GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, witness, skaffold, teleport, ko, docker-cli-buildx, spire-server, aactl, zot, falcoctl, goreleaser, kubescape, tkn, vexctl, tekton-chains, gitsign, tflint, neuvector-sigstore-interface, zarf, policy-controller, flux-source-controller, ratify,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, rekor, aactl, zot, falcoctl, wolfictl, kubescape, melange, tkn, vexctl, slsa-verifier, tekton-chains, gitsign, neuvector-sigstore-interface, zarf, policy-controller, flux-source-controller, apko, cosign, gh, sigstore-scaffolding...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, witness, trivy, skaffold, teleport, ko, spire-server, rekor, aactl, zot, falcoctl, goreleaser, kubescape, tkn, vexctl, slsa-verifier, buildkitd, tekton-chains, gitsign, tflint, neuvector-sigstore-interface, zarf, docker, policy-controller,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, flux-image-reflector-controller, snyk-cli, timestamp-authority, crossplane-provider-azure-managedidentity, kubernetes-event-exporter, rabbitmq-messaging-topology-operator, argo-events, k3d, terraform, terragrunt, kubevela,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: zarf, kyverno, kyverno-notation-aws, aactl, flux-source-controller, skopeo, slsa-verifier, falco-no-driver, undock, falcoctl, witness, ratify, kubescape, tekton-chains, gitsign, kots, podman, buildah...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: zarf, kyverno, kyverno-notation-aws, aactl, flux-source-controller, skopeo, slsa-verifier, falco-no-driver, undock, falcoctl, witness, ratify, kubescape, tekton-chains, gitsign, kots, podman, buildah...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: skopeo-fips, kots, zarf, aactl, portieris-fips, flux-source-controller, kubescape-server-fips, kyverno, kyverno-fips, commercial-kyverno, kyverno-notation-aws, kubescape, kyverno-notation-aws-fips, prometheus-podman-exporter, chainctl, kubescape-server, undock,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: skopeo-fips, kots, zarf, aactl, portieris-fips, flux-source-controller, kubescape-server-fips, kyverno, kyverno-fips, commercial-kyverno, kyverno-notation-aws, kubescape, kyverno-notation-aws-fips, prometheus-podman-exporter, chainctl, kubescape-server, undock,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: upwind-agent, gitlab-kas, etcd, commercial-grafana, kyverno-fips, rancher, kubescape, coder, gitlab-workhorse-ce-fips, kubernetes-fips, vault-fips, prometheus-mongodb-exporter, mattermost-fips, flux-source-controller-fips, mattermost, kine, gitlab-workhorse-ce,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: rootlesskit, upwind-agent, gitlab-kas, etcd, docker-machine-driver-harvester, commercial-grafana, kyverno-fips, rancher, kubescape, coder, gitlab-workhorse-ce-fips, splunk-otel-collector, kubernetes-fips, vault-fips, apko, prometheus-mongodb-exporter,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: upwind-agent, gitlab-kas, etcd, docker-machine-driver-harvester, commercial-grafana, kyverno-fips, rancher, kubescape, coder, gitlab-workhorse-ce-fips, kubernetes-fips, vault-fips, prometheus-mongodb-exporter, mattermost-fips, flux-source-controller-fips, mattermost,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: upwind-agent, gitlab-kas, etcd, commercial-grafana, kyverno-fips, kubescape, gitlab-workhorse-ce-fips, splunk-otel-collector, kubernetes-fips, vault-fips, apko, prometheus-mongodb-exporter, prometheus-podman-exporter-fips, mattermost-fips, gomplate-fips, syft,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: rootlesskit, upwind-agent, crossplane-provider-azure-spring, gitlab-kas, etcd, flux-kustomize-controller-fips, docker-machine-driver-harvester, commercial-grafana, kyverno-fips, rancher, kubescape, coder, kyverno-notation-aws-fips, tflint-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: osv-scanner, prometheus-operator, falco-no-driver, grype, step-issuer, eksctl, aactl, atlantis, flux, external-dns, kots, flux-notification-controller, buildah, glab, kyverno, mattermost, hcloud, age, guac, k8sgpt, act, kaf, neuvector-sigstore-interface, nuclei,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: kaniko, osv-scanner, snyk-cli, tfsec, gitea, witness, trivy, skaffold, teleport, argo-events, terragrunt, external-secrets-operator, gptscript, grype, argocd-image-updater, kubevela, grafana-alloy, scorecard, bom, rancher-fleet, src-fingerprint, pulumi, gitaly,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: upwind-agent, xeol-fips, kyverno-fips, kubescape, xeol, coder, apko, gomplate-fips, syft, wolfictl, rancher-fleet-fips, rancher-fleet, teleport, grype-fips, grafana-alloy-fips, external-secrets-operator-fips, terragrunt, crossplane-fips, gitaly, jfrog-cli,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, trivy, skaffold, teleport, ko, docker-cli-buildx, bom, spire-server, gitlab-runner, aactl, rekor, zot, docker-compose, falcoctl, goreleaser, kubescape, dagger, tkn, kyverno, crossplane, vexctl, slsa-verifier, buildkitd, tekton-chains, gitsign,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: image-factory-fips, kyverno-fips, vexctl, kubescape, kyverno-notation-aws-fips, ko, kyverno-policy-reporter-plugins-kyverno-fips, flux-source-controller-fips, kyverno-policy-reporter-plugins-kyverno, rekor, teleport, docker-fips, tekton-chains, crossplane-fips,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, witness, trivy, skaffold, teleport, ko, docker-cli-buildx, spire-server, aactl, zot, falcoctl, goreleaser, kubescape, tkn, kyverno, crossplane, vexctl, slsa-verifier, buildkitd, tekton-chains, gitsign, tflint, neuvector-sigstore-interface, zarf,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, witness, trivy, skaffold, teleport, ko, docker-cli-buildx, spire-server, aactl, zot, falcoctl, goreleaser, kubescape, tkn, kyverno, crossplane, vexctl, slsa-verifier, buildkitd, tekton-chains, gitsign, tflint, neuvector-sigstore-interface, zarf,...