GO-2023-1840 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

GO-2023-1842 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

GO-2023-1841 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: policy-controller, zarf, cosign, tfsec, spire-server, kots, zot, opa, kubescape, snyk-cli, k8sgpt, conftest...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: policy-controller, kyverno-notation-aws, cosign, tfsec, spire-server, kots, trivy, witness, conftest...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, gh, skaffold, teleport, falcoctl, tkn, zarf, cosign, vexctl, tflint, neuvector-sigstore-interface, gitsign, witness, kyverno-notation-aws, spire-server, trivy, goreleaser, trivy-operator, policy-controller, buildkitd, tekton-chains, docker, ko,...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, policy-controller, k3d, kaniko, neuvector-scanner, dagger, melange, docker-compose, grype, cri-tools, syft, buf, wolfictl, helm-push...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, pulumi, cortex, flux-kustomize-controller, sops, grafana-agent-operator, restic, flyte, timestamp-authority, thanos, falcoctl, fluent-bit-plugin-loki, tkn, py3-cassandra-medusa, zarf, chezmoi, ksops, cosign, step, guac, trino, harbor-registry,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: apko, policy-controller, tkn, cosign, slsa-verifier, tekton-chains, melange, spire-server, aactl, ko, flux-source-controller, skaffold, kubescape...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: trivy-operator, falcoctl, kyverno, kyverno-notation-aws, policy-controller, tkn, zarf, tekton-chains, crossplane, aactl, trivy, tflint, ratify, neuvector-sigstore-interface, kubescape, gitsign...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: trivy-operator, kyverno, kyverno-notation-aws, policy-controller, slsa-verifier, crossplane, aactl, trivy, zot, kubescape, teleport, ratify...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: slsa-verifier, teleport, falcoctl, zarf, tflint, neuvector-sigstore-interface, gitsign, ratify, kubescape, kyverno-notation-aws, spire-server, goreleaser, trivy-operator, kyverno, policy-controller, tekton-chains, crossplane, aactl, ko, tkn...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: pulumi, crossplane-provider-family-azure, slsa-verifier, mods, gh, kubernetes-dashboard, gptscript, crossplane-provider-aws-sqs, terraform-provider-acme, pulumi-kubernetes-operator, crossplane-provider-aws-cloudfront, traefik, opentofu,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, gh, skaffold, teleport, falcoctl, tkn, zarf, cosign, vexctl, tflint, neuvector-sigstore-interface, ratify, gitsign, witness, kyverno-notation-aws, docker-cli-buildx, spire-server, goreleaser, policy-controller, tekton-chains, aactl, ko,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno-notation-aws, policy-controller, gitsign, aactl, witness, flux-source-controller, zot, ratify, tkn, teleport, goreleaser...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, slsa-verifier, gh, skaffold, teleport, falcoctl, tkn, zarf, cosign, vexctl, tflint, neuvector-sigstore-interface, ratify, gitsign, witness, kyverno-notation-aws, docker-cli-buildx, spire-server, trivy, goreleaser, trivy-operator, kyverno,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, slsa-verifier, gh, skaffold, teleport, falcoctl, tkn, zarf, cosign, vexctl, tflint, rekor, neuvector-sigstore-interface, ratify, gitsign, witness, kyverno-notation-aws, spire-server, trivy, goreleaser, trivy-operator, policy-controller, buildkit...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, sigstore-scaffolding, pulumi, crossplane-provider-family-azure, fulcio, slsa-verifier, flux-kustomize-controller, gh, sops, crossplane-provider-azure-managedidentity, pulumi-kubernetes-operator, timestamp-authority,...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...