GO-2024-3116 vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign-fips, gh, cosign...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: buildkitd, neuvector-sigstore-interface, witness, sigstore-scaffolding-fips, zot, crossplane, skaffold-fips, cosign, slsa-verifier, trivy-fips, vexctl, kyverno, falcoctl-fips, tflint-fips, aactl, chainctl, kyverno-fips, kyverno-policy-reporter-plugins-kyverno-fips,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, sigstore-scaffolding-fips, zot, slsa-verifier, cosign, trivy-fips, vexctl, falcoctl-fips, aactl, chainctl, policy-controller-fips, rekor, gh, gitsign, spire-server, tkn, flux-source-controller-fips, neuvector-sigstore-interface-fips,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, zot, slsa-verifier, vexctl, falcoctl-fips, aactl, chainctl, policy-controller-fips, skaffold, ko, gitsign, spire-server, tkn, spire-server-fips, tkn-fips, falcoctl, ko-fips, tekton-chains, melange, policy-controller, kubescape, wolfictl,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, slsa-verifier, cosign...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: rekor, terragrunt, spire-server, kots, vexctl, kubescape, argo-workflows, flux-kustomize-controller, fulcio, oauth2-proxy, aactl, gitsign, flux-source-controller, cloudflared, tekton-chains, slsa-verifier, sops, tkn, dex, cosign...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: teleport, zot, kubescape, policy-controller, ratify, crossplane, trivy-operator, trivy, aactl, slsa-verifier, kyverno-notation-aws, kyverno...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: gitsign, kots, kubescape, flux-source-controller, skopeo, falcoctl, buildah, ratify, witness, zarf, podman, undock, tekton-chains, aactl, slsa-verifier, falco-no-driver, kyverno-notation-aws, kyverno...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: vexctl, teleport, tkn, skaffold, zot, ratify, trivy-operator, trivy, tekton-chains, aactl, slsa-verifier, ko, kyverno-notation-aws, kyverno...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, neuvector-sigstore-interface, kyverno, teleport, kubescape, ratify, aactl, zarf, kyverno-notation-aws, gitsign, falcoctl, crossplane, trivy-operator, tekton-chains, slsa-verifier, ko, tkn, tflint, goreleaser...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: tkn, skaffold, kubescape, flux-source-controller, policy-controller, melange, apko, spire-server, cosign, tekton-chains, aactl, slsa-verifier, ko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tw, crossplane-provider-aws-kms, crossplane-provider-aws-rds, gomplate, crossplane-provider-aws-sqs, docker-compose, crossplane-provider-aws-eks, gptscript, melange, trivy, openbao, istio, src, terraform-provider-azapi, gitlab-runner, gitea,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: vexctl, gitsign, kots, kubescape, sigstore-scaffolding, skopeo, falcoctl, witness, zarf, cosign, tekton-chains, aactl, slsa-verifier, falco-no-driver...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: buildkitd, zot, skaffold, policy-controller, spire-server, trivy, gh, sigstore-scaffolding, neuvector-sigstore-interface, kyverno, vexctl, teleport, kubescape, ratify, witness, aactl, zarf, kyverno-notation-aws, docker-cli-buildx, gitsign, docker,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: buildkitd, zot, skaffold, rekor, policy-controller, spire-server, trivy, gh, sigstore-scaffolding, neuvector-sigstore-interface, vexctl, teleport, kubescape, ratify, witness, aactl, zarf, kyverno-notation-aws, gitsign, docker, flux-source-controller, falcoctl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: buildkitd, zot, scorecard, rekor, skopeo, policy-controller, gomplate, kubevela, terragrunt, crossplane-provider-family-azure, spire-server, gh, bank-vaults, sigstore-scaffolding, neuvector-sigstore-interface, vexctl, terraform, crossplane-provider-azure-authorizatio...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, crossplane, slsa-verifier, kyverno, chainctl-fips, falcoctl-fips, kubescape-server, aactl, tflint-fips, zarf-fips, kyverno-fips, policy-controller-fips, ratify-fips, ko, ratify, gitsign, trivy-operator, spire-server, tkn,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, crossplane, slsa-verifier, kyverno, chainctl-fips, falcoctl-fips, kubescape-server, aactl, tflint-fips, zarf-fips, kyverno-fips, policy-controller-fips, ratify-fips, ko, ratify, gitsign, trivy-operator, spire-server, tkn,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, neuvector-sigstore-interface, kyverno, teleport, kubescape, ratify, aactl, zarf, kyverno-notation-aws, gitsign, falcoctl, crossplane, trivy-operator, tekton-chains, slsa-verifier, ko, tkn, tflint, goreleaser...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, neuvector-sigstore-interface, kyverno, teleport, kubescape, ratify, aactl, zarf, kyverno-notation-aws, gitsign, falcoctl, crossplane, trivy-operator, tekton-chains, slsa-verifier, ko, tkn, tflint, goreleaser...