GO-2024-2737 vulnerabilities

Vulnerabilities for packages: docker, helm-push, dagger, policy-controller-fips, harbor-scanner-trivy-fips, neuvector-scanner, k3d, syft, wolfictl, kaniko, policy-controller, buf, grype, docker-compose, harbor-scanner-trivy, cri-tools, melange...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: vexctl, tekton-chains, wolfictl, tkn-fips, aactl, ko-fips, zarf, falcoctl-fips, chainctl, gitsign, policy-controller-fips, slsa-verifier, ko, zot, spire-server-fips, goreleaser, spire-server, neuvector-sigstore-interface, tekton-chains-fips, tkn, falcoctl, apko,...

CLEANSTART-2026-HT07063 Security fixes in policy-controller-fips 0.15.1-r0

Package policy-controller-fips version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r, ghsa-78h2-9frx-2jm8, ghsa-xm5m-wgh2-rrg3...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: docker-fips, tekton-chains, kyverno, tflint-fips, ratify-fips, tkn-fips, aactl, ratify, tbot, teleport, zarf, neuvector-sigstore-interface-fips, falcoctl-fips, kubescape-server, gitsign, image-factory-fips, trivy-operator, kyverno-notation-aws, crossplane-fips,...

CLEANSTART-2026-YQ26872 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-1229, CVE-2026-24051, CVE-2026-34986, CVE-2026-39984, ghsa-78h2-9frx-2jm8, ghsa-pmwq-pjrm-6p5r, ghsa-xm5m-wgh2-rrg3 applied in versions: 0.13.1-r0, 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, docker-fips, actions-runner-controller-fips, trufflehog-fips, crossplane-provider-aws-memorydb-fips, crossplane-provider-aws-kinesis-fips, buildkitd-fips, hydra, gitaly-fips, crossplane-provider-aws-cognitoidentity,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, prometheus-redis-exporter, dex, k8ssandra-operator, helm, aws-load-balancer-controller, php-fpmexporter, src, dex-fips, frp, logstash-exporter-fips, prometheus-blackbox-exporter, kaf, grpc-health-probe, terraform-provider-sendgrid-fips,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: pulumi, vexctl, tekton-chains, k3d, cadvisor, up, flux-helm-controller, cadvisor-fips, rancher-machine, aactl, docker-credential-gcr, loki, kargo, zarf, flux-image-reflector-controller, helm, falcoctl-fips, gitsign, bom, guac, skopeo, cosign, argo-workflows-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: pulumi, vexctl, tekton-chains, k3d, cadvisor, up, flux-helm-controller, cadvisor-fips, rancher-machine, aactl, docker-credential-gcr, loki, kargo, zarf, flux-image-reflector-controller, helm, falcoctl-fips, gitsign, bom, guac, skopeo, cosign, argo-workflows-fips,...