CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, goreleaser, aactl, zarf, ko, tkn, policy-controller-fips, cloudbeat-fips, tflint-fips, kubescape-server, kubescape-server-fips, tflint, spire-server, zarf-fips, slsa-verifier, neuvector-sigstore-interface, tkn-fips, cloudbeat, kyverno-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, goreleaser, aactl, zarf, ko, tkn, policy-controller-fips, cloudbeat-fips, tflint-fips, kubescape-server, kubescape-server-fips, tflint, spire-server, zarf-fips, slsa-verifier, neuvector-sigstore-interface, tkn-fips, cloudbeat, kyverno-fips,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kyverno-notation-aws, crossplane, ratify, trivy-operator, gitsign, teleport, policy-controller, goreleaser, tkn, kubescape, falcoctl, zarf, spire-server, kyverno, ko, tflint, neuvector-sigstore-interface, aactl, tekton-chains...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: slsa-verifier, kyverno-notation-aws, crossplane, ratify, trivy-operator, gitsign, teleport, policy-controller, goreleaser, tkn, kubescape, falcoctl, zarf, spire-server, kyverno, ko, tflint, neuvector-sigstore-interface, aactl, tekton-chains...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, terraform-provider-tls, eksctl, chezmoi, nuclei, loki, cert-manager, age, flux-notification-controller, prometheus-operator, sops, cilium, crossplane-provider-azure-managedidentity, k8sgpt, tkn, pulumi-language-java, fscrypt,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, goreleaser, commercial-chainloop-cli, azurefile-csi-fips, ko, kubevela-fips, helm, consul-fips, etcd, filebrowser, helm-fips, vault-csi-provider, backup-restore-operator-fips, fscrypt, spegel, argo-workflows, k8ssandra-client,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, goreleaser, commercial-chainloop-cli, azurefile-csi-fips, ko, kubevela-fips, helm, consul-fips, etcd, filebrowser, helm-fips, vault-csi-provider, backup-restore-operator-fips, fscrypt, spegel, argo-workflows, k8ssandra-client,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, terraform-provider-azuread-fips, aws-iam-authenticator-fips, multus-cni-fips, goreleaser, docker-credential-acr-env-fips, commercial-chainloop-cli, azurefile-csi-fips, ko, kubevela-fips, helm, consul-fips, polaris, kubernetes-event-exporte...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: age, percona-xtradb-cluster-operator-fips, goreleaser, commercial-chainloop-cli, consul-fips, kubernetes-replicator-fips, prometheus-postgres-exporter, filebrowser, aws-network-policy-agent, vault-csi-provider, kiali-fips, xcaddy, kube-vip-fips, spegel, argo-workflow...

CVE-2026-22772 vulnerabilities

Vulnerabilities for packages: kubescape, falcoctl, vexctl, zarf, skopeo, sigstore-scaffolding, aactl, witness, gitsign, slsa-verifier, cosign, kots, falco-no-driver, tekton-chains...

GHSA-59JP-PJ84-45MR vulnerabilities

Vulnerabilities for packages: kubescape, falcoctl, vexctl, zarf, skopeo, sigstore-scaffolding, aactl, witness, gitsign, slsa-verifier, cosign, kots, falco-no-driver, tekton-chains...

CVE-2026-22772 vulnerabilities

Vulnerabilities for packages: zarf, aactl, image-factory, kots, vexctl, slsa-verifier, chainctl, kyverno-fips, witness, podman-fips, sigstore-scaffolding-fips, kyverno, tekton-chains, gitsign, kubescape, flux-source-controller-fips, skopeo, sigstore-scaffolding, cosign, falcoctl-fips,...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: libnvidia-container, mockery, memcached-exporter, sftpgo-plugin-auth, configmap-reload, gostatsd, whereabouts, age, prometheus-operator, kustomize, kubernetes-dns-node-cache, metallb, local-path-provisioner, portieris, fluent-bit-plugin-loki,...

GHSA-4F8R-QQR9-FQ8J vulnerabilities

Vulnerabilities for packages: zot, melange, sigstore-scaffolding, slsa-verifier, vexctl, apko, gitsign, gh, policy-controller, tkn, kubescape, wolfictl, falcoctl, zarf, spire-server, trivy, neuvector-sigstore-interface, aactl, rekor, cosign, flux-source-controller, tekton-chains...

CVE-2024-47534 vulnerabilities

Vulnerabilities for packages: zot, melange, sigstore-scaffolding, slsa-verifier, vexctl, apko, gitsign, gh, policy-controller, tkn, kubescape, wolfictl, falcoctl, zarf, spire-server, trivy, neuvector-sigstore-interface, aactl, rekor, cosign, flux-source-controller, tekton-chains...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign-fips, cosign, gh...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: cosign, gh, slsa-verifier...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: cosign, gh, slsa-verifier...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign-fips, cosign, gh...

GO-2023-2188 slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier...