GO-2023-2379 vulnerabilities

Vulnerabilities for packages: falcoctl, vexctl, gitsign, tekton-chains, cosign-fips, falcoctl-fips, kubescape...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: falcoctl, vexctl, boring-registry, spire-server-fips, external-secrets-fips, gitsign, minio, spire-server, cosign-fips, falcoctl-fips, tekton-chains, mc, kubescape...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: src-fingerprint, go-licenses, gitsign, nuclei, gitness, pulumi-kubernetes-operator, scorecard, goreleaser, bom...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: vexctl, chainctl, policy-controller, policy-controller-fips, tekton-chains, flux-source-controller, tkn, goreleaser, slsa-verifier, kubescape, wolfictl, aactl, falcoctl-fips, zarf, melange, zot, ko, spire-server-fips, tekton-chains-fips, tkn-fips, falcoctl, skaffold,...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: tekton-chains, falcoctl, vexctl, gitsign, kubescape...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: cosign, gh, trivy, zot, falcoctl, sigstore-scaffolding, ko, buildkitd, neuvector-sigstore-interface, policy-controller, zarf, spire-server, teleport, trivy-operator, kyverno-notation-aws, vexctl, docker, gitsign, tkn, skaffold, tekton-chains, witness,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: mc, spire-server, boring-registry, falcoctl, tekton-chains, vexctl, gitsign, minio, kubescape...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: bom, argocd-image-updater, kubevela, scorecard, dagger, trivy, zot, gitea, flux-kustomize-controller, k8sgpt, flux-image-automation-controller, grype, guac, argo-events, kots, zarf, timoni, task, src-fingerprint, crossplane, nuclei, melange, syft, apko, kargo,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: bom, argocd-image-updater, kubevela, scorecard, dagger, trivy, zot, gitea, flux-kustomize-controller, k8sgpt, flux-image-automation-controller, grype, guac, argo-events, kots, zarf, timoni, task, src-fingerprint, crossplane, nuclei, melange, syft, apko, kargo,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: bom, argocd-image-updater, kubevela, scorecard, dagger, trivy, zot, gomplate, gitea, flux-image-automation-controller, grype, trufflehog, guac, steampipe, argo-events, kots, zarf, cerbos, teleport, src-fingerprint, crossplane, nfpm, nuclei, melange, syft,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: bom, kubevela, scorecard, zot, gomplate, flux-kustomize-controller, kots, src-fingerprint, nuclei, apko, pulumi-language-yaml, pulumi-language-dotnet, go-licenses, gitsign, pulumi, gitness, pulumi-language-java, pulumi-kubernetes-operator, goreleaser...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: cosign, flux-kustomize-controller, kots, dex, terragrunt, rekor, spire-server, oauth2-proxy, aactl, fulcio, vexctl, sops, gitsign, tkn, argo-workflows, tekton-chains, flux-source-controller, cloudflared, slsa-verifier, kubescape...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, buildah, undock, slsa-verifier, skopeo, tekton-chains, falcoctl, witness, zarf, flux-source-controller, kyverno, ratify, gitsign, podman, kots, kubescape, aactl...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: trivy-operator, kyverno-notation-aws, neuvector-sigstore-interface, policy-controller, zarf, trivy, tekton-chains, falcoctl, tflint, crossplane, ratify, gitsign, kyverno, kubescape, tkn, aactl...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: falcoctl, ko, neuvector-sigstore-interface, policy-controller, zarf, spire-server, teleport, crossplane, aactl, trivy-operator, kyverno-notation-aws, ratify, gitsign, tkn, kyverno, tekton-chains, tflint, slsa-verifier, kubescape, goreleaser...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: cosign, gh, zot, falcoctl, docker-cli-buildx, sigstore-scaffolding, ko, neuvector-sigstore-interface, policy-controller, zarf, spire-server, teleport, aactl, kyverno-notation-aws, vexctl, ratify, gitsign, tkn, skaffold, tekton-chains, witness, flux-source-controller,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: cosign, buildah, skopeo, falcoctl, sigstore-scaffolding, podman, kots, zarf, aactl, kyverno-notation-aws, falco-no-driver, vexctl, ratify, tkn, undock, gitsign, tekton-chains, witness, flux-source-controller, slsa-verifier, kubescape, portieris...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: cosign, zarf, slsa-verifier, skopeo, tekton-chains, falcoctl, witness, falco-no-driver, vexctl, sigstore-scaffolding, gitsign, kots, kubescape, aactl...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, policy-controller, zot, falcoctl, teleport, witness, flux-source-controller, aactl, ratify, gitsign, tkn, goreleaser...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: cosign, gh, trivy, zot, falcoctl, ko, buildkitd, neuvector-sigstore-interface, policy-controller, zarf, spire-server, teleport, aactl, trivy-operator, kyverno-notation-aws, vexctl, ratify, gitsign, tkn, skaffold, tekton-chains, witness, flux-source-controller, tflint...