84 matches found
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: flux-source-controller, tekton-chains, trivy-operator, trivy, spire-server, falcoctl, kubescape, crossplane, aactl, policy-controller, skaffold, teleport, kyverno-notation-aws, kyverno, goreleaser, zarf, tkn, ko, neuvector-sigstore-interface, zot...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: flux-source-controller, tekton-chains, trivy-operator, trivy, spire-server, falcoctl, kubescape, crossplane, aactl, policy-controller, skaffold, teleport, kyverno-notation-aws, kyverno, goreleaser, zarf, tkn, ko, neuvector-sigstore-interface, zot...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: tkn-fips, neuvector-sigstore-interface, zot, cosign-fips, kubescape-server, tekton-chains, crossplane-fips, spire-server-fips, policy-controller-fips, docker-fips, spire-server, ko, neuvector-sigstore-interface-fips, goreleaser, cloudbeat-fips, flux-source-controller...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: tkn-fips, neuvector-sigstore-interface, zot, cosign-fips, kubescape-server, tekton-chains, crossplane-fips, spire-server-fips, policy-controller-fips, docker-fips, spire-server, ko, neuvector-sigstore-interface-fips, goreleaser, cloudbeat-fips, flux-source-controller...
Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
MAL-2026-5641 Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: gitea, bom, wolfictl, pulumi-kubernetes-operator, pulumi-language-java, src-fingerprint, k9s, gitsign, gomplate, trivy-operator, flux-image-automation-controller, trivy, trufflehog, nfpm, kargo, gptscript, gitaly, kots, syft, snyk-cli, grype, apko, kubescape,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: gitea, bom, wolfictl, pulumi-kubernetes-operator, pulumi-language-java, src-fingerprint, k9s, gitsign, gomplate, trivy-operator, flux-image-automation-controller, trivy, trufflehog, nfpm, kargo, gptscript, gitaly, kots, syft, snyk-cli, grype, apko, kubescape,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: gitea, bom, wolfictl, pulumi-kubernetes-operator, pulumi-language-java, src-fingerprint, k9s, gitsign, gomplate, trivy-operator, flux-image-automation-controller, trivy, trufflehog, nfpm, kargo, gptscript, gitaly, kots, syft, snyk-cli, grype, apko, kubescape,...
CVE-2026-45570 vulnerabilities
Vulnerabilities for packages: gitea, bom, wolfictl, pulumi-kubernetes-operator, pulumi-language-java, src-fingerprint, k9s, gitsign, gomplate, trivy-operator, flux-image-automation-controller, trivy, trufflehog, nfpm, kargo, gptscript, gitaly, kots, syft, snyk-cli, grype, apko, kubescape,...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: apko, grafana, xeol, snyk-cli, kargo, apko-fips, goreleaser, rancher-fleet, steampipe, gitlab-rails-ce, pulumi-language-yaml, argocd-image-updater-fips, witness, zarf, kubescape-server-fips, chainctl-fips, skaffold-fips, trufflehog-fips, terragrunt-fips,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: apko, grafana, xeol, snyk-cli, kargo, apko-fips, goreleaser, rancher-fleet, steampipe, gitlab-rails-ce, pulumi-language-yaml, argocd-image-updater-fips, witness, zarf, kubescape-server-fips, chainctl-fips, skaffold-fips, trufflehog-fips, terragrunt-fips,...
GHSA-GXHX-2686-5H9G vulnerabilities
Vulnerabilities for packages: kubewatch, argo-events, kyverno-policy-reporter, argo-rollouts, goreleaser, bento, atlantis, argo-cd, kubernetes-event-exporter...
GHSA-V8VW-GW5J-W7M6 vulnerabilities
Vulnerabilities for packages: goreleaser...