133 matches found
CVE-2020-8554
Mitigate CVE-2020-8554 with Policy Controller This repository contains configuration files for using Policy Controller, which is based on the open source OPA Gatekeeper project, to block Kubernetes Services from public IP access. The security advisory for this issue states: A security issue was...
Important: Red Hat Security Advisory: RHTAS 1.0.3 - GA Release Of the Policy Controller Operator
The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...
CLEANSTART-2026-UC71482 Security fix for CVE-2025-8556 applied in: argo-workflows-fips 3.5.15-r1, argo-workflows-fips 3.6.13-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, policy-controller 0.12.1-r1
CVE-2025-8556 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UW62677 Security fix for CVE-2026-23992 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1, tkn-fips 0.43.0-r3
CVE-2026-23992 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WK71465 Security fix for CVE-2026-24117 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tkn 0.42.2-r1, tkn 0.43.2-r1
CVE-2026-24117 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-FC01276 Security fix for CVE-2026-22703 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.3-r3, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tekton-chains-fips 0.24.0-r1
CVE-2026-22703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OK69185 Security fix for CVE-2025-46569 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, policy-controller 0.12.1-r1
CVE-2025-46569 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-NS94125 Security fix for GHSA-xm5m-wgh2-rrg3 applied in: docker 29.3.0-r1, kyverno 1.18.0-r0, kyverno-fips 1.16.3-r7, kyverno-fips 1.17.1-r6, policy-controller-fips 0.15.1-r0
GHSA-xm5m-wgh2-rrg3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OE12981 Security fix for CVE-2026-49834 applied in: cosign 3.1.1-r2, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r1, kyverno 1.17.2-r2, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1
CVE-2026-49834 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
GO-2026-6162 vulnerabilities
Vulnerabilities for packages: trivy, spire-server, goreleaser, aactl, flux-source-controller, trivy-operator, tkn, ko, policy-controller, skaffold, falcoctl, kubescape, kyverno, zarf, tekton-chains, kyverno-notation-aws, zot, neuvector-sigstore-interface, crossplane...
GO-2023-1839 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, kind, policy-controller...
GO-2023-1840 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, kind, policy-controller...
GO-2023-1841 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, kind, policy-controller...
GO-2023-1842 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, kind, policy-controller...
GO-2024-3141 vulnerabilities
Vulnerabilities for packages: cosign, opa, spire-server, conftest-fips, kubescape, tfsec, zarf, cosign-fips, policy-controller-fips, spire-server-fips, snyk-cli, zot, conftest, kots, k8sgpt, policy-controller...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: docker-compose, harbor-scanner-trivy, policy-controller, dagger, cri-tools, policy-controller-fips, grype, syft, wolfictl, helm-push, kaniko, melange, neuvector-scanner, k3d, buf, harbor-scanner-trivy-fips...
GO-2023-2181 vulnerabilities
Vulnerabilities for packages: cosign, falcoctl-fips, spire-server, kubescape, tekton-chains, ko, tkn, slsa-verifier, spire-server-fips, aactl, melange, flux-source-controller, apko, skaffold, policy-controller...
GO-2026-5952 vulnerabilities
Vulnerabilities for packages: cloudbeat-fips, kyverno-notation-aws-fips, falcoctl-fips, kyverno, gitsign, commercial-kyverno, crossplane-fips, image-factory, trivy, zarf-fips, ratify-fips, tekton-chains, crossplane, neuvector-sigstore-interface, kubescape-server-fips, teleport, policy-controller,...
GO-2024-2719 vulnerabilities
Vulnerabilities for packages: falcoctl-fips, vexctl, gitsign, spire-server, ko, zot, melange, slsa-verifier, tekton-chains, chainctl, neuvector-sigstore-interface, policy-controller, zarf, falcoctl, aactl, flux-source-controller, tkn-fips, skaffold, tkn, policy-controller-fips, wolfictl,...