GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, cosign, slsa-verifier, cosign-fips...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: rekor-fips, vexctl, zarf, gh, ko, policy-controller, flux-source-controller-fips, policy-controller-fips, neuvector-sigstore-interface, image-factory, trivy-fips, image-factory-fips, cosign, docker, teleport-operator-fips, buildkitd, chainctl, ko-fips, crossplane-fip...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: vexctl, zarf, gh, wolfictl, apko, policy-controller, flux-source-controller-fips, policy-controller-fips, neuvector-sigstore-interface, trivy-fips, cosign, tekton-chains, chainctl, rekor, sigstore-scaffolding-fips, falcoctl-fips, neuvector-sigstore-interface-fips,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: vexctl, zarf, wolfictl, apko, ko, policy-controller, policy-controller-fips, neuvector-sigstore-interface, tekton-chains, chainctl, ko-fips, skaffold, falcoctl-fips, tkn-fips, gitsign, flux-source-controller, spire-server, melange, falcoctl, zot, slsa-verifier,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, cosign, slsa-verifier...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, sops, slsa-verifier, fulcio, kots, cloudflared, tkn, kubescape, dex, gitsign, aactl, terragrunt, spire-server, vexctl, cosign, oauth2-proxy, rekor, argo-workflows, tekton-chains, flux-source-controller...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape, kyverno, skopeo, slsa-verifier, witness, gitsign, kots, zarf, undock, podman, ratify, buildah, aactl, flux-source-controller, tekton-chains, falcoctl...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape, kyverno, slsa-verifier, trivy-operator, zot, trivy, teleport, ratify, policy-controller, aactl, crossplane...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: kubescape, slsa-verifier, tekton-chains, apko, melange, ko, flux-source-controller, skaffold, policy-controller, aactl, cosign, spire-server, tkn...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, trivy-operator, ko, tflint, tkn, kubescape, gitsign, neuvector-sigstore-interface, aactl, crossplane, spire-server, policy-controller, falcoctl, kyverno-notation-aws, goreleaser, zarf, teleport, ratify, tekton-chains...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kyverno, slsa-verifier, trivy-operator, vexctl, zot, trivy, ko, teleport, skaffold, ratify, aactl, crossplane, tekton-chains, tkn...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, terraform-provider-tls, prometheus, crossplane-provider-aws-memorydb, pulumi-language-dotnet, opentelemetry-collector, k8sgpt, crossplane-provider-keycloak, traefik, cloud-provider-aws, external-secrets-operator, rancher-machine, tflint,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kubescape, skopeo, slsa-verifier, witness, vexctl, gitsign, sigstore-scaffolding, kots, zarf, falco-no-driver, aactl, cosign, tekton-chains, falcoctl...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, docker-cli-buildx, trivy-operator, zot, buildkitd, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, aactl, crossplane, spire-server, vexctl, trivy, cosign, policy-controller, docker, falcoctl,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, trivy-operator, zot, buildkitd, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, aactl, crossplane, spire-server, vexctl, trivy, cosign, policy-controller, docker, falcoctl, kyverno-notation-aws, witness, rekor,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, scorecard, skopeo, slsa-verifier, sops, opentelemetry-collector, zot, guac, fulcio, buildkitd, src-fingerprint, nuclei, step-ca, flux-image-automation-controller, rook, tkn, kubescape, flux-image-reflector-controller, gh, gitsign,...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: slsa-verifier, zot, ko, tkn, kubescape, gitsign, neuvector-sigstore-interface, skaffold, wolfictl, aactl, spire-server, vexctl, melange, policy-controller, falcoctl, apko, goreleaser, zarf, tekton-chains, flux-source-controller...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: zarf, ko, policy-controller, policy-controller-fips, neuvector-sigstore-interface, kubescape-server, tekton-chains, ko-fips, crossplane-fips, docker-fips, falcoctl-fips, kubescape-server-fips, neuvector-sigstore-interface-fips, tkn-fips, gitsign, kyverno-fips, kyvern...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: zarf, ko, policy-controller, policy-controller-fips, neuvector-sigstore-interface, kubescape-server, tekton-chains, ko-fips, crossplane-fips, docker-fips, falcoctl-fips, kubescape-server-fips, neuvector-sigstore-interface-fips, tkn-fips, gitsign, kyverno-fips, kyvern...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, trivy-operator, ko, tflint, tkn, kubescape, gitsign, neuvector-sigstore-interface, aactl, crossplane, spire-server, policy-controller, falcoctl, kyverno-notation-aws, goreleaser, zarf, teleport, ratify, tekton-chains...