GO-2025-3900 vulnerabilities

Vulnerabilities for packages: beats-fips, boring-registry-fips, neuvector-sigstore-interface-fips, tkn-fips, pluto-fips, kyverno-notation-aws-fips, istio-fips, zitadel, k9s-fips, grafana-fips, grafana, kyverno, ratify-fips, jitsucom-bulker, bank-vaults, rancher-security-scan, beats,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: buildkitd, falcoctl, cosign, tkn, skaffold, trivy, zarf, witness, gh, spire-server, sigstore-scaffolding, zot, docker, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, flux-source-controller, gitsign, policy-controller,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: crossplane, ratify, falcoctl, tkn, aactl, zarf, spire-server, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, slsa-verifier, gitsign, kyverno, policy-controller, tekton-chains, kyverno-notation-aws...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, step, buildkitd, podman, falcoctl, crossplane-provider-aws-kinesis, crossplane-provider-aws-elasticache, helm, gitea, aactl, skaffold, prometheus, pulumi-language-java, k8sgpt, cilium-cli, zot,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: ratify, falcoctl, docker-cli-buildx, cosign, tkn, skaffold, aactl, zarf, witness, gh, spire-server, sigstore-scaffolding, zot, goreleaser, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, flux-source-controller, gitsign, policy-controller, tekton-chains...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: buildkitd, ratify, falcoctl, cosign, tkn, skaffold, aactl, trivy, zarf, witness, gh, spire-server, zot, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, flux-source-controller, slsa-verifier, gitsign, policy-controller,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: buildkitd, skopeo, ratify, podman, xeol, falcoctl, cosign, portieris, kots, tkn, fulcio, skaffold, aactl, trivy, zarf, witness, gh, spire-server, sigstore-scaffolding, zot, goreleaser, trivy-operator, tflint, buildah, timestamp-authority, kubescape, ko, guac, rekor,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: crossplane, buildkitd, ratify, docker-cli-buildx, cosign, falcoctl, tkn, skaffold, aactl, trivy, zarf, witness, gh, spire-server, sigstore-scaffolding, zot, docker, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: buildkitd, ratify, falcoctl, cosign, tkn, skaffold, aactl, trivy, zarf, witness, gh, spire-server, sigstore-scaffolding, zot, docker, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, rekor, neuvector-sigstore-interface, flux-source-controller,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: emissary, spark-operator, buildkitd, dgraph, falcoctl, ini-file, aactl, mongo-tools, prometheus, k8sgpt, nri-nginx, kube-bench, mockgen, cilium-cli, opa, kubecolor, zot, aws-eks-pod-identity-agent, envconsul, cluster-api-azure-controller, kpt, oauth2-proxy,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: buildkitd, ratify, falcoctl, cosign, tkn, skaffold, aactl, trivy, zarf, witness, gh, spire-server, sigstore-scaffolding, zot, docker, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, rekor, neuvector-sigstore-interface, flux-source-controller,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: terraform, buildkitd, pulumi, skopeo, falcoctl, cosign, gomplate, tkn, fulcio, aactl, zarf, actions-runner-controller, flux-notification-controller, opentelemetry-collector, kubernetes-event-exporter, crossplane-provider-azure, gh, scorecard, sigstore-scaffolding,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: cloudbeat, tkn, aactl, zarf, policy-controller, crossplane-fips, kubescape-server, kyverno-fips, neuvector-sigstore-interface, neuvector-sigstore-interface-fips, tekton-chains, tkn-fips, image-factory-fips, kubescape-server-fips, tflint, kyverno-notation-aws-fips,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: gitsign, trivy-operator, crossplane, zarf, kubescape, ratify, falcoctl, kyverno, policy-controller, tkn, aactl, tekton-chains, kyverno-notation-aws, neuvector-sigstore-interface, trivy, tflint...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: cloudbeat, tkn, goreleaser, aactl, zarf, policy-controller, crossplane-fips, kubescape-server, kyverno-fips, neuvector-sigstore-interface, neuvector-sigstore-interface-fips, tekton-chains, tkn-fips, kubescape-server-fips, tflint, kyverno-notation-aws-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: cloudbeat, tkn, goreleaser, aactl, zarf, policy-controller, crossplane-fips, kubescape-server, kyverno-fips, neuvector-sigstore-interface, neuvector-sigstore-interface-fips, tekton-chains, tkn-fips, kubescape-server-fips, tflint, kyverno-notation-aws-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: crossplane, ratify, falcoctl, tkn, aactl, zarf, spire-server, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, slsa-verifier, gitsign, kyverno, policy-controller, tekton-chains, kyverno-notation-aws...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: crossplane, ratify, falcoctl, tkn, aactl, zarf, spire-server, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, slsa-verifier, gitsign, kyverno, policy-controller, tekton-chains, kyverno-notation-aws...