GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, slsa-verifier, cosign-fips, cosign...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: witness, falcoctl-fips, flux-source-controller-fips, tflint, flux-source-controller, falcoctl, policy-controller, tkn-fips, neuvector-sigstore-interface, gh, skaffold, goreleaser, skaffold-fips, neuvector-sigstore-interface-fips,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, flux-source-controller-fips, flux-source-controller, falcoctl, policy-controller, tkn-fips, neuvector-sigstore-interface, apko, gh, neuvector-sigstore-interface-fips, cosign-fips, kubescape, trivy, sigstore-scaffolding, trivy-fips, cosign, zarf, tkn,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, flux-source-controller, falcoctl, policy-controller, tkn-fips, neuvector-sigstore-interface, apko, skaffold, goreleaser, kubescape, zarf, tkn, spire-server, tekton-chains, slsa-verifier, tekton-chains-fips, wolfictl, zot, policy-controller-fips,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, cosign, slsa-verifier...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, tekton-chains, gitsign, sops, cloudflared, argo-workflows, kots, terragrunt, vexctl, spire-server, kubescape, rekor, aactl, dex, cosign, fulcio, tkn, slsa-verifier, flux-source-controller, oauth2-proxy...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, podman, zarf, kots, tekton-chains, undock, slsa-verifier, aactl, flux-source-controller, falcoctl, witness, kubescape, kyverno, skopeo, buildah, gitsign, ratify, falco-no-driver...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, trivy, slsa-verifier, aactl, teleport, trivy-operator, policy-controller, kyverno, kubescape, crossplane, zot, ratify...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, skaffold, tekton-chains, trivy, tkn, slsa-verifier, vexctl, aactl, teleport, trivy-operator, kyverno, ko, zot, ratify...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: tekton-chains, kyverno, gitsign, goreleaser, teleport, policy-controller, spire-server, kubescape, ko, aactl, trivy-operator, falcoctl, crossplane, ratify, kyverno-notation-aws, zarf, tflint, tkn, slsa-verifier, neuvector-sigstore-interface...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: melange, skaffold, tekton-chains, tkn, slsa-verifier, aactl, flux-source-controller, policy-controller, spire-server, kubescape, ko, cosign, apko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cilium-cli, nfpm, pulumi-language-dotnet, kubernetes-dashboard, gatus, pulumi-language-java, glab, cluster-api-azure-controller, rootlesskit, gptscript, external-dns, buildkitd, crossplane-provider-aws-cloudformation, mattermost, kubescape, ko,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tekton-chains, gh, witness, kyverno, gitsign, goreleaser, docker-cli-buildx, buildkitd, vexctl, teleport, policy-controller, spire-server, kubescape, ko, zot, trivy, aactl, trivy-operator, falcoctl, crossplane, cosign, ratify, kyverno-notation-aws, skaffold, zarf,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: zarf, kots, tekton-chains, slsa-verifier, sigstore-scaffolding, aactl, vexctl, falcoctl, witness, kubescape, skopeo, cosign, gitsign, falco-no-driver...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tekton-chains, gh, witness, gitsign, goreleaser, buildkitd, vexctl, teleport, policy-controller, spire-server, kubescape, ko, zot, rekor, trivy, aactl, trivy-operator, falcoctl, cosign, ratify, kyverno-notation-aws, skaffold, zarf, tflint, tkn, docker,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: argo-events, flux-kustomize-controller, ksops, rook, crossplane-provider-azure-sql, tekton-chains, flux-image-automation-controller, flux-helm-controller, gh, nuclei, opentelemetry-collector-contrib, crossplane-provider-azure-authorization,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, kubescape-server-fips, tflint, falcoctl, policy-controller, tkn-fips, neuvector-sigstore-interface, goreleaser, neuvector-sigstore-interface-fips, kyverno-fips, kubescape, kyverno, zarf, tkn, cloudbeat, spire-server, tekton-chains, tflint-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: falcoctl-fips, kubescape-server-fips, tflint, falcoctl, policy-controller, tkn-fips, neuvector-sigstore-interface, goreleaser, neuvector-sigstore-interface-fips, kyverno-fips, kubescape, kyverno, zarf, tkn, cloudbeat, spire-server, tekton-chains, tflint-fips,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tekton-chains, kyverno, gitsign, goreleaser, teleport, policy-controller, spire-server, kubescape, ko, aactl, trivy-operator, falcoctl, crossplane, ratify, kyverno-notation-aws, zarf, tflint, tkn, slsa-verifier, neuvector-sigstore-interface...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tekton-chains, kyverno, gitsign, goreleaser, teleport, policy-controller, spire-server, kubescape, ko, aactl, trivy-operator, falcoctl, crossplane, ratify, kyverno-notation-aws, zarf, tflint, tkn, slsa-verifier, neuvector-sigstore-interface...