126 matches found
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, sigstore-scaffolding, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, trivy-operator, tkn, zarf, docker, flux-source-controller, gh, skaffold,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: gitsign, pulumi, guac, flux, opentelemetry-collector, sigstore-scaffolding, src-fingerprint, timestamp-authority, zot, kubescape, crossplane-provider-azure-sql, spire-server, tekton-chains, fulcio, neuvector-sigstore-interface, terraform, aactl, gomplate,...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, kyverno, ko, zot, kubescape, tekton-chains, spire-server, neuvector-sigstore-interface, crossplane, aactl, trivy-operator, tkn, zarf, flux-source-controller, skaffold, trivy, policy-controller, goreleaser, falcoctl...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, kyverno, ko, zot, kubescape, tekton-chains, spire-server, neuvector-sigstore-interface, crossplane, aactl, trivy-operator, tkn, zarf, flux-source-controller, skaffold, trivy, policy-controller, goreleaser, falcoctl...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: ko, cosign, zarf, kubescape-server, tekton-chains, cloudbeat, falcoctl, falcoctl-fips, trivy-fips, neuvector-sigstore-interface, docker-fips, policy-controller-fips, spire-server-fips, flux-source-controller-fips, cloudbeat-fips, kyverno-notation-aws, cosign-fips,...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: ko, cosign, zarf, kubescape-server, tekton-chains, cloudbeat, falcoctl, falcoctl-fips, trivy-fips, neuvector-sigstore-interface, docker-fips, policy-controller-fips, spire-server-fips, flux-source-controller-fips, cloudbeat-fips, kyverno-notation-aws, cosign-fips,...
Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
MAL-2026-5641 Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: gitaly, gitsign, trufflehog, pulumi, guac, xeol, kyverno, flux, grype, pulumi-language-dotnet, witness, src-fingerprint, cerbos, syft, argo-workflows, kaniko, kubescape, nfpm, zot, crossplane, gomplate, steampipe, snyk-cli, wolfictl, dagger, pulumi-language-java,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: gitaly, gitsign, trufflehog, pulumi, guac, xeol, kyverno, flux, grype, pulumi-language-dotnet, witness, src-fingerprint, cerbos, syft, argo-workflows, kaniko, kubescape, nfpm, zot, crossplane, gomplate, steampipe, snyk-cli, wolfictl, dagger, pulumi-language-java,...
CVE-2026-45570 vulnerabilities
Vulnerabilities for packages: gitaly, gitsign, trufflehog, pulumi, guac, xeol, kyverno, flux, grype, pulumi-language-dotnet, witness, src-fingerprint, cerbos, syft, argo-workflows, kaniko, kubescape, nfpm, zot, crossplane, gomplate, steampipe, snyk-cli, wolfictl, dagger, pulumi-language-java,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: gitaly, gitsign, trufflehog, pulumi, guac, xeol, kyverno, flux, grype, pulumi-language-dotnet, witness, src-fingerprint, cerbos, syft, argo-workflows, kaniko, kubescape, nfpm, zot, crossplane, gomplate, steampipe, snyk-cli, wolfictl, dagger, pulumi-language-java,...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: grype, pulumi-language-java, argo-events-fips, cloudbeat, kubevela, chainctl-fips, chainloop-cli-fips, apko-fips, gitsign, external-secrets-operator-fips, grype-fips, grafana, kyverno-fips, guac, argocd-image-updater, jfrog-cli, coder, trivy-operator-fips, grype-db,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: grype, pulumi-language-java, argo-events-fips, cloudbeat, kubevela, chainctl-fips, chainloop-cli-fips, apko-fips, gitsign, external-secrets-operator-fips, grype-fips, grafana, kyverno-fips, guac, argocd-image-updater, jfrog-cli, coder, trivy-operator-fips, grype-db,...