GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kyverno, ratify, kyverno-notation-aws, teleport, slsa-verifier, kubescape, trivy, crossplane, trivy-operator, policy-controller, aactl, zot...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno, tekton-chains, ratify, tkn, kyverno-notation-aws, gitsign, trivy, kubescape, zarf, crossplane, trivy-operator, policy-controller, aactl, tflint, neuvector-sigstore-interface...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: ko, flux-source-controller, tekton-chains, spire-server, tkn, melange, skaffold, kubescape, slsa-verifier, policy-controller, aactl, cosign, apko...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: ko, spire-server, ratify, gitsign, tflint, tekton-chains, slsa-verifier, zarf, neuvector-sigstore-interface, falcoctl, tkn, goreleaser, crossplane, teleport, aactl, kyverno, kyverno-notation-aws, kubescape, trivy-operator, policy-controller...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, terraform-provider-tls, argo-events, crossplane-provider-aws-kms, kubernetes, apko, datadog-agent, mattermost, gitea, kots, guac, crossplane-provider-aws-iam, sealed-secrets, crossplane-provider-aws-cloudfront, cosign, dagger, falcoctl,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: ko, sigstore-scaffolding, spire-server, ratify, gitsign, tflint, flux-source-controller, tekton-chains, gh, zarf, neuvector-sigstore-interface, witness, cosign, falcoctl, vexctl, tkn, skaffold, goreleaser, crossplane, teleport, aactl, kyverno, docker-cli-buildx,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-source-controller, kyverno, ratify, tkn, kyverno-notation-aws, gitsign, teleport, goreleaser, policy-controller, aactl, witness, zot...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: ko, sigstore-scaffolding, spire-server, ratify, gitsign, tflint, flux-source-controller, tekton-chains, gh, slsa-verifier, zarf, neuvector-sigstore-interface, witness, cosign, falcoctl, docker, vexctl, tkn, skaffold, trivy, goreleaser, crossplane, teleport, aactl,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: ko, sigstore-scaffolding, spire-server, ratify, gitsign, tflint, flux-source-controller, tekton-chains, gh, slsa-verifier, zarf, neuvector-sigstore-interface, witness, cosign, rekor, falcoctl, docker, vexctl, tkn, skaffold, trivy, goreleaser, crossplane, teleport,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: nuclei, argo-events, sigstore-scaffolding, grafana-mimir, spire-server, snyk-cli, opentelemetry-collector, gitsign, terraform-provider-azurerm, kubevela, crossplane-provider-azure-managedidentity, flux-notification-controller, step-ca, flux-source-controller,...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

CLEANSTART-2026-YS85875 Security fixes in policy-controller 0.12.1-r1

Package policy-controller version 0.12.1-r1 fixes 13 vulnerabilities: CVE-2025-8556, CVE-2026-1229, CVE-2025-15558, CVE-2025-46569, CVE-2026-22703...

CLEANSTART-2026-HT07063 Security fixes in policy-controller-fips 0.15.1-r0

Package policy-controller-fips version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r, ghsa-78h2-9frx-2jm8, ghsa-xm5m-wgh2-rrg3...

CLEANSTART-2026-IK86395 Security fixes in policy-controller 0.15.1-r0

Package policy-controller version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-33814, CVE-2026-39883, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r...

CLEANSTART-2026-XO70994 Security fixes for CVE-2026-33814, CVE-2026-34986, CVE-2026-39883, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, kyverno-notation-aws-fips, policy-controller, tkn, tekton-chains-fips, trivy-fips, crossplane-fips, tkn-fips, spire-server-fips, falcoctl, kyverno, tflint-fips, docker-fips, kubescape-server, ratify, neuvector-sigstore-interface-fips,...

Important: Red Hat Security Advisory: RHTAS 1.0.1 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno, tekton-chains, spire-server, ratify, tkn, kyverno-notation-aws, gitsign, trivy, kubescape, zarf, goreleaser, crossplane, trivy-operator, policy-controller, aactl, tflint, neuvector-sigstore-interface...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno, tekton-chains, spire-server, ratify, tkn, kyverno-notation-aws, gitsign, trivy, kubescape, zarf, goreleaser, crossplane, trivy-operator, policy-controller, aactl, tflint, neuvector-sigstore-interface...