GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, cosign, cosign-fips, slsa-verifier...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, cg, trivy, crossplane, aactl, neuvector-sigstore-interface, skaffold, tkn, kyverno-notation-aws-fips, cosign, flux-source-controller-fips, policy-controller-fips, spire-server-fips, kubescape, teleport-operator-fips, rekor, falcoctl, buildkitd-fip...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, trivy, aactl, neuvector-sigstore-interface, flux-source-controller-fips, cosign, policy-controller-fips, spire-server-fips, kubescape, rekor, falcoctl, sigstore-scaffolding, melange, zot, gh, cosign-fips, tekton-chains,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, aactl, neuvector-sigstore-interface, skaffold, spire-server-fips, policy-controller-fips, kubescape, falcoctl, melange, zot, ko, tekton-chains, ko-fips, apko, flux-source-controller, chainctl, wolfictl, policy-controller, goreleaser, zarf,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: cosign, gh, slsa-verifier...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: tkn, oauth2-proxy, slsa-verifier, flux-source-controller, tekton-chains, cosign, aactl, kots, dex, gitsign, terragrunt, cloudflared, vexctl, sops, kubescape, rekor, spire-server, argo-workflows, flux-kustomize-controller, fulcio...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kots, ratify, gitsign, podman, slsa-verifier, flux-source-controller, witness, skopeo, falco-no-driver, zarf, undock, falcoctl, kyverno-notation-aws, tekton-chains, kyverno, kubescape, buildah, aactl...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: ratify, trivy, trivy-operator, slsa-verifier, crossplane, kyverno-notation-aws, kyverno, policy-controller, zot, kubescape, teleport, aactl...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: tkn, slsa-verifier, falcoctl, tekton-chains, aactl, gitsign, trivy-operator, zarf, kyverno, kubescape, teleport, goreleaser, crossplane, spire-server, policy-controller, ko, neuvector-sigstore-interface, ratify, tflint, kyverno-notation-aws...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: ratify, trivy, trivy-operator, tkn, slsa-verifier, skaffold, tekton-chains, kyverno-notation-aws, vexctl, kyverno, ko, zot, teleport, aactl...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: melange, tkn, slsa-verifier, flux-source-controller, apko, skaffold, spire-server, tekton-chains, policy-controller, ko, cosign, kubescape, aactl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: minio, nfpm, crossplane-provider-aws-rds, argocd-image-updater, terraform-provider-tls, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, kots, pulumi, istio, argo-cd, sops, opentofu, pulumi-language-yaml, rancher,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, docker, kyverno, zot, kubescape, teleport, goreleaser, crossplane, spire-server, policy-controller, ko,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kots, gitsign, slsa-verifier, sigstore-scaffolding, witness, skopeo, falco-no-driver, zarf, falcoctl, tekton-chains, vexctl, cosign, kubescape, aactl...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, docker, zot, kubescape, teleport, goreleaser, rekor, spire-server, policy-controller, ko,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3d, flux-image-automation-controller, tkn, gh, nuclei, slsa-verifier, crossplane-provider-azure, flux-source-controller, ksops, terraform-provider-azurerm, falcoctl, tekton-chains, gomplate, src-fingerprint, crossplane-provider-azure-sql, cosign, step-ca,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, crossplane, aactl, kubescape-server-fips, neuvector-sigstore-interface, kyverno-notation-aws-fips, policy-controller-fips, spire-server-fips, kubescape, chainctl-fips, falcoctl, kyverno-notation-aws, ko, tekton-chains, ko-fips, trivy-operator-fips...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, crossplane, aactl, kubescape-server-fips, neuvector-sigstore-interface, kyverno-notation-aws-fips, policy-controller-fips, spire-server-fips, kubescape, chainctl-fips, falcoctl, kyverno-notation-aws, ko, tekton-chains, ko-fips, trivy-operator-fips...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tkn, slsa-verifier, falcoctl, tekton-chains, aactl, gitsign, trivy-operator, zarf, kyverno, kubescape, teleport, goreleaser, crossplane, spire-server, policy-controller, ko, neuvector-sigstore-interface, ratify, tflint, kyverno-notation-aws...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tkn, slsa-verifier, falcoctl, tekton-chains, aactl, gitsign, trivy-operator, zarf, kyverno, kubescape, teleport, goreleaser, crossplane, spire-server, policy-controller, ko, neuvector-sigstore-interface, ratify, tflint, kyverno-notation-aws...