GO-2026-5039 vulnerabilities

Vulnerabilities for packages: libnvidia-container, rancher-webhook, aws-flb-kinesis, cass-operator, cri-tools, jitsucom-bulker, gatus, spqr, cluster-autoscaler, tigera-operator, gitlab-pages, docker-cli-buildx, harbor, newrelic-infra-operator, dynamic-localpv-provisioner, kuma, rekor, sops,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: cloudflared, cosign, vexctl, oauth2-proxy, rekor, argo-workflows, sops, fulcio, spire-server, flux-kustomize-controller, terragrunt, tekton-chains, aactl, flux-source-controller, slsa-verifier, dex, gitsign, tkn, kots, kubescape...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: undock, ratify, flux-source-controller, falcoctl, buildah, podman, slsa-verifier, zarf, kyverno, witness, gitsign, tekton-chains, kots, kubescape, aactl, kyverno-notation-aws, skopeo...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: trufflehog, goreleaser, kyverno, trivy-operator, dagger, guac, argo-workflows, pulumi-language-yaml, rancher-fleet, gitaly, pulumi-kubernetes-operator, steampipe, external-secrets-operator, trivy, act, argo-cd, gitlab-runner, tfsec, zot, melange, argo-events, skaffol...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: tkn, flux-source-controller, apko, slsa-verifier, policy-controller, melange, skaffold, cosign, ko, spire-server, tekton-chains, kubescape, aactl...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: falco-no-driver, helm, libnvidia-container, aws-flb-kinesis, trino, kyverno, coredns, aws-flb-firehose, go, karma, kubo, argo-cd, telegraf, zot, cert-manager, karpenter, aactl, grafana-alloy, cilium-cli, minio, k8s-device-plugin, kubernetes-dashboard, hubble,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: falcoctl, fscrypt, gatus, k8sgpt, dagger, docker-cli-buildx, gitlab-pages, trivy, sops, gitlab-kas, buildah, sealed-secrets, tflint, crossplane-provider-aws-sqs, argo-events, step, terragrunt, traefik, rancher, pulumi, crossplane-provider-azure-storage, snyk-cli,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: helm, fscrypt, kyverno, knative-serving, docker-cli-buildx, external-secrets-operator, gitlab-kas, buildah, telegraf, zot, spire-server, cert-manager, kine, aactl, cloud-provider-aws, cilium-cli, minio, rancher, kubernetes-dashboard, mattermost, snyk-cli, podman,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: falcoctl, goreleaser, kyverno, cosign, vexctl, docker-cli-buildx, kyverno-notation-aws, tflint, zot, policy-controller, skaffold, spire-server, tekton-chains, aactl, teleport, flux-source-controller, zarf, neuvector-sigstore-interface, witness, gitsign,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: falcosidekick, rancher-system-agent, aws-flb-kinesis, cass-operator, secrets-store-csi-driver-provider-aws, cri-tools, headlamp, gatus, nri-mongodb, timescaledb-parallel-copy, spqr, cluster-autoscaler, git-lfs, newrelic-infra-operator, dynamic-localpv-provisioner,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: teleport, tkn, ratify, flux-source-controller, falcoctl, zot, policy-controller, goreleaser, kyverno, witness, gitsign, aactl, kyverno-notation-aws...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: buildkitd, falcoctl, goreleaser, kyverno, cosign, trivy-operator, vexctl, docker-cli-buildx, trivy, kyverno-notation-aws, docker, tflint, zot, policy-controller, skaffold, spire-server, tekton-chains, aactl, teleport, flux-source-controller, slsa-verifier, zarf,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: buildkitd, falcoctl, goreleaser, kyverno, cosign, trivy-operator, vexctl, rekor, trivy, kyverno-notation-aws, docker, tflint, zot, policy-controller, skaffold, spire-server, tekton-chains, aactl, teleport, flux-source-controller, slsa-verifier, zarf,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nri-memcached, libnvidia-container, rancher-system-agent, fzf, falcoctl, headlamp, k8sgpt, docker-cli-buildx, oauth2-proxy, trivy, kubernetes-csi-external-health-monitor, tflint, argo-events, nri-rabbitmq, kube-logging-operator, clickhouse-operator, pluto, chartmuseu...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: falcoctl, cosign, vexctl, rekor, trivy, zot, policy-controller, melange, spire-server, tekton-chains, aactl, flux-source-controller, slsa-verifier, zarf, neuvector-sigstore-interface, gitsign, sigstore-scaffolding, tkn, apko, gh, wolfictl, kubescape...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: buildkitd, rabbitmq-messaging-topology-operator, falcoctl, flux-helm-controller, grafana-mimir, goreleaser, cosign, crossplane-provider-azure-authorization, k3d, vexctl, rekor, guac, kubernetes-event-exporter, pulumi-kubernetes-operator, sops,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: flux-operator, argo-workflows-fips, gitlab-rails-ce, amazon-ssm-agent-fips, pulumi-language-java, cerbos, grype-fips, flux-image-automation-controller-fips, src-fingerprint, grafana-alloy, gitsign, gptscript, crossplane-fips, trivy, gomplate-fips, boring-registry-fip...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: flux-operator, argo-workflows-fips, gitlab-rails-ce, amazon-ssm-agent-fips, pulumi-language-java, cerbos, grype-fips, flux-image-automation-controller-fips, src-fingerprint, grafana-alloy, gitsign, gptscript, crossplane-fips, trivy, gomplate-fips, boring-registry-fip...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: flux-operator, argo-workflows-fips, gitlab-rails-ce, amazon-ssm-agent-fips, pulumi-language-java, cerbos, grype-fips, flux-image-automation-controller-fips, src-fingerprint, grafana-alloy, gitsign, gptscript, crossplane-fips, trivy, gomplate-fips, boring-registry-fip...