GO-2026-5547 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, falcoctl, tekton-chains, cosign, aactl, docker-compose, buildkitd, gitsign, trivy-operator, bom, zarf, skaffold, vexctl, docker, kyverno, zot, kubescape, teleport, goreleaser, crossplane, rekor, spire-server,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tkn, gh, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, gitsign, zarf, skaffold, vexctl, zot, kubescape, teleport, goreleaser, spire-server, policy-controller, ko, neuvector-sigstore-interface, docker-cli-buildx, ratify, sigstore-scaffolding...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, zot, kubescape, teleport, goreleaser, spire-server, policy-controller, ko, neuvector-sigstore-interface, ratif...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: tkn, slsa-verifier, flux-source-controller, portieris, witness, undock, falcoctl, tekton-chains, cosign, buildah, aactl, kots, gitsign, zarf, vexctl, kubescape, ratify, podman, sigstore-scaffolding, skopeo, falco-no-driver, kyverno-notation-aws...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, docker, kyverno, zot, kubescape, teleport, goreleaser, crossplane, spire-server, policy-controller, ko,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kots, gitsign, slsa-verifier, sigstore-scaffolding, witness, skopeo, falco-no-driver, zarf, falcoctl, tekton-chains, vexctl, cosign, kubescape, aactl...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, zot, kubescape, teleport, goreleaser, spire-server, policy-controller, ko, neuvector-sigstore-interface, ratif...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, docker, zot, kubescape, teleport, goreleaser, rekor, spire-server, policy-controller, ko,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: sbomqs, portieris, fq, extism, terraform-provider-sendgrid, k8ssandra-operator, hello-world-golang, sqlexporter, neuvector-dbgen, dex, cluster-proportional-autoscaler, flyte, kpt, nri-mysql, cert-manager-csi-driver, fluent-bit-plugin-loki, pguser,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, falcoctl, tekton-chains, cosign, aactl, gitsign, zarf, vexctl, zot, kubescape, rekor, apko, spire-server, policy-controller, neuvector-sigstore-interface, trivy, sigstore-scaffolding, wolfictl, melange...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: sbomqs, portieris, k8ssandra-operator, crossplane-provider-aws-sns, sqlexporter, argo-rollouts, dex, cluster-proportional-autoscaler, flyte, sonobuoy, kpt, fluent-bit-plugin-loki, cue, cass-operator, kube-vip, crossplane-provider-aws-cloudwatchlogs, thanos,...

GO-2024-2888 vulnerabilities

Vulnerabilities for packages: sbomqs, delve, fq, extism, k8ssandra-operator, hello-world-golang, neuvector-dbgen, nri-haproxy, dex, cluster-proportional-autoscaler, go-bindata, flyte, sonobuoy, kpt, nri-mysql, fluent-bit-plugin-loki, buf, cass-operator, mc, secrets-store-csi-driver-provider-azure...

GO-2025-3447 vulnerabilities

Vulnerabilities for packages: opa-envoy, sbomqs, delve, portieris, fq, extism, k8ssandra-operator, hello-world-golang, crossplane-provider-aws-sns, sqlexporter, neuvector-dbgen, argo-rollouts, nri-haproxy, dex, cluster-proportional-autoscaler, go-bindata, flyte, sonobuoy, linkerd2-proxy-init, kpt...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3d, flux-image-automation-controller, tkn, gh, nuclei, slsa-verifier, crossplane-provider-azure, flux-source-controller, ksops, terraform-provider-azurerm, falcoctl, tekton-chains, gomplate, src-fingerprint, crossplane-provider-azure-sql, cosign, step-ca,...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: tkn, slsa-verifier, flux-source-controller, falcoctl, tekton-chains, aactl, gitsign, zarf, skaffold, vexctl, zot, kubescape, goreleaser, apko, spire-server, policy-controller, ko, neuvector-sigstore-interface, wolfictl, melange...

CLEANSTART-2026-RN13668 Security fixes in cosign 2.6.4-r2

Package cosign version 2.6.4-r2 fixes 2 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-SK52724 Security fixes in cosign 3.1.2-r1

Package cosign version 3.1.2-r1 fixes 9 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-49835, ghsa-9c54-x2g4-v92j...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.3-0.1.hum1 aarch64, x8664 cosign-3.1.3-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.2-0.3.hum1 aarch64, x8664 cosign-3.1.2-0.3.hum1.src src Security Fixes: cosign: CVE-2026-56852...

CVE-2026-54787 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, trivy, crossplane, jfrog-cli, aactl, kubescape-server-fips, neuvector-sigstore-interface, skaffold, kyverno-notation-aws-fips, cosign, flux-source-controller-fips, policy-controller-fips, spire-server-fips, kubescape, teleport-operator-fips,...