CVE-2020-8554

Mitiga CVE-2020-8554 con Policy Controller Este repositorio contiene archivos de configuración para usar Policy Controller, que se basa en el proyecto de código abierto OPA Gatekeeper, para bloquear el acceso a IP públicas de los Servicios de Kubernetes. El aviso de seguridad para este problema...

CLEANSTART-2026-UC71482 Security fix for CVE-2025-8556 applied in: argo-workflows-fips 3.5.15-r1, argo-workflows-fips 3.6.13-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, policy-controller 0.12.1-r1

CVE-2025-8556 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UW62677 Security fix for CVE-2026-23992 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1, tkn-fips 0.43.0-r3

CVE-2026-23992 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WK71465 Security fix for CVE-2026-24117 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tkn 0.42.2-r1, tkn 0.43.2-r1

CVE-2026-24117 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FC01276 Security fix for CVE-2026-22703 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.3-r3, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tekton-chains-fips 0.24.0-r1

CVE-2026-22703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OK69185 Security fix for CVE-2025-46569 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, policy-controller 0.12.1-r1

CVE-2025-46569 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OE12981 Security fix for CVE-2026-49834 applied in: cosign 3.1.1-r2, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r1, kyverno 1.17.2-r2, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

CVE-2026-49834 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6162 vulnerabilities

Vulnerabilities for packages: zarf, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, trivy-operator, flux-source-controller, policy-controller, tekton-chains, crossplane, falcoctl, spire-server, kyverno-notation-aws, goreleaser, kyverno, aactl, trivy...

GO-2023-1840 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

GO-2023-1842 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

GO-2023-1839 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

GO-2023-1841 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: kots, kubescape, opa, snyk-cli, tfsec, zarf, spire-server-fips, k8sgpt, conftest-fips, spire-server, zot, conftest, cosign, cosign-fips, policy-controller-fips, policy-controller...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, buf, dagger, helm-push, k3d, syft, policy-controller, grype, wolfictl, kaniko, cri-tools, melange, harbor-scanner-trivy, harbor-scanner-trivy-fips, policy-controller-fips, docker-compose...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: tekton-chains, ko, tkn, kubescape, aactl, spire-server-fips, slsa-verifier, apko, falcoctl-fips, spire-server, melange, cosign, flux-source-controller, skaffold, policy-controller...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: tekton-chains, image-factory, neuvector-sigstore-interface, falcoctl, docker-fips, crossplane, kyverno-notation-aws-fips, kyverno-fips, policy-controller, cloudbeat, trivy-operator-fips, tkn-fips, aactl, kubescape-server-fips, tflint, trivy-operator,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: tekton-chains, neuvector-sigstore-interface, chainctl, falcoctl, flux-source-controller, policy-controller, tkn-fips, aactl, slsa-verifier, tekton-chains-fips, spire-server, skaffold, kubescape, gitsign, ko-fips, tkn, zarf, falcoctl-fips, zot, ko, goreleaser,...

GO-2023-1839 vulnerabilities

Vulnerabilities for packages: policy-controller, kubeflow-katib, kind...

GO-2023-1842 vulnerabilities

Vulnerabilities for packages: policy-controller, kubeflow-katib, kind...

GO-2023-1841 vulnerabilities

Vulnerabilities for packages: policy-controller, kubeflow-katib, kind...