GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kubescape, aactl, vexctl, slsa-verifier, falco-no-driver, kots, sigstore-scaffolding, falcoctl, zarf, cosign, gitsign, witness, skopeo, tekton-chains...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: docker, teleport, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, slsa-verifier, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, ratify, vexctl, zot, docker-cli-buildx, buildkitd, tkn, trivy, spire-server,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: flux-source-controller, aactl, kyverno, ratify, teleport, zot, tkn, goreleaser, falcoctl, kyverno-notation-aws, gitsign, policy-controller, witness...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: docker, teleport, rekor, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, slsa-verifier, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, ratify, vexctl, zot, buildkitd, tkn, trivy, spire-server,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, amazon-cloudwatch-agent-operator, cilium-cli, controller-gen, k3d, nri-mysql, k8sgpt, gptscript, chart-testing, aactl, polaris, rabbitmq-cluster-operator, eksctl, ko, dive, terraform-provider-azapi, harbor-registry, wait-for-port...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, skopeo, rekor, bank-vaults, pulumi, goreleaser, scorecard, guac, k3d, sigstore-scaffolding, ksops, zarf, policy-controller, argo-events, k3s, snyk-cli, flux-image-reflector-controller, kubernetes-event-exporter, kubescape,...

CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: crossplane, chainctl-fips, trivy-operator, trivy-operator-fips, kyverno-fips, chainctl, aactl, slsa-verifier, kyverno-notation-aws, commercial-chainloop-cli, kubescape-server-fips, cloudbeat-fips, policy-controller, ko-fips, kubescape-server, cloudbeat,...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: crossplane, chainctl-fips, trivy-operator, trivy-operator-fips, kyverno-fips, chainctl, aactl, slsa-verifier, kyverno-notation-aws, commercial-chainloop-cli, kubescape-server-fips, cloudbeat-fips, policy-controller, ko-fips, kubescape-server, cloudbeat,...

CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: kubescape, kyverno, aactl, ratify, slsa-verifier, teleport, zot, crossplane, kyverno-notation-aws, trivy-operator, trivy, policy-controller...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: kubescape, kyverno, aactl, ratify, slsa-verifier, teleport, zot, crossplane, kyverno-notation-aws, trivy-operator, trivy, policy-controller...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, opentelemetry-collector, frankenphp-8.4, spire-server, vault, external-dns, kyverno-fips, kine, argocd-image-updater, seaweedfs-rocksdb-fips, flux-source-controller, cilium-cli, etcd, argo-cd, flux-fips, prometheus-elasticsearch-exporter, zot,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: k9s, cilium, argo-cd, telegraf, kots, chisel, cilium-cli, k8sgpt, gptscript, pulumi-language-dotnet, splunk-otel-collector, fscrypt, go-discover, aactl, eksctl, cosign, ko, wolfictl, steampipe, step-issuer, gatus, terragrunt, prometheus, istio, buildkitd, tkn,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitlab-kas, k9s, cilium, argocd-image-updater, gitea, telegraf, kots, chisel, cilium-cli, osv-scanner, zarf, minio, k3s, snyk-cli, fscrypt, kubescape, aactl, flux-image-automation-controller, kubernetes, skaffold, kaf, trivy-operator, kine, prometheus, containerd,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: gitlab-kas, cilium, telegraf, kots, cilium-cli, minio, k3s, snyk-cli, fscrypt, aactl, kubernetes, podman, kaf, buildah, kine, prometheus, containerd, istio, kubernetes-dashboard, docker-cli-buildx, zot, cert-manager, mattermost, knative-serving, prometheus-operator,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: gitlab-kas, cilium, newrelic-fluent-bit-output, argo-cd, telegraf, kots, aws-flb-firehose, cilium-cli, libnvidia-container, chezmoi, k3s, snyk-cli, datadog-agent, go, fscrypt, kubescape, aactl, falco-no-driver, kubernetes, fuse-overlayfs-snapshotter, aws-flb-kinesis,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: docker, teleport, rekor, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, slsa-verifier, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, ratify, vexctl, zot, buildkitd, tkn, trivy, spire-server,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: docker, teleport, rekor, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, slsa-verifier, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, ratify, vexctl, zot, buildkitd, tkn, trivy, spire-server,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: docker, teleport, rekor, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, slsa-verifier, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, ratify, vexctl, zot, buildkitd, tkn, trivy, spire-server,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: docker, teleport, rekor, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, slsa-verifier, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, ratify, vexctl, zot, buildkitd, tkn, trivy, spire-server,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: witness, docker, rekor-fips, cg, spire-server, crossplane, gitsign, gh, buildkitd-fips, goreleaser, trivy-operator, trivy-operator-fips, chainctl, aactl, kyverno-fips, slsa-verifier, kyverno-policy-reporter-plugins-kyverno-fips, rekor, kyverno-notation-aws, zarf,...