GO-2024-3116 vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign-fips, gh, cosign...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: spire-server-fips, goreleaser, cloudbeat, trivy-fips, spire-server, tkn, gh, slsa-verifier, kyverno, kyverno-policy-reporter-plugins-kyverno-fips, docker, neuvector-sigstore-interface, ko-fips, aactl, buildkitd, image-factory, ko, reports-server, sigstore-scaffolding...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: spire-server-fips, trivy-fips, spire-server, apko, tkn, gh, slsa-verifier, neuvector-sigstore-interface, aactl, sigstore-scaffolding, chainctl, tekton-chains-fips, policy-controller-fips, zarf, policy-controller, tkn-fips, cosign-fips, kubescape,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: spire-server-fips, goreleaser, spire-server, apko, tkn, slsa-verifier, neuvector-sigstore-interface, ko-fips, aactl, ko, chainctl, tekton-chains-fips, policy-controller-fips, zarf, policy-controller, tkn-fips, kubescape, vexctl, falcoctl, wolfictl,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: cosign, gh, slsa-verifier...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flux-kustomize-controller, sops, spire-server, dex, flux-source-controller, cosign, aactl, tkn, kubescape, argo-workflows, oauth2-proxy, fulcio, kots, tekton-chains, rekor, vexctl, terragrunt, gitsign, cloudflared...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: undock, witness, falcoctl, podman, slsa-verifier, kubescape, kots, flux-source-controller, kyverno, tekton-chains, zarf, gitsign, buildah, ratify, aactl, skopeo, kyverno-notation-aws...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: trivy-operator, teleport, slsa-verifier, kubescape, crossplane, kyverno, trivy, policy-controller, ratify, aactl, zot, kyverno-notation-aws...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, tkn, slsa-verifier, kubescape, flux-source-controller, tekton-chains, cosign, apko, policy-controller, melange, aactl, ko...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, ratify, zarf, spire-server, neuvector-sigstore-interface, policy-controller, aactl, teleport, tkn, kubescape, crossplane, goreleaser, kyverno-notation-aws, trivy-operator, tflint, kyverno, tekton-chains, gitsign, ko...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: trivy-operator, teleport, tkn, slsa-verifier, crossplane, kyverno, tekton-chains, vexctl, trivy, skaffold, ratify, aactl, zot, ko, kyverno-notation-aws...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, cilium-cli, gh, spire-server, crossplane-provider-aws-sns, go-discover, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, neuvector-sigstore-interface, kubernetes-dashboard, buildah, mods, aactl,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, trivy, ratify, zarf, witness, gh, spire-server, sigstore-scaffolding, flux-source-controller, cosign, neuvector-sigstore-interface, policy-controller, aactl, teleport, tkn, docker-cli-buildx, kubescape, crossplane, goreleaser, buildkitd, zot,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: witness, falcoctl, sigstore-scaffolding, slsa-verifier, kubescape, kots, tekton-chains, vexctl, cosign, falco-no-driver, gitsign, zarf, aactl, skopeo...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, trivy, ratify, zarf, witness, gh, spire-server, sigstore-scaffolding, flux-source-controller, cosign, neuvector-sigstore-interface, policy-controller, aactl, teleport, tkn, kubescape, crossplane, goreleaser, buildkitd, zot,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kubevela, pulumi-kubernetes-operator, crossplane-provider-azure-storage, falcoctl, slsa-verifier, flux-kustomize-controller, rook, k3d, ksops, gomplate, sops, step-ca, nuclei, flux-image-automation-controller, scorecard, zarf, crossplane-provider-family-azure, gh,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, spire-server-fips, goreleaser, cloudbeat, spire-server, tkn, slsa-verifier, kyverno, neuvector-sigstore-interface, ko-fips, aactl, tflint-fips, ko, chainctl-fips, zarf-fips, cloudbeat-fips, docker-fips, kubescape-server, tekton-chains-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, spire-server-fips, goreleaser, cloudbeat, spire-server, tkn, slsa-verifier, kyverno, neuvector-sigstore-interface, ko-fips, aactl, tflint-fips, ko, chainctl-fips, zarf-fips, cloudbeat-fips, docker-fips, kubescape-server, tekton-chains-fips,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, ratify, zarf, spire-server, neuvector-sigstore-interface, policy-controller, aactl, teleport, tkn, kubescape, crossplane, goreleaser, kyverno-notation-aws, trivy-operator, tflint, kyverno, tekton-chains, gitsign, ko...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, ratify, zarf, spire-server, neuvector-sigstore-interface, policy-controller, aactl, teleport, tkn, kubescape, crossplane, goreleaser, kyverno-notation-aws, trivy-operator, tflint, kyverno, tekton-chains, gitsign, ko...