GO-2025-3900 vulnerabilities

Vulnerabilities for packages: beats-fips, bank-vaults, rancher-security-scan, grafana-fips, beats, grafana, zitadel, istio-fips, kyverno-notation-aws-fips, kyverno, ratify-fips, mattermost-fips, docker-compose-fips, pluto-fips, jitsucom-bulker, boring-registry-fips,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, spire-server, teleport, trivy, kubescape, tflint, docker, gh, zot, policy-controller, buildkitd, tekton-chains,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, trivy-operator, falcoctl, zarf, kyverno-notation-aws, tkn, ratify, spire-server, aactl, teleport, slsa-verifier, kubescape, tflint, crossplane, policy-controller, tekton-chains, kyverno, ko, goreleaser, gitsign...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, neuvector-sigstore-interface, flux-image-automation-controller, kine, falcoctl, crossplane-provider-aws-cloudformation, crossplane-provider-aws-eks, glab, fulcio, crossplane-provider-aws-route53, skaffold, atlantis, buildah, snyk-cli,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, aactl, teleport, slsa-verifier, trivy, kubescape, tflint, gh, zot, policy-controller, buildkitd,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, aactl, docker-cli-buildx, teleport, kubescape, tflint, gh, zot, policy-controller, tekton-chains,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, podman, docker-compose, flux-source-controller, trivy-operator, undock, timestamp-authority, falcoctl, zarf, witness, fulcio, xeol, kyverno-notation-aws, skaffold, cosign, buildah, tkn, kots, ratify, spire-server, aactl,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, docker-cli-buildx, aactl, teleport, slsa-verifier, trivy, kubescape, tflint, docker, gh,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, aactl, teleport, slsa-verifier, trivy, rekor, kubescape, tflint, docker, gh, zot,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: delve, grafana-rollout-operator, ip-masq-agent, neuvector-sigstore-interface, nri-memcached, controller-gen, cerbos, spire-controller-manager, opa, falcoctl, yunikorn-k8shim, fulcio, gcsfuse, timescaledb-tune, azure-service-operator, swagger, cilium-cli,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, aactl, teleport, slsa-verifier, trivy, rekor, kubescape, tflint, docker, gh, zot,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, vexctl, sops, neuvector-sigstore-interface, pulumi-kubernetes-operator, flux-image-automation-controller, timestamp-authority, falcoctl, zarf, glab, gitsign, fulcio, crossplane-provider-azure-managedidentity, k3d, ksops, cosign, bank-vaults...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: image-factory-fips, kyverno-fips, crossplane, cloudbeat-fips, crossplane-fips, kubescape-server-fips, trivy, tflint, policy-controller-fips, kubescape, cloudbeat, tekton-chains-fips, ratify, tekton-chains, policy-controller, tkn, teleport, spire-server-fips,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno-notation-aws, policy-controller, tekton-chains, neuvector-sigstore-interface, trivy, kyverno, trivy-operator, kubescape, tflint, tkn, falcoctl, zarf, gitsign, ratify, aactl...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kyverno-fips, crossplane, ko-fips, cloudbeat-fips, crossplane-fips, spire-server, kubescape-server-fips, tflint, policy-controller-fips, kubescape, slsa-verifier, cloudbeat, tekton-chains-fips, ratify, tekton-chains, goreleaser, policy-controller, tkn, teleport,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: kyverno-fips, crossplane, ko-fips, cloudbeat-fips, crossplane-fips, spire-server, kubescape-server-fips, tflint, policy-controller-fips, kubescape, slsa-verifier, cloudbeat, tekton-chains-fips, ratify, tekton-chains, goreleaser, policy-controller, tkn, teleport,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, trivy-operator, falcoctl, zarf, kyverno-notation-aws, tkn, ratify, spire-server, aactl, teleport, slsa-verifier, kubescape, tflint, crossplane, policy-controller, tekton-chains, kyverno, ko, goreleaser, gitsign...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, trivy-operator, falcoctl, zarf, kyverno-notation-aws, tkn, ratify, spire-server, aactl, teleport, slsa-verifier, kubescape, tflint, crossplane, policy-controller, tekton-chains, kyverno, ko, goreleaser, gitsign...