GO-2023-2379 vulnerabilities

Vulnerabilities for packages: kubescape, falcoctl-fips, gitsign, falcoctl, tekton-chains, cosign-fips, vexctl...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: boring-registry, kubescape, falcoctl-fips, gitsign, mc, falcoctl, tekton-chains, minio, spire-server, cosign-fips, vexctl, external-secrets-fips, spire-server-fips...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: gitness, go-licenses, gitsign, scorecard, src-fingerprint, nuclei, goreleaser, pulumi-kubernetes-operator, bom...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: ko-fips, spire-server, apko, policy-controller-fips, kubescape, slsa-verifier, tekton-chains-fips, tekton-chains, goreleaser, policy-controller, tkn, spire-server-fips, wolfictl, neuvector-sigstore-interface, falcoctl-fips, melange, falcoctl, skaffold, vexctl,...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: vexctl, tekton-chains, kubescape, falcoctl, gitsign...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, spire-server, teleport, trivy, kubescape, tflint, docker, gh, zot, policy-controller, buildkitd, tekton-chains,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: vexctl, tekton-chains, kubescape, mc, minio, falcoctl, gitsign, spire-server, boring-registry...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, flux-image-automation-controller, flux-source-controller, osv-scanner, wolfictl, zarf, kaniko, pulumi-language-yaml, skaffold, argo-events, apko, snyk-cli, dagger, kots, syft, pulumi, grafana-alloy, chezmoi, go-licenses, grype, timoni, k9s...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, flux-image-automation-controller, flux-source-controller, osv-scanner, wolfictl, zarf, kaniko, pulumi-language-yaml, skaffold, argo-events, apko, snyk-cli, dagger, kots, syft, pulumi, grafana-alloy, chezmoi, go-licenses, grype, timoni, k9s...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: gitlab-runner, rancher-fleet, pulumi-kubernetes-operator, flux-image-automation-controller, flux-source-controller, osv-scanner, trivy-operator, wolfictl, cerbos, argo-cd, nfpm, zarf, witness, kaniko, xeol, steampipe, pulumi-language-yaml, skaffold, trufflehog,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, gitness, pulumi-language-yaml, gomplate, apko, kots, pulumi, go-licenses, pulumi-language-java, kubevela, src-fingerprint, scorecard, zot, nuclei, bom, pulumi-language-dotnet, goreleaser, gitsign, flux-kustomize-controller...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: vexctl, sops, flux-source-controller, fulcio, cloudflared, cosign, tkn, kots, spire-server, aactl, terragrunt, dex, slsa-verifier, argo-workflows, rekor, kubescape, tekton-chains, oauth2-proxy, gitsign, flux-kustomize-controller...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, slsa-verifier, skopeo, podman, tekton-chains, undock, kyverno, buildah, falco-no-driver, kubescape, witness, gitsign, falcoctl, zarf, kots, flux-source-controller, ratify, aactl...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno-notation-aws, policy-controller, tekton-chains, neuvector-sigstore-interface, trivy, kyverno, trivy-operator, kubescape, tflint, tkn, falcoctl, zarf, gitsign, ratify, aactl...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, trivy-operator, falcoctl, zarf, kyverno-notation-aws, tkn, ratify, spire-server, aactl, teleport, slsa-verifier, kubescape, tflint, crossplane, policy-controller, tekton-chains, kyverno, ko, goreleaser, gitsign...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: vexctl, podman, undock, flux-source-controller, falcoctl, zarf, witness, kyverno-notation-aws, cosign, buildah, tkn, kots, ratify, aactl, slsa-verifier, skopeo, falco-no-driver, kubescape, tekton-chains, sigstore-scaffolding, gitsign, portieris...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, aactl, docker-cli-buildx, teleport, kubescape, tflint, gh, zot, policy-controller, tekton-chains,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: slsa-verifier, vexctl, cosign, skopeo, tekton-chains, sigstore-scaffolding, falco-no-driver, kubescape, falcoctl, zarf, kots, gitsign, witness, aactl...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, aactl, teleport, slsa-verifier, trivy, kubescape, tflint, gh, zot, policy-controller, buildkitd,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, docker-cli-buildx, aactl, teleport, slsa-verifier, trivy, kubescape, tflint, docker, gh,...