122 matches found
CLEANSTART-2026-RD73080 Security fix for GHSA-cgrx-mc8f-2prm applied in: eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, kaniko 1.24.0-r0, kaniko-fips 1.24.0-r0, local-static-provisioner 2.6.0-r1, local-static-provisioner-fips 2.6.0-r1, local-static-provisioner-fips 2.7.0-r1, prometheus-node-exporter 1.8.0-r3, prometheus-node-exporter-fips 1.10.2-r1, prometheus-node-exporter-fips 1.10.2-r3, prometheus-node-exporter-fips 1.7.0-r2, prometheus-node-exporter-fips 1.8.2-r2, prometheus-node-exporter-fips 1.9.1-r1, runc 1.1.14-r0, skaffold 2.16.1-r1, trivy-fips 0.67.2-r0, velero 1.17.0-r0
GHSA-cgrx-mc8f-2prm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
GO-2026-6253 vulnerabilities
Vulnerabilities for packages: kaniko, falcoctl, skaffold, buildah, docker-cli-buildx, openbao, kubescape, telegraf, buildkitd, podman...
GHSA-HFG8-HC9C-6C3H vulnerabilities
Vulnerabilities for packages: kaniko, falcoctl, skaffold, buildah, docker-cli-buildx, openbao, kubescape, telegraf, buildkitd, podman...
CVE-2026-17106 vulnerabilities
Vulnerabilities for packages: kaniko, falcoctl, skaffold, buildah, docker-cli-buildx, openbao, kubescape, telegraf, buildkitd, podman...
GO-2026-6162 vulnerabilities
Vulnerabilities for packages: ko, kyverno, trivy-operator, kubescape, kyverno-notation-aws, goreleaser, tkn, tekton-chains, crossplane, falcoctl, policy-controller, aactl, neuvector-sigstore-interface, trivy, zot, spire-server, skaffold, flux-source-controller, zarf...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: kwok, terraform-provider-azapi, ko, azure-service-operator, crossplane-provider-keycloak, tetragon, contour, node-feature-discovery, step, docker-machine-driver-linode, tekton-chains, cilium-certgen, spark-operator, kubeflow-pipelines, vexctl, openbao-k8s, flux,...
GO-2026-4859 vulnerabilities
Vulnerabilities for packages: kaniko-fips, docker-cli-buildx-fips, trivy-operator, kubescape-server-fips, kaniko, osv-scanner, guac, docker-compose, cloudbeat, kubescape, conftest, trivy, buildah-fips, trivy-fips, docker-compose-fips, trivy-operator-fips, cloudbeat-fips, livekit-cli,...
GO-2024-2492 vulnerabilities
Vulnerabilities for packages: guac, docker, kubescape, conftest-fips, conftest, scorecard, trivy, buildkitd, skaffold, kaniko, zot...
GO-2026-4858 vulnerabilities
Vulnerabilities for packages: kaniko-fips, docker-cli-buildx-fips, trivy-operator, kubescape-server-fips, kaniko, osv-scanner, guac, docker-compose, cloudbeat, kubescape, conftest, trivy, buildah-fips, trivy-fips, docker-compose-fips, trivy-operator-fips, cloudbeat-fips, livekit-cli,...
GO-2024-2493 vulnerabilities
Vulnerabilities for packages: guac, docker, kubescape, conftest-fips, conftest, scorecard, trivy, buildkitd, skaffold, kaniko, zot...
GO-2024-2497 vulnerabilities
Vulnerabilities for packages: guac, docker, kubescape, conftest-fips, conftest, scorecard, trivy, buildkitd, skaffold, kaniko, zot...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: runc, skopeo, kaniko, nerdctl, kubescape, kots, trivy, syft, cadvisor, wolfictl, newrelic-infrastructure-agent, ctop, k3s, buildkitd, kubernetes, k3d, docker, zarf, podman, skaffold, k9s, zot, grype...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: kaniko, helm, cilium-cli, gitness, flux-helm-controller, fuse-overlayfs-snapshotter, helm-push, kubescape, kots, kubevela, trivy, up, newrelic-infrastructure-agent, ctop, buildkitd, melange, k3d, eksctl, k8sgpt, skaffold, flux-source-controller, zot, grype...
GO-2024-2494 vulnerabilities
Vulnerabilities for packages: guac, docker, kubescape, conftest-fips, conftest, scorecard, trivy, buildkitd, skaffold, kaniko, zot...
GO-2025-4100 vulnerabilities
Vulnerabilities for packages: rancher-agent, containerd, helm, kaniko, cilium-cli, cloudbeat, kubescape, gitlab-operator, steampipe, envoy-gateway, kubescape-operator, manifest-tool, newrelic-infrastructure-agent, datadog-agent, docker-cli-buildx, gitlab-operator-fips, dagger,...
GO-2025-4108 vulnerabilities
Vulnerabilities for packages: rancher-agent, containerd, helm, kaniko, cilium-cli, cloudbeat, kubescape, gitlab-operator, steampipe, envoy-gateway, kubescape-operator, manifest-tool, newrelic-infrastructure-agent, datadog-agent, docker-cli-buildx, gitlab-operator-fips, dagger,...
GO-2023-1795 vulnerabilities
Vulnerabilities for packages: skaffold, aactl...
GO-2026-5336 vulnerabilities
Vulnerabilities for packages: gitea, nuclei, mapotf-fips, argo-cd, chainloop-cli-fips, argo-cd-fips, argo-workflows-fips, kaniko, redpanda-console, gomplate-fips, cloudbeat, kubescape, chainctl-fips, steampipe, gptscript, gitsign, external-secrets-operator, coder, kyverno-fips, zarf-fips,...
GO-2024-2719 vulnerabilities
Vulnerabilities for packages: tkn-fips, tekton-chains-fips, kubescape, ko, policy-controller-fips, aactl, gitsign, chainctl, slsa-verifier, wolfictl, apko, vexctl, tekton-chains, policy-controller, goreleaser, spire-server-fips, melange, tkn, ko-fips, zarf, falcoctl, falcoctl-fips,...