GO-2024-3116 vulnerabilities

Vulnerabilities for packages: cosign, gh, cosign-fips, slsa-verifier...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: ratify, sigstore-scaffolding-fips, teleport, image-factory, kyverno-policy-reporter-plugins-kyverno-fips, sigstore-scaffolding, gitsign, cosign, flux-source-controller, skaffold-fips, trivy-fips, flux-source-controller-fips, trivy-operator-fips,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding-fips, apko, sigstore-scaffolding, gitsign, cosign, flux-source-controller, trivy-fips, flux-source-controller-fips, neuvector-sigstore-interface-fips, zarf, melange, neuvector-sigstore-interface, zot, tkn, falcoctl-fips, gh, policy-controller-fip...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: apko, gitsign, flux-source-controller, zarf, melange, neuvector-sigstore-interface, zot, tkn, falcoctl-fips, skaffold, policy-controller-fips, tekton-chains, goreleaser, policy-controller, chainctl, vexctl, ko, slsa-verifier, tkn-fips, spire-server-fips, spire-server...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign, gh...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: policy-controller, kyverno, zot, slsa-verifier, kyverno-notation-aws, aactl, ratify, teleport, kubescape, trivy, crossplane, trivy-operator...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: policy-controller, melange, flux-source-controller, spire-server, slsa-verifier, apko, cosign, skaffold, aactl, kubescape, ko, tekton-chains, tkn...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: cloudflared, oauth2-proxy, slsa-verifier, argo-workflows, gitsign, sops, flux-kustomize-controller, rekor, tekton-chains, flux-source-controller, aactl, kubescape, vexctl, fulcio, tkn, spire-server, dex, terragrunt, cosign, kots...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: falcoctl, buildah, kyverno, witness, flux-source-controller, podman, skopeo, slsa-verifier, gitsign, kyverno-notation-aws, aactl, ratify, undock, kubescape, falco-no-driver, zarf, kots, tekton-chains...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: kyverno, zot, slsa-verifier, kyverno-notation-aws, skaffold, aactl, ratify, teleport, trivy, ko, vexctl, trivy-operator, tekton-chains, tkn...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, gitsign, teleport, zarf, crossplane, tflint, ratify, goreleaser, ko, tekton-chains, aactl, kubescape, trivy-operator, tkn, policy-controller, kyverno, neuvector-sigstore-interface, spire-server, kyverno-notation-aws...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, cloudflared, apko, chisel, istio, osv-scanner, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, pulumi-language-yaml, grype, crossplane-provider-aws-iam, docker-compose, snyk-cli, chezmoi, tflint, kubernetes-dashboard, kaf, guac,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: falcoctl, sigstore-scaffolding, witness, skopeo, cosign, slsa-verifier, gitsign, aactl, kubescape, falco-no-driver, vexctl, zarf, kots, tekton-chains...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, gitsign, skaffold, teleport, trivy, zarf, crossplane, sigstore-scaffolding, witness, zot, docker, tflint, ratify, buildkitd, goreleaser, ko, tekton-chains, flux-source-controller, aactl, kubescape, vexctl, trivy-operator, tkn,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, gitsign, skaffold, teleport, trivy, zarf, sigstore-scaffolding, witness, zot, docker, rekor, tflint, ratify, buildkitd, goreleaser, ko, tekton-chains, flux-source-controller, aactl, kubescape, vexctl, trivy-operator, tkn, policy-controller,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: falcoctl, timestamp-authority, kargo, slsa-verifier, gitsign, grafana-mimir, zarf, sops, glab, sigstore-scaffolding, rabbitmq-messaging-topology-operator, crossplane-provider-azure-managedidentity, flux-image-automation-controller, snyk-cli,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: ratify, teleport, gitsign, commercial-kyverno, kubescape-server, trivy-operator-fips, neuvector-sigstore-interface-fips, zarf, neuvector-sigstore-interface, tkn, tflint, falcoctl-fips, tflint-fips, policy-controller-fips, tekton-chains, kyverno-fips, cloudbeat,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: ratify, teleport, gitsign, commercial-kyverno, kubescape-server, trivy-operator-fips, neuvector-sigstore-interface-fips, zarf, neuvector-sigstore-interface, tkn, tflint, falcoctl-fips, tflint-fips, policy-controller-fips, tekton-chains, kyverno-fips, cloudbeat,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, gitsign, teleport, zarf, crossplane, tflint, ratify, goreleaser, ko, tekton-chains, aactl, kubescape, trivy-operator, tkn, policy-controller, kyverno, neuvector-sigstore-interface, spire-server, kyverno-notation-aws...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: falcoctl, slsa-verifier, gitsign, teleport, zarf, crossplane, tflint, ratify, goreleaser, ko, tekton-chains, aactl, kubescape, trivy-operator, tkn, policy-controller, kyverno, neuvector-sigstore-interface, spire-server, kyverno-notation-aws...