GO-2026-4377 vulnerabilities

Vulnerabilities for packages: cosign, trivy, kyverno-notation-aws, kubescape, docker, buildkitd, trivy-operator, vexctl, tkn, falcoctl, kyverno, zot, neuvector-sigstore-interface, flux-source-controller, gh, skaffold, witness, sigstore-scaffolding, spire-server, teleport, gitsign, goreleaser,...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: karma, cloudflared, step-ca, step, rclone, tkn, sftpgo, kyverno-policy-reporter-ui, gitness, gogatekeeper, step-issuer, caddy, buf...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: grype, dagger, neuvector-scanner, syft, docker-compose, k3d, cri-tools, docker, policy-controller, melange, harbor-scanner-trivy, kaniko, wolfictl, helm-push, buf...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: atlantis, kubewatch, kyverno-policy-reporter, bento, goreleaser, argo-cd, argo-rollouts, argo-events, kubernetes-event-exporter...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: cosign, pulumi, rekor, trivy, flux-image-reflector-controller, chezmoi, flux, flyte, fulcio, kubescape, opentelemetry-collector, buildkitd, nuclei, bank-vaults, py3-cassandra-medusa, grafana-agent-operator, up, tempo, guac, tkn, falcoctl, py3-azure-identity,...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: ratify, neuvector-sigstore-interface, trivy-operator, zarf, aactl, trivy, crossplane, kyverno-notation-aws, tkn, kubescape, falcoctl, policy-controller, gitsign, kyverno, tflint, tekton-chains...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: ratify, trivy-operator, aactl, trivy, crossplane, kyverno-notation-aws, kubescape, policy-controller, teleport, kyverno, slsa-verifier, zot...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: cosign, apko, ko, flux-source-controller, aactl, skaffold, spire-server, tkn, kubescape, policy-controller, melange, slsa-verifier, tekton-chains...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: aactl, kyverno-notation-aws, kubescape, ratify, trivy-operator, tkn, falcoctl, kyverno, neuvector-sigstore-interface, spire-server, teleport, gitsign, goreleaser, slsa-verifier, tflint, tekton-chains, ko, zarf, crossplane, policy-controller...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cosign, nerdctl, crossplane-provider-aws-ec2, crossplane-provider-aws-memorydb, istio, kubescape, docker, snyk-cli, k3s, crossplane-provider-family-azure, caddy, podman, terraform-provider-acme, falcoctl, helm, zot, apko, crossplane-provider-aws-elasticache, skaffold...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: cosign, aactl, kyverno-notation-aws, kubescape, ratify, vexctl, tkn, falcoctl, kyverno, zot, neuvector-sigstore-interface, flux-source-controller, gh, skaffold, docker-cli-buildx, witness, sigstore-scaffolding, spire-server, teleport, gitsign, goreleaser, tflint,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: ratify, flux-source-controller, aactl, witness, kyverno-notation-aws, tkn, falcoctl, policy-controller, gitsign, goreleaser, kyverno, teleport, zot...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: cosign, aactl, trivy, kyverno-notation-aws, kubescape, docker, buildkitd, ratify, trivy-operator, vexctl, tkn, falcoctl, kyverno, zot, neuvector-sigstore-interface, flux-source-controller, gh, skaffold, docker-cli-buildx, witness, sigstore-scaffolding, spire-server,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: cosign, rekor, aactl, trivy, kyverno-notation-aws, kubescape, docker, buildkitd, ratify, trivy-operator, vexctl, tkn, falcoctl, kyverno, zot, neuvector-sigstore-interface, flux-source-controller, gh, skaffold, witness, sigstore-scaffolding, spire-server, teleport,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: cosign, actions-runner-controller, pulumi, aactl, pulumi-kubernetes-operator, rekor, flux-image-reflector-controller, fulcio, flux, terraform, kubescape, crossplane-provider-azure, glab, kubevela, skopeo, snyk-cli, terraform-provider-azurerm, opentelemetry-collector,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: aactl, kubescape, vexctl, tkn, falcoctl, zot, apko, flux-source-controller, neuvector-sigstore-interface, skaffold, spire-server, gitsign, goreleaser, melange, slsa-verifier, tekton-chains, ko, zarf, policy-controller, wolfictl...

PT-2026-72119

OpenStack Octavia through 18.0.0 mishandles quality of service QoS policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected...

RockyLinux 8 : bind9.16 (RLSA-2026:54509)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54509 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field...

AlmaLinux 8 : bind9.16 (ALSA-2026:54509)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54509 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-133...

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...