GO-2026-4910 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gitlab-runner, crossplane, flux-image-automation-controller, guac, chezmoi, nfpm, flux-source-controller, pulumi-language-dotnet, kots, src-fingerprint, k9s, kubevela, snyk-cli, trivy, zarf, kargo, xeol, wolfictl, argocd-image-updater, tfse...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, zot, crossplane, ratify, policy-controller, trivy, kyverno, aactl, slsa-verifier, trivy-operator, kubescape, teleport...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: tkn, crossplane, neuvector-sigstore-interface, slsa-verifier, tflint, zarf, trivy-operator, falcoctl, kyverno-notation-aws, ratify, policy-controller, kyverno, aactl, kubescape, teleport, tekton-chains, ko, gitsign, goreleaser, spire-server...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, prometheus, flux-image-automation-controller, guac, cilium-cli, flux-source-controller, nfpm, pulumi-language-dotnet, crossplane-provider-aws-ec2, rancher, go-discover, cert-manager, buildkitd, docker-machine-driver-linode,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tkn, crossplane, flux-source-controller, neuvector-sigstore-interface, slsa-verifier, tflint, spire-server, buildkitd, trivy, zarf, gh, sigstore-scaffolding, trivy-operator, vexctl, falcoctl, docker-cli-buildx, skaffold, kyverno-notation-aws, ratify, policy-controlle...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tkn, crossplane, flux-source-controller, neuvector-sigstore-interface, slsa-verifier, tflint, spire-server, buildkitd, trivy, zarf, gh, sigstore-scaffolding, trivy-operator, vexctl, falcoctl, skaffold, kyverno-notation-aws, ratify, policy-controller, kyverno, aactl,...

CVE-2026-54448 vulnerabilities

Vulnerabilities for packages: trivy-operator...

GHSA-Q3FV-X8VG-QQM4 vulnerabilities

Vulnerabilities for packages: trivy-operator...

GHSA-Q3FV-X8VG-QQM4 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, cloudbeat, cloudbeat-fips, trivy-operator...

CVE-2026-54448 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, cloudbeat, cloudbeat-fips, trivy-operator...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: policy-controller, trivy-operator-fips, crossplane, gitsign, kyverno, tekton-chains-fips, tkn, neuvector-sigstore-interface-fips, zarf-fips, falcoctl-fips, tbot, neuvector-sigstore-interface, falcoctl, docker-fips, teleport-operator-fips, policy-controller-fips,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, podman, packer, ld-relay-fips, mariadb-operator, kyverno-policy-reporter-ui-fips, containerd, crossplane-provider-aws-swf-fips, fleet-server, prometheus-nats-exporter-fips, kubernetes-csi-node-driver-registrar-fips, terraform-docs-fips,...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, tkn, crossplane, ratify, spire-server, policy-controller, trivy, zarf, kyverno, tekton-chains, aactl, gitsign, neuvector-sigstore-interface, trivy-operator, kubescape, goreleaser, falcoctl, tflint...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, tkn, crossplane, ratify, spire-server, policy-controller, trivy, zarf, kyverno, tekton-chains, aactl, gitsign, neuvector-sigstore-interface, trivy-operator, kubescape, goreleaser, falcoctl, tflint...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: etcd, prometheus-operator, kots, commercial-expanso-edge, zarf-fips, frankenphp-8.2, containerd, frankenphp-8.3, kubevela-fips, k9s, rancher-agent, knative-kafka-broker-fips, telegraf, kubernetes-dashboard, aactl, flux-fips, skaffold, harbor-fips, knative-serving-fip...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cosign, crossplane-aws-provider-fips, podman, crossplane-provider-azure-search, packer, crossplane-provider-azure-sql, buildkitd-fips, terragrunt, buildah-fips, chainloop-cli-fips, prometheus-podman-exporter-fips, argo-events, etcd, amazon-ssm-agent-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: cosign, crossplane-aws-provider-fips, podman, crossplane-provider-azure-search, packer, crossplane-provider-azure-sql, buildkitd-fips, terragrunt, buildah-fips, chainloop-cli-fips, prometheus-podman-exporter-fips, argo-events, etcd, amazon-ssm-agent-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: etcd, prometheus-operator, kots, commercial-expanso-edge, zarf-fips, frankenphp-8.2, containerd, frankenphp-8.3, kubevela-fips, k9s, rancher-agent, knative-kafka-broker-fips, telegraf, kubernetes-dashboard, aactl, flux-fips, skaffold, harbor-fips, knative-serving-fip...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, podman, packer, crossplane-provider-aws-kinesis-fips, prometheus-podman-exporter-fips, commercial-expanso-edge, frankenphp-8.2, containerd, kubevela-fips, step-issuer, crossplane-provider-aws-datasync, crossplane-provider-aws-sesv2-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, podman, packer, crossplane-provider-aws-kinesis-fips, prometheus-podman-exporter-fips, commercial-expanso-edge, frankenphp-8.2, containerd, kubevela-fips, step-issuer, crossplane-provider-aws-datasync, crossplane-provider-aws-sesv2-fips,...