GO-2026-5694 vulnerabilities

Vulnerabilities for packages: ratify, kubescape, trivy, aactl, policy-controller, teleport, crossplane, kyverno, trivy-operator, zot, kyverno-notation-aws, slsa-verifier...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: zarf, ratify, kubescape, trivy, aactl, policy-controller, falcoctl, crossplane, neuvector-sigstore-interface, kyverno, trivy-operator, kyverno-notation-aws, tkn, gitsign, tekton-chains, tflint...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane, kyverno, tkn, gitsign, policy-controller, teleport, trivy-operator, ratify, ko, falcoctl, kyverno-notation-aws, zarf, goreleaser, kubescape, aactl, neuvector-sigstore-interface, tekton-chains, tflint, slsa-verifier...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: spire-server, apko, kubescape, aactl, ko, policy-controller, cosign, skaffold, tkn, tekton-chains, melange, slsa-verifier, flux-source-controller...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, external-secrets-operator, istio, rootlesskit, snyk-cli, wolfictl, helm, buildah, crossplane-provider-aws-kms, tw, crossplane-provider-keycloak, apko, docker-cli-buildx, buildkitd, gptscript, openbao, gomplate, zot, dagger, melange,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane, kyverno, tkn, gitsign, flux-source-controller, docker-cli-buildx, policy-controller, cosign, teleport, zot, vexctl, ratify, gh, ko, falcoctl, kyverno-notation-aws, skaffold, zarf, goreleaser, kubescape, aactl, sigstore-scaffolding,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: ratify, goreleaser, aactl, policy-controller, falcoctl, teleport, kyverno, witness, zot, kyverno-notation-aws, tkn, gitsign, flux-source-controller...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane, kyverno, tkn, gitsign, flux-source-controller, docker-cli-buildx, policy-controller, cosign, buildkitd, teleport, trivy-operator, zot, vexctl, ratify, gh, trivy, ko, falcoctl, kyverno-notation-aws, skaffold, zarf, goreleaser, kubescape, aact...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane, rekor, kyverno, tkn, gitsign, flux-source-controller, policy-controller, cosign, buildkitd, teleport, trivy-operator, zot, vexctl, ratify, gh, trivy, ko, falcoctl, kyverno-notation-aws, skaffold, zarf, goreleaser, kubescape, aactl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: spire-server, k3d, kubernetes-event-exporter, argo-events, rekor, bank-vaults, skopeo, snyk-cli, scorecard, crossplane-provider-azure-sql, sops, tkn, gitsign, opentelemetry-collector, flux-source-controller, flux-image-reflector-controller, policy-controller,...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

CLEANSTART-2026-YS85875 Security fixes in policy-controller 0.12.1-r1

Package policy-controller version 0.12.1-r1 fixes 13 vulnerabilities: CVE-2025-8556, CVE-2026-1229, CVE-2025-15558, CVE-2025-46569, CVE-2026-22703...

CLEANSTART-2026-HT07063 Security fixes in policy-controller-fips 0.15.1-r0

Package policy-controller-fips version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r, ghsa-78h2-9frx-2jm8, ghsa-xm5m-wgh2-rrg3...

CLEANSTART-2026-IK86395 Security fixes in policy-controller 0.15.1-r0

Package policy-controller version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-33814, CVE-2026-39883, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r...

CLEANSTART-2026-XO70994 Security fixes for CVE-2026-33814, CVE-2026-34986, CVE-2026-39883, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: spire-server-fips, tflint-fips, tkn, trivy, kubescape, kyverno-notation-aws-fips, falcoctl-fips, ratify-fips, tflint, teleport-operator-fips, kyverno-notation-aws, policy-controller, falcoctl, policy-controller-fips, teleport, kubescape-server-fips, tbot,...

Important: Red Hat Security Advisory: RHTAS 1.0.1 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: spire-server, ratify, goreleaser, kubescape, trivy, zarf, aactl, policy-controller, falcoctl, crossplane, neuvector-sigstore-interface, kyverno, trivy-operator, kyverno-notation-aws, tkn, gitsign, tekton-chains, tflint...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: spire-server, ratify, goreleaser, kubescape, trivy, zarf, aactl, policy-controller, falcoctl, crossplane, neuvector-sigstore-interface, kyverno, trivy-operator, kyverno-notation-aws, tkn, gitsign, tekton-chains, tflint...