GO-2026-4309 vulnerabilities

Vulnerabilities for packages: witness, kyverno-notation-aws, flux-source-controller, zot, teleport, policy-controller, gitsign, ratify, tkn, aactl, goreleaser, falcoctl...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: gh, flux-source-controller, kubescape, apko, vexctl, falcoctl, policy-controller, tkn, zarf, cosign, neuvector-sigstore-interface, zot, rekor, wolfictl, sigstore-scaffolding, aactl, spire-server, tekton-chains, slsa-verifier, trivy, melange, gitsign...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: gh, flux-source-controller, kubescape, skaffold, teleport, docker, goreleaser, trivy-operator, falcoctl, vexctl, witness, buildkitd, policy-controller, tkn, ko, zarf, cosign, neuvector-sigstore-interface, zot, rekor, tflint, sigstore-scaffolding, aactl, spire-server,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: sops, gh, flux-source-controller, kubescape, rabbitmq-messaging-topology-operator, crossplane-provider-azure-sql, pulumi-kubernetes-operator, gomplate, goreleaser, vexctl, falcoctl, kubevela, crossplane-provider-azure-managedidentity, buildkitd, ksops, fulcio,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: falco-no-driver, undock, witness, kyverno-notation-aws, flux-source-controller, kubescape, podman, slsa-verifier, zarf, skopeo, kots, kyverno, gitsign, ratify, aactl, buildah, falcoctl, tekton-chains...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: falco-no-driver, undock, witness, kyverno-notation-aws, flux-source-controller, kubescape, podman, slsa-verifier, zarf, skopeo, kots, kyverno, gitsign, ratify, aactl, buildah, falcoctl, tekton-chains...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: portieris-fips, kyverno-notation-aws, kyverno-fips, zarf-fips, tekton-chains, undock, falco-no-driver, kubescape, flux-source-controller, kyverno, zarf, chainctl, ratify, podman, falcoctl, prometheus-podman-exporter, witness, flux-source-controller-fips, falcoctl-fip...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: portieris-fips, kyverno-notation-aws, kyverno-fips, zarf-fips, tekton-chains, undock, falco-no-driver, kubescape, flux-source-controller, kyverno, zarf, chainctl, ratify, podman, falcoctl, prometheus-podman-exporter, witness, flux-source-controller-fips, falcoctl-fip...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cloudbeat, reports-server, kuma, opentofu-fips, prometheus-mongodb-exporter, zarf, argo-cd, frankenphp-8.3, seaweedfs-rocksdb-fips, cilium-cli, loki, trivy, kube-arangodb-fips, kube-state-metrics, grafana, backup-restore-operator, knative-serving, zitadel, osv-scanne...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cloudbeat, reports-server, kuma, opentofu-fips, prometheus-mongodb-exporter, zarf, argo-cd, frankenphp-8.3, seaweedfs-rocksdb-fips, cilium-cli, loki, trivy, kube-arangodb-fips, kube-state-metrics, grafana, backup-restore-operator, knative-serving, zitadel, osv-scanne...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: cloudbeat, syft-fips, apply-cve-bump, reports-server, peerdb-flow, kuma, opentofu-fips, prometheus-mongodb-exporter, trufflehog-fips, zarf, argo-cd, frankenphp-8.3, longhorn-cli-fips, seaweedfs-rocksdb-fips, splunk-otel-collector-fips, gomplate, cilium-cli, loki,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: cloudbeat, syft-fips, apply-cve-bump, reports-server, kuma, opentofu-fips, prometheus-mongodb-exporter, trufflehog-fips, zarf, argo-cd, frankenphp-8.3, splunk-otel-collector-fips, gomplate, cilium-cli, loki, mapotf, trivy, redpanda-console, kube-arangodb-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cloudbeat, syft-fips, apply-cve-bump, reports-server, step-issuer-fips, step-issuer, peerdb-flow, kuma, opentofu-fips, prometheus-mongodb-exporter, cluster-api-azure-controller, trufflehog-fips, tekton-chains, crossplane-provider-azure-storagecache, go-discover-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: sops, gh, chezmoi, teleport, pulumi-kubernetes-operator, external-secrets-operator, falcoctl, pulumi-language-java, age, step-kms-plugin, docker-cli-buildx, rancher-agent, flux-image-automation-controller, rancher-machine, dagger, kots, kargo,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, argo-cd, flux-source-controller, kubescape, skaffold, gitlab-runner, teleport, argo-workflows, pulumi-kubernetes-operator, apko, gomplate, external-secrets-operator, cerbos, goreleaser, syft, trivy-operator, witness, kubevela,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: cloudbeat, syft-fips, trufflehog-fips, gitaly-fips, bom, zarf, argo-cd, gomplate, rancher-fleet, crossplane-fips, mapotf, trivy, redpanda-console, argo-events-fips, tfsec, grafana, steampipe, osv-scanner, mapotf-fips, trivy-operator, grype-fips,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: gh, flux-source-controller, kubescape, skaffold, gitlab-runner, teleport, docker, goreleaser, trivy-operator, falcoctl, vexctl, buildkitd, docker-cli-buildx, policy-controller, tkn, guac, ko, zarf, cosign, docker-compose, neuvector-sigstore-interface, zot, dagger,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: cloudbeat, reports-server, tekton-chains, bom, zarf, rekor-fips, ratify, docker-compose, crossplane-fips, trivy, ratify-fips, policy-controller-fips, tekton-chains-fips, neuvector-sigstore-interface-fips, trivy-operator, docker-cli-buildx, aactl,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: gh, flux-source-controller, kubescape, skaffold, teleport, docker, goreleaser, trivy-operator, falcoctl, vexctl, witness, buildkitd, docker-cli-buildx, policy-controller, tkn, ko, zarf, cosign, neuvector-sigstore-interface, zot, tflint, sigstore-scaffolding, aactl,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: gh, flux-source-controller, kubescape, skaffold, teleport, docker, goreleaser, trivy-operator, falcoctl, vexctl, witness, buildkitd, docker-cli-buildx, policy-controller, tkn, ko, zarf, cosign, neuvector-sigstore-interface, zot, tflint, sigstore-scaffolding, aactl,...