GO-2023-2334 vulnerabilities

Vulnerabilities for packages: gitsign, oauth2-proxy, cloudflared, tekton-chains, flux-kustomize-controller, tkn, slsa-verifier, flux-source-controller, argo-workflows, sops, vexctl, terragrunt, cosign, dex, kubescape, fulcio, spire-server, rekor, aactl, kots...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tflint, k3s, gitlab-kas, kubernetes-dashboard, kyverno, caddy, docker-cli-buildx, podman, openbao, cluster-api-azure-controller, crossplane-provider-aws-ec2, rancher-machine, buildkitd, trivy, k9s, snyk-cli, kaf, nfpm, crossplane-provider-aws-rds, sealed-secrets,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tflint, gitsign, neuvector-sigstore-interface, tekton-chains, docker-cli-buildx, witness, falcoctl, tkn, flux-source-controller, kyverno-notation-aws, vexctl, teleport, gh, cosign, sigstore-scaffolding, zarf, skaffold, kubescape, zot, spire-server, ratify, aactl,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, teleport, goreleaser, tkn, witness, gitsign, flux-source-controller, kyverno-notation-aws, zot, policy-controller, ratify...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, slsa-verifier, witness, gitsign, cosign, kots, sigstore-scaffolding, zarf, falco-no-driver, tekton-chains, kubescape, skopeo, vexctl...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tflint, gitsign, neuvector-sigstore-interface, kyverno, tekton-chains, docker-cli-buildx, witness, falcoctl, tkn, slsa-verifier, crossplane, buildkitd, trivy, flux-source-controller, kyverno-notation-aws, vexctl, teleport, gh, trivy-operator, cosign,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tflint, gitsign, neuvector-sigstore-interface, tekton-chains, witness, falcoctl, tkn, slsa-verifier, buildkitd, trivy, flux-source-controller, kyverno-notation-aws, vexctl, teleport, gh, trivy-operator, cosign, sigstore-scaffolding, zarf, skaffold, kubescape, zot,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tflint, k3s, cloud-sql-proxy, kubernetes-dashboard, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, caddy, aws-privateca-issuer, pluto, docker-cli-buildx, cluster-api-azure-controller, ip-masq-agent, buildkitd, trivy, wire-go, kubecolor,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: timestamp-authority, k3s, gitsign, neuvector-sigstore-interface, rabbitmq-messaging-topology-operator, tekton-chains, pulumi-kubernetes-operator, src-fingerprint, flux-helm-controller, opentelemetry-collector-contrib, kargo, falcoctl, flux-kustomize-controller,...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, chainctl, crossplane, chainctl-fips, kyverno, kyverno-fips, slsa-verifier, cloudbeat, crossplane-fips, trivy, teleport, commercial-chainloop-backend, commercial-kyverno, zot, trivy-operator-fips, ratify-fips, kubescape-server-fips,...

CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, chainctl, crossplane, chainctl-fips, kyverno, kyverno-fips, slsa-verifier, cloudbeat, crossplane-fips, trivy, teleport, commercial-chainloop-backend, commercial-kyverno, zot, trivy-operator-fips, ratify-fips, kubescape-server-fips,...

CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: aactl, teleport, slsa-verifier, crossplane, trivy-operator, trivy, kyverno, kyverno-notation-aws, kubescape, zot, policy-controller, ratify...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: aactl, teleport, slsa-verifier, crossplane, trivy-operator, trivy, kyverno, kyverno-notation-aws, kubescape, zot, policy-controller, ratify...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, coder, cloudbeat-fips, kine, reports-server, minio, trivy, flux-image-automation-controller-fips, knative-eventing-fips, helm, istio, cloud-provider-aws, fscrypt, external-dns, kots, opentelemetry-collector, argo-workflows-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tflint, k3s, gitlab-kas, kubernetes-dashboard, kyverno, caddy, docker-cli-buildx, podman, openbao, cluster-api-azure-controller, rancher-machine, buildkitd, trivy, k9s, snyk-cli, kaf, nfpm, flux-notification-controller, glab, rancher, step, apko, guac, chezmoi,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cert-manager, k3s, gitlab-kas, mattermost, rancher-agent, kubernetes-dashboard, kyverno, prometheus, kubernetes, opentelemetry-collector, fscrypt, minio, trivy, k9s, snyk-cli, kaf, falco-no-driver, cilium-cli, flux-source-controller, flux-image-automation-controller,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cert-manager, k3s, gitlab-kas, mattermost, rancher-agent, kubernetes-dashboard, kyverno, prometheus, buildah, docker-cli-buildx, podman, kubernetes, opentelemetry-collector, fscrypt, minio, snyk-cli, kaf, falco-no-driver, cilium-cli, external-secrets-operator,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: cert-manager, k3s, gitlab-kas, mattermost, aws-flb-cloudwatch, gitlab-pages, kubernetes-dashboard, kyverno, k8s-device-plugin, go, newrelic-fluent-bit-output, prometheus, runc, gitaly, fuse-overlayfs-snapshotter, kubernetes, fscrypt, dask-gateway, snyk-cli, kaf,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: tflint, gitsign, neuvector-sigstore-interface, tekton-chains, witness, falcoctl, tkn, slsa-verifier, buildkitd, trivy, flux-source-controller, kyverno-notation-aws, vexctl, teleport, gh, trivy-operator, cosign, sigstore-scaffolding, zarf, skaffold, kubescape, zot,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: tflint, gitsign, neuvector-sigstore-interface, tekton-chains, witness, falcoctl, tkn, slsa-verifier, buildkitd, trivy, flux-source-controller, kyverno-notation-aws, vexctl, teleport, gh, trivy-operator, cosign, sigstore-scaffolding, zarf, skaffold, kubescape, zot,...