GO-2025-4192 vulnerabilities

Vulnerabilities for packages: falcoctl, gh, witness, tflint, kubescape, aactl, ko, ratify, zot, zarf, sigstore-scaffolding, cosign, tekton-chains, gitsign, crossplane, kyverno, flux-source-controller, spire-server, goreleaser, vexctl, neuvector-sigstore-interface, tkn, policy-controller,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: falcoctl, gh, skopeo, witness, tflint, kubescape, undock, aactl, ko, ratify, falco-no-driver, zot, xeol, zarf, sigstore-scaffolding, buildah, kots, cosign, tekton-chains, gitsign, buildkitd, guac, slsa-verifier, crossplane, portieris, podman, kyverno,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: falcoctl, gh, witness, tflint, kubescape, aactl, ko, ratify, zot, zarf, sigstore-scaffolding, cosign, tekton-chains, gitsign, buildkitd, slsa-verifier, crossplane, kyverno, flux-source-controller, spire-server, docker, goreleaser, trivy, vexctl, trivy-operator,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: falcoctl, gh, witness, tflint, kubescape, aactl, ko, ratify, zot, zarf, cosign, tekton-chains, gitsign, buildkitd, slsa-verifier, crossplane, kyverno, flux-source-controller, spire-server, goreleaser, trivy, vexctl, trivy-operator, neuvector-sigstore-interface, tkn,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: falcoctl, gh, witness, tflint, kubescape, aactl, ko, ratify, zot, zarf, sigstore-scaffolding, cosign, tekton-chains, gitsign, buildkitd, slsa-verifier, crossplane, kyverno, flux-source-controller, spire-server, docker, goreleaser, rekor, trivy, vexctl, trivy-operator...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: falcoctl, gh, witness, tflint, kubescape, aactl, ko, ratify, zot, zarf, sigstore-scaffolding, cosign, tekton-chains, gitsign, buildkitd, slsa-verifier, crossplane, kyverno, flux-source-controller, spire-server, docker, goreleaser, rekor, trivy, vexctl, trivy-operator...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: drone-fips, prometheus, fscrypt, external-secrets-operator, calico-fips, gitlab-workhorse-ce-fips, vitess, flux-fips, mattermost-fips, kubevela-fips, commercial-expanso-edge, etcd, k3s, kubescape-server, frankenphp-8.2, elastic-agent-fips, helm, knative-eventing-fips...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: longhorn-cli, amazon-ssm-agent, sealed-secrets, fscrypt, tflint, crossplane-provider-azure-storagecache, crossplane-provider-aws-route53resolver-fips, crossplane-provider-aws-autoscaling, crossplane-provider-aws-opensearch-fips, crossplane-provider-azure-servicebus,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: longhorn-cli, amazon-ssm-agent, sealed-secrets, fscrypt, tflint, crossplane-provider-azure-storagecache, crossplane-provider-aws-route53resolver-fips, crossplane-provider-aws-autoscaling, crossplane-provider-aws-opensearch-fips, crossplane-provider-azure-servicebus,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: chezmoi, pulumi-language-yaml, mattermost, k3s, osv-scanner, wal-g, buildkitd, gatus, terraform-provider-tls, kubernetes-dashboard, spire-server, opentelemetry-collector, cert-manager, grype, eksctl, fscrypt, step, external-dns, neuvector-sigstore-interface,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, crossplane-provider-aws-route53, chezmoi, crossplane-provider-family-aws, pulumi-language-yaml, mattermost, k3s, crossplane-provider-aws-eks, crossplane-provider-aws-rds, osv-scanner, wal-g, cloudflared, buildkitd, gatus,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: chezmoi, pulumi-language-yaml, mattermost, k3s, osv-scanner, kubernetes-dashboard, spire-server, opentelemetry-collector, cert-manager, grype, fscrypt, step, external-dns, knative-serving, argo-cd, flux, argo-events, cloud-provider-aws, skaffold, terragrunt, kine,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: grype-db, syft, packer, cluster-api-helm-controller-fips, spegel-fips, headlamp-fips, kargo, docker-compose-fips, kube-mgmt-fips, kubevela-fips, harvester, neuvector, k3s, chartmuseum-fips, linkerd2, kubescape-server, helm, gitlab-rails-ce-fips, trivy-operator-fips,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: external-secrets-operator, argocd-image-updater, snyk-cli, pulumi-language-yaml, nfpm, pulumi-language-java, act, grafana-alloy, witness, bom, trufflehog, terragrunt, gitlab-runner, rancher-fleet, pulumi-kubernetes-operator, gptscript, zot, xeol, zarf, cerbos,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, argocd-image-updater, snyk-cli, pulumi-language-yaml, nfpm, pulumi-language-java, act, grafana-alloy, witness, bom, trufflehog, terragrunt, gitlab-runner, rancher-fleet, pulumi-kubernetes-operator, gptscript, zot, xeol, zarf, cerbos,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, argocd-image-updater, snyk-cli, pulumi-language-yaml, nfpm, pulumi-language-java, act, grafana-alloy, witness, bom, trufflehog, terragrunt, gitlab-runner, rancher-fleet, pulumi-kubernetes-operator, gptscript, zot, xeol, zarf, cerbos,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, argocd-image-updater, snyk-cli, pulumi-language-yaml, nfpm, pulumi-language-java, act, grafana-alloy, witness, bom, trufflehog, terragrunt, gitlab-runner, rancher-fleet, pulumi-kubernetes-operator, gptscript, zot, xeol, zarf, cerbos,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: grype-db, trufflehog-fips, syft, amazon-ssm-agent, packer, external-secrets-operator, gitaly, bom, kargo, mapotf, flux-fips, argo-events-fips, gitlab-runner, mapotf-fips, apko-fips, kubevela-fips, gomplate, grafana-alloy, kubescape-server, gitlab-rails-ce-fips,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: grype-db, trufflehog-fips, syft, amazon-ssm-agent, packer, external-secrets-operator, gitaly, bom, kargo, mapotf, flux-fips, argo-events-fips, gitlab-runner, mapotf-fips, apko-fips, kubevela-fips, gomplate, grafana-alloy, kubescape-server, gitlab-rails-ce-fips,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: grype-db, trufflehog-fips, syft, amazon-ssm-agent, packer, external-secrets-operator, gitaly, bom, kargo, mapotf, flux-fips, argo-events-fips, gitlab-runner, mapotf-fips, apko-fips, kubevela-fips, gomplate, grafana-alloy, kubescape-server, gitlab-rails-ce-fips,...