42 matches found
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: pulumi-language-dotnet, act, go-discover, flux-kustomize-controller, kargo, snyk-cli, scorecard, witness, osv-scanner, spire-server, zot, grype, syft, argo-cd, wolfictl, flux-source-controller, teleport, fscrypt, steampipe, crossplane-provider-family-azure,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: kots, ko-fips, localstack, crane-fips, kyverno, ipfs-cluster, apko, beats-fips, cilium-cli, kubevirt-cdi-uploadserver, nats-server, amazon-ssm-agent, keda-fips, aactl, kube-conformance, gitlab-operator-fips, newrelic-infrastructure-agent-fips, trivy-fips,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: kots, ko-fips, localstack, crane-fips, kyverno, ipfs-cluster, apko, beats-fips, cilium-cli, kubevirt-cdi-uploadserver, nats-server, amazon-ssm-agent, keda-fips, aactl, kube-conformance, gitlab-operator-fips, newrelic-infrastructure-agent-fips, trivy-fips,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: aws-nuke, kots, ko-fips, jitsucom-bulker, localstack, crossplane-provider-aws-efs, prometheus-node-exporter-fips, crane-fips, cloud-sql-proxy, gatus, victoriametrics-operator, kyverno, ipfs-cluster, cue, apko, emqx-exporter-fips, seaweedfs-operator, beats-fips, maru,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: ko-fips, ipfs-cluster, cue, seaweedfs-operator, hcl2json-fips, cilium-cli, ip-masq-agent, protoc-gen-connect-go, nova, haproxy-ingress-fips, mattmoor-chainit, dataplaneapi, gitlab-operator-fips, gcp-compute-persistent-disk-csi-driver-fips, nri-prometheus,...
CVE-2026-22772 vulnerabilities
Vulnerabilities for packages: skopeo, kots, cosign, kubescape, aactl, slsa-verifier, sigstore-scaffolding, falco-no-driver, vexctl, zarf, gitsign, witness, tekton-chains, falcoctl...
GHSA-59JP-PJ84-45MR vulnerabilities
Vulnerabilities for packages: skopeo, kots, cosign, kubescape, aactl, slsa-verifier, sigstore-scaffolding, falco-no-driver, vexctl, zarf, gitsign, witness, tekton-chains, falcoctl...
CVE-2026-22772 vulnerabilities
Vulnerabilities for packages: kots, falcoctl, vexctl, sigstore-scaffolding-fips, chainctl, kyverno, kyverno-fips, cosign, sigstore-scaffolding, skopeo, kyverno-policy-reporter-plugins-kyverno-fips, image-factory, slsa-verifier, falcoctl-fips, kubescape, podman-fips, aactl, zarf, witness,...
GHSA-3WHM-J4XM-RV8X vulnerabilities
Vulnerabilities for packages: openbao-k8s, glow, snyk-cli, kargo, jitsucom-bulker, scorecard, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, hubble, temporal-server, kube-bench, zot, sriov-network-device-plugin, docker-credential-gcr, crossplane-provider-aws-elasticache,...
GHSA-4F8R-QQR9-FQ8J vulnerabilities
Vulnerabilities for packages: gh, rekor, spire-server, cosign, kubescape, zot, tkn, wolfictl, melange, slsa-verifier, sigstore-scaffolding, flux-source-controller, tekton-chains, aactl, policy-controller, vexctl, zarf, gitsign, neuvector-sigstore-interface, apko, trivy, falcoctl...
CVE-2024-47534 vulnerabilities
Vulnerabilities for packages: gh, rekor, spire-server, cosign, kubescape, zot, tkn, wolfictl, melange, slsa-verifier, sigstore-scaffolding, flux-source-controller, tekton-chains, aactl, policy-controller, vexctl, zarf, gitsign, neuvector-sigstore-interface, apko, trivy, falcoctl...
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: cosign-fips, slsa-verifier, cosign, gh...
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: cosign, slsa-verifier, gh...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: cosign, slsa-verifier, gh...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: cosign-fips, slsa-verifier, cosign, gh...
GO-2023-2188 slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier...
GHSA-R2XV-VPR2-42M9 slsa-verifier vulnerable to mproper validation of npm's publish attestations
Summary slsa-verifier attestationstampered.json 5. SLSAVERIFIEREXPERIMENTAL=1 slsa-verifier verify-npm-package supreme-goggles.tgz --attestations-path attestationstampered.json --builder-id "https://github.com/actions/runner/github-hosted" --package-name "@trishankatdatadog/supreme-goggles"...
GHSA-JQ35-85CJ-FJ4P vulnerabilities
Vulnerabilities for packages: bom, slsa-verifier, falcoctl-fips, kubescape, skaffold, up, chartmuseum, aactl, k3d, spire-server-fips, kpt, tekton-chains, paranoia, scorecard, ctop, k3s...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: prometheus-blackbox-exporter, terraform-provider-sendgrid-fips, buildkitd, kubeflow-fips, volume-modifier-for-k8s-fips, timestamp-authority-fips, spark-operator, conftest-fips, bank-vaults-fips, k3d, kubevela, scorecard, aws-efs-csi-driver-fips,...