GO-2025-3900 vulnerabilities

Vulnerabilities for packages: ratify-fips, jitsucom-bulker, docker-compose-fips, rancher-security-scan, kyverno-notation-aws-fips, grafana, istio-fips, zitadel, boring-registry-fips, k9s-fips, mattermost-fips, tkn-fips, grafana-fips, beats-fips, bank-vaults, beats,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: cosign, buildkitd, policy-controller, neuvector-sigstore-interface, tflint, teleport, witness, vexctl, ko, flux-source-controller, tkn, gh, falcoctl, kyverno-notation-aws, trivy, zarf, docker, sigstore-scaffolding, spire-server, tekton-chains, goreleaser, kubescape,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: policy-controller, ratify, neuvector-sigstore-interface, kyverno, slsa-verifier, tflint, teleport, ko, tkn, falcoctl, kyverno-notation-aws, zarf, aactl, spire-server, tekton-chains, goreleaser, kubescape, trivy-operator, gitsign, crossplane...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, cert-manager, buildkitd, step-issuer, k8sgpt, containerd, nuclei, datadog-agent, pulumi-language-java, witness, teleport, steampipe, crossplane-provider-aws-ec2, scorecard, wal-g, atlantis, crossplane-provider-aws-cloudfront, gitlab-page...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: cosign, buildkitd, policy-controller, ratify, neuvector-sigstore-interface, slsa-verifier, tflint, teleport, witness, vexctl, ko, flux-source-controller, tkn, gh, falcoctl, kyverno-notation-aws, trivy, zarf, aactl, spire-server, tekton-chains, goreleaser, kubescape,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: cosign, policy-controller, ratify, neuvector-sigstore-interface, tflint, teleport, witness, vexctl, ko, flux-source-controller, docker-cli-buildx, tkn, gh, falcoctl, kyverno-notation-aws, zarf, aactl, sigstore-scaffolding, spire-server, tekton-chains, goreleaser,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: cosign, buildkitd, policy-controller, kots, ratify, skopeo, neuvector-sigstore-interface, podman, guac, slsa-verifier, tflint, rekor, vexctl, undock, falco-no-driver, ko, flux-source-controller, witness, fulcio, tkn, gh, docker-compose, falcoctl, kyverno-notation-aws...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: cosign, buildkitd, policy-controller, ratify, neuvector-sigstore-interface, kyverno, slsa-verifier, tflint, teleport, witness, vexctl, ko, flux-source-controller, docker-cli-buildx, tkn, gh, falcoctl, kyverno-notation-aws, trivy, zarf, aactl, docker,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: cosign, buildkitd, policy-controller, ratify, neuvector-sigstore-interface, slsa-verifier, tflint, teleport, witness, rekor, vexctl, ko, flux-source-controller, tkn, gh, falcoctl, kyverno-notation-aws, trivy, zarf, aactl, docker, sigstore-scaffolding, spire-server,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: emissary, cluster-api-azure-controller, buildkitd, aws-otel-collector, grafana-rollout-operator, k8sgpt, containerd, kubernetes-dashboard-api, timescaledb-tune, kubernetes-csi-external-health-monitor, glow, nuclei, gobump, kubernetes-csi-driver-nfs, witness, steampip...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: cosign, buildkitd, policy-controller, ratify, neuvector-sigstore-interface, slsa-verifier, tflint, teleport, witness, rekor, vexctl, ko, flux-source-controller, tkn, gh, falcoctl, kyverno-notation-aws, trivy, zarf, aactl, docker, sigstore-scaffolding, spire-server,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: cosign, buildkitd, glab, policy-controller, flux-kustomize-controller, skopeo, argo-events, flux-helm-controller, neuvector-sigstore-interface, nuclei, sops, rabbitmq-messaging-topology-operator, terragrunt, pulumi-kubernetes-operator, guac, slsa-verifier,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tflint-fips, neuvector-sigstore-interface, ratify-fips, aactl, kubescape-server-fips, image-factory-fips, tbot, policy-controller, trivy-fips, kyverno-notation-aws-fips, falcoctl-fips, kyverno-notation-aws, falcoctl, trivy-operator-fips, zarf-fips, cloudbeat, gitsign...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: kubescape, aactl, policy-controller, ratify, tkn, falcoctl, trivy-operator, neuvector-sigstore-interface, kyverno-notation-aws, tekton-chains, gitsign, kyverno, trivy, zarf, tflint, crossplane...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: spire-server, tflint-fips, neuvector-sigstore-interface, ratify-fips, slsa-verifier, aactl, kubescape-server-fips, tbot, policy-controller, kyverno-notation-aws-fips, falcoctl-fips, kyverno-notation-aws, falcoctl, trivy-operator-fips, zarf-fips, cloudbeat, gitsign,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: spire-server, tflint-fips, neuvector-sigstore-interface, ratify-fips, slsa-verifier, aactl, kubescape-server-fips, tbot, policy-controller, kyverno-notation-aws-fips, falcoctl-fips, kyverno-notation-aws, falcoctl, trivy-operator-fips, zarf-fips, cloudbeat, gitsign,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: policy-controller, ratify, neuvector-sigstore-interface, kyverno, slsa-verifier, tflint, teleport, ko, tkn, falcoctl, kyverno-notation-aws, zarf, aactl, spire-server, tekton-chains, goreleaser, kubescape, trivy-operator, gitsign, crossplane...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: policy-controller, ratify, neuvector-sigstore-interface, kyverno, slsa-verifier, tflint, teleport, ko, tkn, falcoctl, kyverno-notation-aws, zarf, aactl, spire-server, tekton-chains, goreleaser, kubescape, trivy-operator, gitsign, crossplane...