GO-2025-3900 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface-fips, kyverno-notation-aws-fips, ratify-fips, tkn-fips, beats-fips, istio-fips, jitsucom-bulker, pluto-fips, mattermost-fips, beats, zitadel, grafana-fips, rancher-security-scan, bank-vaults, kyverno, boring-registry-fips, k9s-fips,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: goreleaser, trivy, cosign, tekton-chains, ko, zarf, spire-server, buildkitd, witness, skaffold, policy-controller, kyverno-notation-aws, kubescape, neuvector-sigstore-interface, gh, zot, tkn, docker, vexctl, falcoctl, sigstore-scaffolding, tflint, teleport,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: goreleaser, tekton-chains, ko, zarf, spire-server, slsa-verifier, policy-controller, kyverno-notation-aws, kubescape, crossplane, neuvector-sigstore-interface, tkn, falcoctl, tflint, ratify, aactl, teleport, trivy-operator, kyverno, gitsign...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: trivy, gitea, ko, fulcio, external-secrets-operator, hcloud, vault-benchmark, crossplane-provider-family-azure, falco-no-driver, go-discover, opentofu, crossplane-provider-keycloak, crossplane-provider-aws-cloudfront, buildah, datadog-agent, kubernetes-dashboard,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: goreleaser, cosign, tekton-chains, ko, zarf, spire-server, witness, skaffold, policy-controller, kyverno-notation-aws, kubescape, docker-cli-buildx, neuvector-sigstore-interface, gh, zot, tkn, vexctl, falcoctl, sigstore-scaffolding, tflint, ratify, aactl, teleport,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: goreleaser, trivy, cosign, tekton-chains, ko, zarf, spire-server, xeol, fulcio, buildkitd, witness, slsa-verifier, docker-compose, skaffold, falco-no-driver, policy-controller, kyverno-notation-aws, buildah, kubescape, neuvector-sigstore-interface, gh, zot, tkn, kots...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: goreleaser, trivy, cosign, tekton-chains, ko, zarf, spire-server, buildkitd, witness, slsa-verifier, skaffold, policy-controller, kyverno-notation-aws, kubescape, crossplane, docker-cli-buildx, neuvector-sigstore-interface, gh, zot, tkn, docker, vexctl, falcoctl,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: goreleaser, trivy, cosign, tekton-chains, ko, zarf, spire-server, buildkitd, witness, slsa-verifier, skaffold, policy-controller, kyverno-notation-aws, kubescape, neuvector-sigstore-interface, gh, zot, tkn, vexctl, falcoctl, tflint, ratify, aactl, teleport,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: goreleaser, trivy, cosign, tekton-chains, ko, zarf, spire-server, buildkitd, witness, slsa-verifier, skaffold, policy-controller, kyverno-notation-aws, kubescape, neuvector-sigstore-interface, gh, zot, tkn, docker, vexctl, falcoctl, sigstore-scaffolding, tflint,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: docker-cli, nri-f5, nova, trivy, envconsul, yunikorn-k8shim, ko, kuberlr, cluster-api-provider-vsphere, fulcio, kubernetes-dashboard-api, opentofu, kyverno-notation-aws, kubernetes-dashboard, neuvector-sigstore-interface, clickhouse-operator, azure-service-operator,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: goreleaser, trivy, cosign, tekton-chains, ko, zarf, spire-server, buildkitd, witness, slsa-verifier, skaffold, policy-controller, kyverno-notation-aws, kubescape, neuvector-sigstore-interface, gh, zot, tkn, docker, vexctl, falcoctl, sigstore-scaffolding, tflint,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: step-ca, goreleaser, actions-runner-controller, k3d, cosign, tekton-chains, zarf, spire-server, terraform, buildkitd, fulcio, scorecard, slsa-verifier, crossplane-provider-family-azure, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tkn, neuvector-sigstore-interface-fips, crossplane, kyverno-notation-aws-fips, tekton-chains, tflint, kubescape, neuvector-sigstore-interface, commercial-kyverno, ratify-fips, tbot, tkn-fips, docker-fips, cloudbeat-fips, spire-server-fips, cloudbeat,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tkn, falcoctl, policy-controller, trivy-operator, kyverno-notation-aws, trivy, kubescape, crossplane, tekton-chains, kyverno, tflint, zarf, neuvector-sigstore-interface, ratify, aactl, gitsign...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tkn, neuvector-sigstore-interface-fips, crossplane, kyverno-notation-aws-fips, tekton-chains, tflint, kubescape, ko, commercial-kyverno, neuvector-sigstore-interface, ratify-fips, tbot, tkn-fips, docker-fips, cloudbeat-fips, spire-server-fips, cloudbeat,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tkn, neuvector-sigstore-interface-fips, crossplane, kyverno-notation-aws-fips, tekton-chains, tflint, kubescape, ko, commercial-kyverno, neuvector-sigstore-interface, ratify-fips, tbot, tkn-fips, docker-fips, cloudbeat-fips, spire-server-fips, cloudbeat,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: goreleaser, tekton-chains, ko, zarf, spire-server, slsa-verifier, policy-controller, kyverno-notation-aws, kubescape, crossplane, neuvector-sigstore-interface, tkn, falcoctl, tflint, ratify, aactl, teleport, trivy-operator, kyverno, gitsign...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: goreleaser, tekton-chains, ko, zarf, spire-server, slsa-verifier, policy-controller, kyverno-notation-aws, kubescape, crossplane, neuvector-sigstore-interface, tkn, falcoctl, tflint, ratify, aactl, teleport, trivy-operator, kyverno, gitsign...