GO-2025-3900 vulnerabilities

Vulnerabilities for packages: pluto-fips, beats-fips, jitsucom-bulker, kyverno-notation-aws-fips, docker-compose-fips, grafana, grafana-fips, istio-fips, mattermost-fips, neuvector-sigstore-interface-fips, beats, rancher-security-scan, kyverno, k9s-fips, ratify-fips, boring-registry-fips, tkn-fip...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: tkn, gh, flux-source-controller, witness, falcoctl, tekton-chains, cosign, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, docker, zot, kubescape, teleport, goreleaser, spire-server, policy-controller, ko, neuvector-sigstore-interface, trivy,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: tkn, slsa-verifier, falcoctl, tekton-chains, aactl, gitsign, trivy-operator, zarf, kyverno, kubescape, teleport, goreleaser, crossplane, spire-server, policy-controller, ko, neuvector-sigstore-interface, ratify, tflint, kyverno-notation-aws...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: minio, nfpm, crossplane-provider-aws-rds, argocd-image-updater, terraform-provider-tls, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, kots, pulumi, istio, argo-cd, sops, opentofu, pulumi-language-yaml, rancher,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tkn, gh, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, gitsign, zarf, skaffold, vexctl, zot, kubescape, teleport, goreleaser, spire-server, policy-controller, ko, neuvector-sigstore-interface, docker-cli-buildx, ratify, sigstore-scaffolding...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, zot, kubescape, teleport, goreleaser, spire-server, policy-controller, ko, neuvector-sigstore-interface, ratif...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, portieris, witness, undock, falcoctl, tekton-chains, cosign, buildah, aactl, docker-compose, buildkitd, gitsign, kots, trivy-operator, zarf, skaffold, vexctl, zot, kubescape, goreleaser, rekor, spire-server,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, docker, kyverno, zot, kubescape, teleport, goreleaser, crossplane, spire-server, policy-controller, ko,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, docker, zot, kubescape, teleport, goreleaser, rekor, spire-server, policy-controller, ko,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: wait-for-port, delve, portieris, glow, wgcf, amazon-cloudwatch-agent-operator, clickhouse-operator, nri-haproxy, aws-eks-pod-identity-agent, dex, nginx-prometheus-exporter, opentofu, kpt, dgraph, nri-mysql, harbor-cli, harbor-registry, nri-memcached, helm-operator,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, docker, zot, kubescape, teleport, goreleaser, rekor, spire-server, policy-controller, ko,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3d, flux-image-automation-controller, tkn, gh, nuclei, slsa-verifier, crossplane-provider-azure, flux-source-controller, ksops, terraform-provider-azurerm, falcoctl, tekton-chains, gomplate, src-fingerprint, crossplane-provider-azure-sql, cosign, step-ca,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, trivy, crossplane, aactl, kubescape-server-fips, neuvector-sigstore-interface, kyverno-notation-aws-fips, policy-controller-fips, spire-server-fips, kubescape, teleport-operator-fips, falcoctl, kyverno-notation-aws, tekton-chains,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: ratify, trivy, gitsign, tkn, trivy-operator, crossplane, zarf, tflint, falcoctl, kyverno-notation-aws, tekton-chains, kyverno, policy-controller, neuvector-sigstore-interface, kubescape, aactl...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: ratify, trivy, gitsign, tkn, trivy-operator, crossplane, zarf, tflint, falcoctl, kyverno-notation-aws, tekton-chains, kyverno, policy-controller, neuvector-sigstore-interface, kubescape, aactl...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, crossplane, aactl, kubescape-server-fips, neuvector-sigstore-interface, kyverno-notation-aws-fips, policy-controller-fips, spire-server-fips, kubescape, chainctl-fips, falcoctl, kyverno-notation-aws, ko, tekton-chains, ko-fips, trivy-operator-fips...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, crossplane, aactl, kubescape-server-fips, neuvector-sigstore-interface, kyverno-notation-aws-fips, policy-controller-fips, spire-server-fips, kubescape, chainctl-fips, falcoctl, kyverno-notation-aws, ko, tekton-chains, ko-fips, trivy-operator-fips...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tkn, slsa-verifier, falcoctl, tekton-chains, aactl, gitsign, trivy-operator, zarf, kyverno, kubescape, teleport, goreleaser, crossplane, spire-server, policy-controller, ko, neuvector-sigstore-interface, ratify, tflint, kyverno-notation-aws...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tkn, slsa-verifier, falcoctl, tekton-chains, aactl, gitsign, trivy-operator, zarf, kyverno, kubescape, teleport, goreleaser, crossplane, spire-server, policy-controller, ko, neuvector-sigstore-interface, ratify, tflint, kyverno-notation-aws...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: pluto-fips, beats-fips, jitsucom-bulker, kyverno-notation-aws-fips, docker-compose-fips, grafana, grafana-fips, istio-fips, mattermost-fips, neuvector-sigstore-interface-fips, beats, rancher-security-scan, kyverno, k9s-fips, ratify-fips, boring-registry-fips, tkn-fip...