GO-2025-3900 vulnerabilities

Vulnerabilities for packages: gitlab-cng, k9s-fips, ratify-fips, istio-fips, beats, gitlab-cng-fips, jitsucom-bulker, zitadel, tkn-fips, mattermost-fips, rancher-security-scan, kyverno, docker-compose-fips, kyverno-notation-aws-fips, neuvector-sigstore-interface-fips, grafana, grafana-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: chartmuseum, argo-cd, helm-set-status, ratify-fips, cluster-api-helm-controller, kube-mgmt-fips, trivy-fips, kargo, helm-operator, gitlab-operator, kyverno-fips, zarf-fips, manifest-tool, trivy-operator-fips, cilium-cli, xeol, gitness, falcoctl-fips,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: policy-controller, ratify-fips, policy-controller-fips, cloudbeat-fips, falcoctl, tkn-fips, chainctl, kyverno-policy-reporter-plugins-kyverno, kyverno-fips, tekton-chains-fips, flux-source-controller, kyverno, kyverno-notation-aws, image-factory-fips,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, policy-controller, rekor-fips, ratify-fips, crossplane, policy-controller-fips, cloudbeat-fips, trivy-fips, tflint, falcoctl, ko-fips, tkn-fips, chainctl, kyverno-policy-reporter-plugins-kyverno, kyverno-policy-reporter-plugins-kyverno-fips,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: rancher-agent, opa-envoy, steampipe, rancher, oras, trivy-operator, gatekeeper, consul-k8s, cilium-cli, headlamp, zarf, linkerd2, ratify, chartmuseum, argo-cd, argocd-image-updater, helm-operator, conftest, zot, tigera-operator, helm, trivy, k8ssandra-client,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-source-controller, tekton-chains, zarf, aactl, buildah, kyverno-notation-aws, podman, kubescape, skopeo, gitsign, ratify, slsa-verifier, undock, kots, witness, kyverno...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: zot, aactl, kyverno-notation-aws, slsa-verifier, kubescape, ratify, crossplane, teleport, trivy, trivy-operator, policy-controller, kyverno...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: falcoctl, tflint, tekton-chains, tkn, zarf, aactl, neuvector-sigstore-interface, kyverno-notation-aws, kubescape, gitsign, crossplane, ratify, trivy, trivy-operator, policy-controller, kyverno...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: tekton-chains, goreleaser, kyverno-notation-aws, crossplane, trivy-operator, policy-controller, falcoctl, tflint, tkn, zarf, kubescape, ratify, teleport, neuvector-sigstore-interface, kyverno, aactl, gitsign, spire-server, ko, slsa-verifier...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: tekton-chains, zot, tkn, aactl, kyverno-notation-aws, slsa-verifier, ratify, crossplane, teleport, vexctl, skaffold, trivy, trivy-operator, ko, kyverno...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tekton-chains, goreleaser, kyverno-notation-aws, crossplane, policy-controller, falcoctl, sigstore-scaffolding, flux-source-controller, tflint, tkn, zarf, kubescape, ratify, teleport, skaffold, docker-cli-buildx, zot, neuvector-sigstore-interface, witness, kyverno,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: tekton-chains, buildah, kyverno-notation-aws, falcoctl, sigstore-scaffolding, flux-source-controller, tkn, zarf, kubescape, ratify, skopeo, podman, undock, witness, kyverno, portieris, falco-no-driver, aactl, gitsign, vexctl, cosign, kots, slsa-verifier...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-source-controller, zot, tkn, goreleaser, aactl, kyverno-notation-aws, gitsign, ratify, teleport, witness, policy-controller, kyverno...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: tekton-chains, goreleaser, kyverno-notation-aws, crossplane, trivy-operator, policy-controller, falcoctl, tflint, flux-source-controller, tkn, zarf, kubescape, ratify, teleport, skaffold, zot, neuvector-sigstore-interface, trivy, witness, kyverno, aactl, gitsign,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tekton-chains, goreleaser, kyverno-notation-aws, crossplane, trivy-operator, policy-controller, falcoctl, sigstore-scaffolding, flux-source-controller, tflint, tkn, zarf, kubescape, ratify, teleport, skaffold, docker-cli-buildx, zot, neuvector-sigstore-interface,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tekton-chains, goreleaser, kyverno-notation-aws, crossplane, trivy-operator, policy-controller, falcoctl, sigstore-scaffolding, flux-source-controller, tflint, tkn, zarf, rekor, kubescape, ratify, teleport, skaffold, zot, neuvector-sigstore-interface, trivy, witness,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, hubble, libnvidia-container, nova, nuclei, kpt, steampipe, helm-push, aws-eks-pod-identity-agent, nri-mysql, guac, docker-cli, yunikorn-k8shim, tkn, controller-gen, terraform-provider-azapi, kuberlr, rancher-system-upgrade-controller,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: rancher-agent, cert-manager-cmctl, harbor, kyverno-notation-aws, nuclei, seaweedfs, cert-manager, rancher, grafana, yunikorn-k8shim, rancher-webhook, flux-source-controller, gitlab-runner, openbao, spqr, trufflehog, dex, ratify, teleport, frp, k6, zot, minio,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: rancher-agent, cert-manager-cmctl, harbor, kyverno-notation-aws, nuclei, seaweedfs, cert-manager, rancher, grafana, yunikorn-k8shim, rancher-webhook, flux-source-controller, gitlab-runner, openbao, spqr, trufflehog, dex, ratify, teleport, frp, k6, zot, minio,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: chartmuseum, sftpgo-plugin-auth, gatekeeper-fips, logstash, packer, ops-agent, fuse-overlayfs-snapshotter, karpenter, trivy-fips, azurefile-csi, cilium, terraform-provider-tls-fips, kubernetes-csi-external-provisioner-fips, redka, request-1279, kpt,...