GO-2026-5853 vulnerabilities

Vulnerabilities for packages: aactl, gitsign, podman, skopeo, tekton-chains, zarf, witness, falcoctl, kyverno, ratify, kots, undock, slsa-verifier, falco-no-driver, buildah, kubescape, flux-source-controller, kyverno-notation-aws...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: aactl, ko, cosign, melange, spire-server, tekton-chains, apko, policy-controller, slsa-verifier, tkn, kubescape, skaffold, flux-source-controller...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, podman, step-issuer, crossplane-provider-azure-sql, helm, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, guac, buildah, kubescape, flux-source-controller, argo-events, chezmoi, k3s, argocd-image-updater, prometheu...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: falcoctl, sigstore-scaffolding, ratify, kyverno-notation-aws, gitsign, tflint, vexctl, kubescape, flux-source-controller, aactl, ko, neuvector-sigstore-interface, cosign, gh, tekton-chains, goreleaser, policy-controller, tkn, zot, spire-server, docker-cli-buildx, zar...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno, ratify, sigstore-scaffolding, kyverno-notation-aws, docker, gitsign, tflint, vexctl, buildkitd, kubescape, flux-source-controller, aactl, ko, neuvector-sigstore-interface, cosign, gh, tekton-chains, goreleaser, policy-controller, trivy, tkn, zot,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: aactl, gitsign, witness, falcoctl, goreleaser, policy-controller, teleport, ratify, tkn, zot, flux-source-controller, kyverno-notation-aws...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: rekor, falcoctl, sigstore-scaffolding, ratify, kyverno-notation-aws, docker, gitsign, tflint, vexctl, buildkitd, kubescape, flux-source-controller, aactl, ko, neuvector-sigstore-interface, cosign, gh, tekton-chains, goreleaser, policy-controller, trivy, tkn, zot,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: rekor, falcoctl, sigstore-scaffolding, gitsign, vexctl, kubescape, apko, flux-source-controller, aactl, neuvector-sigstore-interface, cosign, gh, tekton-chains, policy-controller, trivy, tkn, zot, spire-server, zarf, melange, slsa-verifier, wolfictl...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: grafana-mimir, rabbitmq-messaging-topology-operator, rekor, flux-notification-controller, falcoctl, crossplane-provider-azure-sql, sigstore-scaffolding, sops, terraform, gitsign, crossplane-provider-azure-authorization, kubevela, flux-helm-controller,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: aactl, gitsign, podman, skopeo, tekton-chains, zarf, witness, falcoctl, kyverno, ratify, kots, undock, slsa-verifier, falco-no-driver, buildah, kubescape, flux-source-controller, kyverno-notation-aws...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: aactl, gitsign, podman, skopeo, tekton-chains, zarf, witness, falcoctl, kyverno, ratify, kots, undock, slsa-verifier, falco-no-driver, buildah, kubescape, flux-source-controller, kyverno-notation-aws...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: zarf, skopeo, skopeo-fips, zarf-fips, witness, aactl, chainctl, prometheus-podman-exporter-fips, prometheus-podman-exporter, podman-fips, kubescape-server-fips, flux-source-controller, kots, falcoctl, kubescape, commercial-kyverno, tekton-chains, kyverno-notation-aws...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: zarf, skopeo, skopeo-fips, zarf-fips, witness, aactl, chainctl, prometheus-podman-exporter-fips, prometheus-podman-exporter, podman-fips, kubescape-server-fips, flux-source-controller, kots, falcoctl, kubescape, commercial-kyverno, tekton-chains, kyverno-notation-aws...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: argo-workflows, chisel, minio-fips, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, aactl, spire-server, commercial-expanso-edge, external-secrets-operator-fips, skaffold, coder-fips, k9s-fips, argo-cd, commercial-kyverno, seaweedfs-rocksdb-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argo-workflows, chisel, minio-fips, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, aactl, spire-server, commercial-expanso-edge, external-secrets-operator-fips, skaffold, coder-fips, k9s-fips, argo-cd, commercial-kyverno, seaweedfs-rocksdb-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: ollama-fips, argo-workflows, chisel, crossplane-provider-azure-securityinsights, minio-fips, gatekeeper, crossplane-provider-azure-authorization, gatekeeper-fips, tkn, flux, fulcio-fips, kube-arangodb-fips, flux-operator-fips, openbao, loki, witness, aactl,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: argo-workflows, minio-fips, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, witness, aactl, argo-events, spire-server, chezmoi, commercial-expanso-edge, podman-fips, external-secrets-operator-fips, skaffold, k9s-fips, argo-cd, gptscript,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: argo-workflows, chisel, minio-fips, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, witness, aactl, argo-events, rancher-machine, spire-server, chezmoi, peerdb-flow, commercial-expanso-edge, podman-fips, external-secrets-operator-fips, skaffold,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: podman, step-issuer, crossplane-provider-azure-sql, helm, age, guac, buildah, kubescape, flux-source-controller, argo-events, chezmoi, k3s, argocd-image-updater, prometheus, gitlab-runner, nfpm, zot, spire-server, openbao, wal-g, cilium-cli, melange,...

GO-2026-5472 Source controller: Improper path handling allows traversal in github.com/fluxcd/source-controller

Source controller: Improper path handling allows traversal in github.com/fluxcd/source-controller...