GO-2025-3900 vulnerabilities

Vulnerabilities for packages: k9s-fips, grafana, beats-fips, grafana-fips, mattermost-fips, kyverno, jitsucom-bulker, docker-compose-fips, istio-fips, zitadel, ratify-fips, kyverno-notation-aws-fips, boring-registry-fips, beats, rancher-security-scan, neuvector-sigstore-interface-fips, pluto-fips...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, trivy, vexctl, kyverno-notation-aws, gitsign, trivy-operator, kubescape, buildkitd, teleport, falcoctl, witness, docker, policy-controller, tekton-chains, tkn, zarf, gh, zot, cosign,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: spire-server, tflint, kyverno-notation-aws, crossplane, kyverno, gitsign, trivy-operator, kubescape, teleport, falcoctl, slsa-verifier, policy-controller, tekton-chains, tkn, zarf, ratify, neuvector-sigstore-interface, aactl, goreleaser, ko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-compose, crossplane-provider-aws-ec2, gitea, spire-server, pulumi, snyk-cli, crossplane-provider-azure-storage, flux-source-controller, trivy, falco-no-driver, tw, kubernetes, opentofu, cilium-cli, go-discover, kubescape, hcloud, rancher,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, trivy, vexctl, kyverno-notation-aws, gitsign, trivy-operator, kubescape, buildkitd, teleport, falcoctl, witness, slsa-verifier, policy-controller, tekton-chains, tkn, zarf, gh, ratify, zot, cosign,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, vexctl, kyverno-notation-aws, gitsign, kubescape, teleport, falcoctl, witness, policy-controller, tekton-chains, tkn, zarf, gh, ratify, zot, cosign, docker-cli-buildx,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: docker-compose, skaffold, skopeo, spire-server, flux-source-controller, podman, tflint, sigstore-scaffolding, trivy, falco-no-driver, vexctl, kyverno-notation-aws, gitsign, trivy-operator, kubescape, buildkitd, falcoctl, buildah, witness, slsa-verifier,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, trivy, vexctl, kyverno-notation-aws, crossplane, kyverno, gitsign, trivy-operator, kubescape, buildkitd, teleport, falcoctl, witness, slsa-verifier, docker, policy-controller, tekton-chains...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, trivy, vexctl, kyverno-notation-aws, gitsign, trivy-operator, kubescape, buildkitd, teleport, falcoctl, witness, slsa-verifier, docker, policy-controller, tekton-chains, tkn, zarf, gh,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: chartmuseum, nri-redis, grafana-rollout-operator, rabbitmq-default-user-credential-updater, trivy, migrate, hubble, kyverno-notation-aws, opentofu, cilium-cli, kubecolor, nri-f5, nats-server-config-reloader, controller-gen, witness, yunikorn-k8shim, render-template,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, trivy, vexctl, kyverno-notation-aws, gitsign, trivy-operator, kubescape, buildkitd, teleport, falcoctl, witness, slsa-verifier, docker, policy-controller, tekton-chains, tkn, zarf, gh,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: skopeo, spire-server, crossplane-provider-azure-sql, opentelemetry-collector, pulumi, crossplane-provider-family-azure, snyk-cli, crossplane-provider-azure-storage, flux-source-controller, kubevela, sigstore-scaffolding, sops, vexctl, nuclei, flux-helm-controller,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: cloudbeat, gitsign, cloudbeat-fips, crossplane-fips, aactl, tkn, tbot, trivy-operator-fips, zarf-fips, tekton-chains-fips, tflint, kubescape-server-fips, kyverno-fips, trivy-operator, docker-fips, ratify, crossplane, tekton-chains, zarf, kyverno, commercial-kyverno,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tekton-chains, kyverno, tkn, gitsign, trivy-operator, zarf, neuvector-sigstore-interface, kubescape, aactl, tflint, falcoctl, ratify, policy-controller, trivy, kyverno-notation-aws, crossplane...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: cloudbeat, gitsign, goreleaser, cloudbeat-fips, crossplane-fips, aactl, tkn, ko, tbot, trivy-operator-fips, zarf-fips, tekton-chains-fips, tflint, kubescape-server-fips, kyverno-fips, trivy-operator, docker-fips, ratify, crossplane, slsa-verifier, tekton-chains, zarf...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: cloudbeat, gitsign, goreleaser, cloudbeat-fips, crossplane-fips, aactl, tkn, ko, tbot, trivy-operator-fips, zarf-fips, tekton-chains-fips, tflint, kubescape-server-fips, kyverno-fips, trivy-operator, docker-fips, ratify, crossplane, slsa-verifier, tekton-chains, zarf...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: spire-server, tflint, kyverno-notation-aws, crossplane, kyverno, gitsign, trivy-operator, kubescape, teleport, falcoctl, slsa-verifier, policy-controller, tekton-chains, tkn, zarf, ratify, neuvector-sigstore-interface, aactl, goreleaser, ko...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: spire-server, tflint, kyverno-notation-aws, crossplane, kyverno, gitsign, trivy-operator, kubescape, teleport, falcoctl, slsa-verifier, policy-controller, tekton-chains, tkn, zarf, ratify, neuvector-sigstore-interface, aactl, goreleaser, ko...