CVE-2020-8554

Mitigate CVE-2020-8554 with Policy Controller This repository contains configuration files for using Policy Controller, which is based on the open source OPA Gatekeeper project, to block Kubernetes Services from public IP access. The security advisory for this issue states: A security issue was...

CLEANSTART-2026-UC71482 Security fix for CVE-2025-8556 applied in: argo-workflows-fips 3.5.15-r1, argo-workflows-fips 3.6.13-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, policy-controller 0.12.1-r1

CVE-2025-8556 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UW62677 Security fix for CVE-2026-23992 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1, tkn-fips 0.43.0-r3

CVE-2026-23992 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WK71465 Security fix for CVE-2026-24117 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tkn 0.42.2-r1, tkn 0.43.2-r1

CVE-2026-24117 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FC01276 Security fix for CVE-2026-22703 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.3-r3, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tekton-chains-fips 0.24.0-r1

CVE-2026-22703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OK69185 Security fix for CVE-2025-46569 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, policy-controller 0.12.1-r1

CVE-2025-46569 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OE12981 Security fix for CVE-2026-49834 applied in: cosign 3.1.1-r2, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r1, kyverno 1.17.2-r2, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

CVE-2026-49834 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6162 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno, kyverno-notation-aws, kubescape, flux-source-controller, aactl, ko, neuvector-sigstore-interface, tekton-chains, goreleaser, policy-controller, trivy, tkn, zot, spire-server, trivy-operator, zarf, crossplane, skaffold...

GO-2023-1840 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kind, policy-controller...

GO-2023-1842 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kind, policy-controller...

GO-2023-1839 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kind, policy-controller...

GO-2023-1841 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kind, policy-controller...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, spire-server, spire-server-fips, cosign-fips, snyk-cli, zot, policy-controller, k8sgpt, cosign, tfsec, opa, conftest, policy-controller-fips, conftest-fips, kots...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: buf, harbor-scanner-trivy, k3d, neuvector-scanner, policy-controller, harbor-scanner-trivy-fips, policy-controller-fips, syft, wolfictl, grype, helm-push, kaniko, melange, dagger, cri-tools, docker-compose...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kubescape, tekton-chains, spire-server, spire-server-fips, apko, policy-controller, tkn, cosign, falcoctl-fips, aactl, skaffold, melange, flux-source-controller, ko...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: zarf, cloudbeat-fips, tkn, zarf-fips, tkn-fips, ratify, aactl, crossplane, crossplane-fips, docker-fips, trivy-operator, neuvector-sigstore-interface-fips, image-factory-fips, trivy-fips, kubescape-server-fips, tflint, tbot, teleport, tflint-fips, falcoctl, kubescape...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: zarf, apko, goreleaser, tkn, tkn-fips, aactl, chainctl, spire-server, zot, skaffold, flux-source-controller, vexctl, ko, falcoctl, kubescape, neuvector-sigstore-interface, tekton-chains, wolfictl, melange, ko-fips, slsa-verifier, gitsign, spire-server-fips,...

GO-2023-1842 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, policy-controller, kind...

GO-2023-1839 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, policy-controller, kind...

GO-2023-1840 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, policy-controller, kind...