CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: docker-fips, kyverno-notation-aws, tekton-chains, cloudbeat-fips, kyverno-notation-aws-fips, gitsign, crossplane, zarf-fips, cloudbeat, spire-server, falcoctl, slsa-verifier, ko-fips, spire-server-fips, teleport, tflint-fips, goreleaser, kyverno, crossplane-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: docker-fips, kyverno-notation-aws, tekton-chains, cloudbeat-fips, kyverno-notation-aws-fips, gitsign, crossplane, zarf-fips, cloudbeat, spire-server, falcoctl, slsa-verifier, ko-fips, spire-server-fips, teleport, tflint-fips, goreleaser, kyverno, crossplane-fips,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: aactl, crossplane, policy-controller, ko, gitsign, spire-server, tekton-chains, kubescape, neuvector-sigstore-interface, kyverno-notation-aws, zarf, ratify, tkn, trivy-operator, teleport, tflint, kyverno, falcoctl, slsa-verifier, goreleaser...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: aactl, crossplane, policy-controller, ko, gitsign, spire-server, tekton-chains, kubescape, neuvector-sigstore-interface, kyverno-notation-aws, zarf, ratify, tkn, trivy-operator, teleport, tflint, kyverno, falcoctl, slsa-verifier, goreleaser...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: guac, chezmoi, loki, mods, flux-operator, spire-server, snyk-cli, opentofu, cert-manager, external-secrets-operator, rancher-agent, prometheus-operator, step-issuer, vitess, nuclei, zot, wolfictl, gitlab-runner, cosign, witness, kubernetes-dashboard, docker-cli-build...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: malcontent, filebrowser, helm-push, consul-fips, cerbos, pulumi-language-java, jsonnet-bundler, mattermost, sriov-network-device-plugin, task-fips, flux-helm-controller-fips, libnvidia-container-fips, timoni, cilium-envoy, knative-operator-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: malcontent, filebrowser, helm-push, consul-fips, cerbos, pulumi-language-java, jsonnet-bundler, mattermost, sriov-network-device-plugin, task-fips, flux-helm-controller-fips, libnvidia-container-fips, timoni, cilium-envoy, knative-operator-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: nats-server-config-reloader-fips, nats-server-config-reloader, helm-push, kube-vip, nrdot-collector-k8s-fips, consul-fips, amazon-cloudwatch-agent-operator-fips, grpc-health-probe, google-guest-agent, crossplane-provider-aws-ssm, k8s-device-plugin-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cue, grafana-mimir, malcontent, oauth2-proxy-fips, rancher-loglevel, timestamp-authority-fips, filebrowser, helm-push, knative-kafka-broker, cluster-api-ipam-provider-in-cluster, kube-vip, aws-efs-csi-driver-fips, cerbos, consul-fips, gatus, jsonnet-bundler,...

CVE-2026-22772 vulnerabilities

Vulnerabilities for packages: kubescape, cosign, witness, kyverno, falco-no-driver, aactl, zarf, kots, vexctl, falcoctl, slsa-verifier, gitsign, skopeo, tekton-chains, sigstore-scaffolding...

GHSA-59JP-PJ84-45MR vulnerabilities

Vulnerabilities for packages: kubescape, cosign, witness, kyverno, falco-no-driver, aactl, zarf, kots, vexctl, falcoctl, slsa-verifier, gitsign, skopeo, tekton-chains, sigstore-scaffolding...

CVE-2026-22772 vulnerabilities

Vulnerabilities for packages: tekton-chains, gitsign, sigstore-scaffolding-fips, falcoctl, slsa-verifier, cosign, chainctl, sigstore-scaffolding, kots, kyverno, zarf, kubescape, skopeo, vexctl, kyverno-policy-reporter-plugins-kyverno-fips, image-factory, witness, flux-source-controller-fips,...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, addon-resizer, guac, go-licenses, nats-server, golangci-lint, ini-file, loki, gitsign, spire-server, oras, delve, kube-rbac-proxy, crossplane-provider-aws-cloudwatchlogs, vitess, dagdotdev, opentelemetry-operator, wolfictl, amass,...

GHSA-4F8R-QQR9-FQ8J vulnerabilities

Vulnerabilities for packages: aactl, policy-controller, gitsign, spire-server, tekton-chains, kubescape, neuvector-sigstore-interface, apko, zot, wolfictl, sigstore-scaffolding, cosign, rekor, trivy, zarf, tkn, gh, vexctl, falcoctl, slsa-verifier...

CVE-2024-47534 vulnerabilities

Vulnerabilities for packages: aactl, policy-controller, gitsign, spire-server, tekton-chains, kubescape, neuvector-sigstore-interface, apko, zot, wolfictl, sigstore-scaffolding, cosign, rekor, trivy, zarf, tkn, gh, vexctl, falcoctl, slsa-verifier...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: cosign, gh, slsa-verifier...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: cosign-fips, slsa-verifier, cosign, gh...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: cosign, gh, slsa-verifier...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: cosign-fips, slsa-verifier, cosign, gh...

GO-2023-2188 slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier...