126 matches found
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: spire-server, falcoctl, vexctl, trivy, skaffold, buildkitd, zot, teleport, sigstore-scaffolding, flux-source-controller, slsa-verifier, trivy-operator, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, rekor, docker, aactl, ratify, kubescape, gorelease...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: kargo, spire-server, actions-runner-controller, argo-events, falcoctl, flux-helm-controller, grafana-mimir, opentelemetry-collector-contrib, vexctl, terragrunt, crossplane-provider-azure-authorization, buildkitd, crossplane-provider-azure-managedidentity, zot,...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: spire-server, falcoctl, crossplane, trivy, skaffold, zot, flux-source-controller, trivy-operator, tekton-chains, neuvector-sigstore-interface, zarf, tkn, aactl, kubescape, goreleaser, kyverno, kyverno-notation-aws, policy-controller, ko...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: spire-server, falcoctl, crossplane, trivy, skaffold, zot, flux-source-controller, trivy-operator, tekton-chains, neuvector-sigstore-interface, zarf, tkn, aactl, kubescape, goreleaser, kyverno, kyverno-notation-aws, policy-controller, ko...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: falcoctl, kyverno, teleport-operator-fips, kubescape, skaffold, docker-fips, crossplane, tbot, spire-server-fips, trivy-operator, zarf, ko, goreleaser, ko-fips, falcoctl-fips, policy-controller-fips, tekton-chains-fips, teleport, kubescape-server-fips, trivy,...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: falcoctl, kyverno, teleport-operator-fips, kubescape, skaffold, docker-fips, crossplane, tbot, spire-server-fips, trivy-operator, zarf, ko, goreleaser, ko-fips, falcoctl-fips, policy-controller-fips, tekton-chains-fips, teleport, kubescape-server-fips, trivy,...
Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
MAL-2026-5641 Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: bom, kargo, xeol, syft, argo-events, argocd-image-updater, crossplane, steampipe, trivy, snyk-cli, skaffold, act, terragrunt, zot, teleport, gomplate, cerbos, trivy-operator, k9s, dagger, gitsign, external-secrets-operator, pulumi-language-java, argo-workflows, zarf,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: bom, kargo, xeol, syft, argo-events, argocd-image-updater, crossplane, steampipe, trivy, snyk-cli, skaffold, act, terragrunt, zot, teleport, gomplate, cerbos, trivy-operator, k9s, dagger, gitsign, external-secrets-operator, pulumi-language-java, argo-workflows, zarf,...
CVE-2026-45570 vulnerabilities
Vulnerabilities for packages: bom, kargo, xeol, syft, argo-events, argocd-image-updater, crossplane, steampipe, trivy, snyk-cli, skaffold, act, terragrunt, zot, teleport, gomplate, cerbos, trivy-operator, k9s, dagger, gitsign, external-secrets-operator, pulumi-language-java, argo-workflows, zarf,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: bom, kargo, xeol, syft, argo-events, argocd-image-updater, crossplane, steampipe, trivy, snyk-cli, skaffold, act, terragrunt, zot, teleport, gomplate, cerbos, trivy-operator, k9s, dagger, gitsign, external-secrets-operator, pulumi-language-java, argo-workflows, zarf,...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, coder-fips, upwind-agent, grafana-fips, kots,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, coder-fips, upwind-agent, grafana-fips, kots,...