CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: spire-server, docker, kyverno-notation-aws, sigstore-scaffolding, trivy-operator, ko, tekton-chains, flux-source-controller, kubescape, policy-controller, trivy, cosign, falcoctl, goreleaser, gitsign, kyverno, gh, tflint, crossplane, tkn, skaffold, aactl, witness, zo...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: spire-server, docker, kyverno-notation-aws, sigstore-scaffolding, trivy-operator, ko, tekton-chains, flux-source-controller, kubescape, policy-controller, trivy, cosign, falcoctl, goreleaser, gitsign, kyverno, gh, tflint, crossplane, tkn, skaffold, aactl, witness, zo...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, loki-fips, skaffold-fips, vault-benchmark, amazon-ssm-agent-fips, rook, gotrue-fips, trivy-fips, zot, ratify-fips, tw, terragrunt-fips, cert-manager-istio-csr-fips, ksops, rancher-agent, vault, skopeo-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, loki-fips, skaffold-fips, vault-benchmark, amazon-ssm-agent-fips, rook, gotrue-fips, trivy-fips, zot, ratify-fips, tw, terragrunt-fips, cert-manager-istio-csr-fips, ksops, rancher-agent, vault, skopeo-fips,...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: vexctl, cg, flux-source-controller-fips, skaffold-fips, crossplane, teleport, cosign-fips, kyverno-notation-aws, kubescape, gitsign, tflint-fips, cloudbeat-fips, kyverno-policy-reporter-plugins-kyverno, kyverno-fips, tkn, aactl, tflint, witness, cloudbeat, kyverno, g...

GHSA-4QG8-FJ49-PXJH vulnerabilities

Vulnerabilities for packages: vexctl, cg, flux-source-controller-fips, skaffold-fips, crossplane, teleport, cosign-fips, kyverno-notation-aws, kubescape, gitsign, tflint-fips, cloudbeat-fips, kyverno-policy-reporter-plugins-kyverno, kyverno-fips, tkn, aactl, tflint, witness, cloudbeat, kyverno, g...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: cosign, gh, slsa-verifier, cosign-fips...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: cosign, gh, slsa-verifier, cosign-fips...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: kots, cosign-fips, kubescape, gatekeeper-fips, kyverno-fips, tfsec, opa, snyk-cli, conftest-fips, kyverno, policy-controller-fips, zot, gatekeeper, policy-controller, spire-server-fips, k8sgpt, cosign, zarf, datadog-agent-fips, spire-server, conftest, datadog-agent...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: flux-helm-controller, vexctl, buildkitd, cadvisor-fips, kubevela, kots, argo-workflows-fips, istio-pilot-agent, cosign-fips, nerdctl, kubescape, skopeo, gitsign, argo-workflows, cri-tools, kubeflow-katib, pulumi, bom, docker-credential-gcr, slsa-verifier, aactl, k3d,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, vexctl, buildkitd, cadvisor-fips, kubevela, kots, argo-workflows-fips, istio-pilot-agent, cosign-fips, nerdctl, kubescape, skopeo, gitsign, argo-workflows, cri-tools, kubeflow-katib, pulumi, bom, docker-credential-gcr, slsa-verifier, aactl, k3d,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: vexctl, crossplane-provider-aws-elasticache, crossplane-provider-aws-firehose, terraform-provider-google, kubevela, sops, flux-source-controller, crossplane, pulumi-language-dotnet, pulumi-language-java, cosign-fips, crossplane-provider-aws-sns, kubescape,...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: vexctl, falcoctl-fips, falcoctl, cosign-fips, falco, kubescape, gitsign, tekton-chains...