CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, policy-controller, policy-controller-fips, falcoctl, kyverno, spire-server, tkn, trivy-operator, gitsign, tekton-chains, cloudbeat-fips, tflint-fips, chainctl-fips, crossplane, docker-fips, kubescape, tkn-fips, tflint, kubescape-server-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: falcoctl-fips, policy-controller, policy-controller-fips, falcoctl, kyverno, spire-server, tkn, trivy-operator, gitsign, tekton-chains, cloudbeat-fips, tflint-fips, chainctl-fips, crossplane, docker-fips, kubescape, tkn-fips, tflint, kubescape-server-fips,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tflint, ko, teleport, neuvector-sigstore-interface, kyverno, tekton-chains, policy-controller, trivy-operator, aactl, zarf, kubescape, gitsign, slsa-verifier, goreleaser, crossplane, kyverno-notation-aws, falcoctl, spire-server, tkn, ratify...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tflint, ko, teleport, neuvector-sigstore-interface, kyverno, tekton-chains, policy-controller, trivy-operator, aactl, zarf, kubescape, gitsign, slsa-verifier, goreleaser, crossplane, kyverno-notation-aws, falcoctl, spire-server, tkn, ratify...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kargo, nerdctl, docker, kine, pulumi-language-java, age, pulumi, rootlesskit, sops, flux-notification-controller, aactl, terraform-provider-azurerm, zarf, dagger, slsa-verifier, chisel, docker-machine-driver-harvester, trivy, cosign, pulumi-language-yaml, buildah,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: keda-fips, pulumi-language-yaml, external-secrets-operator, cloud-provider-aws, gitlab-kas, crossplane, terraform, atlas, slsa-verifier, aws-flb-kinesis-fips, kube-conformance, commercial-chainloop-backend, docker-cli-buildx-fips, azure-aad-pod-identity-mic, ko-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: keda-fips, pulumi-language-yaml, external-secrets-operator, cloud-provider-aws, gitlab-kas, crossplane, terraform, atlas, slsa-verifier, aws-flb-kinesis-fips, kube-conformance, commercial-chainloop-backend, docker-cli-buildx-fips, azure-aad-pod-identity-mic, ko-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: polaris-fips, secrets-store-csi-driver-provider-aws-fips, prometheus-nats-exporter, crossplane-provider-kubernetes-fips, metrics-agent-fips, git-sync-fips, google-cloud-otel-ops-collector, prometheus-redis-exporter, keda-fips, pulumi-language-yaml,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: polaris-fips, prometheus-nats-exporter, crossplane-provider-kubernetes-fips, metrics-agent-fips, git-sync-fips, prometheus-redis-exporter, keda-fips, pulumi-language-yaml, cluster-api, fq, gitlab-kas, go-spdk-helper-fips, go-md2man, kube-vip-fips, emqx-exporter,...

CVE-2026-22772 vulnerabilities

Vulnerabilities for packages: zarf, skopeo, kubescape, gitsign, slsa-verifier, witness, kots, vexctl, sigstore-scaffolding, falco-no-driver, cosign, aactl, falcoctl, tekton-chains...

GHSA-59JP-PJ84-45MR vulnerabilities

Vulnerabilities for packages: zarf, skopeo, kubescape, gitsign, slsa-verifier, witness, kots, vexctl, sigstore-scaffolding, falco-no-driver, cosign, aactl, falcoctl, tekton-chains...

CVE-2026-22772 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding-fips, falcoctl-fips, image-factory, falcoctl, kyverno, gitsign, tekton-chains, witness, vexctl, skopeo, cosign, kubescape, podman-fips, falco-no-driver, sigstore-scaffolding, flux-source-controller-fips, slsa-verifier, kyverno-fips,...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, incert, nerdctl, mockgen, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, opentelemetry-collector-contrib, sops, dagdotdev, flux-notification-controller, crossplane-provider-aws-kms, zarf, nri-nagios,...

GHSA-4F8R-QQR9-FQ8J vulnerabilities

Vulnerabilities for packages: melange, gh, neuvector-sigstore-interface, sigstore-scaffolding, tekton-chains, policy-controller, wolfictl, rekor, aactl, zot, zarf, flux-source-controller, kubescape, gitsign, slsa-verifier, trivy, cosign, falcoctl, spire-server, apko, tkn, vexctl...

CVE-2024-47534 vulnerabilities

Vulnerabilities for packages: melange, gh, neuvector-sigstore-interface, sigstore-scaffolding, tekton-chains, policy-controller, wolfictl, rekor, aactl, zot, zarf, flux-source-controller, kubescape, gitsign, slsa-verifier, trivy, cosign, falcoctl, spire-server, apko, tkn, vexctl...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: gh, slsa-verifier, cosign...

CVE-2024-45395 vulnerabilities

Vulnerabilities for packages: gh, cosign-fips, slsa-verifier, cosign...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: gh, slsa-verifier, cosign...

GHSA-CQ38-JH5F-37MQ vulnerabilities

Vulnerabilities for packages: gh, cosign-fips, slsa-verifier, cosign...

GO-2023-2188 slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier

slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier...