GO-2025-4192 vulnerabilities

Vulnerabilities for packages: teleport, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, kyverno-notation-aws, skaffold, cosign, gitsign, ko, ratify, vexctl, zot, docker-cli-buildx, tkn, spire-server, flux-source-controller, gh, kyverno, falcoctl,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kubescape, aactl, vexctl, slsa-verifier, falco-no-driver, kots, sigstore-scaffolding, falcoctl, zarf, cosign, gitsign, witness, skopeo, tekton-chains...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: docker, teleport, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, slsa-verifier, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, ratify, vexctl, zot, docker-cli-buildx, buildkitd, tkn, trivy, spire-server,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: flux-source-controller, aactl, kyverno, ratify, teleport, zot, tkn, goreleaser, falcoctl, kyverno-notation-aws, gitsign, policy-controller, witness...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: docker, teleport, rekor, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, slsa-verifier, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, ratify, vexctl, zot, buildkitd, tkn, trivy, spire-server,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, skopeo, rekor, bank-vaults, pulumi, goreleaser, scorecard, guac, k3d, sigstore-scaffolding, ksops, zarf, policy-controller, argo-events, k3s, snyk-cli, flux-image-reflector-controller, kubernetes-event-exporter, kubescape,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: crossplane, gitsign, trivy-operator, trivy-operator-fips, kyverno-fips, aactl, kyverno-notation-aws, zarf, zarf-fips, kubescape-server-fips, cloudbeat-fips, neuvector-sigstore-interface-fips, policy-controller, kubescape-server, cloudbeat, tflint, image-factory-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: openbao, seaweedfs-rocksdb, opentelemetry-collector, splunk-otel-collector, dagger, flux-kustomize-controller-fips, flux-operator-fips, docker, frankenphp-8.4, spire-server, vault, buildah, buildkitd-fips, external-dns, crossplane-provider-azure-portal, kyverno-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: k9s, cilium, argo-cd, telegraf, kots, chisel, cilium-cli, k8sgpt, gptscript, pulumi-language-dotnet, splunk-otel-collector, fscrypt, go-discover, aactl, eksctl, cosign, ko, wolfictl, steampipe, step-issuer, gatus, terragrunt, prometheus, istio, buildkitd, tkn,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: gitlab-kas, k8sgpt-operator, consul-k8s, infinispan-operator, cilium, k9s, teleport, argocd-image-updater, argo-cd, cert-manager-istio-csr, emissary, kiali, percona-server-mongodb-operator, rancher-agent, kots, redis-operator, cluster-api, cilium-cli, envoy-gateway,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: gitlab-kas, k8sgpt-operator, consul-k8s, infinispan-operator, cilium, k9s, teleport, argocd-image-updater, argo-cd, cert-manager-istio-csr, emissary, kiali, percona-server-mongodb-operator, rancher-agent, kots, redis-operator, cluster-api, cilium-cli, envoy-gateway,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: docker, teleport, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, slsa-verifier, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, ratify, vexctl, zot, docker-cli-buildx, buildkitd, tkn, trivy, spire-server,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: docker, teleport, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, aactl, slsa-verifier, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, ratify, vexctl, zot, docker-cli-buildx, buildkitd, tkn, trivy, spire-server,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: net-kourier, terraform-provider-time, memcached-exporter, rabbitmq-messaging-topology-operator, cilium, sftpgo-plugin-eventsearch, newrelic-fluent-bit-output, argo-cd, crossplane, telegraf, kots, goreleaser, litestream, amazon-cloudwatch-agent-operator, cilium-cli,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: restic-fips, opentelemetry-collector, opentelemetry-collector-fips, spire-server, vault, flyte, trino, rekor, cluster-autoscaler-fips, cortex, step, tempo, flux-source-controller, flux-image-reflector-controller, fulcio-fips, argo-cd, sqlpad, nuclei, falcoctl-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: airflow, rekor, secrets-store-csi-driver-provider-azure, bank-vaults, tempo, pulumi, goreleaser, guac, sigstore-scaffolding, velero, ksops, argo-workflows, zarf, k8sgpt, chezmoi, cortex, argo-events, fluent-bit-plugin-loki, policy-controller,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: spire-server, gitsign, goreleaser, chainctl, aactl, slsa-verifier, zarf, vexctl, flux-source-controller, policy-controller, ko-fips, skaffold, falcoctl-fips, apko, tkn-fips, policy-controller-fips, zot, tekton-chains, falcoctl, wolfictl, neuvector-sigstore-interface,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: goreleaser, zarf, policy-controller, kubescape, apko, aactl, slsa-verifier, skaffold, gitsign, ko, wolfictl, vexctl, zot, melange, tkn, spire-server, flux-source-controller, falcoctl, neuvector-sigstore-interface, tekton-chains...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: goreleaser, zarf, policy-controller, kubescape, apko, aactl, slsa-verifier, skaffold, gitsign, ko, wolfictl, vexctl, zot, melange, tkn, spire-server, flux-source-controller, falcoctl, neuvector-sigstore-interface, tekton-chains...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: goreleaser, zarf, policy-controller, kubescape, apko, aactl, slsa-verifier, skaffold, gitsign, ko, wolfictl, vexctl, zot, melange, tkn, spire-server, flux-source-controller, falcoctl, neuvector-sigstore-interface, tekton-chains...