GO-2024-2737 vulnerabilities

Vulnerabilities for packages: policy-controller, harbor-scanner-trivy-fips, neuvector-scanner, wolfictl, policy-controller-fips, docker-compose, k3d, kaniko, cri-tools, melange, buf, grype, docker, syft, dagger, helm-push, harbor-scanner-trivy...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, zot, falcoctl, chainctl, tkn, tekton-chains-fips, tkn-fips, slsa-verifier, melange, apko, neuvector-sigstore-interface, gitsign, zarf, ko-fips, wolfictl, kubescape, skaffold, spire-server-fips, vexctl, aactl, tekton-chains,...

CLEANSTART-2026-HT07063 Security fixes in policy-controller-fips 0.15.1-r0

Package policy-controller-fips version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r, ghsa-78h2-9frx-2jm8, ghsa-xm5m-wgh2-rrg3...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kyverno-fips, policy-controller-fips, trivy, falcoctl, crossplane-fips, teleport-operator-fips, image-factory, teleport, tkn, kyverno-notation-aws-fips, kubescape-server-fips, ratify-fips, tekton-chains-fips, ratify, tkn-fips, image-factory-fips...

CLEANSTART-2026-YQ26872 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-1229, CVE-2026-24051, CVE-2026-34986, CVE-2026-39984, ghsa-78h2-9frx-2jm8, ghsa-pmwq-pjrm-6p5r, ghsa-xm5m-wgh2-rrg3 applied in versions: 0.13.1-r0, 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kyverno-fips, cg, trivy, zot, argo-events-fips, hydra-fips, flux-kustomize-controller, crossplane-provider-azure-managedidentity, docker, omnictl-multiarch-fips, gitlab-operator, crossplane-provider-aws-dynamodb, kyverno-notation-aws-fips, scorecard,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: trivy, flux-kustomize-controller, docker, scorecard, crossplane-provider-aws-dynamodb, kubeflow, prometheus-redis-exporter, pulumi-language-dotnet, doppler-kubernetes-operator, rabbitmq-cluster-operator, grpcurl, slsa-verifier, gitness, k8ssandra-operator,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: policy-controller-fips, trivy, zot, crane, argo-workflows-fips, falcoctl, kubevela, timoni, nerdctl, scorecard, dagger, up, flux-helm-controller, slsa-verifier, helm-fips, kots, kubeflow-katib, flux-image-reflector-controller, gitsign, helm, zarf, cadvisor-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, trivy, zot, crane, argo-workflows-fips, falcoctl, kubevela, timoni, nerdctl, scorecard, dagger, up, flux-helm-controller, slsa-verifier, helm-fips, kots, kubeflow-katib, flux-image-reflector-controller, gitsign, helm, zarf, cadvisor-fips,...