GO-2025-4192 vulnerabilities

Vulnerabilities for packages: skaffold, sigstore-scaffolding, goreleaser, tekton-chains, falcoctl, aactl, neuvector-sigstore-interface, tkn, teleport, witness, vexctl, gitsign, ko, policy-controller, cosign, tflint, kyverno, kyverno-notation-aws, kubescape, zot, ratify, docker-cli-buildx, zarf,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: skaffold, podman, buildkitd, slsa-verifier, sigstore-scaffolding, goreleaser, buildah, tekton-chains, timestamp-authority, falcoctl, aactl, guac, neuvector-sigstore-interface, tkn, rekor, witness, fulcio, vexctl, undock, gitsign, trivy, skopeo, ko, policy-controller,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: skaffold, buildkitd, slsa-verifier, goreleaser, tekton-chains, falcoctl, aactl, neuvector-sigstore-interface, tkn, teleport, witness, vexctl, gitsign, trivy, ko, policy-controller, cosign, tflint, trivy-operator, kyverno, kyverno-notation-aws, kubescape, zot, ratify,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: skaffold, buildkitd, slsa-verifier, sigstore-scaffolding, goreleaser, tekton-chains, falcoctl, docker, aactl, neuvector-sigstore-interface, tkn, teleport, witness, vexctl, gitsign, trivy, ko, policy-controller, cosign, tflint, trivy-operator, kyverno,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: skaffold, buildkitd, slsa-verifier, sigstore-scaffolding, goreleaser, tekton-chains, falcoctl, docker, aactl, neuvector-sigstore-interface, tkn, rekor, teleport, witness, vexctl, gitsign, trivy, ko, policy-controller, cosign, tflint, trivy-operator, kyverno,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: skaffold, buildkitd, slsa-verifier, sigstore-scaffolding, goreleaser, tekton-chains, falcoctl, docker, aactl, neuvector-sigstore-interface, tkn, rekor, teleport, witness, vexctl, gitsign, trivy, ko, policy-controller, cosign, tflint, trivy-operator, kyverno,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: chisel, commercial-expanso-edge, flux-image-automation-controller-fips, rancher, flux-image-automation-controller, drone-fips, gitea, aactl, mattermost, skaffold-fips, k9s, argocd-image-updater-fips, gitlab-rails-ce-fips, kubescape-server-fips, tigera-operator,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: chisel, crossplane-provider-aws-ram-fips, podman-fips, terraform-provider-azapi, longhorn-cli, crossplane-provider-aws-elbv2-fips, buildah, syft-fips, cluster-api-azure-controller, crossplane-provider-aws-networkmanager-fips, crossplane-provider-aws-route53resolver,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: chisel, crossplane-provider-aws-ram-fips, podman-fips, terraform-provider-azapi, longhorn-cli, crossplane-provider-aws-elbv2-fips, buildah, syft-fips, cluster-api-azure-controller, crossplane-provider-aws-networkmanager-fips, crossplane-provider-aws-route53resolver,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: skaffold, podman, prometheus, openbao, flux-image-automation-controller, nerdctl, kubernetes-dashboard, osv-scanner, opentofu, telegraf, tkn, flux-kustomize-controller, istio, atlantis, containerd, nuclei, pulumi-kubernetes-operator, chisel, melange,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: skaffold, podman, prometheus, openbao, flux-image-automation-controller, nerdctl, docker-machine-driver-linode, kubernetes-dashboard, gitlab-pages, osv-scanner, opentofu, telegraf, tkn, flux-kustomize-controller, istio, atlantis, terraform-provider-azapi, containerd,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: skaffold, podman, prometheus, openbao, flux-image-automation-controller, nerdctl, kubernetes-dashboard, osv-scanner, opentofu, telegraf, istio, containerd, nuclei, pulumi-kubernetes-operator, melange, opentelemetry-collector, cilium-cli, trivy-operator, cert-manager,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: chartmuseum, crossplane, kubevela, rancher, ctop, chaos-mesh, skaffold-fips, kaniko-fips, cluster-api-helm-controller-fips, docker-compose-fips, fuse-overlayfs-snapshotter, syft-fips, k9s, helm-fips, gitlab-rails-ce-fips, kubescape-server-fips, kgateway-fips,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: skaffold, k9s, grafana-alloy, apko, flux-image-automation-controller, goreleaser, argo-cd, terragrunt, rancher-fleet, syft, pulumi-language-dotnet, act, steampipe, osv-scanner, tfsec, guac, kargo, scorecard, dagger, gptscript, argo-events, argocd-image-updater,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: skaffold, k9s, grafana-alloy, apko, flux-image-automation-controller, goreleaser, argo-cd, terragrunt, rancher-fleet, syft, pulumi-language-dotnet, act, steampipe, osv-scanner, tfsec, guac, kargo, scorecard, dagger, gptscript, argo-events, argocd-image-updater,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: skaffold, k9s, grafana-alloy, apko, flux-image-automation-controller, goreleaser, argo-cd, terragrunt, rancher-fleet, syft, pulumi-language-dotnet, act, steampipe, osv-scanner, tfsec, guac, kargo, scorecard, dagger, gptscript, argo-events, argocd-image-updater,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: skaffold, k9s, grafana-alloy, apko, flux-image-automation-controller, goreleaser, argo-cd, terragrunt, rancher-fleet, syft, pulumi-language-dotnet, act, steampipe, osv-scanner, tfsec, guac, kargo, scorecard, dagger, gptscript, argo-events, argocd-image-updater,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gptscript, crossplane, gitlab-runner, flux-image-automation-controller-fips, kubevela, chainloop-cli, bom, flux-image-automation-controller, gitea, pulumi-language-java, skaffold-fips, kaniko-fips, trufflehog-fips, syft-fips, redpanda-console, k9s,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: gptscript, crossplane, gitlab-runner, flux-image-automation-controller-fips, kubevela, chainloop-cli, bom, flux-image-automation-controller, gitea, pulumi-language-java, skaffold-fips, kaniko-fips, trufflehog-fips, syft-fips, redpanda-console, k9s,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gptscript, crossplane, gitlab-runner, flux-image-automation-controller-fips, kubevela, chainloop-cli, bom, flux-image-automation-controller, gitea, pulumi-language-java, skaffold-fips, kaniko-fips, trufflehog-fips, syft-fips, redpanda-console, k9s,...