126 matches found
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: cosign, goreleaser, ratify, tkn, sigstore-scaffolding, witness, tekton-chains, slsa-verifier, aactl, trivy-operator, gitsign, tflint, spire-server, buildkitd, kyverno-notation-aws, teleport, flux-source-controller, ko, rekor, policy-controller, skaffold, kubescape,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, cosign, rabbitmq-messaging-topology-operator, flux-kustomize-controller, src-fingerprint, goreleaser, tkn, flux, sigstore-scaffolding, flux-image-reflector-controller, sops, crossplane-provider-azure-sql, k3d, kubevela,...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: goreleaser, tkn, tekton-chains, aactl, trivy-operator, spire-server, kyverno-notation-aws, flux-source-controller, ko, skaffold, policy-controller, kubescape, trivy, zarf, falcoctl, neuvector-sigstore-interface, crossplane, zot, kyverno...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: goreleaser, tkn, tekton-chains, aactl, trivy-operator, spire-server, kyverno-notation-aws, flux-source-controller, ko, skaffold, policy-controller, kubescape, trivy, zarf, falcoctl, neuvector-sigstore-interface, crossplane, zot, kyverno...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, ko, kubescape-server, policy-controller, kyverno, kyverno-notation-aws-fips, trivy-operator, docker-fips, falcoctl, kubescape, goreleaser, neuvector-sigstore-interface-fips, tkn-fips, zot, skaffold-fips, cloudbeat-fips, crossplane, kyverno-fips,...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, ko, kubescape-server, policy-controller, kyverno, kyverno-notation-aws-fips, trivy-operator, docker-fips, falcoctl, kubescape, goreleaser, neuvector-sigstore-interface-fips, tkn-fips, zot, skaffold-fips, cloudbeat-fips, crossplane, kyverno-fips,...
Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
MAL-2026-5641 Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, src-fingerprint, act, steampipe, goreleaser, flux, syft, witness, grype, k9s, tfsec, nfpm, kubevela, flux-image-automation-controller, pulumi, rancher-fleet, wolfictl, dagger, pulumi-language-java, kaniko, argo-events, grafana-alloy,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, src-fingerprint, act, steampipe, goreleaser, flux, syft, witness, grype, k9s, tfsec, nfpm, kubevela, flux-image-automation-controller, pulumi, rancher-fleet, wolfictl, dagger, pulumi-language-java, kaniko, argo-events, grafana-alloy,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, src-fingerprint, act, steampipe, goreleaser, flux, syft, witness, grype, k9s, tfsec, nfpm, kubevela, flux-image-automation-controller, pulumi, rancher-fleet, wolfictl, dagger, pulumi-language-java, kaniko, argo-events, grafana-alloy,...
CVE-2026-45570 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, src-fingerprint, act, steampipe, goreleaser, flux, syft, witness, grype, k9s, tfsec, nfpm, kubevela, flux-image-automation-controller, pulumi, rancher-fleet, wolfictl, dagger, pulumi-language-java, kaniko, argo-events, grafana-alloy,...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: grafana-fips, coder, skaffold-fips, xeol-fips, argo-events-fips, tfsec, osv-scanner, argocd-image-updater-fips, nuclei, gitaly, pulumi-language-dotnet, cloudbeat, gomplate, gitlab-rails-ce, gitsign, chainloop-cli, src-fingerprint-fips, apko, act, trivy-fips, grype,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: grafana-fips, coder, skaffold-fips, xeol-fips, argo-events-fips, tfsec, osv-scanner, argocd-image-updater-fips, nuclei, gitaly, pulumi-language-dotnet, cloudbeat, gomplate, gitlab-rails-ce, gitsign, chainloop-cli, src-fingerprint-fips, apko, act, trivy-fips, grype,...