GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: cosign, crossplane, goreleaser, kyverno-notation-aws, vexctl, trivy-operator, sigstore-scaffolding, flux-source-controller, teleport, ko, gh, policy-controller, zot, falcoctl, gitsign, tekton-chains, docker, tkn, tflint, kyverno, ratify, kubescape, spire-server,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: cosign, crossplane, goreleaser, kyverno-notation-aws, vexctl, trivy-operator, sigstore-scaffolding, flux-source-controller, teleport, ko, gh, policy-controller, zot, falcoctl, gitsign, tekton-chains, docker, tkn, tflint, kyverno, ratify, kubescape, spire-server,...

Ratify 授权问题漏洞

Ratify is an artifact approval framework CNCF sandbox from Ratify open source. An authorization issue vulnerability exists in Ratify version 1.2.3 and prior to version 1.3.2 that stems from the Azure Authentication Provider not verifying that the target registry is ACR, which could lead to misuse...