GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gitlab-runner, prometheus, sealed-secrets, ko, zarf, crossplane-provider-aws-sns, tw, policy-controller, traefik, kine, step-kms-plugin, neuvector-sigstore-interface, src, cilium-cli, prometheus-operator, podman, cert-manager, kots, openbao, syft, buildah,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: kyverno, minio, prometheus, flux-source-controller, k9s, zarf, mattermost, flux-image-automation-controller, chisel, kine, external-dns, kubescape, external-secrets-operator, helm, gitlab-kas, kubernetes, cilium-cli, prometheus-operator, cilium, flux, cert-manager,...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: gitlab-runner, prometheus, zarf, kine, cilium-cli, prometheus-operator, podman, cert-manager, kots, syft, cloud-provider-aws, buildkitd, apko, nfpm, knative-serving, gh, skaffold, terragrunt, kubernetes-dashboard, nuclei, containerd, zot, act, docker, grype, dagger,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: kyverno, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, vexctl, gitsign, slsa-verifier, buildkitd, aactl, spire-server, falcoctl, goreleaser, trivy, ratify,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: kyverno, undock, flux-source-controller, ko, docker-compose, tekton-chains, zarf, xeol, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, rekor, tflint, podman, sigstore-scaffolding, kots, buildah, gitsign, vexctl,...

GO-2026-4945 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitaly, harbor, envconsul, grpc-health-probe, ko, zarf, cerbos, grpcurl, tw, policy-controller, traefik, sftpgo-plugin-kms, bank-vaults, boring-registry, trufflehog, kube-arangodb, step-kms-plugin, neuvector-sigstore-interface, neuvector-scanner,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: kyverno, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, vexctl, gitsign, slsa-verifier, buildkitd, aactl, spire-server, falcoctl, goreleaser, trivy, ratify,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: kyverno, harbor, rancher-system-agent, rancher-fleet, ko, k9s, tekton-chains, xeol, policy-controller, traefik, kyverno-notation-aws, kwok, crossplane, trufflehog, vendir, k3d, manifest-tool, rke2-cloud-provider, bento, flux-kustomize-controller, lazydocker, kbld,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, sigstore-scaffolding, docker-cli-buildx, vexctl, gitsign, slsa-verifier, buildkitd, aactl,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, rekor, tflint, sigstore-scaffolding, vexctl, gitsign, slsa-verifier, buildkitd, aactl, spire-server,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: prometheus, cni-plugins, envconsul, ko, cerbos, kube-bench, nri-memcached, terraform, step-kms-plugin, neuvector-sigstore-interface, kind, src, cilium-cli, prometheus-operator, lazydocker, libnvidia-container, regclient, dgraph, buildkitd, cloud-provider-vsphere,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, rekor, tflint, sigstore-scaffolding, vexctl, gitsign, slsa-verifier, buildkitd, aactl, spire-server,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tekton-chains, zarf, policy-controller, tkn, wolfictl, neuvector-sigstore-interface, kubescape, rekor, sigstore-scaffolding, vexctl, gitsign, slsa-verifier, aactl, apko, spire-server, falcoctl, melange, trivy, gh, zot, cosign...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: minio, docker, octo-sts, kubernetes-dashboard-auth, flux-source-controller, argo-rollouts, ko, tekton-chains, zarf, policy-controller, crossplane, bank-vaults, boring-registry, crossplane-provider-azure, mc, tkn, crossplane-provider-azure-managedidentity, kine,...

CLEANSTART-2026-RR89078 Security fixes in harbor-scanner-trivy 0.35.1-r0

Package harbor-scanner-trivy version 0.35.1-r0 fixes 3 vulnerabilities: CVE-2025-54410, CVE-2025-15558, CVE-2025-29923...

CLEANSTART-2026-QI00029 Security fixes in harbor-scanner-trivy-fips 0.35.1-r0

Package harbor-scanner-trivy-fips version 0.35.1-r0 fixes 3 vulnerabilities: CVE-2025-54410, CVE-2025-15558, CVE-2025-29923...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.72.0-0.1.3.hum1 aarch64, x8664 trivy-0.72.0-0.1.3.hum1.src src Security Fixes: trivy: CVE-2026-49834...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.72.0-0.1.2.hum1 aarch64, x8664 trivy-0.72.0-0.1.2.hum1.src src Security Fixes: trivy: CVE-2026-15788 CVE-2026-15792 CVE-2026-56852...

GO-2026-5983 Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2026:0263-1 Rating: important References: 1266495 1268356 1269269 1269271 1271658 1271670 Cross-References: CVE-2026-39821 CVE-2026-46680 CVE-2026-50151 CVE-2026-54448 CVE-2026-55092 CVE-2026-56852 CVSS scores:...