CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tflint, vexctl, kubescape, zot, gh, aactl, cosign, neuvector-sigstore-interface, policy-controller, zarf, docker-cli-buildx, buildkitd, spire-server, tekton-chains, goreleaser, falcoctl, kyverno-notation-aws, sigstore-scaffolding, skaffold,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tflint, vexctl, kubescape, zot, gh, aactl, cosign, neuvector-sigstore-interface, policy-controller, zarf, docker-cli-buildx, buildkitd, spire-server, tekton-chains, goreleaser, falcoctl, kyverno-notation-aws, sigstore-scaffolding, skaffold,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: kserve, cloudprober, gcsfuse, spire-controller-manager, neuvector-sigstore-interface, policy-controller, velero-plugin-for-gcp, step-kms-plugin, flux-kustomize-controller, istio-fips, tflint-fips, kube-oidc-proxy, consul, podman-fips, gitaly, falcoctl, consul-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: kserve, cloudprober, gcsfuse, spire-controller-manager, neuvector-sigstore-interface, policy-controller, velero-plugin-for-gcp, step-kms-plugin, flux-kustomize-controller, istio-fips, tflint-fips, kube-oidc-proxy, consul, podman-fips, gitaly, falcoctl, consul-fips,...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: tekton-chains, spire-server, skaffold-fips, teleport, ko-fips, policy-controller-fips, tekton-chains-fips, kyverno-notation-aws-fips, docker-cli-buildx, cloudbeat-fips, gh, neuvector-sigstore-interface, kubescape, policy-controller, tflint, sigstore-scaffolding, cg,...

GHSA-4QG8-FJ49-PXJH vulnerabilities

Vulnerabilities for packages: tekton-chains, spire-server, skaffold-fips, teleport, ko-fips, policy-controller-fips, tekton-chains-fips, kyverno-notation-aws-fips, docker-cli-buildx, cloudbeat-fips, gh, neuvector-sigstore-interface, kubescape, policy-controller, tflint, sigstore-scaffolding, cg,...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: gh, cosign-fips, slsa-verifier, cosign...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: gh, cosign-fips, slsa-verifier, cosign...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: opa, spire-server, datadog-agent, kots, policy-controller-fips, snyk-cli, policy-controller, kubescape, kyverno-fips, zot, cosign-fips, gatekeeper-fips, tfsec, cosign, conftest, conftest-fips, spire-server-fips, gatekeeper, k8sgpt, kyverno, zarf, datadog-agent-fips...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: cert-manager, docker-machine-driver-harvester, tekton-chains, datadog-agent, ko-fips, kots, kubevela, policy-controller-fips, chartmuseum, skopeo, nerdctl, kubescape, policy-controller, scorecard, kubeflow-katib, loki, kpt, helm-fips, helm-operator, gitsign,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: cert-manager, docker-machine-driver-harvester, tekton-chains, datadog-agent, ko-fips, kots, kubevela, policy-controller-fips, chartmuseum, skopeo, nerdctl, kubescape, policy-controller, scorecard, kubeflow-katib, loki, kpt, helm-fips, helm-operator, gitsign,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: grype, tekton-chains, crossplane-provider-aws-iam, rclone, spire-server, boring-registry, pulumi-language-yaml, kubevela, crossplane-provider-aws-cloudformation, crossplane-provider-aws-s3, actions-runner-controller, crossplane-provider-aws-rds, kubescape,...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: tekton-chains, falcoctl, cosign-fips, vexctl, gitsign, falcoctl-fips, falco, kubescape...