GO-2025-3900 vulnerabilities

Vulnerabilities for packages: k9s-fips, kyverno, beats, grafana-fips, pluto-fips, rancher-security-scan, ratify-fips, jitsucom-bulker, grafana, beats-fips, docker-compose-fips, mattermost-fips, bank-vaults, kyverno-notation-aws-fips, istio-fips, boring-registry-fips, tkn-fips,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, zarf, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, zot, docker, kyverno-notation-aws, teleport, buildkitd, flux-source-controller, policy-controller, tekton-chains, vexctl, cosign, trivy-operator, skaffold, tkn,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: slsa-verifier, zarf, gitsign, goreleaser, falcoctl, neuvector-sigstore-interface, crossplane, kyverno-notation-aws, teleport, tekton-chains, policy-controller, kyverno, trivy-operator, tkn, kubescape, tflint, spire-server, aactl, ratify, ko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gomplate, k9s, kots, cluster-api-azure-controller, crossplane-provider-aws-lambda, gitlab-kas, crossplane-provider-aws-firehose, crossplane-provider-aws-eks, crossplane-provider-aws-kinesis, zot, docker, buildkitd, crossplane-provider-aws-cloudwatchlogs,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: slsa-verifier, zarf, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, zot, kyverno-notation-aws, teleport, buildkitd, flux-source-controller, policy-controller, tekton-chains, vexctl, cosign, trivy-operator, skaffold, tkn, kubescape, tflint,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, zarf, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, zot, kyverno-notation-aws, teleport, flux-source-controller, policy-controller, tekton-chains, vexctl, cosign, skaffold, tkn, kubescape, tflint, spire-server, aactl,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: timestamp-authority, sigstore-scaffolding, slsa-verifier, xeol, zarf, fulcio, kots, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, zot, kyverno-notation-aws, buildkitd, flux-source-controller, policy-controller, rekor, tekton-chains, skopeo...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, slsa-verifier, zarf, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, crossplane, zot, docker, kyverno-notation-aws, teleport, buildkitd, flux-source-controller, policy-controller, tekton-chains, kyverno, vexctl, cosign,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, cluster-api-azure-controller, kind, kubernetes-dashboard-web, terraform, nri-redis, rabbitmq-default-user-credential-updater, cis-operator, polaris, dex, delve, regclient, aws-application-networking-k8s, zot, ip-masq-agent...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, slsa-verifier, zarf, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, zot, docker, kyverno-notation-aws, teleport, buildkitd, flux-source-controller, policy-controller, rekor, tekton-chains, vexctl, cosign, trivy-operato...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, slsa-verifier, zarf, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, zot, docker, kyverno-notation-aws, teleport, buildkitd, flux-source-controller, policy-controller, rekor, tekton-chains, vexctl, cosign, trivy-operato...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: timestamp-authority, gomplate, sigstore-scaffolding, slsa-verifier, opentelemetry-collector-contrib, zarf, bank-vaults, fulcio, gitsign, goreleaser, grafana-mimir, k3s, falcoctl, terraform, pulumi-kubernetes-operator, flux-helm-controller, scorecard, gh,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: gitsign, neuvector-sigstore-interface, tekton-chains, trivy-operator-fips, kyverno-notation-aws, falcoctl, trivy-fips, kyverno, image-factory, trivy, kubescape-server-fips, cloudbeat-fips, tekton-chains-fips, ratify, image-factory-fips, zarf-fips, commercial-kyverno,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: crossplane, kubescape, tflint, zarf, trivy-operator, aactl, gitsign, kyverno-notation-aws, falcoctl, tekton-chains, policy-controller, tkn, kyverno, ratify, trivy, neuvector-sigstore-interface...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: gitsign, neuvector-sigstore-interface, tekton-chains, trivy-operator-fips, kyverno-notation-aws, falcoctl, kyverno, slsa-verifier, kubescape-server-fips, cloudbeat-fips, tekton-chains-fips, ratify, zarf-fips, commercial-kyverno, ko-fips, falcoctl-fips,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: gitsign, neuvector-sigstore-interface, tekton-chains, trivy-operator-fips, kyverno-notation-aws, falcoctl, kyverno, slsa-verifier, kubescape-server-fips, cloudbeat-fips, tekton-chains-fips, ratify, zarf-fips, commercial-kyverno, ko-fips, falcoctl-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: slsa-verifier, zarf, gitsign, goreleaser, falcoctl, neuvector-sigstore-interface, crossplane, kyverno-notation-aws, teleport, tekton-chains, policy-controller, kyverno, trivy-operator, tkn, kubescape, tflint, spire-server, aactl, ratify, ko...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: slsa-verifier, zarf, gitsign, goreleaser, falcoctl, neuvector-sigstore-interface, crossplane, kyverno-notation-aws, teleport, tekton-chains, policy-controller, kyverno, trivy-operator, tkn, kubescape, tflint, spire-server, aactl, ratify, ko...