GO-2025-3900 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, rancher-security-scan, jitsucom-bulker, beats-fips, docker-compose-fips, istio-fips, zitadel, beats, bank-vaults, pluto-fips, gitlab-cng, grafana, kyverno-notation-aws-fips, kyverno, tkn-fips, grafana-fips, ratify-fips, gitlab-cng-fips,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: tekton-chains, buildkitd, sigstore-scaffolding, spire-server, gitsign, crossplane, zarf, gh, teleport, goreleaser, docker, ko, policy-controller, witness, kyverno, tflint, neuvector-sigstore-interface, tkn, trivy, zot, kubescape, vexctl, trivy-operator,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: tekton-chains, spire-server, gitsign, crossplane, zarf, slsa-verifier, teleport, goreleaser, ko, policy-controller, ratify, kyverno, tkn, neuvector-sigstore-interface, kubescape, trivy-operator, aactl, kyverno-notation-aws, falcoctl, tflint...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: buildkitd, splunk-otel-collector, cilium, helm, kubernetes-dashboard, crossplane-provider-aws-eks, src, nuclei, zarf, syft, step-kms-plugin, act, crossplane-provider-aws-kinesis, crossplane-provider-aws-rds, buildah, trivy, external-secrets-operator, trivy-operator,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: tekton-chains, buildkitd, spire-server, gitsign, crossplane, zarf, gh, slsa-verifier, teleport, goreleaser, ko, policy-controller, witness, ratify, kyverno, tflint, neuvector-sigstore-interface, tkn, trivy, zot, kubescape, vexctl, trivy-operator, aactl,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tekton-chains, sigstore-scaffolding, spire-server, docker-cli-buildx, gitsign, crossplane, zarf, gh, teleport, goreleaser, ko, policy-controller, witness, ratify, kyverno, tflint, neuvector-sigstore-interface, tkn, zot, kubescape, vexctl, aactl, kyverno-notation-aws,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: tekton-chains, buildkitd, sigstore-scaffolding, spire-server, gitsign, crossplane, timestamp-authority, zarf, fulcio, xeol, gh, slsa-verifier, falco-no-driver, goreleaser, ko, policy-controller, witness, ratify, kyverno, tflint, buildah, neuvector-sigstore-interface,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tekton-chains, buildkitd, sigstore-scaffolding, spire-server, docker-cli-buildx, gitsign, crossplane, zarf, gh, slsa-verifier, teleport, goreleaser, docker, ko, policy-controller, witness, ratify, kyverno, tflint, neuvector-sigstore-interface, tkn, trivy, zot,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tekton-chains, buildkitd, sigstore-scaffolding, spire-server, gitsign, crossplane, zarf, gh, slsa-verifier, teleport, goreleaser, docker, ko, policy-controller, witness, ratify, kyverno, tflint, neuvector-sigstore-interface, tkn, trivy, zot, kubescape, vexctl,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: buildkitd, kuberlr, kubernetes-dashboard, src, nri-f5, nuclei, spire-controller-manager, pluto, terraform-mcp-server, libnvidia-container, nova, nri-haproxy, regclient, yunikorn-k8shim, gobuster, step-kms-plugin, tempo, cloud-provider-vsphere, grafana-alloy, glow,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: tekton-chains, buildkitd, sigstore-scaffolding, spire-server, gitsign, crossplane, zarf, gh, slsa-verifier, teleport, goreleaser, docker, ko, policy-controller, witness, ratify, kyverno, tflint, neuvector-sigstore-interface, tkn, trivy, zot, kubescape, vexctl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: tekton-chains, buildkitd, sigstore-scaffolding, spire-server, flux-kustomize-controller, grafana-mimir, kargo, k3s, gitsign, nuclei, timestamp-authority, pulumi, fulcio, flux, zarf, crossplane-provider-azure-storage, gh, ksops, slsa-verifier, glab, goreleaser,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: zarf, kubescape-server, tekton-chains, ratify, cloudbeat, falcoctl, falcoctl-fips, trivy-fips, neuvector-sigstore-interface, docker-fips, policy-controller-fips, spire-server-fips, cloudbeat-fips, kyverno-notation-aws, gitsign, kubescape, crossplane, kyverno-fips, tk...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: kyverno, tekton-chains, neuvector-sigstore-interface, aactl, tkn, zarf, trivy, kubescape, kyverno-notation-aws, policy-controller, falcoctl, trivy-operator, gitsign, crossplane, ratify, tflint...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: ko, zarf, kubescape-server, tekton-chains, ratify, cloudbeat, falcoctl, falcoctl-fips, neuvector-sigstore-interface, docker-fips, chainctl-fips, policy-controller-fips, spire-server-fips, cloudbeat-fips, kyverno-notation-aws, gitsign, kubescape, crossplane,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: ko, zarf, kubescape-server, tekton-chains, ratify, cloudbeat, falcoctl, falcoctl-fips, neuvector-sigstore-interface, docker-fips, chainctl-fips, policy-controller-fips, spire-server-fips, cloudbeat-fips, kyverno-notation-aws, gitsign, kubescape, crossplane,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tekton-chains, spire-server, gitsign, crossplane, zarf, slsa-verifier, teleport, goreleaser, ko, policy-controller, ratify, kyverno, tkn, neuvector-sigstore-interface, kubescape, trivy-operator, aactl, kyverno-notation-aws, falcoctl, tflint...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tekton-chains, spire-server, gitsign, crossplane, zarf, slsa-verifier, teleport, goreleaser, ko, policy-controller, ratify, kyverno, tkn, neuvector-sigstore-interface, kubescape, trivy-operator, aactl, kyverno-notation-aws, falcoctl, tflint...