opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

kubescape

Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: kubescape, cilium, kubescape-operator, kubescape-server, kubescape-server-fips, kubescape-operator-fips, hubble, hubble-fips, hubble-ui-backend-fips, hubble-ui...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: kubescape, hubble-ui, cilium, hubble, kubescape-operator...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, zarf, rancher, falco-no-driver, wolfictl, steampipe, docker-cli-buildx, helm-push, neuvector-scanner, helm-mapkubeapis, fuse-overlayfs-snapshotter, scorecard, chartmuseum, grype, helm-set-status, newrelic-infrastructure-agent, eksctl, trivy,...

GHSA-PG57-6JWG-Q645 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, zarf, rancher, falco-no-driver, wolfictl, steampipe, docker-cli-buildx, helm-push, neuvector-scanner, helm-mapkubeapis, fuse-overlayfs-snapshotter, scorecard, chartmuseum, grype, helm-set-status, newrelic-infrastructure-agent, eksctl, trivy,...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, zarf, rancher, falco-no-driver, wolfictl, steampipe, docker-cli-buildx, helm-push, neuvector-scanner, helm-mapkubeapis, fuse-overlayfs-snapshotter, scorecard, chartmuseum, grype, helm-set-status, newrelic-infrastructure-agent, eksctl, trivy,...

GHSA-W7C2-W76W-5HMJ vulnerabilities

Vulnerabilities for packages: kubescape, cilium, kubescape-operator, kubescape-server, kubescape-server-fips, kubescape-operator-fips, hubble, hubble-fips, hubble-ui-backend-fips, hubble-ui...

GHSA-W7C2-W76W-5HMJ vulnerabilities

Vulnerabilities for packages: kubescape, hubble-ui, cilium, hubble, kubescape-operator...

CLEANSTART-2026-BV58345 Security fix for ghsa-jqc5-w2xx-5vq4 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, kyverno-fips 1.16.3-r3, sigstore-scaffolding 0.7.31-r1, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

ghsa-jqc5-w2xx-5vq4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CM50083 Security fix for ghsa-4c4x-jm2x-pf9j applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

ghsa-4c4x-jm2x-pf9j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RI42866 Security fix for ghsa-273p-m2cw-6833 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

ghsa-273p-m2cw-6833 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UW62677 Security fix for CVE-2026-23992 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1, tkn-fips 0.43.0-r3

CVE-2026-23992 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AP98474 Security fix for CVE-2026-24686 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.29-r2, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1

CVE-2026-24686 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JT87240 Security fix for CVE-2026-23991 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.3-r3, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1, tkn-fips 0.43.0-r3

CVE-2026-23991 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WK71465 Security fix for CVE-2026-24117 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tkn 0.42.2-r1, tkn 0.43.2-r1

CVE-2026-24117 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FC01276 Security fix for CVE-2026-22703 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.3-r3, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tekton-chains-fips 0.24.0-r1

CVE-2026-22703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MX56215 Security fix for ghsa-38pp-6gcp-rqvm applied in: kubescape 3.0.47-r0

Security vulnerability affects the kubescape package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NN19549 Security fix for ghsa-rjcw-vg7j-m9rc applied in: kubescape 3.0.47-r1

Security vulnerability affects the kubescape package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JS89270 Security fix for CVE-2026-33481 applied in: kubescape 3.0.47-r1

Security vulnerability affects the kubescape package. This issue is resolved in later releases. See references for vulnerability details...