GO-2025-3900 vulnerabilities

Vulnerabilities for packages: k9s-fips, jitsucom-bulker, bank-vaults, kyverno, istio-fips, beats-fips, rancher-security-scan, grafana-fips, pluto-fips, ratify-fips, neuvector-sigstore-interface-fips, kyverno-notation-aws-fips, beats, tkn-fips, zitadel, boring-registry-fips, docker-compose-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: tigera-operator, chartmuseum-fips, helm-set-status, kubescape-operator-fips, falcoctl-fips, consul-k8s-fips, kyverno-fips, manifest-tool, helm-operator-fips, ratify, trivy-operator, kube-arangodb-fips, rancher-agent, kube-mgmt, opentofu-fips, oras, jfrog-cli,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: witness, zot, kyverno, falcoctl-fips, aactl, chainctl, kyverno-fips, policy-controller-fips, ratify-fips, ratify, gitsign, tkn, kyverno-notation-aws-fips, tkn-fips, falcoctl, image-factory-fips, policy-controller, cloudbeat, kyverno-notation-aws, goreleaser,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: buildkitd, neuvector-sigstore-interface, witness, sigstore-scaffolding-fips, zot, crossplane, skaffold-fips, cosign, slsa-verifier, trivy-fips, vexctl, kyverno, falcoctl-fips, tflint-fips, aactl, chainctl, kyverno-fips, kyverno-policy-reporter-plugins-kyverno-fips,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: vcluster, tigera-operator, helm-set-status, zot, linkerd2, rancher-fleet, chartmuseum, cilium-cli, gogatekeeper, rancher-agent, conftest, opa, kube-arangodb, trivy, helm-mapkubeapis, kots, consul-k8s, kyverno, xeol, flux-helm-controller, ratify, opa-envoy, argo-cd,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: teleport, zot, kubescape, policy-controller, ratify, crossplane, trivy-operator, trivy, aactl, slsa-verifier, kyverno-notation-aws, kyverno...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: gitsign, kots, kubescape, flux-source-controller, skopeo, falcoctl, buildah, ratify, witness, zarf, podman, undock, tekton-chains, aactl, slsa-verifier, falco-no-driver, kyverno-notation-aws, kyverno...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: tkn, gitsign, kubescape, tflint, policy-controller, falcoctl, ratify, crossplane, trivy-operator, trivy, tekton-chains, aactl, zarf, neuvector-sigstore-interface, kyverno-notation-aws, kyverno...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: vexctl, teleport, tkn, skaffold, zot, ratify, trivy-operator, trivy, tekton-chains, aactl, slsa-verifier, ko, kyverno-notation-aws, kyverno...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, neuvector-sigstore-interface, kyverno, teleport, kubescape, ratify, aactl, zarf, kyverno-notation-aws, gitsign, falcoctl, crossplane, trivy-operator, tekton-chains, slsa-verifier, ko, tkn, tflint, goreleaser...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: skopeo, sigstore-scaffolding, kots, vexctl, portieris, kubescape, ratify, witness, undock, aactl, zarf, kyverno-notation-aws, gitsign, flux-source-controller, falcoctl, tekton-chains, slsa-verifier, tkn, buildah, podman, cosign, falco-no-driver...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: zot, skaffold, policy-controller, spire-server, gh, sigstore-scaffolding, neuvector-sigstore-interface, vexctl, teleport, kubescape, ratify, witness, aactl, zarf, kyverno-notation-aws, docker-cli-buildx, gitsign, flux-source-controller, falcoctl, tekton-chains, ko,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: buildkitd, zot, skaffold, policy-controller, spire-server, trivy, gh, neuvector-sigstore-interface, vexctl, teleport, kubescape, ratify, witness, aactl, zarf, kyverno-notation-aws, gitsign, flux-source-controller, falcoctl, trivy-operator, tekton-chains, slsa-verifie...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: buildkitd, zot, skaffold, policy-controller, spire-server, trivy, gh, sigstore-scaffolding, neuvector-sigstore-interface, kyverno, vexctl, teleport, kubescape, ratify, witness, aactl, zarf, kyverno-notation-aws, docker-cli-buildx, gitsign, docker,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: teleport, tkn, gitsign, zot, flux-source-controller, policy-controller, falcoctl, ratify, witness, goreleaser, aactl, kyverno-notation-aws...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: buildkitd, zot, skaffold, rekor, policy-controller, spire-server, trivy, gh, sigstore-scaffolding, neuvector-sigstore-interface, vexctl, teleport, kubescape, ratify, witness, aactl, zarf, kyverno-notation-aws, gitsign, docker, flux-source-controller, falcoctl,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: helm-set-status, chartmuseum, gptscript, trivy, harbor-registry, wgcf, src, terraform-provider-azapi, cloud-sql-proxy, k8sgpt, thanos-operator, kor, kapp, fulcio, rancher-system-agent, headlamp, aactl, prometheus, kubernetes-csi-driver-hostpath, hubble, cerbos,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, zot, bento, telegraf, minio, rancher-agent, percona-server-mongodb-operator, seaweedfs, openbao, gitlab-runner, kyverno, terraform, gitea, teleport, xeol, k6, ratify, rancher, yunikorn-k8shim, nuclei, kyverno-notation-aws, sftpgo-plugin-aut...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: external-secrets-operator, zot, bento, telegraf, minio, rancher-agent, percona-server-mongodb-operator, seaweedfs, openbao, gitlab-runner, kyverno, terraform, gitea, teleport, xeol, k6, ratify, rancher, yunikorn-k8shim, nuclei, kyverno-notation-aws, sftpgo-plugin-aut...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: deck-fips, chartmuseum-fips, kubeflow-katib, secrets-store-csi-driver-provider-aws, deck, docker-compose, gitlab-runner-fips, crossplane-provider-aws-cloudwatchlogs-fips, pulumi-language-yaml, bank-vaults, cass-operator-fips, wal-g, cluster-api-provider-vsphere,...