GO-2023-2379 vulnerabilities

Vulnerabilities for packages: kubescape, falcoctl-fips, vexctl, cosign-fips, gitsign, falcoctl, tekton-chains...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: kubescape, boring-registry, mc, falcoctl-fips, spire-server, vexctl, minio, tekton-chains, spire-server-fips, cosign-fips, gitsign, falcoctl, external-secrets-fips...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: bom, go-licenses, gitness, goreleaser, src-fingerprint, pulumi-kubernetes-operator, nuclei, gitsign, scorecard...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: spire-server-fips, slsa-verifier, gitsign, melange, spire-server, vexctl, ko, tkn, zot, wolfictl, neuvector-sigstore-interface, ko-fips, kubescape, zarf, tkn-fips, chainctl, flux-source-controller, aactl, tekton-chains-fips, falcoctl-fips, skaffold, goreleaser,...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: tekton-chains, falcoctl, vexctl, gitsign, kubescape...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: docker, sigstore-scaffolding, trivy-operator, gitsign, teleport, neuvector-sigstore-interface, skaffold, tekton-chains, trivy, falcoctl, cosign, zarf, ko, tkn, flux-source-controller, buildkitd, policy-controller, kyverno-notation-aws, tflint, spire-server, gorelease...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: minio, tekton-chains, falcoctl, boring-registry, mc, vexctl, gitsign, kubescape, spire-server...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gitea, pulumi-language-dotnet, apko, argocd-image-updater, grafana-alloy, gitsign, guac, pulumi-language-java, argo-events, kots, skaffold, tfsec, k9s, go-licenses, kargo, pulumi, wolfictl, trivy, nuclei, chezmoi, zarf, kaniko, pulumi-kubernetes-operator,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gitea, pulumi-language-dotnet, apko, argocd-image-updater, grafana-alloy, gitsign, guac, pulumi-language-java, argo-events, kots, skaffold, tfsec, k9s, go-licenses, kargo, pulumi, wolfictl, trivy, nuclei, chezmoi, zarf, kaniko, pulumi-kubernetes-operator,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, apko, gitsign, gomplate, pulumi-language-java, kots, gitness, go-licenses, pulumi, nuclei, pulumi-kubernetes-operator, pulumi-language-yaml, scorecard, goreleaser, kubevela, bom, zot, src-fingerprint, flux-kustomize-controller...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: gitea, pulumi-language-dotnet, apko, argocd-image-updater, nfpm, grafana-alloy, gitsign, gomplate, guac, pulumi-language-java, argo-events, kots, steampipe, teleport, argo-cd, rancher-fleet, skaffold, tfsec, k9s, kargo, pulumi, wolfictl, trivy, trivy-operator, nuclei...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: skopeo, tekton-chains, undock, falcoctl, kyverno, kyverno-notation-aws, falco-no-driver, slsa-verifier, buildah, witness, gitsign, zarf, kots, podman, kubescape, ratify, flux-source-controller, aactl...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: tekton-chains, tflint, trivy, falcoctl, kyverno, kyverno-notation-aws, trivy-operator, zarf, gitsign, tkn, crossplane, kubescape, neuvector-sigstore-interface, ratify, policy-controller, aactl...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: slsa-verifier, gitsign, kots, oauth2-proxy, tekton-chains, cloudflared, cosign, tkn, fulcio, argo-workflows, flux-source-controller, sops, spire-server, aactl, rekor, dex, terragrunt, vexctl, kubescape, flux-kustomize-controller...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: slsa-verifier, trivy-operator, gitsign, teleport, neuvector-sigstore-interface, tekton-chains, falcoctl, zarf, ko, tkn, policy-controller, kyverno-notation-aws, tflint, crossplane, spire-server, aactl, goreleaser, kyverno, kubescape, ratify...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: slsa-verifier, docker, sigstore-scaffolding, trivy-operator, gitsign, teleport, neuvector-sigstore-interface, skaffold, tekton-chains, trivy, falcoctl, cosign, zarf, ko, tkn, flux-source-controller, buildkitd, kyverno-notation-aws, policy-controller, tflint,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: slsa-verifier, trivy-operator, gitsign, teleport, neuvector-sigstore-interface, skaffold, tekton-chains, trivy, falcoctl, cosign, zarf, ko, tkn, buildkitd, flux-source-controller, kyverno-notation-aws, policy-controller, tflint, spire-server, aactl, goreleaser, vexct...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: undock, slsa-verifier, buildah, sigstore-scaffolding, gitsign, kots, podman, tekton-chains, falcoctl, cosign, zarf, tkn, flux-source-controller, kyverno-notation-aws, skopeo, aactl, falco-no-driver, vexctl, witness, kubescape, ratify, portieris...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: skopeo, tekton-chains, falcoctl, cosign, slsa-verifier, falco-no-driver, vexctl, sigstore-scaffolding, witness, gitsign, zarf, kots, kubescape, aactl...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, gitsign, teleport, neuvector-sigstore-interface, skaffold, tekton-chains, falcoctl, cosign, zarf, ko, tkn, flux-source-controller, policy-controller, kyverno-notation-aws, tflint, spire-server, docker-cli-buildx, aactl, goreleaser, vexctl,...