GO-2026-5694 vulnerabilities

Vulnerabilities for packages: aactl, policy-controller, trivy, kyverno-notation-aws, trivy-operator, zot, ratify, teleport, slsa-verifier, kubescape, kyverno, crossplane...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, tekton-chains, tkn, policy-controller, trivy, kyverno-notation-aws, neuvector-sigstore-interface, trivy-operator, ratify, zarf, tflint, kubescape, kyverno, gitsign, crossplane...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: spire-server, aactl, falcoctl, tekton-chains, kubescape, kyverno, tkn, policy-controller, teleport, gitsign, crossplane, kyverno-notation-aws, ko, neuvector-sigstore-interface, trivy-operator, ratify, slsa-verifier, goreleaser, zarf, tflint...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: aactl, flux-source-controller, tekton-chains, spire-server, tkn, policy-controller, cosign, ko, apko, melange, skaffold, slsa-verifier, kubescape...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, docker-machine-driver-linode, crossplane-provider-aws-kinesis, scorecard, zot, flux-notification-controller, falcoctl, cloudflared, nfpm, step, sops, minio, chisel, kyverno, crossplane-provider-aws-cloudwatchlogs,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: spire-server, sigstore-scaffolding, zot, witness, aactl, falcoctl, flux-source-controller, tekton-chains, skaffold, kubescape, kyverno, gh, tkn, policy-controller, cosign, teleport, docker-cli-buildx, gitsign, crossplane, kyverno-notation-aws, ko,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: spire-server, sigstore-scaffolding, zot, witness, aactl, falcoctl, flux-source-controller, tekton-chains, skaffold, kubescape, kyverno, gh, tkn, policy-controller, cosign, docker, buildkitd, teleport, docker-cli-buildx, gitsign, crossplane, trivy, kyverno-notation-aw...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, flux-source-controller, tkn, policy-controller, kyverno-notation-aws, zot, ratify, teleport, witness, goreleaser, kyverno, gitsign...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: spire-server, sigstore-scaffolding, zot, witness, aactl, falcoctl, flux-source-controller, tekton-chains, skaffold, kubescape, kyverno, gh, tkn, policy-controller, cosign, docker, rekor, buildkitd, teleport, gitsign, crossplane, trivy, kyverno-notation-aws, ko,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: spire-server, scorecard, flux-image-automation-controller, kubevela, sigstore-scaffolding, pulumi-kubernetes-operator, zarf, zot, vexctl, rook, crossplane-provider-azure, kubernetes-event-exporter, aactl, falcoctl, crossplane-provider-azure-managedidentity,...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

CLEANSTART-2026-YS85875 Security fixes in policy-controller 0.12.1-r1

Package policy-controller version 0.12.1-r1 fixes 13 vulnerabilities: CVE-2025-8556, CVE-2026-1229, CVE-2025-15558, CVE-2025-46569, CVE-2026-22703...

CLEANSTART-2026-HT07063 Security fixes in policy-controller-fips 0.15.1-r0

Package policy-controller-fips version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r, ghsa-78h2-9frx-2jm8, ghsa-xm5m-wgh2-rrg3...

CLEANSTART-2026-IK86395 Security fixes in policy-controller 0.15.1-r0

Package policy-controller version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-33814, CVE-2026-39883, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r...

CLEANSTART-2026-XO70994 Security fixes for CVE-2026-33814, CVE-2026-34986, CVE-2026-39883, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: ratify-fips, crossplane, aactl, teleport, tflint, zarf-fips, falcoctl, falcoctl-fips, zarf, tekton-chains-fips, teleport-operator-fips, tkn-fips, kyverno-notation-aws-fips, cloudbeat-fips, policy-controller-fips, ratify, kyverno, trivy-operator-fips,...

Important: Red Hat Security Advisory: RHTAS 1.0.1 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, tekton-chains, spire-server, tkn, policy-controller, trivy, kyverno-notation-aws, neuvector-sigstore-interface, trivy-operator, ratify, zarf, tflint, kubescape, goreleaser, kyverno, gitsign, crossplane...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, tekton-chains, spire-server, tkn, policy-controller, trivy, kyverno-notation-aws, neuvector-sigstore-interface, trivy-operator, ratify, zarf, tflint, kubescape, goreleaser, kyverno, gitsign, crossplane...