GO-2025-3900 vulnerabilities

Vulnerabilities for packages: bank-vaults, rancher-security-scan, beats, jitsucom-bulker, gitlab-cng-fips, grafana-fips, neuvector-sigstore-interface-fips, gitlab-cng, k9s-fips, zitadel, kyverno, boring-registry-fips, grafana, istio-fips, beats-fips, mattermost-fips, ratify-fips, pluto-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-push, kubescape-operator-fips, manifest-tool, ocm-kubernetes-controller-fips, cluster-api-helm-controller, eksctl, gitlab-operator-fips, argo-cd, drone-fips, teleport, rancher-fleet, gitness, chaos-mesh-fips, kots, cloudbeat, kubescape-operator, opentofu-fips,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: image-factory-fips, policy-controller, falcoctl-fips, kyverno-notation-aws, cloudbeat-fips, policy-controller-fips, aactl, flux-source-controller, tkn, chainctl, goreleaser, teleport, cloudbeat, kyverno, tekton-chains-fips, kyverno-fips, ratify, zot, falcoctl, gitsig...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: image-factory-fips, tkn-fips, teleport-operator-fips, ko, tekton-chains, policy-controller, spire-server-fips, falcoctl-fips, sigstore-scaffolding-fips, neuvector-sigstore-interface, kyverno-notation-aws, kubescape, rekor-fips, tflint-fips, cloudbeat-fips,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: oras, rancher-fleet, cilium-cli, trivy-operator, opa-envoy, kots, helm-operator, k8ssandra-client, opa, headlamp, gogatekeeper, tigera-operator, zarf, rancher, trivy, argocd-image-updater, gatekeeper, argo-cd, conftest, steampipe, helm, chartmuseum, consul-k8s, zot,...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: policy-controller, falcoctl, neuvector-sigstore-interface, tekton-chains, kyverno-notation-aws, tflint, kubescape, crossplane, aactl, zarf, gitsign, trivy-operator, tkn, kyverno, ratify, trivy...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: skopeo, undock, slsa-verifier, falcoctl, tekton-chains, kyverno-notation-aws, ratify, kubescape, aactl, witness, zarf, podman, gitsign, flux-source-controller, kyverno, buildah, kots...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: policy-controller, slsa-verifier, kyverno-notation-aws, teleport, kubescape, crossplane, zot, aactl, trivy-operator, kyverno, ratify, trivy...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: policy-controller, ko, spire-server, gitsign, trivy-operator, kyverno-notation-aws, kyverno, tflint, kubescape, crossplane, zarf, teleport, goreleaser, tkn, slsa-verifier, falcoctl, neuvector-sigstore-interface, aactl, tekton-chains, ratify...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: slsa-verifier, tekton-chains, kyverno-notation-aws, ko, teleport, crossplane, zot, aactl, skaffold, trivy-operator, tkn, vexctl, kyverno, ratify, trivy...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: undock, witness, gitsign, vexctl, kyverno-notation-aws, flux-source-controller, kyverno, kots, kubescape, zarf, skopeo, portieris, podman, tkn, buildah, sigstore-scaffolding, slsa-verifier, falcoctl, aactl, falco-no-driver, tekton-chains, ratify, cosign...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, spire-server, witness, gitsign, vexctl, kyverno-notation-aws, flux-source-controller, tflint, kubescape, crossplane, skaffold, zarf, teleport, goreleaser, tkn, gh, sigstore-scaffolding, falcoctl, neuvector-sigstore-interface, zot...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, spire-server, witness, gitsign, trivy-operator, vexctl, kyverno-notation-aws, buildkitd, flux-source-controller, tflint, kubescape, crossplane, skaffold, zarf, trivy, teleport, docker, goreleaser, tkn, gh, sigstore-scaffolding,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, spire-server, witness, gitsign, trivy-operator, vexctl, kyverno-notation-aws, buildkitd, flux-source-controller, tflint, kubescape, crossplane, skaffold, zarf, trivy, teleport, goreleaser, tkn, gh, slsa-verifier, falcoctl,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: policy-controller, falcoctl, kyverno-notation-aws, ratify, teleport, zot, aactl, goreleaser, witness, gitsign, tkn, kyverno, flux-source-controller...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, spire-server, witness, gitsign, trivy-operator, vexctl, kyverno-notation-aws, buildkitd, flux-source-controller, tflint, kubescape, crossplane, skaffold, rekor, zarf, trivy, teleport, docker, goreleaser, tkn, gh,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: dive, aws-privateca-issuer, gcsfuse, swagger, kubernetes-dashboard-auth, lazydocker, terraform-provider-azapi, docker-machine-driver-harvester, spire-controller-manager, helm-push, terraform, rabbitmq-messaging-topology-operator, nri-mysql, azure-service-operator,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, rclone, spqr, dex, cert-manager-istio-csr, cert-manager, juicefs, bento, kyverno-notation-aws, flux-source-controller, frp, gitlab-runner, nuclei, seaweedfs, cert-manager-cmctl, terraform, openbao, percona-server-mongodb-operator, telegraf,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, rclone, spqr, dex, cert-manager-istio-csr, cert-manager, juicefs, bento, kyverno-notation-aws, flux-source-controller, frp, gitlab-runner, nuclei, seaweedfs, cert-manager-cmctl, terraform, openbao, percona-server-mongodb-operator, telegraf,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: k8s-metacollector-fips, helm-diff-fips, crossplane-provider-aws-s3-fips, contour, terraform-fips, coredns, crossplane-provider-gcp-fips, sftpgo-plugin-auth, terraform-provider-sendgrid, eck-operator-fips, nvidia-container-toolkit, kong-ingress-controller,...