GO-2024-2918 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, argo-events, grafana-mimir, trivy, opentelemetry-collector-contrib, druid, step, terragrunt, buildkitd, rclone, zot, sigstore-scaffolding, flux-source-controller, fulcio, hugo-extended, sqlpad, airflow, tekton-chains, flux-kustomize-controller...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: kargo, spire-server, syft, crossplane, trivy, docker-compose, conftest, buildkitd, zot, buf, dagger, tkn, aactl, kubescape, up, wolfictl, kaniko, cadvisor, grype, melange, cilium-cli, ctop, ko...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: grafana-mimir, opentelemetry-collector-contrib, docker-compose, kubescape-operator, keda, dagger, external-secrets-operator, kube-logging-operator, tkn, distribution, docker, grafana-image-renderer, thanos, flux, ferretdb, fluent-bit-plugin-loki, cloudprober, octo-st...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: ratify, kubescape, teleport, kyverno, kyverno-notation-aws, crossplane, slsa-verifier, trivy, trivy-operator, policy-controller, zot, aactl...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: ratify, teleport, kyverno, kyverno-notation-aws, slsa-verifier, trivy-operator, trivy, tekton-chains, vexctl, skaffold, tkn, zot, ko, aactl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: syft, argocd-image-updater, docker-compose, witness, slsa-verifier, k9s, dagger, external-secrets-operator, pulumi-language-java, tkn, docker, glab, tw, flux-image-automation-controller, nuclei, crossplane-provider-family-aws, osv-scanner, argo-cd,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, docker-cli-buildx, vexctl, skaffold, zot, teleport, sigstore-scaffolding, flux-source-controller, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, aactl, ratify, kubescape, goreleaser, tflint, kyverno-notation-aws, cosign,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: ratify, teleport, flux-source-controller, falcoctl, kyverno-notation-aws, witness, goreleaser, policy-controller, gitsign, tkn, zot, aactl...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: spire-server, docker-cli-buildx, crossplane, falcoctl, vexctl, trivy, skaffold, buildkitd, zot, teleport, sigstore-scaffolding, flux-source-controller, slsa-verifier, trivy-operator, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, docker, aactl,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, vexctl, trivy, skaffold, buildkitd, zot, teleport, sigstore-scaffolding, flux-source-controller, slsa-verifier, trivy-operator, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, rekor, docker, aactl, ratify, kubescape, gorelease...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: docker-cli, kuberlr, rancher-system-agent, rancher-system-upgrade-controller, kube-logging-operator, tkn, rabbitmq-cluster-operator, gcsfuse, nri-consul, nuclei, aws-eks-pod-identity-agent, cluster-api-provider-vsphere, tflint, k8sgpt, cluster-api-helm-controller,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, vexctl, trivy, zot, sigstore-scaffolding, flux-source-controller, slsa-verifier, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, rekor, aactl, kubescape, wolfictl, apko, melange, cosign, policy-controller, gh...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kargo, spire-server, actions-runner-controller, argo-events, falcoctl, flux-helm-controller, grafana-mimir, opentelemetry-collector-contrib, vexctl, terragrunt, crossplane-provider-azure-authorization, buildkitd, crossplane-provider-azure-managedidentity, zot,...

CLEANSTART-2026-UE72881 Security fixes in zot 2.1.13-r0

Package zot version 2.1.13-r0 fixes 12 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2025-61726, CVE-2025-61728, CVE-2025-68119...

CLEANSTART-2026-AH42066 Security fixes in zot 2.1.13-r2

Package zot version 2.1.13-r2 fixes 29 vulnerabilities: CVE-2021-41190, CVE-2026-33814, ghsa-pjcq-xvwq-hhpj, ghsa-f2g3-hh2r-cwgc, CVE-2026-39820...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubescape, traefik, kubernetes-dashboard, kaf, chisel-fips, seaweedfs-rocksdb, kine, prometheus, loki, terraform, tekton-pipelines-fips, grafana, cloudbeat-fips, k9s, nemo, knative-kafka-broker, harbor, flux-fips, frankenphp-8.4, gitlab-workhorse-ce, k9s-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium, istio, spire-server, telegraf, argocd-image-updater, trivy, cert-manager, kubernetes, kubernetes-dashboard, skaffold, nerdctl, zot, falco-no-driver, kine, chisel, flux-source-controller, trivy-operator, k3s, kaf, k9s, loki, containerd,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cilium, istio, spire-server, telegraf, docker-cli-buildx, cert-manager, kubernetes, kubernetes-dashboard, nerdctl, zot, falco-no-driver, kine, k3s, kaf, loki, containerd, external-secrets-operator, prometheus, helm, aactl, prometheus-operator, rancher, gitlab-kas,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt, kube-mgmt-fips, kots, t...

GHSA-X86F-5XW2-FM2R vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, spire-server, rancher-agent, trivy, nerdctl, zot, grafana, aws-otel-collector, trivy-operator, opentelemetry-operator, kpt, undock, cri-tools, envoy-gateway, nuclei, skopeo, rancher, k8sgpt, kots, amazon-cloudwatch-agent-operator,...