GO-2025-3900 vulnerabilities

Vulnerabilities for packages: grafana, rancher-security-scan, tkn-fips, jitsucom-bulker, k9s-fips, bank-vaults, docker-compose-fips, neuvector-sigstore-interface-fips, pluto-fips, ratify-fips, zitadel, istio-fips, kyverno, boring-registry-fips, kyverno-notation-aws-fips, mattermost-fips, beats,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: zarf, tflint, ko, cosign, falcoctl, sigstore-scaffolding, tekton-chains, trivy-operator, kyverno-notation-aws, gh, vexctl, tkn, zot, kubescape, goreleaser, flux-source-controller, trivy, witness, policy-controller, skaffold, buildkitd, gitsign, teleport, docker,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: zarf, tflint, ko, falcoctl, kyverno, tekton-chains, trivy-operator, kyverno-notation-aws, ratify, tkn, aactl, kubescape, goreleaser, slsa-verifier, policy-controller, gitsign, crossplane, teleport, spire-server, neuvector-sigstore-interface...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, pulumi, cloud-provider-aws, osv-scanner, falcoctl, step, tekton-chains, rancher, mods, chezmoi, atlantis, trivy-operator, snyk-cli, crossplane-provider-aws-cloudformation, gh, falco-no-driver, kubescape, sealed-secrets, grype,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: zarf, tflint, ko, cosign, falcoctl, sigstore-scaffolding, docker-cli-buildx, tekton-chains, kyverno-notation-aws, gh, ratify, vexctl, tkn, zot, aactl, kubescape, goreleaser, flux-source-controller, witness, policy-controller, skaffold, gitsign, teleport, spire-server...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: zarf, tflint, ko, cosign, falcoctl, tekton-chains, trivy-operator, kyverno-notation-aws, gh, ratify, vexctl, tkn, zot, aactl, kubescape, goreleaser, slsa-verifier, flux-source-controller, trivy, witness, policy-controller, skaffold, buildkitd, gitsign, teleport,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: zarf, tflint, ko, rekor, cosign, falcoctl, sigstore-scaffolding, tekton-chains, trivy-operator, docker-compose, kyverno-notation-aws, gh, ratify, vexctl, falco-no-driver, timestamp-authority, tkn, undock, fulcio, zot, aactl, kubescape, goreleaser, slsa-verifier,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: zarf, tflint, ko, cosign, falcoctl, sigstore-scaffolding, docker-cli-buildx, kyverno, tekton-chains, trivy-operator, kyverno-notation-aws, gh, ratify, vexctl, tkn, zot, aactl, kubescape, goreleaser, slsa-verifier, flux-source-controller, trivy, witness,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: zarf, tflint, ko, rekor, cosign, falcoctl, sigstore-scaffolding, tekton-chains, trivy-operator, kyverno-notation-aws, gh, ratify, vexctl, tkn, zot, aactl, kubescape, goreleaser, slsa-verifier, flux-source-controller, trivy, witness, policy-controller, skaffold,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, nri-haproxy, falcoctl, envconsul, kubecolor, nats-server-config-reloader, tekton-chains, amazon-cloudwatch-agent-operator, timescaledb-tune, cerbos, nri-mysql, mockgen, spire-controller-manager, ratify, spark-operator, mongo-tools,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: zarf, tflint, ko, rekor, cosign, falcoctl, sigstore-scaffolding, tekton-chains, trivy-operator, kyverno-notation-aws, gh, ratify, vexctl, tkn, zot, aactl, kubescape, goreleaser, slsa-verifier, flux-source-controller, trivy, witness, policy-controller, skaffold,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: zarf, terraform-provider-azurerm, pulumi-kubernetes-operator, argo-events, pulumi, gomplate, rekor, opentelemetry-collector-contrib, cosign, falcoctl, k3d, sigstore-scaffolding, glab, terragrunt, grafana-mimir, tekton-chains, crossplane-provider-azure-storage,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: commercial-kyverno, tkn-fips, trivy, tbot, falcoctl, zarf, cloudbeat, cloudbeat-fips, zarf-fips, trivy-operator-fips, tekton-chains, docker-fips, tkn, policy-controller-fips, falcoctl-fips, teleport-operator-fips, kyverno-notation-aws, trivy-fips, tflint,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, crossplane, tflint, trivy-operator, trivy, kyverno-notation-aws, policy-controller, ratify, falcoctl, neuvector-sigstore-interface, tkn, kyverno, gitsign, tekton-chains, aactl...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: commercial-kyverno, tkn-fips, tbot, falcoctl, zarf, cloudbeat, spire-server, cloudbeat-fips, zarf-fips, ko, trivy-operator-fips, tekton-chains, docker-fips, tkn, policy-controller-fips, falcoctl-fips, slsa-verifier, kyverno-notation-aws, tflint,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: commercial-kyverno, tkn-fips, tbot, falcoctl, zarf, cloudbeat, spire-server, cloudbeat-fips, zarf-fips, ko, trivy-operator-fips, tekton-chains, docker-fips, tkn, policy-controller-fips, falcoctl-fips, slsa-verifier, kyverno-notation-aws, tflint,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: zarf, tflint, ko, falcoctl, kyverno, tekton-chains, trivy-operator, kyverno-notation-aws, ratify, tkn, aactl, kubescape, goreleaser, slsa-verifier, policy-controller, gitsign, crossplane, teleport, spire-server, neuvector-sigstore-interface...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: zarf, tflint, ko, falcoctl, kyverno, tekton-chains, trivy-operator, kyverno-notation-aws, ratify, tkn, aactl, kubescape, goreleaser, slsa-verifier, policy-controller, gitsign, crossplane, teleport, spire-server, neuvector-sigstore-interface...