GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno-notation-aws, docker, buildkitd, trivy-operator, kubescape, falcoctl, ko, tekton-chains, policy-controller, goreleaser, trivy, ratify, docker-cli-buildx, gitsign, zarf, slsa-verifier, kyverno, skaffold, vexctl, cosign, sigstore-scaffolding, tflint...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno-notation-aws, docker, buildkitd, trivy-operator, kubescape, falcoctl, ko, tekton-chains, policy-controller, goreleaser, trivy, ratify, docker-cli-buildx, gitsign, zarf, slsa-verifier, kyverno, skaffold, vexctl, cosign, sigstore-scaffolding, tflint...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: consul, slsa-verifier, kaniko, gatus-fips, xeol, step-fips, task-fips, cloudprober-fips, gotrue-fips, grpc-health-probe, clickhouse-backup-fips, grafana-pyroscope, image-factory, chainloop-cli-fips, cerbos, cosign-fips, openbao-fips, hydra, cloudprober, trillian,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: consul, slsa-verifier, kaniko, gatus-fips, xeol, step-fips, task-fips, cloudprober-fips, gotrue-fips, grpc-health-probe, clickhouse-backup-fips, grafana-pyroscope, image-factory, chainloop-cli-fips, cerbos, cosign-fips, openbao-fips, hydra, cloudprober, trillian,...

GHSA-4QG8-FJ49-PXJH vulnerabilities

Vulnerabilities for packages: spire-server-fips, spire-server, cloudbeat, cloudbeat-fips, crossplane, skaffold-fips, tflint-fips, tekton-chains, zarf, tflint, cosign, vexctl, crossplane-fips, tekton-chains-fips, kyverno-fips, image-factory-fips, skaffold, falcoctl-fips, goreleaser,...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: spire-server-fips, spire-server, cloudbeat, cloudbeat-fips, crossplane, skaffold-fips, tflint-fips, tekton-chains, zarf, tflint, cosign, vexctl, crossplane-fips, tekton-chains-fips, kyverno-fips, image-factory-fips, skaffold, falcoctl-fips, goreleaser,...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign, gh, cosign-fips...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign, gh, cosign-fips...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: spire-server-fips, spire-server, conftest-fips, kots, opa, tfsec, zarf, snyk-cli, cosign, datadog-agent, k8sgpt, kyverno-fips, datadog-agent-fips, conftest, kubescape, policy-controller, gatekeeper, gatekeeper-fips, kyverno, cosign-fips, policy-controller-fips, zot...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: loki, kots, cadvisor, slsa-verifier, argo-workflows, cert-manager-fips, scorecard, tekton-chains, buildkitd, skopeo, timoni, zarf, cosign, datadog-agent, vexctl, k8sgpt, k9s, kubeflow-katib, chartmuseum, kubevela, helm-operator-fips, cri-tools, k3d, crane, bom,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: loki, kots, cadvisor, slsa-verifier, argo-workflows, cert-manager-fips, scorecard, tekton-chains, buildkitd, skopeo, timoni, zarf, cosign, datadog-agent, vexctl, k8sgpt, k9s, kubeflow-katib, chartmuseum, kubevela, helm-operator-fips, cri-tools, k3d, crane, bom,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: wolfictl, spire-server-fips, flux-notification-controller, crossplane-provider-aws-eks, spire-server, crossplane, crossplane-provider-aws-s3, argo-workflows, slsa-verifier, kaniko, scorecard, tekton-chains, flux-image-automation-controller, apko,...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: falco, falcoctl, kubescape, tekton-chains, cosign-fips, gitsign, vexctl, falcoctl-fips...