GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: tekton-chains, kyverno-notation-aws, trivy, tflint, flux-source-controller, crossplane, witness, buildkitd, ko, kyverno, zot, zarf, docker, vexctl, neuvector-sigstore-interface, policy-controller, tkn, goreleaser, skaffold, spire-server, trivy-operator, gh, aactl,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: tekton-chains, kyverno-notation-aws, trivy, tflint, flux-source-controller, crossplane, witness, buildkitd, ko, kyverno, zot, zarf, docker, vexctl, neuvector-sigstore-interface, policy-controller, tkn, goreleaser, skaffold, spire-server, trivy-operator, gh, aactl,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-gcp-fips, hydra, octo-sts, sftpgo-plugin-kms, aactl, skaffold-fips, kyverno-notation-aws-fips, consul-k8s-fips, zarf-fips, cephcsi-fips, spicedb, flux-operator, knative-kafka-broker-fips, splunk-otel-collector, istio-fips, tkn-fips, grype-db,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-gcp-fips, hydra, octo-sts, sftpgo-plugin-kms, aactl, skaffold-fips, kyverno-notation-aws-fips, consul-k8s-fips, zarf-fips, cephcsi-fips, spicedb, flux-operator, knative-kafka-broker-fips, splunk-otel-collector, istio-fips, tkn-fips, grype-db,...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: spire-server, neuvector-sigstore-interface, skaffold, policy-controller, ko-fips, sigstore-scaffolding, spire-server-fips, tkn, sigstore-scaffolding-fips, gh, docker-cli-buildx, aactl, gitsign, skaffold-fips, cloudbeat-fips, cloudbeat, kyverno-notation-aws-fips, cg,...

GHSA-4QG8-FJ49-PXJH vulnerabilities

Vulnerabilities for packages: spire-server, neuvector-sigstore-interface, skaffold, policy-controller, ko-fips, sigstore-scaffolding, spire-server-fips, tkn, sigstore-scaffolding-fips, gh, docker-cli-buildx, aactl, gitsign, skaffold-fips, cloudbeat-fips, cloudbeat, kyverno-notation-aws-fips, cg,...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: cosign, cosign-fips, slsa-verifier, gh...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: cosign, cosign-fips, slsa-verifier, gh...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: conftest, spire-server, spire-server-fips, policy-controller, datadog-agent-fips, cosign, gatekeeper, kots, kyverno-fips, zarf, policy-controller-fips, tfsec, kubescape, opa, gatekeeper-fips, zot, conftest-fips, snyk-cli, kyverno, k8sgpt, cosign-fips, datadog-agent...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: helm-operator-fips, pulumi, flux-helm-controller, skaffold, policy-controller, ko-fips, helm-operator, cadvisor-fips, kargo, newrelic-infrastructure-agent, trivy, cert-manager-fips, aactl, nerdctl, ctop, guac, gitsign, rancher-machine, kubevela, datadog-agent-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, pulumi, flux-helm-controller, skaffold, policy-controller, ko-fips, helm-operator, cadvisor-fips, kargo, newrelic-infrastructure-agent, trivy, cert-manager-fips, aactl, nerdctl, ctop, guac, gitsign, rancher-machine, kubevela, datadog-agent-fips,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: spire-server, crossplane-provider-aws-lambda, pulumi, pulumi-language-java, skaffold, kaniko, policy-controller, spire-server-fips, terraform-provider-google, tkn, crossplane-provider-family-aws, boring-registry, crossplane-provider-aws-sqs, aactl,...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: falcoctl, vexctl, kubescape, tekton-chains, cosign-fips, falco, falcoctl-fips, gitsign...