GO-2024-3116 vulnerabilities

Vulnerabilities for packages: cosign-fips, gh, cosign, slsa-verifier...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, policy-controller-fips, cloudbeat-fips, teleport, trivy-fips, image-factory-fips, ratify, docker, goreleaser, gitsign, tekton-chains, chainctl, neuvector-sigstore-interface, vexctl, buildkitd-fips, falcoctl-fips, aactl, ratify-fips,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, policy-controller-fips, trivy-fips, gitsign, tekton-chains, chainctl, neuvector-sigstore-interface, apko, vexctl, falcoctl-fips, aactl, tkn-fips, zot, zarf, slsa-verifier, melange, sigstore-scaffolding, sigstore-scaffolding-fips, rekor,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, goreleaser, gitsign, tekton-chains, chainctl, neuvector-sigstore-interface, apko, vexctl, falcoctl-fips, aactl, tkn-fips, zot, zarf, slsa-verifier, melange, spire-server-fips, ko, skaffold, policy-controller, tekton-chains-fips, ko-fips, tkn,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign, gh...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: cosign, flux-source-controller, oauth2-proxy, flux-kustomize-controller, slsa-verifier, dex, kots, kubescape, cloudflared, terragrunt, spire-server, rekor, vexctl, tkn, gitsign, aactl, argo-workflows, fulcio, sops, tekton-chains...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: aactl, kyverno, slsa-verifier, policy-controller, ratify, kubescape, trivy-operator, zot, kyverno-notation-aws, trivy, crossplane, teleport...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: aactl, kyverno, slsa-verifier, skopeo, flux-source-controller, kots, falcoctl, ratify, kubescape, undock, witness, podman, zarf, buildah, kyverno-notation-aws, tekton-chains, gitsign...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: aactl, ko, kyverno, slsa-verifier, tkn, ratify, zot, trivy-operator, skaffold, vexctl, kyverno-notation-aws, trivy, crossplane, teleport, tekton-chains...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: policy-controller, tflint, kyverno-notation-aws, crossplane, teleport, slsa-verifier, kubescape, ko, spire-server, ratify, neuvector-sigstore-interface, tkn, gitsign, aactl, kyverno, falcoctl, goreleaser, zarf, trivy-operator, tekton-chains...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: aactl, ko, melange, policy-controller, cosign, flux-source-controller, slsa-verifier, spire-server, kubescape, apko, skaffold, tkn, tekton-chains...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cert-manager, knative-serving, cosign, flux-source-controller, k3s, nerdctl, chisel, policy-controller, crossplane-provider-aws-dynamodb, external-secrets-operator, istio, prometheus-operator, pulumi-kubernetes-operator, crossplane-provider-aws-memorydb, wal-g,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: aactl, slsa-verifier, skopeo, cosign, kots, falcoctl, kubescape, witness, zarf, sigstore-scaffolding, falco-no-driver, vexctl, tekton-chains, gitsign...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: policy-controller, cosign, flux-source-controller, tflint, sigstore-scaffolding, kyverno-notation-aws, crossplane, teleport, slsa-verifier, docker-cli-buildx, kubescape, ko, spire-server, ratify, neuvector-sigstore-interface, skaffold, vexctl, tkn, docker, gh, gitsig...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: policy-controller, cosign, flux-source-controller, tflint, sigstore-scaffolding, kyverno-notation-aws, crossplane, teleport, slsa-verifier, kubescape, ko, spire-server, ratify, rekor, neuvector-sigstore-interface, skaffold, vexctl, tkn, docker, gh, gitsign, aactl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: policy-controller, cosign, flux-source-controller, k3s, rabbitmq-messaging-topology-operator, flux-kustomize-controller, flux-image-reflector-controller, opentelemetry-collector-contrib, sigstore-scaffolding, pulumi-kubernetes-operator, flux-notification-controller,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, cloudbeat-fips, teleport, ratify, goreleaser, gitsign, tekton-chains, docker-fips, kubescape-server, neuvector-sigstore-interface, falcoctl-fips, aactl, ratify-fips, tkn-fips, trivy-operator, zarf, crossplane-fips, tflint-fips, chainctl-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: policy-controller-fips, cloudbeat-fips, teleport, ratify, goreleaser, gitsign, tekton-chains, docker-fips, kubescape-server, neuvector-sigstore-interface, falcoctl-fips, aactl, ratify-fips, tkn-fips, trivy-operator, zarf, crossplane-fips, tflint-fips, chainctl-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: policy-controller, tflint, kyverno-notation-aws, crossplane, teleport, slsa-verifier, kubescape, ko, spire-server, ratify, neuvector-sigstore-interface, tkn, gitsign, aactl, kyverno, falcoctl, goreleaser, zarf, trivy-operator, tekton-chains...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: policy-controller, tflint, kyverno-notation-aws, crossplane, teleport, slsa-verifier, kubescape, ko, spire-server, ratify, neuvector-sigstore-interface, tkn, gitsign, aactl, kyverno, falcoctl, goreleaser, zarf, trivy-operator, tekton-chains...