GO-2025-3900 vulnerabilities

Vulnerabilities for packages: kyverno, docker-compose-fips, pluto-fips, ratify-fips, istio-fips, beats-fips, kyverno-notation-aws-fips, neuvector-sigstore-interface-fips, grafana, mattermost-fips, jitsucom-bulker, zitadel, rancher-security-scan, k9s-fips, boring-registry-fips, tkn-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, falcoctl, consul-k8s, cert-manager-cmctl-fips, kubescape, ocm-cli-fips, oras-fips, gogatekeeper, ocm-cli, redpanda-operator, falcoctl-fips, xeol, k8ssandra-client-fips, cloudbeat-fips, steampipe, gitlab-operator, k9s,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno, gitsign, kyverno-policy-reporter-plugins-kyverno, ratify-fips, goreleaser, falcoctl-fips, image-factory-fips, policy-controller-fips, tekton-chains-fips, teleport, kyverno-notation-aws-fips, cloudbeat-fips, tkn, aactl, cloudbeat, kyverno-fips,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno, teleport-operator-fips, kubescape, skaffold, gitsign, cg, crossplane, reports-server, kyverno-policy-reporter-plugins-kyverno, gh, ratify-fips, slsa-verifier, spire-server-fips, ko, trivy-operator, zarf, goreleaser, ko-fips, falcoctl-fips,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: tigera-operator, falcoctl, headlamp, argocd-image-updater, rancher-agent, steampipe, trivy, opa-envoy, conftest, zot, flux-source-controller, k8ssandra-client, kubescape-operator, trivy-operator, grafana-operator, zarf, opa, helm, rancher-fleet, ratify, vcluster,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: ratify, kubescape, teleport, kyverno, kyverno-notation-aws, crossplane, slsa-verifier, trivy, trivy-operator, policy-controller, zot, aactl...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: ratify, kubescape, kyverno, falcoctl, crossplane, kyverno-notation-aws, trivy-operator, trivy, tekton-chains, policy-controller, tflint, neuvector-sigstore-interface, gitsign, zarf, tkn, aactl...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: ratify, kubescape, flux-source-controller, kyverno, falcoctl, kyverno-notation-aws, slsa-verifier, skopeo, witness, tekton-chains, podman, gitsign, buildah, kots, zarf, undock, aactl...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: ratify, teleport, kyverno, kyverno-notation-aws, slsa-verifier, trivy-operator, trivy, tekton-chains, vexctl, skaffold, tkn, zot, ko, aactl...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, crossplane, teleport, slsa-verifier, trivy-operator, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, aactl, ratify, kubescape, goreleaser, tflint, kyverno, kyverno-notation-aws, policy-controller, ko...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: falcoctl, vexctl, falco-no-driver, sigstore-scaffolding, flux-source-controller, slsa-verifier, tekton-chains, gitsign, zarf, tkn, undock, aactl, ratify, kubescape, skopeo, kots, kyverno-notation-aws, cosign, podman, portieris, buildah, witness...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, docker-cli-buildx, vexctl, skaffold, zot, teleport, sigstore-scaffolding, flux-source-controller, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, aactl, ratify, kubescape, goreleaser, tflint, kyverno-notation-aws, cosign,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: ratify, teleport, flux-source-controller, falcoctl, kyverno-notation-aws, witness, goreleaser, policy-controller, gitsign, tkn, zot, aactl...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, vexctl, trivy, skaffold, buildkitd, zot, teleport, flux-source-controller, slsa-verifier, trivy-operator, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, aactl, ratify, kubescape, goreleaser, tflint, kyverno-notation-aws,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: spire-server, docker-cli-buildx, crossplane, falcoctl, vexctl, trivy, skaffold, buildkitd, zot, teleport, sigstore-scaffolding, flux-source-controller, slsa-verifier, trivy-operator, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, docker, aactl,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, vexctl, trivy, skaffold, buildkitd, zot, teleport, sigstore-scaffolding, flux-source-controller, slsa-verifier, trivy-operator, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, rekor, docker, aactl, ratify, kubescape, gorelease...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: docker-cli, kuberlr, rancher-system-agent, rancher-system-upgrade-controller, kube-logging-operator, tkn, rabbitmq-cluster-operator, gcsfuse, nri-consul, nuclei, aws-eks-pod-identity-agent, cluster-api-provider-vsphere, tflint, k8sgpt, cluster-api-helm-controller,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: xeol, telegraf, rancher-agent, cert-manager, seaweedfs, rclone, grafana, zot, teleport, flux-source-controller, terraform, percona-server-mongodb-operator, spqr, external-secrets-operator, openbao, trufflehog, ratify, nuclei, opentofu, sftpgo-plugin-auth, rancher, de...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: xeol, telegraf, rancher-agent, cert-manager, seaweedfs, rclone, grafana, zot, teleport, flux-source-controller, terraform, percona-server-mongodb-operator, spqr, external-secrets-operator, openbao, trufflehog, ratify, nuclei, opentofu, sftpgo-plugin-auth, rancher, de...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, terraform-provider-kubernetes, kubescape, hubble-ui-backend-fips, trillian-fips, gogatekeeper, longhorn-manager-fips, longhorn-engine, crossplane-provider-family-aws-fips, secrets-store-csi-driver-provider-azure, rke2-runtime, keda,...