GO-2024-2737 vulnerabilities

Vulnerabilities for packages: dagger, grype, k3d, kaniko, policy-controller, docker-compose, melange, policy-controller-fips, docker, harbor-scanner-trivy, helm-push, neuvector-scanner, buf, harbor-scanner-trivy-fips, syft, cri-tools, wolfictl...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: tkn, ko, melange, policy-controller-fips, slsa-verifier, neuvector-sigstore-interface, tekton-chains-fips, policy-controller, spire-server, tkn-fips, apko, falcoctl, wolfictl, flux-source-controller, falcoctl-fips, zarf, goreleaser, tekton-chains, kubescape, zot,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: teleport, tkn, cloudbeat, policy-controller-fips, trivy, kubescape-server-fips, kyverno-fips, image-factory, crossplane-fips, neuvector-sigstore-interface, tekton-chains-fips, policy-controller, trivy-operator, tkn-fips, kyverno, kyverno-notation-aws-fips,...

CLEANSTART-2026-YQ26872 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-1229, CVE-2026-24051, CVE-2026-34986, CVE-2026-39984, ghsa-78h2-9frx-2jm8, ghsa-pmwq-pjrm-6p5r, ghsa-xm5m-wgh2-rrg3 applied in versions: 0.13.1-r0, 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, crossplane-provider-aws-cloudwatchlogs, databricks-cli-fips, gitea-fips, crossplane-provider-azure-authorization, crossplane-provider-aws-s3-fips, rancher-fleet, crossplane-provider-aws-elasticache, datadog-agent, helm-diff,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp, crossplane-provider-aws-cloudwatchlogs, configmap-reload-fips, cert-exporter-fips, crossplane-provider-aws-elasticache, hugo-extended, cluster-proportional-autoscaler, weaviate, kyverno-policy-reporter, cilium, hubble-ui, request-1279, vexctl...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: k3d, flux-image-reflector-controller, pulumi, policy-controller-fips, slsa-verifier, trivy, crane, cosign-fips, up, ctop, cosign, flux, kots, newrelic-infrastructure-agent, policy-controller, flux-helm-controller, argo-workflows, loki, helm-operator-fips, k3s,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: k3d, flux-image-reflector-controller, pulumi, policy-controller-fips, slsa-verifier, trivy, crane, cosign-fips, up, ctop, cosign, flux, kots, newrelic-infrastructure-agent, policy-controller, flux-helm-controller, argo-workflows, loki, helm-operator-fips, k3s,...