GO-2025-3900 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, ratify-fips, istio-fips, rancher-security-scan, pluto-fips, k9s-fips, bank-vaults, grafana-fips, kyverno, grafana, kyverno-notation-aws-fips, docker-compose-fips, beats, jitsucom-bulker, zitadel, mattermost-fips, beats-fips, tkn-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: steampipe, ocm-cli-fips, cert-manager-cmctl, ocm-cli, ratify-fips, helm, rancher-fleet-fips, falcoctl-fips, gitlab-operator, helm-operator-fips, chaos-mesh, eksctl, kyverno-notation-aws-fips, vcluster, kubescape, argo-cd, kubescape-server-fips, oras-fips,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: ratify-fips, tekton-chains-fips, image-factory-fips, tkn, witness, falcoctl-fips, cloudbeat, flux-source-controller, zot, kyverno, cloudbeat-fips, aactl, kyverno-notation-aws-fips, ratify, kyverno-policy-reporter-plugins-kyverno, kyverno-notation-aws, kyverno-fips,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding-fips, teleport-operator-fips, ko-fips, ratify-fips, tekton-chains-fips, image-factory-fips, tflint, tekton-chains, tkn, image-factory, ko, reports-server, trivy-operator-fips, witness, falcoctl-fips, cloudbeat,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, steampipe, helm-mapkubeapis, cert-manager-cmctl, grafana-operator, gogatekeeper, opa, rancher-agent, rancher-helm, helm, k9s, opa-envoy, flux-source-controller, zot, kyverno, xeol, headlamp, linkerd2, rancher, cilium-cli,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: flux-source-controller, skopeo, slsa-verifier, buildah, podman, ratify, undock, kyverno, kots, kyverno-notation-aws, kubescape, tekton-chains, zarf, witness, gitsign, aactl, falcoctl, falco-no-driver...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: teleport, trivy-operator, slsa-verifier, zot, ratify, kyverno, kyverno-notation-aws, tekton-chains, tkn, vexctl, skaffold, trivy, ko, aactl...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: crossplane, trivy-operator, trivy, ratify, policy-controller, kyverno, kyverno-notation-aws, neuvector-sigstore-interface, kubescape, tekton-chains, tflint, tkn, zarf, gitsign, falcoctl, aactl...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: teleport, crossplane, trivy-operator, slsa-verifier, zot, ratify, policy-controller, kyverno-notation-aws, kyverno, kubescape, trivy, aactl...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: tflint, tkn, tekton-chains, ko, kyverno, spire-server, aactl, crossplane, ratify, kyverno-notation-aws, kubescape, zarf, gitsign, teleport, trivy-operator, slsa-verifier, policy-controller, neuvector-sigstore-interface, falcoctl, goreleaser...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, tflint, tkn, tekton-chains, witness, ko, flux-source-controller, zot, vexctl, spire-server, aactl, gh, ratify, kyverno-notation-aws, kubescape, skaffold, zarf, gitsign, sigstore-scaffolding, teleport, policy-controller, neuvector-sigstore-interface...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, tflint, tkn, tekton-chains, witness, ko, flux-source-controller, zot, kyverno, vexctl, spire-server, aactl, crossplane, gh, docker, trivy, ratify, kyverno-notation-aws, kubescape, skaffold, zarf, gitsign, sigstore-scaffolding, teleport,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: tflint, tkn, tekton-chains, witness, ko, flux-source-controller, zot, vexctl, spire-server, aactl, gh, trivy, ratify, kyverno-notation-aws, kubescape, skaffold, zarf, gitsign, teleport, trivy-operator, slsa-verifier, policy-controller, neuvector-sigstore-interface,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, portieris, witness, buildah, flux-source-controller, vexctl, aactl, ratify, kyverno-notation-aws, kubescape, zarf, gitsign, sigstore-scaffolding, falco-no-driver, skopeo, slsa-verifier, podman, undock, kots, cosign, falcoctl...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: teleport, flux-source-controller, zot, ratify, policy-controller, kyverno-notation-aws, tkn, witness, gitsign, aactl, falcoctl, goreleaser...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, aws-application-networking-k8s, ipfs-cluster, steampipe, src, tekton-chains, docker-machine-driver-harvester, nri-redis, fzf, kuberlr, migrate, nri-apache, caddy, cloud-provider-vsphere, amazon-cloudwatch-agent-operator, eksctl, aactl, nri-consul,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tflint, tkn, tekton-chains, witness, ko, flux-source-controller, zot, vexctl, spire-server, aactl, gh, docker, trivy, ratify, kyverno-notation-aws, kubescape, skaffold, zarf, gitsign, sigstore-scaffolding, teleport, trivy-operator, slsa-verifier, policy-controller,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, telegraf, rancher-agent, juicefs, terraform, harbor, flux-source-controller, gitlab-runner, rancher-webhook, sftpgo-plugin-auth, spqr, openbao, zot, kyverno, xeol, flux, external-secrets-operator, seaweedfs, frp, grafana, rancher,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, telegraf, rancher-agent, juicefs, terraform, harbor, flux-source-controller, gitlab-runner, rancher-webhook, sftpgo-plugin-auth, spqr, openbao, zot, kyverno, xeol, flux, external-secrets-operator, seaweedfs, frp, grafana, rancher,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, cass-operator, azcopy, k8ssandra-operator, crossplane-provider-terraform-fips, runc, azuredisk-csi-fips, crossplane-provider-aws-rds-fips, crossplane-function-environment-configs-fips, helm, pgwatch, flux-image-reflector-controller-fips,...