GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: cosign, crossplane, goreleaser, kyverno-notation-aws, vexctl, trivy-operator, sigstore-scaffolding, flux-source-controller, teleport, ko, gh, policy-controller, zot, falcoctl, gitsign, tekton-chains, docker, tkn, tflint, kyverno, ratify, kubescape, spire-server,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: cosign, crossplane, goreleaser, kyverno-notation-aws, vexctl, trivy-operator, sigstore-scaffolding, flux-source-controller, teleport, ko, gh, policy-controller, zot, falcoctl, gitsign, tekton-chains, docker, tkn, tflint, kyverno, ratify, kubescape, spire-server,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, bom, undock, cluster-api-helm-controller, crossplane, k3s, rancher-agent, portieris, openbao, kubeflow-katib, falcoctl, aactl, lazydocker, ctop, amazon-cloudwatch-agent-operator, opentelemetry-operator, k3d, prometheus, rancher-machine, promxy,...