126 matches found
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, gitsign, gh, aactl, slsa-verifier, tkn, witness, zot, neuvector-sigstore-interface, falcoctl, tflint, skaffold, trivy, kubescape, flux-source-controller, vexctl, spire-server, cosign, goreleaser, sigstore-scaffolding, tekton-chains, zarf,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: kubevela, rabbitmq-messaging-topology-operator, actions-runner-controller, rook, src-fingerprint, pulumi, step-ca, terragrunt, argo-events, bank-vaults, crossplane-provider-azure-authorization, crossplane-provider-azure-managedidentity,...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, aactl, tkn, zot, neuvector-sigstore-interface, falcoctl, skaffold, trivy, kubescape, flux-source-controller, spire-server, goreleaser, kyverno, tekton-chains, crossplane, zarf, trivy-operator, ko, policy-controller...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, aactl, tkn, zot, neuvector-sigstore-interface, falcoctl, skaffold, trivy, kubescape, flux-source-controller, spire-server, goreleaser, kyverno, tekton-chains, crossplane, zarf, trivy-operator, ko, policy-controller...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: skaffold, trivy, neuvector-sigstore-interface-fips, zot, docker-fips, flux-source-controller, kyverno-fips, ko-fips, spire-server, teleport, teleport-operator-fips, zarf, kubescape-server, cosign-fips, crossplane-fips, cosign, trivy-operator-fips, tkn, aactl, kyverno...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: skaffold, trivy, neuvector-sigstore-interface-fips, zot, docker-fips, flux-source-controller, kyverno-fips, ko-fips, spire-server, teleport, teleport-operator-fips, zarf, kubescape-server, cosign-fips, crossplane-fips, cosign, trivy-operator-fips, tkn, aactl, kyverno...
Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
MAL-2026-5641 Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: kaniko, kubevela, argocd-image-updater, k9s, kots, pulumi, src-fingerprint, terragrunt, rancher-fleet, gptscript, grype, argo-events, trufflehog, act, gitsign, pulumi-kubernetes-operator, kargo, gitea, xeol, flux-image-automation-controller, pulumi-language-java,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: kaniko, kubevela, argocd-image-updater, k9s, kots, pulumi, src-fingerprint, terragrunt, rancher-fleet, gptscript, grype, argo-events, trufflehog, act, gitsign, pulumi-kubernetes-operator, kargo, gitea, xeol, flux-image-automation-controller, pulumi-language-java,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: kaniko, kubevela, argocd-image-updater, k9s, kots, pulumi, src-fingerprint, terragrunt, rancher-fleet, gptscript, grype, argo-events, trufflehog, act, gitsign, pulumi-kubernetes-operator, kargo, gitea, xeol, flux-image-automation-controller, pulumi-language-java,...
CVE-2026-45570 vulnerabilities
Vulnerabilities for packages: kaniko, kubevela, argocd-image-updater, k9s, kots, pulumi, src-fingerprint, terragrunt, rancher-fleet, gptscript, grype, argo-events, trufflehog, act, gitsign, pulumi-kubernetes-operator, kargo, gitea, xeol, flux-image-automation-controller, pulumi-language-java,...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: argo-events, flux-image-automation-controller, zarf, argocd-image-updater-fips, dagger, grype, kubescape-server, nemo, argocd-image-updater, src-fingerprint-fips, cerbos, redpanda-console, cerbos-fips, steampipe, kyverno, coder, pulumi-language-yaml, cloudbeat,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: argo-events, flux-image-automation-controller, zarf, argocd-image-updater-fips, dagger, grype, kubescape-server, nemo, argocd-image-updater, src-fingerprint-fips, cerbos, redpanda-console, cerbos-fips, steampipe, kyverno, coder, pulumi-language-yaml, cloudbeat,...