GO-2026-4358 vulnerabilities

Vulnerabilities for packages: goreleaser, kyverno-notation-aws, falcoctl, falco-no-driver, tekton-chains, kubescape, buildkitd, skopeo, slsa-verifier, vexctl, guac, cosign, crossplane, timestamp-authority, spire-server, kots, ratify, aactl, skaffold, tkn, policy-controller, witness, xeol, podman,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: slsa-verifier, vexctl, cosign, gitsign, kots, aactl, falcoctl, zarf, witness, falco-no-driver, tekton-chains, sigstore-scaffolding, kubescape, skopeo...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: goreleaser, kyverno-notation-aws, falcoctl, tekton-chains, kubescape, buildkitd, slsa-verifier, vexctl, cosign, crossplane, spire-server, ratify, aactl, skaffold, tkn, policy-controller, witness, docker-cli-buildx, trivy, gitsign, teleport, zot, ko, kyverno, tflint,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: goreleaser, kyverno-notation-aws, falcoctl, tekton-chains, kubescape, buildkitd, slsa-verifier, vexctl, cosign, crossplane, spire-server, ratify, aactl, skaffold, tkn, policy-controller, witness, trivy, gitsign, teleport, zot, ko, kyverno, tflint, rekor,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: go-md2man, snyk-cli, esbuild, gosu, dive, newrelic-fluent-bit-output, cargobump, kube-rbac-proxy, configmap-reload, gomplate, nri-mysql, yunikorn-k8shim, spire-server, crossplane-provider-azure-managedidentity, kube-metrics-adapter, witness, rancher-loglevel, conftes...

GO-2025-4155 vulnerabilities

Vulnerabilities for packages: go-md2man, snyk-cli, grafana-mimir, nri-f5, opencost, opentelemetry-operator, dive, newrelic-fluent-bit-output, kube-rbac-proxy, gomplate, nri-mysql, spire-server, kube-metrics-adapter, rancher-loglevel, minio-operator, glab, grafana-image-renderer,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: goreleaser, kyverno-notation-aws, falcoctl, tekton-chains, kubescape, buildkitd, slsa-verifier, vexctl, cosign, crossplane, spire-server, ratify, aactl, skaffold, tkn, policy-controller, witness, trivy, gitsign, teleport, zot, ko, kyverno, tflint, rekor,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: apko, falcoctl, tekton-chains, kubescape, slsa-verifier, vexctl, cosign, spire-server, aactl, tkn, policy-controller, wolfictl, trivy, gitsign, zot, melange, rekor, flux-source-controller, zarf, neuvector-sigstore-interface, sigstore-scaffolding, gh...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: snyk-cli, grafana-mimir, opencost, terraform-provider-pagerduty, opentelemetry-operator, kube-rbac-proxy, yunikorn-k8shim, gomplate, spire-server, crossplane-provider-azure-managedidentity, crossplane-provider-aws-kms, conftest, minio-operator, glab,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, grafana-mimir, opencost, pulumi-kubernetes-operator, opentelemetry-operator, tempo, mc, grafana-agent-operator, gomplate, terragrunt, temporal-server, spire-server, crossplane-provider-azure-managedidentity, kube-metrics-adapter, skaffold,...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: snyk-cli, grafana-mimir, terraform-provider-pagerduty, opentelemetry-operator, dive, kube-rbac-proxy, yunikorn-k8shim, gomplate, spire-server, crossplane-provider-azure-managedidentity, kube-metrics-adapter, crossplane-provider-aws-kms, conftest, minio-operator, glab...

GO-2024-2888 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, go-md2man, mage, snyk-cli, grafana-mimir, nri-f5, gosu, dive, newrelic-fluent-bit-output, libnvidia-container, configmap-reload, gomplate, nri-mysql, spire-server, conftest, glab, kubernetes-dashboard-metrics-scraper, kube-logging-operator,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, go-md2man, mage, snyk-cli, esbuild, grafana-mimir, nri-f5, gosu, dive, newrelic-fluent-bit-output, kube-rbac-proxy, libnvidia-container, configmap-reload, gomplate, nri-mysql, spire-server, crossplane-provider-azure-managedidentity,...

GO-2025-3485 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, temporal-ui-server, grafana-mimir, kube-rbac-proxy, gomplate, terragrunt, spire-server, steampipe, skaffold, tkn, policy-controller, dagdotdev, trivy, rabbitmq-messaging-topology-operator, argocd-image-updater, gatus, vault-benchmark, kargo, melange,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, crossplane-provider-family-azure, goreleaser, snyk-cli, crossplane-provider-azure-storage, grafana-mimir, bank-vaults, opentelemetry-collector-contrib, falcoctl, k3s, pulumi-kubernetes-operator, kubevela, tekton-chains, kubescape, buildkitd...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, go-md2man, mage, esbuild, nri-f5, gosu, terraform-provider-pagerduty, dive, newrelic-fluent-bit-output, kube-rbac-proxy, configmap-reload, gomplate, nri-mysql, spire-server, crossplane-provider-azure-managedidentity,...

CLEANSTART-2026-CM12732 Security fixes in sigstore-scaffolding 0.7.31-r1

Package sigstore-scaffolding version 0.7.31-r1 fixes 2 vulnerabilities: ghsa-fcv2-xgw5-pqxf, ghsa-jqc5-w2xx-5vq4...

CLEANSTART-2026-QE68045 Security fixes in sigstore-scaffolding 0.7.31-r0

Package sigstore-scaffolding version 0.7.31-r0 fixes 4 vulnerabilities: ghsa-59jp-pj84-45mr, ghsa-846p-jg2w-w324, ghsa-fphv-w9fq-2525, ghsa-4qg8-fj49-pxjh...

GHSA-XRMC-C5CG-RV7X SafeInstall agent guard shell parsing can miss raw package execution

Summary SafeInstall CLI through 0.10.1 can fail to recognize some package-manager and registry-runner commands in its agent guard. Case-variant launcher names, leading file-descriptor redirections, and supported shell wrappers with options can cause a raw install command to receive no guard...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: kubewatch, newrelic-k8s-metadata-injection, actions-runner-controller, goreleaser, metacontroller, supercronic, victoriametrics-cluster, apko, oras, envoy-ratelimit, external-secrets-operator, fluxcd-kustomize-mutating-webhook, dgraph, malcontent, nodetaint,...