CLEANSTART-2026-QA16480 Security fix for CVE-2025-61719 applied in: sigstore-scaffolding-fips 0.7.31-r0

Security vulnerability affects the sigstore-scaffolding-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TG34900 Security fix for CVE-2025-66506 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, sigstore-scaffolding 0.7.31-r2

CVE-2025-66506 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: sops, grafana-agent-operator, spegel, smarter-device-manager, ferretdb, minio, falcosidekick, terragrunt, k3d, kaniko, hubble-ui, zarf, k3s, cilium-cli, opentelemetry-collector, k8sgpt, sigstore-scaffolding, tflint, conftest, spicedb, terraform-provider-google, dex,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: docker, neuvector-sigstore-interface, gh, teleport, witness, zarf, cosign, ko, sigstore-scaffolding, tflint, trivy, kubescape, tkn, buildkitd, tekton-chains, flux-source-controller, kyverno-notation-aws, spire-server, trivy-operator, zot, goreleaser, policy-controlle...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, step-issuer, cert-exporter, sigstore-scaffolding, terraform-provider-google, nfs-subdir-external-provisioner, spark-operator, opa, step-ca, flyte, portieris, pulumi, kyverno-notation-aws, flux-image-reflector-controller, grafana-mimir,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, thanos, sops, airflow, grafana-agent-operator, prometheus-operator, restic, terragrunt, up, wal-g, trino, sqlpad, harbor-registry, zarf, tkn, cosign, opentelemetry-collector, k8sgpt, sigstore-scaffolding, rekor, rclone, trivy,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: fixuid, kustomize, mockery, petname, nodetaint, gcsfuse, go-bindata, renovate, sigstore-scaffolding, fulcio, terraform-provider-azuread, aws-sigv4-proxy, dbmate, cargobump, cfssl, timescaledb-parallel-copy, nsc, sbom-scorecard, docker-credential-acr-env, kubecolor,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: grafana-operator, knative-client, fixuid, kustomize, petname, nodetaint, aws-efs-csi-driver, gcsfuse, go-bindata, k8sgpt, sigstore-scaffolding, tflint, gatus, fulcio, terraform-provider-azuread, dbmate, cargobump, cfssl, kubernetes-dashboard-api, harbor-scanner-trivy...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, eksctl, kaf, local-path-provisioner, gh, kube-state-metrics, grype, k3s, k8sgpt, atlantis, sigstore-scaffolding, src, tkn, fulcio, vault-k8s, prometheus-alertmanager, kube-rbac-proxy, flux-image-automation-controller, fq, hugo...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: wuzz, nri-prometheus, grafana-operator, opentofu, aws-flb-kinesis, local-path-provisioner, crossplane-provider-aws-sns, step-issuer, crossplane-provider-aws-lambda, falco-no-driver, kube-state-metrics, docker-cli-buildx, sftpgo-plugin-pubsub, neuvector-scanner,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, nri-prometheus, grafana-operator, eksctl, kaf, kustomize, aws-flb-kinesis, local-path-provisioner, crossplane-provider-aws-sns, prometheus-operator, aws-load-balancer-controller, smarter-device-manager, gh,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, gcsfuse, k8sgpt, sigstore-scaffolding, tflint, gatus, fulcio, terraform-provider-azuread, kyverno-notation-aws, argocd-image-updater, flux-image-automation-controller, dapr, lvm-driver, dbmate, crossplane-provider-aws-memorydb, melange, docker,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: sops, minio, terragrunt, temporal-ui-server, zarf, k3s, cosign, cloudflared, ko, sigstore-scaffolding, rekor, dex, bank-vaults, guac, kubescape, tkn, fulcio, step-ca, weaviate, tekton-chains, flux-source-controller, rabbitmq-messaging-topology-operator, wolfictl,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: falco-no-driver, witness, zarf, falcoctl, cosign, sigstore-scaffolding, tkn, kubescape, undock, podman, portieris, tekton-chains, flux-source-controller, kyverno-notation-aws, slsa-verifier, kots, aactl, gitsign, vexctl, skopeo, buildah, ratify...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, gh, docker-cli-buildx, teleport, witness, zarf, falcoctl, cosign, ko, sigstore-scaffolding, tflint, kubescape, tkn, tekton-chains, flux-source-controller, kyverno-notation-aws, spire-server, zot, goreleaser, policy-controller, skaffold,...