GO-2024-2918 vulnerabilities

Vulnerabilities for packages: harbor-registry, cosign, prometheus-operator, rook, py3-azure-identity, trivy, airflow, falcoctl, step-ca, zot, flux-kustomize-controller, k8sgpt, sigstore-scaffolding, guac, druid, argo-events, buildkitd, grafana-mimir, terragrunt, rekor, policy-controller, zarf,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: cosign, flux-kustomize-controller, kots, dex, terragrunt, rekor, spire-server, oauth2-proxy, aactl, fulcio, vexctl, sops, gitsign, tkn, argo-workflows, tekton-chains, flux-source-controller, cloudflared, slsa-verifier, kubescape...

GO-2023-2153 vulnerabilities

Vulnerabilities for packages: kubeflow, kubevela, scorecard, src, spark-operator, terraform-provider-sendgrid, up, dgraph, k3d, cortex, slsa-verifier, buildkitd, kubescape, aactl...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, buildah, undock, slsa-verifier, skopeo, tekton-chains, falcoctl, witness, zarf, flux-source-controller, kyverno, ratify, gitsign, podman, kots, kubescape, aactl...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: trivy-operator, kyverno-notation-aws, policy-controller, slsa-verifier, trivy, zot, teleport, crossplane, ratify, kyverno, kubescape, aactl...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: trivy-operator, kyverno-notation-aws, neuvector-sigstore-interface, policy-controller, zarf, trivy, tekton-chains, falcoctl, tflint, crossplane, ratify, gitsign, kyverno, kubescape, tkn, aactl...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: dagger, trivy, zot, docker-compose, ko, grype, buildkitd, spire-server, crossplane, conftest, melange, syft, aactl, tkn, wolfictl, buf, cilium-cli, up, ctop, cadvisor, kaniko, kubescape, kargo...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: falcoctl, ko, neuvector-sigstore-interface, policy-controller, zarf, spire-server, teleport, crossplane, aactl, trivy-operator, kyverno-notation-aws, ratify, gitsign, tkn, kyverno, tekton-chains, tflint, slsa-verifier, kubescape, goreleaser...

GO-2026-5851 vulnerabilities

Vulnerabilities for packages: trivy-operator, kyverno-notation-aws, neuvector-sigstore-interface, policy-controller, zarf, trivy, spire-server, falcoctl, tekton-chains, aactl, tflint, crossplane, ratify, gitsign, kyverno, kubescape, tkn, goreleaser...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: cosign, apko, policy-controller, skaffold, spire-server, tekton-chains, flux-source-controller, ko, tkn, slsa-verifier, melange, kubescape, aactl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, flux-notification-controller, prometheus-operator, buildah, dagger, zot, docker-compose, gomplate, gitea, docker-machine-driver-linode, podman, argo-events, buildkitd, crossplane-provider-aws-sns, crossplane-provider-aws-dynamodb,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: cosign, buildah, skopeo, falcoctl, sigstore-scaffolding, podman, kots, zarf, aactl, kyverno-notation-aws, falco-no-driver, vexctl, ratify, tkn, undock, gitsign, tekton-chains, witness, flux-source-controller, slsa-verifier, kubescape, portieris...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: cosign, gh, zot, falcoctl, docker-cli-buildx, sigstore-scaffolding, ko, neuvector-sigstore-interface, policy-controller, zarf, spire-server, teleport, aactl, kyverno-notation-aws, vexctl, ratify, gitsign, tkn, skaffold, tekton-chains, witness, flux-source-controller,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: cosign, gh, trivy, zot, falcoctl, docker-cli-buildx, sigstore-scaffolding, ko, buildkitd, neuvector-sigstore-interface, policy-controller, slsa-verifier, zarf, spire-server, teleport, crossplane, aactl, trivy-operator, kyverno-notation-aws, vexctl, docker, ratify,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: cosign, zarf, slsa-verifier, skopeo, tekton-chains, falcoctl, witness, falco-no-driver, vexctl, sigstore-scaffolding, gitsign, kots, kubescape, aactl...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: cosign, gh, trivy, zot, falcoctl, sigstore-scaffolding, ko, buildkitd, neuvector-sigstore-interface, rekor, policy-controller, zarf, spire-server, teleport, aactl, trivy-operator, kyverno-notation-aws, vexctl, docker, ratify, gitsign, tkn, skaffold, tekton-chains,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: cosign, gh, trivy, zot, falcoctl, sigstore-scaffolding, neuvector-sigstore-interface, rekor, policy-controller, zarf, spire-server, melange, aactl, apko, vexctl, gitsign, tkn, wolfictl, tekton-chains, flux-source-controller, slsa-verifier, kubescape...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, kubernetes-event-exporter, cosign, kubevela, gh, rook, scorecard, skopeo, zot, falcoctl, glab, gomplate, step-ca, flux-kustomize-controller, sigstore-scaffolding, flux-image-automation-controller, guac, argo-events, buildkitd,...

CLEANSTART-2026-KL27839 Security fixes in kubescape 3.0.47-r0

Package kubescape version 3.0.47-r0 fixes 37 vulnerabilities: CVE-2026-27141, ghsa-38pp-6gcp-rqvm, CVE-2026-25679, CVE-2026-27142, CVE-2025-61726...

CLEANSTART-2026-OH00138 Security fixes for CVE-2025-15558, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-1229, CVE-2026-22703, CVE-2026-22772, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24117, CVE-2026-24137, CVE-2026-24686, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186, CVE-2026-33481, ghsa-273p-m2cw-6833, ghsa-37cx-329c-33x3, ghsa-38pp-6gcp-rqvm, ghsa-4c4x-jm2x-pf9j, ghsa-59jp-pj84-45mr, ghsa-846p-jg2w-w324, ghsa-9h8m-3fm2-qjrq, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-q9hv-hpm4-hj6x, ghsa-rjcw-vg7j-m9rc, ghsa-whqx-f9j3-ch6m applied in versions: 3.0.47-r0, 3.0.47-r1

Multiple security vulnerabilities affect the kubescape package. These issues are resolved in later releases. See references for individual vulnerability details...