GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kubescape, gitsign, slsa-verifier, falco-no-driver, undock, zarf, flux-source-controller, witness, aactl, skopeo, tekton-chains, ratify, kyverno, kots, falcoctl, buildah, kyverno-notation-aws, podman...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: kubescape, slsa-verifier, cosign, flux-source-controller, policy-controller, aactl, ko, tekton-chains, tkn, melange, skaffold, spire-server, apko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, cloud-provider-aws, k3s, cosign, scorecard, slsa-verifier, nerdctl, terraform-provider-acme, nuclei, pulumi-language-dotnet, crossplane-provider-aws-elasticache, openbao, cluster-api-azure-controller, kubescape, gatus, ksops, witness,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: zarf, cosign, vexctl, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, teleport, flux-source-controller, witness, policy-controller, tekton-chains, sigstore-scaffolding, falcoctl, spire-server, kyverno-notation-aws, goreleaser, docker-cli-buildx,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: gitsign, teleport, flux-source-controller, witness, policy-controller, aactl, tkn, ratify, zot, falcoctl, kyverno-notation-aws, goreleaser...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: zarf, slsa-verifier, cosign, vexctl, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, teleport, trivy-operator, flux-source-controller, witness, policy-controller, tekton-chains, crossplane, docker, sigstore-scaffolding, falcoctl, spire-server,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: zarf, slsa-verifier, cosign, vexctl, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, teleport, trivy-operator, flux-source-controller, witness, policy-controller, tekton-chains, docker, sigstore-scaffolding, rekor, falcoctl, spire-server,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: zarf, slsa-verifier, cosign, vexctl, tkn, zot, neuvector-sigstore-interface, kubescape, flux-source-controller, policy-controller, tekton-chains, sigstore-scaffolding, rekor, falcoctl, spire-server, apko, gitsign, wolfictl, gh, aactl, melange, trivy...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: zarf, k3s, cosign, scorecard, slsa-verifier, vexctl, bank-vaults, skopeo, step-ca, nuclei, tkn, zot, neuvector-sigstore-interface, pulumi, kubescape, flux-source-controller, ksops, flux-image-automation-controller, grafana-mimir,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kubescape, gitsign, slsa-verifier, falco-no-driver, undock, zarf, flux-source-controller, witness, aactl, skopeo, tekton-chains, ratify, kyverno, kots, falcoctl, buildah, kyverno-notation-aws, podman...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kubescape, gitsign, slsa-verifier, falco-no-driver, undock, zarf, flux-source-controller, witness, aactl, skopeo, tekton-chains, ratify, kyverno, kots, falcoctl, buildah, kyverno-notation-aws, podman...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, prometheus-podman-exporter-fips, skopeo-fips, tekton-chains, skopeo, chainctl, falcoctl, falco-no-driver, buildah-fips, flux-source-controller, kyverno-notation-aws-fips, kyverno-fips, buildah, aactl, kubescape-server-fips, slsa-verifier,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, prometheus-podman-exporter-fips, skopeo-fips, tekton-chains, skopeo, chainctl, falcoctl, falco-no-driver, buildah-fips, flux-source-controller, kyverno-notation-aws-fips, kyverno-fips, buildah, aactl, kubescape-server-fips, slsa-verifier,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, keda-fips, prometheus-mongodb-exporter, tigera-operator, knative-eventing-fips, gatekeeper-fips, mattermost-fips, loki, traefik, argo-cd, cloudbeat, vault, kubernetes-dashboard, kubescape-server-fips, argo-workflows,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, keda-fips, prometheus-mongodb-exporter, tigera-operator, knative-eventing-fips, gatekeeper-fips, mattermost-fips, loki, traefik, argo-cd, cloudbeat, vault, kubernetes-dashboard, kubescape-server-fips, argo-workflows,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, keda-fips, docker-cli-buildx, crossplane-aws-provider, crossplane-provider-azure-security, gatus, prometheus-mongodb-exporter, tigera-operator, knative-eventing-fips, hcloud, gatekeeper-fips, flux-notification-controller-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, keda-fips, prometheus-mongodb-exporter, tigera-operator, knative-eventing-fips, gatekeeper-fips, mattermost-fips, loki, packer-fips, traefik, argo-cd, guac, cloudbeat, chezmoi, vault, kubernetes-dashboard, gptscript, kubescape-server-fips...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, keda-fips, docker-cli-buildx, gatus, prometheus-mongodb-exporter, tigera-operator, knative-eventing-fips, gatekeeper-fips, mattermost-fips, loki, packer-fips, traefik, argo-cd, docker, guac, cloudbeat, chezmoi, vault, kubernetes-dashboard...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argocd-image-updater, cloud-provider-aws, k3s, cosign, scorecard, slsa-verifier, nerdctl, nuclei, pulumi-language-dotnet, openbao, cluster-api-azure-controller, kubescape, gatus, ksops, witness, flux-image-automation-controller, tekton-chains, pulumi-language-java,...

GO-2026-5472 Source controller: Improper path handling allows traversal in github.com/fluxcd/source-controller

Source controller: Improper path handling allows traversal in github.com/fluxcd/source-controller...