GO-2024-3116 vulnerabilities

Vulnerabilities for packages: cosign, gh, cosign-fips, slsa-verifier...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: buildkitd-fips, kubescape, kyverno-fips, teleport, tflint-fips, flux-source-controller-fips, trivy-operator-fips, rekor-fips, skaffold-fips, neuvector-sigstore-interface, buildkitd, slsa-verifier, witness, kyverno-policy-reporter-plugins-kyverno, falcoctl-fips, aactl...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: kubescape, flux-source-controller-fips, neuvector-sigstore-interface, slsa-verifier, falcoctl-fips, aactl, zot, tkn, chainctl, rekor, apko, melange, sigstore-scaffolding, policy-controller-fips, sigstore-scaffolding-fips, tkn-fips, trivy, tekton-chains-fips,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: kubescape, neuvector-sigstore-interface, slsa-verifier, falcoctl-fips, aactl, ko, zot, tkn, chainctl, apko, melange, goreleaser, skaffold, policy-controller-fips, tkn-fips, tekton-chains-fips, tekton-chains, gitsign, policy-controller, vexctl, zarf, spire-server,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: cosign, gh, slsa-verifier...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: crossplane, policy-controller, kubescape, kyverno-notation-aws, ratify, kyverno, slsa-verifier, trivy, zot, trivy-operator, aactl, teleport...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kubescape, kyverno-notation-aws, zarf, undock, skopeo, falcoctl, falco-no-driver, podman, flux-source-controller, kyverno, ratify, slsa-verifier, tekton-chains, buildah, gitsign, witness, aactl, kots...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: skaffold, kyverno-notation-aws, tkn, ratify, kyverno, slsa-verifier, trivy, zot, ko, tekton-chains, vexctl, trivy-operator, aactl, teleport...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, zarf, goreleaser, tkn, kyverno, slsa-verifier, neuvector-sigstore-interface, gitsign, tflint, ratify, ko, policy-controller, teleport, crossplane, kubescape, falcoctl, spire-server, tekton-chains, trivy-operator, aactl...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: skaffold, policy-controller, cosign, apko, kubescape, tkn, tekton-chains, flux-source-controller, slsa-verifier, spire-server, ko, melange, aactl...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: rekor, tkn, slsa-verifier, gitsign, oauth2-proxy, sops, dex, cosign, fulcio, kubescape, terragrunt, flux-source-controller, cloudflared, spire-server, argo-workflows, flux-kustomize-controller, tekton-chains, vexctl, aactl, kots...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, sealed-secrets, crossplane-provider-aws-eks, atlantis, scorecard, sops, eksctl, argo-events, docker-machine-driver-linode,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: cosign, kubescape, vexctl, zarf, skopeo, falcoctl, falco-no-driver, slsa-verifier, tekton-chains, sigstore-scaffolding, gitsign, witness, aactl, kots...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: skaffold, gh, kyverno-notation-aws, zarf, goreleaser, tkn, kyverno, slsa-verifier, neuvector-sigstore-interface, docker-cli-buildx, gitsign, tflint, ratify, trivy, ko, sigstore-scaffolding, policy-controller, cosign, buildkitd, witness, teleport, crossplane, kubescap...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: skaffold, gh, kyverno-notation-aws, rekor, zarf, goreleaser, tkn, slsa-verifier, neuvector-sigstore-interface, gitsign, tflint, ratify, trivy, ko, sigstore-scaffolding, policy-controller, cosign, buildkitd, witness, teleport, kubescape, docker, falcoctl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: terraform, gh, glab, kubevela, rekor, zarf, pulumi-kubernetes-operator, goreleaser, tkn, slsa-verifier, pulumi, crossplane-provider-azure-storage, neuvector-sigstore-interface, gitsign, src-fingerprint, scorecard, bank-vaults, opentelemetry-collector, gomplate,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: kubescape, teleport, kyverno-fips, tflint-fips, trivy-operator-fips, kubescape-server, neuvector-sigstore-interface, slsa-verifier, falcoctl-fips, aactl, ko, zarf-fips, tbot, kyverno-notation-aws, tkn, kyverno-notation-aws-fips, goreleaser, tflint, cloudbeat,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kubescape, teleport, kyverno-fips, tflint-fips, trivy-operator-fips, kubescape-server, neuvector-sigstore-interface, slsa-verifier, falcoctl-fips, aactl, ko, zarf-fips, tbot, kyverno-notation-aws, tkn, kyverno-notation-aws-fips, goreleaser, tflint, cloudbeat,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, zarf, goreleaser, tkn, kyverno, slsa-verifier, neuvector-sigstore-interface, gitsign, tflint, ratify, ko, policy-controller, teleport, crossplane, kubescape, falcoctl, spire-server, tekton-chains, trivy-operator, aactl...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, zarf, goreleaser, tkn, kyverno, slsa-verifier, neuvector-sigstore-interface, gitsign, tflint, ratify, ko, policy-controller, teleport, crossplane, kubescape, falcoctl, spire-server, tekton-chains, trivy-operator, aactl...