GO-2024-3166 vulnerabilities

Vulnerabilities for packages: cosign, falcoctl, apko, zot, vexctl, flux-source-controller, policy-controller, kubescape, spire-server, aactl, rekor, tekton-chains, sigstore-scaffolding, tkn, trivy, slsa-verifier, wolfictl, melange, gitsign, gh, zarf, neuvector-sigstore-interface...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, cosign, falcoctl, sops, flux-notification-controller, terraform-provider-azurerm, zot, vexctl, flux-source-controller, rook, kargo, timestamp-authority, actions-runner-controller, policy-controller, k3d, pulumi, step-ca, kubescape,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kubescape, falcoctl, kots, undock, aactl, ratify, podman, zarf, slsa-verifier, flux-source-controller, kyverno-notation-aws, skopeo, tekton-chains, witness, kyverno, buildah, gitsign...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kubescape, falcoctl, kots, undock, aactl, ratify, podman, zarf, slsa-verifier, flux-source-controller, kyverno-notation-aws, skopeo, tekton-chains, witness, kyverno, buildah, gitsign...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: aactl, flux-source-controller-fips, portieris-fips, tekton-chains-fips, kyverno-notation-aws, kubescape-server-fips, chainctl-fips, ratify, skopeo, skopeo-fips, zarf-fips, buildah, podman-fips, kyverno, kyverno-fips, tekton-chains, kubescape-server, gitsign,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: aactl, flux-source-controller-fips, portieris-fips, tekton-chains-fips, kyverno-notation-aws, kubescape-server-fips, chainctl-fips, ratify, skopeo, skopeo-fips, zarf-fips, buildah, podman-fips, kyverno, kyverno-fips, tekton-chains, kubescape-server, gitsign,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, flux-image-automation-controller, frankenphp-8.3, knative-serving-fips, osv-scanner, tekton-pipelines, drone-fips, prometheus-mongodb-exporter, zarf-fips, telegraf, prometheus-operator, knative-kafka-broker-fips, gitea, grafana,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, flux-image-automation-controller, frankenphp-8.3, knative-serving-fips, osv-scanner, tekton-pipelines, drone-fips, prometheus-mongodb-exporter, zarf-fips, telegraf, prometheus-operator, knative-kafka-broker-fips, gitea, grafana,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, flux-image-automation-controller, frankenphp-8.3, knative-serving-fips, atlantis-fips, osv-scanner, terraform-provider-tls-fips, trufflehog-fips, tekton-pipelines, crossplane-aws-provider, crossplane-provider-azure-synapse, tkn-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, flux-image-automation-controller, frankenphp-8.3, knative-serving-fips, osv-scanner, trufflehog-fips, tekton-pipelines, chainloop-cli-fips, amazon-ssm-agent, prometheus-mongodb-exporter, zarf-fips, telegraf, prometheus-operator,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, flux-image-automation-controller, frankenphp-8.3, knative-serving-fips, osv-scanner, trufflehog-fips, tekton-pipelines, chainloop-cli-fips, drone-fips, amazon-ssm-agent, prometheus-mongodb-exporter, zarf-fips, telegraf,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tflint, cosign, flux-notification-controller, prometheus, fscrypt, hcloud, eksctl, pulumi, podman, snyk-cli, skaffold, kubernetes-dashboard, chisel, atlantis, cert-manager, docker-machine-driver-harvester, fulcio, gatus, trivy, external-dns, scorecard, kubernetes, ac...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: apko, zot, steampipe, teleport, flux-source-controller, crossplane, kargo, grype, kyverno, pulumi, grafana-alloy, kubescape, snyk-cli, argocd-image-updater, skaffold, gitlab-runner, rancher-fleet, witness, src-fingerprint, pulumi-language-yaml, argo-events, cerbos,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, flux-image-automation-controller, osv-scanner, trufflehog-fips, chainloop-cli-fips, amazon-ssm-agent, zarf-fips, gitea, grafana, teleport, bom, argo-cd-fips, gitsign, terragrunt-fips, src-fingerprint, grafana-alloy-fips, grype-db,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: tflint, cosign, falcoctl, zot, teleport, docker-compose, flux-source-controller, crossplane, vexctl, kyverno, policy-controller, docker-cli-buildx, kubescape, spire-server, aactl, ratify, rekor, skaffold, gitlab-runner, tekton-chains, buildkitd, docker, tkn, trivy,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: vexctl, tkn-fips, chainloop-cli-fips, zarf-fips, neuvector-sigstore-interface, teleport, cosign, bom, gitsign, kyverno-notation-aws-fips, slsa-verifier, docker-cli-buildx-fips, spire-server-fips, ratify-fips, tflint-fips, chainloop-control-plane-fips, rekor-fips,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: tflint, cosign, falcoctl, zot, teleport, vexctl, flux-source-controller, crossplane, kyverno, policy-controller, docker-cli-buildx, kubescape, spire-server, aactl, ratify, skaffold, tekton-chains, buildkitd, witness, sigstore-scaffolding, docker, tkn, trivy,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: tflint, cosign, falcoctl, zot, teleport, vexctl, flux-source-controller, crossplane, kyverno, policy-controller, docker-cli-buildx, kubescape, spire-server, aactl, ratify, skaffold, tekton-chains, buildkitd, witness, sigstore-scaffolding, docker, tkn, trivy,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, envoy-ratelimit, apko, flux-notification-controller, grafana-operator, polaris, flux-source-controller, volume-modifier-for-k8s, github-mcp-server, actions-runner-controller, secrets-store-csi-driver-provider-aws, dbmate,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: harbor, cosign, spire-controller-manager, envoy-ratelimit, flux-notification-controller, aws-flb-kinesis, opa-envoy, prometheus, promxy, fscrypt, kubernetes-dashboard-web, k8s-device-plugin, docker-credential-gcr, cluster-api-provider-vsphere, eksctl,...