CLEANSTART-2026-QA16480 Security fix for CVE-2025-61719 applied in: sigstore-scaffolding-fips 0.7.31-r0

Security vulnerability affects the sigstore-scaffolding-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TG34900 Security fix for CVE-2025-66506 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, sigstore-scaffolding 0.7.31-r2

CVE-2025-66506 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, terragrunt, cloudnative-pg, rqlite, dbmate, temporal, zarf, spire-server, kaniko, step-ca, conftest, opentelemetry-collector-contrib, restic, dex, spicedb, vcluster, kots, sops, kubernetes-csi-driver-hostpath, step, k3s, cert-manager-cmctl,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: trivy-operator, falcoctl, zarf, spire-server, kubescape, witness, teleport, flux-source-controller, trivy, gitsign, neuvector-sigstore-interface, tekton-chains, kyverno-notation-aws, zot, policy-controller, buildkitd, tflint, goreleaser, sigstore-scaffolding, tkn,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, sriov-network-device-plugin, cluster-proportional-autoscaler, step-ca, caddy, flux-image-reflector-controller, step, pulumi-language-yaml, flyte, opa-envoy, pulumi-kubernetes-operator, terraform-provider-google, kyverno-notation-aws,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, git-credential-oauth, kube-bench, kbld, custom-pod-autoscaler, ini-file, k6, helm-set-status, gcsfuse, speedtest-go, spqr, prometheus-pushgateway, sops, vault-env, kubelet-csr-approver, conjur-cli, nodetaint, cert-manager-cmctl,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: terragrunt, falcoctl, zarf, spire-server, boring-registry, step-ca, kubescape, argo-workflows, flux-image-reflector-controller, opentelemetry-collector-contrib, rekor, restic, timestamp-authority, chezmoi, step, sops, bank-vaults, fluent-bit-plugin-loki, hugo-extende...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, gcsfuse, speedtest-go, spqr, conjur-cli, pulumi-kubernetes-operator, gosu, vertical-pod-autoscaler, smokescreen, docker-cli, cargobump, cluster-api-gcp-controller, dask-gateway, kube-metrics-adapter, kafkaexporter, kustomize,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, git-credential-oauth, kube-bench, kbld, custom-pod-autoscaler, ini-file, k6, helm-set-status, gcsfuse, speedtest-go, spqr, prometheus-pushgateway, sops, vault-env, kubelet-csr-approver, conjur-cli, nodetaint, cert-manager-cmctl,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, git-credential-oauth, kube-bench, kbld, custom-pod-autoscaler, ini-file, k6, helm-set-status, gcsfuse, speedtest-go, spqr, prometheus-pushgateway, sops, vault-env, kubelet-csr-approver, conjur-cli, nodetaint, cert-manager-cmctl,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, git-credential-oauth, kube-bench, kbld, custom-pod-autoscaler, ini-file, k6, helm-set-status, gcsfuse, speedtest-go, spqr, prometheus-pushgateway, sops, vault-env, kubelet-csr-approver, conjur-cli, nodetaint, cert-manager-cmctl,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, git-credential-oauth, kube-bench, kbld, custom-pod-autoscaler, ini-file, k6, helm-set-status, gcsfuse, speedtest-go, spqr, prometheus-pushgateway, sops, vault-env, kubelet-csr-approver, conjur-cli, nodetaint, cert-manager-cmctl,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, overmind, flannel-cni-plugin, aws-flb-cloudwatch, gcsfuse, speedtest-go, spqr, newrelic-nri-kube-events, fuse-overlayfs-snapshotter, gosu, vertical-pod-autoscaler, docker-cli, cargobump, sftpgo, dask-gateway, percona-server-mongodb-operator,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: kubescape, dex, sops, bank-vaults, crossplane-provider-azure-authorization, libssh, gomplate, buildkitd, cilium-cli, certificate-transparency, kubeflow-pipelines, sigstore-scaffolding, amass, flux-kustomize-controller, cloudflared, docker-credential-acr-env, helm-pus...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: flannel, rancher, kube-bench, amazon-k8s-cni, zarf, crossplane-provider-aws-cloudwatchlogs, kbld, kaniko, calico, kubescape, aws-flb-cloudwatch, speedtest-go, spqr, sops, bank-vaults, cluster-api-ipam-provider-in-cluster, crossplane-provider-azure-authorization,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: flannel, kube-bench, zarf, crossplane-provider-aws-cloudwatchlogs, supercronic, kaniko, kubescape, dex, gcsfuse, prometheus-pushgateway, sops, bank-vaults, crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, hugo-extended, fuse-overlayfs-snapshotter...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, knative-operator, zarf, datadog-operator, kubescape, gcsfuse, spqr, fuse-overlayfs-snapshotter, pulumi-kubernetes-operator, crossplane-provider-aws-sns, ksops, db-operator, terraform-provider-pagerduty, cluster-api-gcp-controller,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: terragrunt, rabbitmq-messaging-topology-operator, temporal, falcoctl, zarf, nerdctl, spire-server, step-ca, kubescape, argo-workflows, caddy, skopeo, dex, rekor, timestamp-authority, kots, kubernetes-dashboard, bank-vaults, sops, step, flux-source-controller, k3s,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: falcoctl, zarf, kubescape, ratify, falco-no-driver, skopeo, kots, witness, flux-source-controller, podman, gitsign, undock, tekton-chains, kyverno-notation-aws, slsa-verifier, aactl, sigstore-scaffolding, tkn, portieris, vexctl, cosign, buildah...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: falcoctl, zarf, spire-server, kubescape, ratify, witness, teleport, docker-cli-buildx, flux-source-controller, gitsign, neuvector-sigstore-interface, tekton-chains, kyverno-notation-aws, zot, aactl, policy-controller, tflint, goreleaser, sigstore-scaffolding, tkn, gh...