GO-2025-3900 vulnerabilities

Vulnerabilities for packages: mattermost-fips, grafana-fips, pluto-fips, ratify-fips, boring-registry-fips, kyverno-notation-aws-fips, rancher-security-scan, bank-vaults, jitsucom-bulker, istio-fips, k9s-fips, kyverno, beats-fips, grafana, zitadel, tkn-fips, neuvector-sigstore-interface-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, envoy-gateway, ocm-kubernetes-controller, tw, cluster-api-helm-controller-fips, crossplane, kyverno-notation-aws-fips, falcoctl, falcoctl-fips, commercial-kyverno, kyverno, linkerd2, trivy, k8ssandra-client, helm-operator-fips,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: aactl, policy-controller-fips, ratify, kyverno-policy-reporter-plugins-kyverno, policy-controller, ratify-fips, kyverno-notation-aws-fips, kyverno-notation-aws, falcoctl, falcoctl-fips, tkn, kyverno, tekton-chains-fips, flux-source-controller, goreleaser,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: aactl, teleport-operator-fips, neuvector-sigstore-interface, cg, policy-controller-fips, ratify, kyverno-policy-reporter-plugins-kyverno, policy-controller, rekor-fips, crossplane, ratify-fips, docker, tflint-fips, kyverno-notation-aws-fips, ko, kyverno-notation-aws,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: opentofu, steampipe, argo-cd, oras, chartmuseum, cert-manager-cmctl, zot, kyverno, helm-set-status, rancher-helm, linkerd2, zarf, cluster-api-helm-controller, headlamp, xeol, helm, flux-helm-controller, gogatekeeper, opa-envoy, rancher-agent, gatekeeper, vcluster,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: ratify, slsa-verifier, aactl, buildah, undock, kubescape, kyverno-notation-aws, witness, zarf, kots, kyverno, skopeo, falcoctl, gitsign, tekton-chains, falco-no-driver, podman, flux-source-controller...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: trivy, ko, ratify, skaffold, aactl, trivy-operator, tkn, kyverno-notation-aws, vexctl, zot, kyverno, teleport, tekton-chains, slsa-verifier...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, kubescape, kyverno, policy-controller, spire-server, gitsign, zarf, crossplane, ko, teleport, tekton-chains, slsa-verifier, goreleaser, ratify, trivy-operator, tflint, kyverno-notation-aws, falcoctl, aactl, tkn...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: trivy, ratify, aactl, trivy-operator, neuvector-sigstore-interface, kubescape, kyverno-notation-aws, tflint, tkn, kyverno, policy-controller, falcoctl, gitsign, tekton-chains, zarf, crossplane...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: trivy, ratify, aactl, trivy-operator, kubescape, kyverno-notation-aws, zot, kyverno, policy-controller, teleport, slsa-verifier, crossplane...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: goreleaser, ratify, aactl, tkn, kyverno-notation-aws, witness, zot, policy-controller, falcoctl, teleport, gitsign, flux-source-controller...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: skaffold, neuvector-sigstore-interface, kubescape, cosign, zot, kyverno, policy-controller, spire-server, gitsign, zarf, crossplane, ko, vexctl, witness, docker, gh, teleport, tekton-chains, slsa-verifier, flux-source-controller, goreleaser, ratify, trivy-operator,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, cosign, gitsign, zarf, vexctl, witness, tekton-chains, slsa-verifier, skopeo, podman, kots, flux-source-controller, ratify, kyverno-notation-aws, falcoctl, aactl, undock, tkn, portieris, falco-no-driver, sigstore-scaffolding...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: skaffold, neuvector-sigstore-interface, kubescape, cosign, zot, policy-controller, spire-server, gitsign, zarf, ko, vexctl, witness, gh, teleport, tekton-chains, flux-source-controller, goreleaser, ratify, tflint, kyverno-notation-aws, falcoctl, docker-cli-buildx,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: skaffold, neuvector-sigstore-interface, kubescape, cosign, zot, policy-controller, spire-server, gitsign, zarf, ko, vexctl, witness, gh, teleport, tekton-chains, slsa-verifier, flux-source-controller, goreleaser, ratify, trivy-operator, tflint, kyverno-notation-aws,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: migrate, neuvector-sigstore-interface, emissary, harbor-cli, oauth2-proxy, nri-f5, terraform-mcp-server, dex, prometheus-operator, rabbitmq-default-user-credential-updater, rabbitmq-messaging-topology-operator, witness, dgraph, render-template, nri-rabbitmq, conftest...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: skaffold, neuvector-sigstore-interface, kubescape, cosign, zot, policy-controller, spire-server, gitsign, zarf, ko, vexctl, witness, docker, gh, teleport, tekton-chains, slsa-verifier, flux-source-controller, goreleaser, ratify, trivy-operator, tflint,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: k6, rclone, bento, trufflehog, telegraf, cert-manager-cmctl, zot, kyverno, dex, harbor, xeol, percona-server-mongodb-operator, grafana, external-secrets-operator, rancher-agent, teleport, sftpgo-plugin-auth, spqr, flux-source-controller, ratify, gitea, nuclei,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: k6, rclone, bento, trufflehog, telegraf, cert-manager-cmctl, zot, kyverno, dex, harbor, xeol, percona-server-mongodb-operator, grafana, external-secrets-operator, rancher-agent, teleport, sftpgo-plugin-auth, spqr, flux-source-controller, ratify, gitea, nuclei,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, crossplane-provider-aws-s3, crossplane-provider-terraform-fips, kubernetes-csi-livenessprobe, aws-fsx-csi-driver-fips, amazon-ecs-agent-fips, flux-fips, go, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlog...