GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kubescape, kyverno, trivy, aactl, kyverno-notation-aws, teleport, trivy-operator, ratify, crossplane, slsa-verifier, policy-controller, zot...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: kubescape, tkn, tekton-chains, kyverno, trivy, aactl, kyverno-notation-aws, gitsign, tflint, trivy-operator, falcoctl, crossplane, ratify, policy-controller, neuvector-sigstore-interface, zarf...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, falcoctl, ratify, gitsign, trivy-operator, tkn, goreleaser, kyverno, teleport, tflint, crossplane, tekton-chains, slsa-verifier, neuvector-sigstore-interface, zarf, kubescape, ko, kyverno-notation-aws, policy-controller...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: kubescape, flux-source-controller, cosign, tekton-chains, tkn, ko, aactl, skaffold, spire-server, slsa-verifier, apko, policy-controller, melange...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: glab, minio, step-issuer, trivy, aactl, gh, falcoctl, crossplane-provider-family-azure, k9s, fulcio, mattermost, prometheus-operator, trivy-operator, crossplane-provider-aws-lambda, zot, k3s, crossplane-provider-aws-cloudformation, src, crossplane-provider-aws-iam,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: cosign, aactl, gh, docker-cli-buildx, spire-server, falcoctl, ratify, sigstore-scaffolding, gitsign, zot, tkn, goreleaser, kyverno, teleport, vexctl, tflint, crossplane, tekton-chains, neuvector-sigstore-interface, zarf, kubescape, flux-source-controller, ko,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: cosign, trivy, aactl, gh, docker-cli-buildx, spire-server, falcoctl, ratify, sigstore-scaffolding, gitsign, trivy-operator, zot, tkn, goreleaser, kyverno, teleport, vexctl, tflint, crossplane, tekton-chains, slsa-verifier, neuvector-sigstore-interface, zarf, kubescap...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: flux-source-controller, goreleaser, tkn, kyverno, aactl, kyverno-notation-aws, teleport, gitsign, witness, falcoctl, ratify, zot, policy-controller...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: cosign, trivy, aactl, gh, spire-server, falcoctl, ratify, sigstore-scaffolding, rekor, gitsign, trivy-operator, zot, tkn, goreleaser, kyverno, teleport, vexctl, tflint, crossplane, tekton-chains, slsa-verifier, neuvector-sigstore-interface, zarf, kubescape,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: glab, crossplane-provider-azure-managedidentity, nuclei, cosign, src-fingerprint, aactl, gh, gomplate, spire-server, flux-image-automation-controller, falcoctl, crossplane-provider-family-azure, sigstore-scaffolding, flux-image-reflector-controller, fulcio,...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

CLEANSTART-2026-YS85875 Security fixes in policy-controller 0.12.1-r1

Package policy-controller version 0.12.1-r1 fixes 13 vulnerabilities: CVE-2025-8556, CVE-2026-1229, CVE-2025-15558, CVE-2025-46569, CVE-2026-22703...

CLEANSTART-2026-HT07063 Security fixes in policy-controller-fips 0.15.1-r0

Package policy-controller-fips version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r, ghsa-78h2-9frx-2jm8, ghsa-xm5m-wgh2-rrg3...

CLEANSTART-2026-IK86395 Security fixes in policy-controller 0.15.1-r0

Package policy-controller version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-33814, CVE-2026-39883, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r...

CLEANSTART-2026-XO70994 Security fixes for CVE-2026-33814, CVE-2026-34986, CVE-2026-39883, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, teleport, kyverno, zarf, neuvector-sigstore-interface-fips, teleport-operator-fips, tkn, crossplane, ratify, kubescape-server, trivy-fips, tekton-chains, tflint-fips, neuvector-sigstore-interface, policy-controller, falcoctl-fips, trivy-operator,...

Important: Red Hat Security Advisory: RHTAS 1.0.1 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: kubescape, tkn, goreleaser, tekton-chains, kyverno, trivy, aactl, kyverno-notation-aws, gitsign, spire-server, tflint, trivy-operator, falcoctl, crossplane, ratify, policy-controller, neuvector-sigstore-interface, zarf...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: kubescape, tkn, goreleaser, tekton-chains, kyverno, trivy, aactl, kyverno-notation-aws, gitsign, spire-server, tflint, trivy-operator, falcoctl, crossplane, ratify, policy-controller, neuvector-sigstore-interface, zarf...