132 matches found
CVE-2020-8554
Mitiga CVE-2020-8554 con Policy Controller Este repositorio contiene archivos de configuración para usar Policy Controller, que se basa en el proyecto de código abierto OPA Gatekeeper, para bloquear el acceso a IP públicas de los Servicios de Kubernetes. El aviso de seguridad para este problema...
CLEANSTART-2026-UC71482 Security fix for CVE-2025-8556 applied in: argo-workflows-fips 3.5.15-r1, argo-workflows-fips 3.6.13-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, policy-controller 0.12.1-r1
CVE-2025-8556 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UW62677 Security fix for CVE-2026-23992 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1, tkn-fips 0.43.0-r3
CVE-2026-23992 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WK71465 Security fix for CVE-2026-24117 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tkn 0.42.2-r1, tkn 0.43.2-r1
CVE-2026-24117 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-FC01276 Security fix for CVE-2026-22703 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.3-r3, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tekton-chains-fips 0.24.0-r1
CVE-2026-22703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OK69185 Security fix for CVE-2025-46569 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, policy-controller 0.12.1-r1
CVE-2025-46569 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-NS94125 Security fix for ghsa-xm5m-wgh2-rrg3 applied in: docker 29.3.0-r1, kyverno 1.18.0-r0, kyverno-fips 1.16.3-r7, kyverno-fips 1.17.1-r6, policy-controller-fips 0.15.1-r0
ghsa-xm5m-wgh2-rrg3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OE12981 Security fix for CVE-2026-49834 applied in: cosign 3.1.1-r2, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r1, kyverno 1.17.2-r2, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1
CVE-2026-49834 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
GO-2026-6162 vulnerabilities
Vulnerabilities for packages: spire-server, neuvector-sigstore-interface, zot, tkn, trivy-operator, kubescape, trivy, kyverno, ko, goreleaser, kyverno-notation-aws, policy-controller, skaffold, zarf, tekton-chains, flux-source-controller, falcoctl, crossplane, aactl...
GO-2023-1839 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, policy-controller, kind...
GO-2023-1840 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, policy-controller, kind...
GO-2023-1842 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, policy-controller, kind...
GO-2023-1841 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, policy-controller, kind...
GO-2024-3141 vulnerabilities
Vulnerabilities for packages: k8sgpt, snyk-cli, spire-server-fips, kots, zot, spire-server, kubescape, policy-controller, tfsec, conftest-fips, cosign-fips, opa, policy-controller-fips, conftest, cosign, zarf...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: melange, policy-controller-fips, docker-compose, grype, k3d, wolfictl, buf, helm-push, policy-controller, dagger, neuvector-scanner, syft, kaniko, harbor-scanner-trivy-fips, harbor-scanner-trivy, cri-tools...
GO-2023-2181 vulnerabilities
Vulnerabilities for packages: falcoctl-fips, melange, spire-server-fips, kubescape, tkn, policy-controller, ko, flux-source-controller, tekton-chains, slsa-verifier, spire-server, cosign, apko, aactl, skaffold...
GO-2026-5952 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, trivy-operator, image-factory, docker-fips, image-factory-fips, trivy, tbot, neuvector-sigstore-interface-fips, cloudbeat-fips, kyverno-fips, kubescape-server, kyverno-notation-aws-fips, ratify-fips, kubescape-server-fips, cloudbeat, tkn-fips,...
GO-2024-2719 vulnerabilities
Vulnerabilities for packages: melange, goreleaser, flux-source-controller, apko, ko-fips, tkn-fips, policy-controller, ko, gitsign, slsa-verifier, policy-controller-fips, spire-server, aactl, skaffold, falcoctl-fips, spire-server-fips, chainctl, kubescape, vexctl, neuvector-sigstore-interface,...