GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, cosign, slsa-verifier, cosign-fips...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: flux-source-controller, cosign, slsa-verifier, cloudbeat, sigstore-scaffolding-fips, gh, kyverno-notation-aws, policy-controller-fips, ratify-fips, ratify, spire-server, tekton-chains, kyverno-notation-aws-fips, spire-server-fips, skaffold-fips, buildkitd, ko, witnes...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: flux-source-controller, cosign, slsa-verifier, sigstore-scaffolding-fips, gh, spire-server, policy-controller-fips, tekton-chains, spire-server-fips, wolfictl, tkn-fips, trivy, zot, policy-controller, falcoctl-fips, sigstore-scaffolding, chainctl, apko, vexctl,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, spire-server, policy-controller-fips, tekton-chains, spire-server-fips, wolfictl, ko, tkn-fips, zot, policy-controller, falcoctl-fips, chainctl, apko, vexctl, ko-fips, melange, zarf, aactl, falcoctl, tkn, skaffold, goreleaser,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, slsa-verifier, cosign...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: kots, flux-source-controller, spire-server, cosign, fulcio, aactl, cloudflared, tkn, vexctl, gitsign, kubescape, dex, tekton-chains, flux-kustomize-controller, sops, rekor, slsa-verifier, oauth2-proxy, terragrunt, argo-workflows...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kyverno, ratify, aactl, trivy-operator, kyverno-notation-aws, teleport, crossplane, slsa-verifier, trivy, policy-controller, kubescape, zot...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kots, tekton-chains, skopeo, kyverno, undock, ratify, flux-source-controller, aactl, buildah, kyverno-notation-aws, gitsign, slsa-verifier, witness, zarf, falcoctl, podman, kubescape...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: tekton-chains, cosign, flux-source-controller, ko, aactl, tkn, spire-server, slsa-verifier, policy-controller, skaffold, melange, kubescape, apko...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno, ratify, falcoctl, spire-server, teleport, tflint, neuvector-sigstore-interface, goreleaser, ko, aactl, tkn, gitsign, kubescape, tekton-chains, trivy-operator, kyverno-notation-aws, slsa-verifier, zarf, policy-controller...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: tekton-chains, kyverno, ratify, ko, aactl, tkn, vexctl, trivy-operator, kyverno-notation-aws, teleport, crossplane, slsa-verifier, trivy, zot, skaffold...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: k8sgpt, istio, containerd, flux-source-controller, nuclei, snyk-cli, atlantis, argo-cd, crossplane-provider-aws-cloudwatchlogs, datadog-agent, opentofu, neuvector-sigstore-interface, crossplane-provider-aws-memorydb, gitlab-pages, knative-serving, loki, dagger,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: flux-source-controller, crossplane, skaffold, sigstore-scaffolding, kyverno, ratify, falcoctl, spire-server, teleport, docker, tflint, neuvector-sigstore-interface, goreleaser, cosign, ko, aactl, tkn, docker-cli-buildx, vexctl, gitsign, zot, kubescape, tekton-chains,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kots, tekton-chains, falco-no-driver, skopeo, cosign, aactl, vexctl, gitsign, slsa-verifier, witness, zarf, falcoctl, kubescape, sigstore-scaffolding...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: flux-source-controller, crossplane, skaffold, sigstore-scaffolding, kyverno, ratify, falcoctl, spire-server, teleport, docker, tflint, neuvector-sigstore-interface, goreleaser, cosign, ko, aactl, tkn, vexctl, gitsign, zot, kubescape, tekton-chains, gh, rekor,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: skopeo, scorecard, src-fingerprint, flux-source-controller, gomplate, nuclei, snyk-cli, opentelemetry-collector, bank-vaults, kargo, rook, k3s, grafana-mimir, sigstore-scaffolding, vexctl, tkn, timestamp-authority, crossplane-provider-azure-storage, spire-server,...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: flux-source-controller, skaffold, falcoctl, spire-server, neuvector-sigstore-interface, goreleaser, ko, aactl, tkn, vexctl, gitsign, zot, kubescape, apko, tekton-chains, slsa-verifier, wolfictl, zarf, policy-controller, melange...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: slsa-verifier, cloudbeat, kubescape-server-fips, kyverno-notation-aws, policy-controller-fips, ratify-fips, ratify, spire-server, tekton-chains, kyverno-notation-aws-fips, spire-server-fips, ko, zarf-fips, docker-fips, tkn-fips, kyverno, chainctl-fips, crossplane,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: slsa-verifier, cloudbeat, kubescape-server-fips, kyverno-notation-aws, policy-controller-fips, ratify-fips, ratify, spire-server, tekton-chains, kyverno-notation-aws-fips, spire-server-fips, ko, zarf-fips, docker-fips, tkn-fips, kyverno, chainctl-fips, crossplane,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno, ratify, falcoctl, spire-server, teleport, tflint, neuvector-sigstore-interface, goreleaser, ko, aactl, tkn, gitsign, kubescape, tekton-chains, trivy-operator, kyverno-notation-aws, slsa-verifier, zarf, policy-controller...