operator, goreleaser, kyverno, argo-events, flux-image-automation-controller, gitsign, grype, xeol, boring-registry, dagger, nfpm, kaniko, zot, rancher-fleet, trivy-operator, cerbos, kubevela, argocd-image-updater, crossplane, nuclei,...

CLEANSTART-2026-YP46917 Security fixes in flux-image-reflector-controller-fips 1.1.2-r0

Package flux-image-reflector-controller-fips version 1.1.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, CVE-2026-29181...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: kaf, flux, upwind-agent, snyk-cli, k3s, terraform, prometheus-mongodb-exporter, reports-server, commercial-expanso-edge, minio, zot, cilium, omnictl-multiarch-fips, nerdctl, omnictl-multiarch, commercial-grafana, loki, kine, prometheus, zitadel, cert-manager, aactl,...