128 matches found
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: flux-source-controller, gitsign, tflint, cosign, witness, slsa-verifier, aactl, rekor, neuvector-sigstore-interface, zarf, goreleaser, spire-server, docker, trivy-operator, falcoctl, skaffold, trivy, zot, gh, buildkitd, teleport, ratify, ko, kubescape,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: terraform, flux-source-controller, flux-image-reflector-controller, gitsign, gomplate, step-ca, k3d, terragrunt, crossplane-provider-azure, cosign, skopeo, ksops, opentelemetry-collector, crossplane-provider-azure-authorization, guac, slsa-verifier,...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: flux-source-controller, aactl, zarf, neuvector-sigstore-interface, goreleaser, spire-server, trivy-operator, falcoctl, skaffold, trivy, zot, crossplane, ko, kubescape, kyverno, policy-controller, tekton-chains, kyverno-notation-aws, tkn...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: flux-source-controller, aactl, zarf, neuvector-sigstore-interface, goreleaser, spire-server, trivy-operator, falcoctl, skaffold, trivy, zot, crossplane, ko, kubescape, kyverno, policy-controller, tekton-chains, kyverno-notation-aws, tkn...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: spire-server, zarf-fips, jfrog-cli, crossplane, skaffold-fips, trivy, docker-fips, kyverno-notation-aws, kyverno-notation-aws-fips, trivy-fips, spire-server-fips, flux-source-controller-fips, trivy-operator, teleport-operator-fips, neuvector-sigstore-interface,...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: spire-server, zarf-fips, jfrog-cli, crossplane, skaffold-fips, trivy, docker-fips, kyverno-notation-aws, kyverno-notation-aws-fips, trivy-fips, spire-server-fips, flux-source-controller-fips, trivy-operator, teleport-operator-fips, neuvector-sigstore-interface,...
MAL-2026-5641 Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: pulumi-language-java, cerbos, melange, act, gitsign, gomplate, steampipe, gitlab-runner, external-secrets-operator, terragrunt, syft, gptscript, wolfictl, witness, argo-workflows, xeol, pulumi-language-yaml, guac, kaniko, flux-image-automation-controller, kots, zarf,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: pulumi-language-java, cerbos, melange, act, gitsign, gomplate, steampipe, gitlab-runner, external-secrets-operator, terragrunt, syft, gptscript, wolfictl, witness, argo-workflows, xeol, pulumi-language-yaml, guac, kaniko, flux-image-automation-controller, kots, zarf,...
CVE-2026-45570 vulnerabilities
Vulnerabilities for packages: pulumi-language-java, cerbos, melange, act, gitsign, gomplate, steampipe, gitlab-runner, external-secrets-operator, terragrunt, syft, gptscript, wolfictl, witness, argo-workflows, xeol, pulumi-language-yaml, guac, kaniko, flux-image-automation-controller, kots, zarf,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: pulumi-language-java, cerbos, melange, act, gitsign, gomplate, steampipe, gitlab-runner, external-secrets-operator, terragrunt, syft, gptscript, wolfictl, witness, argo-workflows, xeol, pulumi-language-yaml, guac, kaniko, flux-image-automation-controller, kots, zarf,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: grype-fips, flux, zarf-fips, argo-cd-fips, argo-events, skaffold-fips, trivy, bom, cerbos, gomplate-fips, nfpm, kots, gitea, trufflehog-fips, xeol-fips, argo-workflows-fips, argo-cd, skaffold, trivy-operator-fips, argocd-image-updater, gitlab-runner-fips, kargo,...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: grype-fips, flux, zarf-fips, argo-cd-fips, argo-events, skaffold-fips, trivy, bom, cerbos, gomplate-fips, nfpm, kots, gitea, trufflehog-fips, xeol-fips, argo-workflows-fips, argo-cd, skaffold, trivy-operator-fips, argocd-image-updater, gitlab-runner-fips, kargo,...