GO-2024-3166 vulnerabilities

Vulnerabilities for packages: flux-source-controller, neuvector-sigstore-interface, gh, spire-server, tekton-chains, sigstore-scaffolding, slsa-verifier, policy-controller, vexctl, wolfictl, aactl, kubescape, apko, zarf, falcoctl, melange, cosign, zot, rekor, gitsign, tkn, trivy...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: grafana-mimir, flux-source-controller, neuvector-sigstore-interface, k3d, skopeo, kargo, gh, spire-server, rook, crossplane-provider-azure-storage, flux-helm-controller, actions-runner-controller, goreleaser, kubernetes-event-exporter, tekton-chains, terraform,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kyverno-notation-aws, kots, undock, skopeo, podman, slsa-verifier, falcoctl, gitsign, kyverno, buildah, witness, zarf, ratify, tekton-chains, aactl, kubescape...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kyverno-notation-aws, kots, undock, skopeo, podman, slsa-verifier, falcoctl, gitsign, kyverno, buildah, witness, zarf, ratify, tekton-chains, aactl, kubescape...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kubescape-server, skopeo-fips, podman-fips, flux-source-controller, tekton-chains-fips, ratify, falcoctl-fips, tekton-chains, buildah-fips, kyverno, kyverno-notation-aws-fips, zarf-fips, kubescape-server-fips, prometheus-podman-exporter-fips,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kubescape-server, skopeo-fips, podman-fips, flux-source-controller, tekton-chains-fips, ratify, falcoctl-fips, tekton-chains, buildah-fips, kyverno, kyverno-notation-aws-fips, zarf-fips, kubescape-server-fips, prometheus-podman-exporter-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: omnictl-multiarch-fips, etcd, prometheus, external-dns, osv-scanner, minio, minio-fips, kube-arangodb-fips, kyverno, flux-fips, drone, rancher-agent, traefik-fips, gatekeeper, external-secrets-operator, mattermost, opentofu, skaffold-fips, grafana-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch-fips, docker-machine-driver-harvester, etcd, prometheus, external-dns, osv-scanner, minio, minio-fips, kube-arangodb-fips, kyverno, flux-fips, drone, rancher-agent, traefik-fips, gatekeeper, external-secrets-operator, mattermost, opentofu,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: omnictl-multiarch-fips, docker-machine-driver-harvester, etcd, step-issuer-fips, teleport, prometheus, wolfictl, external-dns, osv-scanner, minio, minio-fips, grype, peerdb-flow, tekton-chains, kube-arangodb-fips, kyverno, crossplane-provider-azure-powerbidedicated,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch-fips, etcd, wolfictl, prometheus, external-dns, osv-scanner, minio, minio-fips, grype, kube-arangodb-fips, kyverno, apply-cve-bump, flux-fips, rancher-agent, traefik-fips, gatekeeper, external-secrets-operator, apko-fips, pulumi-language-yaml,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: omnictl-multiarch-fips, docker-machine-driver-harvester, etcd, wolfictl, prometheus, external-dns, osv-scanner, minio, minio-fips, grype, peerdb-flow, kube-arangodb-fips, kyverno, apply-cve-bump, flux-fips, drone, rancher-agent, traefik-fips, docker, gatekeeper,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: step-kms-plugin, kots, kargo, k9s, dagger, crossplane-provider-family-azure, rancher-agent, helm, age, cert-manager, skaffold, fulcio, wolfictl, atlantis, external-dns, glab, cilium, apko, ksops, kine, flux-image-automation-controller, telegraf, buildkitd, cosign,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, osv-scanner, kargo, witness, trufflehog, cerbos, grafana-alloy, k9s, bom, dagger, goreleaser, gitlab-runner, argocd-image-updater, kyverno, argo-events, crossplane, skaffold, grype, wolfictl, scorecard, steampipe, kubescape, kubevela,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: wolfictl, teleport, osv-scanner, xeol, grype, goreleaser, gitaly-fips, kyverno, flux-fips, rancher-fleet, kargo, external-secrets-operator, apko-fips, pulumi-language-yaml, xeol-fips, gomplate-fips, grafana-alloy, kaniko-fips, skaffold-fips, nuclei, chainctl-fips, ac...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: flux-source-controller, kyverno-notation-aws, neuvector-sigstore-interface, gh, spire-server, docker-compose, ratify, docker, bom, dagger, goreleaser, tekton-chains, tflint, ko, gitlab-runner, slsa-verifier, kyverno, crossplane, skaffold, policy-controller, vexctl,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: docker-compose-fips, teleport, goreleaser, tekton-chains, kyverno, rekor-fips, docker, kyverno-policy-reporter-plugins-kyverno, ko-fips, image-factory-fips, ko, skaffold-fips, vexctl, chainctl-fips, chainloop-control-plane, crossplane, aactl, gitsign, buildkitd,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kyverno-notation-aws, neuvector-sigstore-interface, witness, gh, spire-server, ratify, docker, goreleaser, tekton-chains, tflint, sigstore-scaffolding, ko, slsa-verifier, kyverno, crossplane, skaffold, policy-controller, vexctl, aactl,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kyverno-notation-aws, neuvector-sigstore-interface, witness, gh, spire-server, ratify, docker, goreleaser, tekton-chains, tflint, sigstore-scaffolding, ko, slsa-verifier, kyverno, crossplane, skaffold, policy-controller, vexctl, aactl,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-source-controller, envoy-ratelimit, osv-scanner, smarter-device-manager, omnibump, victoriametrics-cluster, stakater-reloader, gh, spire-server, nova, oras, flux-helm-controller, actions-runner-controller, goreleaser, nfs-subdir-external-provisioner, hubble,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: grpc-health-probe, step-kms-plugin, kyverno-notation-aws, kots, apisix-ingress-controller, helm-mapkubeapis, bento, dapr, kargo, kubescape-operator, terraform-provider-random, grafana, aws-node-termination-handler, kubernetes-csi-livenessprobe, flux-helm-controller,...