GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, slsa-verifier, cosign, cosign-fips...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: zarf, aactl, spire-server-fips, tflint, tekton-chains-fips, sigstore-scaffolding-fips, zot, falcoctl, goreleaser, skaffold, crossplane-fips, cloudbeat, trivy-operator, flux-source-controller, cosign, teleport, tekton-chains, policy-controller-fips, image-factory-fips...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: zarf, aactl, spire-server-fips, tekton-chains-fips, sigstore-scaffolding-fips, zot, apko, falcoctl, flux-source-controller, cosign, tekton-chains, policy-controller-fips, vexctl, falcoctl-fips, policy-controller, gitsign, spire-server, kubescape,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: zarf, aactl, spire-server-fips, tekton-chains-fips, zot, apko, falcoctl, goreleaser, skaffold, flux-source-controller, tekton-chains, policy-controller-fips, vexctl, falcoctl-fips, policy-controller, gitsign, spire-server, ko-fips, kubescape, tkn-fips, ko, chainctl,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gh, cosign...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: kubescape, spire-server, flux-source-controller, cosign, flux-kustomize-controller, oauth2-proxy, argo-workflows, aactl, sops, tkn, vexctl, kots, dex, cloudflared, terragrunt, fulcio, tekton-chains, gitsign, slsa-verifier, rekor...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: falcoctl, aactl, ratify, slsa-verifier, podman, zarf, tekton-chains, gitsign, kubescape, kyverno, skopeo, kyverno-notation-aws, kots, witness, flux-source-controller, buildah, undock...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: trivy, aactl, policy-controller, ratify, crossplane, zot, kubescape, kyverno, kyverno-notation-aws, trivy-operator, teleport, slsa-verifier...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: melange, aactl, policy-controller, skaffold, slsa-verifier, tkn, tekton-chains, kubescape, spire-server, apko, flux-source-controller, ko, cosign...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: tflint, falcoctl, ratify, crossplane, kubescape, spire-server, ko, aactl, tkn, zarf, kyverno-notation-aws, goreleaser, teleport, neuvector-sigstore-interface, trivy-operator, policy-controller, tekton-chains, gitsign, kyverno, slsa-verifier...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: trivy, aactl, ratify, skaffold, crossplane, tkn, zot, vexctl, tekton-chains, kyverno, kyverno-notation-aws, trivy-operator, teleport, slsa-verifier, ko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-compose, crossplane-provider-aws-memorydb, gomplate, atlantis, terraform-provider-azapi, guac, buildah, k9s, openbao, crossplane-provider-azure-managedidentity, scorecard, hcloud, opentofu, crossplane-provider-aws-cloudfront, kaf, cloudflared,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: falcoctl, aactl, sigstore-scaffolding, zarf, vexctl, tekton-chains, gitsign, kubescape, skopeo, witness, kots, falco-no-driver, slsa-verifier, cosign...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tflint, falcoctl, ratify, crossplane, kubescape, spire-server, flux-source-controller, ko, cosign, aactl, tkn, zarf, kyverno-notation-aws, goreleaser, teleport, neuvector-sigstore-interface, sigstore-scaffolding, vexctl, witness, trivy-operator, trivy,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tflint, falcoctl, ratify, crossplane, kubescape, spire-server, flux-source-controller, ko, cosign, aactl, tkn, zarf, kyverno-notation-aws, goreleaser, teleport, neuvector-sigstore-interface, sigstore-scaffolding, vexctl, witness, trivy-operator, trivy,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: timestamp-authority, falcoctl, grafana-mimir, opentelemetry-collector, terraform-provider-azurerm, crossplane-provider-azure-sql, crossplane-provider-azure-authorization, crossplane-provider-family-azure, gomplate, glab, nuclei, kubescape, skopeo, spire-server, guac,...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: falcoctl, kubescape, wolfictl, spire-server, flux-source-controller, ko, melange, aactl, tkn, zarf, goreleaser, neuvector-sigstore-interface, vexctl, policy-controller, skaffold, tekton-chains, gitsign, zot, apko, slsa-verifier...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: zarf, aactl, spire-server-fips, tflint, tekton-chains-fips, falcoctl, goreleaser, kubescape-server-fips, crossplane-fips, cloudbeat, trivy-operator, zarf-fips, teleport, tekton-chains, policy-controller-fips, tbot, docker-fips, falcoctl-fips, kubescape-server,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: zarf, aactl, spire-server-fips, tflint, tekton-chains-fips, falcoctl, goreleaser, kubescape-server-fips, crossplane-fips, cloudbeat, trivy-operator, zarf-fips, teleport, tekton-chains, policy-controller-fips, tbot, docker-fips, falcoctl-fips, kubescape-server,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tflint, falcoctl, ratify, crossplane, kubescape, spire-server, ko, aactl, tkn, zarf, kyverno-notation-aws, goreleaser, teleport, neuvector-sigstore-interface, trivy-operator, policy-controller, tekton-chains, gitsign, kyverno, slsa-verifier...