GO-2025-3900 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface-fips, docker-compose-fips, rancher-security-scan, bank-vaults, istio-fips, kyverno-notation-aws-fips, boring-registry-fips, grafana-fips, grafana, mattermost-fips, zitadel, jitsucom-bulker, beats-fips, beats, pluto-fips, kyverno,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: maru, jfrog-cli, gitness, kargo, k8ssandra-client, helm, headlamp, conftest, gatekeeper, eksctl, consul-k8s, cluster-api-helm-controller, opentofu-fips, chartmuseum-fips, argo-cd, linkerd2, trivy, xeol, falcoctl-fips, helm-exporter-fips, ratify-fips, cilium-cli,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: aactl, image-factory-fips, tekton-chains-fips, cloudbeat, kyverno-notation-aws, kyverno-notation-aws-fips, teleport, policy-controller-fips, cloudbeat-fips, gitsign, zot, kyverno-policy-reporter-plugins-kyverno, flux-source-controller, tkn, chainctl, goreleaser,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: aactl, neuvector-sigstore-interface-fips, buildkitd-fips, cosign, gh, image-factory-fips, spire-server-fips, skaffold-fips, tekton-chains-fips, rekor, reports-server, cloudbeat, kyverno-notation-aws, tekton-chains, rekor-fips, teleport-operator-fips, ko,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: trivy, helm, grafana-operator, rancher-fleet, falcoctl, trivy-operator, rancher-agent, ratify, tigera-operator, gatekeeper, helm-set-status, conftest, gitness, rancher-helm, zarf, cilium-cli, gogatekeeper, kube-arangodb, argo-cd, linkerd2, cert-manager-cmctl, kyverno...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: buildah, skopeo, kyverno, undock, kots, kubescape, zarf, podman, aactl, tekton-chains, witness, falcoctl, ratify, falco-no-driver, slsa-verifier, kyverno-notation-aws, flux-source-controller, gitsign...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: teleport, policy-controller, trivy, zot, crossplane, kyverno, aactl, trivy-operator, ratify, kubescape, slsa-verifier, kyverno-notation-aws...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: policy-controller, trivy, neuvector-sigstore-interface, crossplane, kyverno, tkn, zarf, aactl, tekton-chains, falcoctl, trivy-operator, ratify, kubescape, kyverno-notation-aws, tflint, gitsign...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: teleport, trivy, ko, kyverno-notation-aws, zot, kyverno, tkn, vexctl, aactl, tekton-chains, trivy-operator, skaffold, slsa-verifier, ratify...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, trivy-operator, slsa-verifier, ratify, tflint, teleport, tkn, zarf, spire-server, gitsign, kyverno, goreleaser, kubescape, kyverno-notation-aws, policy-controller, ko, neuvector-sigstore-interface, crossplane, tekton-chains...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: portieris, aactl, falcoctl, slsa-verifier, ratify, cosign, buildah, tkn, zarf, podman, falco-no-driver, gitsign, skopeo, undock, witness, kubescape, sigstore-scaffolding, kyverno-notation-aws, flux-source-controller, vexctl, tekton-chains, kots...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, ratify, tflint, teleport, cosign, tkn, zarf, spire-server, gh, gitsign, goreleaser, witness, kubescape, sigstore-scaffolding, kyverno-notation-aws, flux-source-controller, policy-controller, ko, zot, neuvector-sigstore-interface, vexctl, skaffold,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: trivy, aactl, falcoctl, trivy-operator, slsa-verifier, ratify, tflint, teleport, cosign, tkn, zarf, spire-server, gh, buildkitd, gitsign, goreleaser, witness, kubescape, kyverno-notation-aws, flux-source-controller, policy-controller, ko, zot,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: teleport, policy-controller, zot, goreleaser, tkn, aactl, witness, falcoctl, ratify, kyverno-notation-aws, flux-source-controller, gitsign...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: trivy, docker, aactl, falcoctl, trivy-operator, slsa-verifier, ratify, tflint, teleport, cosign, tkn, zarf, spire-server, gh, buildkitd, gitsign, kyverno, goreleaser, witness, kubescape, sigstore-scaffolding, kyverno-notation-aws, flux-source-controller,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: trivy, docker, aactl, falcoctl, trivy-operator, slsa-verifier, ratify, rekor, tflint, teleport, cosign, tkn, zarf, spire-server, gh, buildkitd, gitsign, goreleaser, witness, kubescape, sigstore-scaffolding, kyverno-notation-aws, flux-source-controller,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubecolor, lazydocker, trivy, k3s, portieris, clickhouse-operator, azure-service-operator, kubernetes-csi-driver-nfs, falcoctl, ratify, src, argo-events, rclone, tkn, docker-machine-driver-harvester, harbor-cli, kpt, kor, kubernetes-dashboard-api, cilium-cli,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: dex, k6, rancher-webhook, sftpgo-plugin-auth, gitea, harbor, rancher-agent, ratify, frp, teleport, percona-server-mongodb-operator, rclone, terraform, trufflehog, flux, cert-manager-cmctl, cert-manager, kyverno, opentofu, seaweedfs, nuclei, telegraf, grafana,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: dex, k6, rancher-webhook, sftpgo-plugin-auth, gitea, harbor, rancher-agent, ratify, frp, teleport, percona-server-mongodb-operator, rclone, terraform, trufflehog, flux, cert-manager-cmctl, cert-manager, kyverno, opentofu, seaweedfs, nuclei, telegraf, grafana,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, skopeo, karpenter-fips, prometheus, syft-fips, rancher-webhook, kubernetes-csi-livenessprobe, request-1279, prometheus-stackdriver-exporter, crossplane-provider-aws-cloudformation, sftpgo-plugin-geoipfilter, kafka-proxy, jobset-fips,...