GO-2026-5853 vulnerabilities

Vulnerabilities for packages: zarf, aactl, kots, skopeo, witness, flux-source-controller, kubescape, buildah, podman, falco-no-driver, ratify, slsa-verifier, undock, kyverno-notation-aws, falcoctl, tekton-chains, kyverno, gitsign...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: tkn, aactl, spire-server, skaffold, ko, flux-source-controller, kubescape, policy-controller, slsa-verifier, cosign, tekton-chains, melange, apko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: nuclei, step-kms-plugin, skaffold, teleport, guac, scorecard, opentofu, crossplane-provider-aws-rds, vault-benchmark, tekton-chains, act, docker-machine-driver-linode, step-issuer, terragrunt, ko, witness, go-discover, argo-events, crossplane-provider-azure-sql,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, skaffold, teleport, policy-controller, goreleaser, tekton-chains, docker-cli-buildx, tkn, neuvector-sigstore-interface, ko, witness, flux-source-controller, sigstore-scaffolding, cosign, tflint, vexctl, gh, kyverno-notation-aws, falcoctl, zarf,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, skaffold, teleport, policy-controller, goreleaser, slsa-verifier, tekton-chains, docker-cli-buildx, tkn, neuvector-sigstore-interface, ko, witness, flux-source-controller, trivy, sigstore-scaffolding, cosign, tflint, vexctl, gh,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: tkn, aactl, teleport, witness, flux-source-controller, ratify, policy-controller, goreleaser, kyverno-notation-aws, zot, falcoctl, gitsign...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, skaffold, teleport, policy-controller, goreleaser, slsa-verifier, tekton-chains, tkn, neuvector-sigstore-interface, ko, witness, flux-source-controller, trivy, sigstore-scaffolding, cosign, rekor, tflint, vexctl, gh, kyverno-notation-aws, falcoct...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, policy-controller, slsa-verifier, tekton-chains, tkn, neuvector-sigstore-interface, flux-source-controller, trivy, sigstore-scaffolding, cosign, rekor, vexctl, wolfictl, gh, falcoctl, zarf, melange, apko, zot, kubescape, gitsign...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: nuclei, aactl, spire-server, guac, flux-image-reflector-controller, flux, scorecard, flux-notification-controller, crossplane-provider-azure-managedidentity, pulumi-kubernetes-operator, step-ca, policy-controller, goreleaser, slsa-verifier, tekton-chains, k3s, gitsig...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: zarf, aactl, kots, skopeo, witness, flux-source-controller, kubescape, buildah, podman, falco-no-driver, ratify, slsa-verifier, undock, kyverno-notation-aws, falcoctl, tekton-chains, kyverno, gitsign...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: zarf, aactl, kots, skopeo, witness, flux-source-controller, kubescape, buildah, podman, falco-no-driver, ratify, slsa-verifier, undock, kyverno-notation-aws, falcoctl, tekton-chains, kyverno, gitsign...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: zarf, falco-no-driver, witness, undock, kots, buildah, prometheus-podman-exporter-fips, commercial-kyverno, ratify-fips, gitsign, chainctl, kubescape-server-fips, podman, tekton-chains, falcoctl-fips, podman-fips, flux-source-controller-fips, flux-source-controller,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: zarf, falco-no-driver, witness, undock, kots, buildah, prometheus-podman-exporter-fips, commercial-kyverno, ratify-fips, gitsign, chainctl, kubescape-server-fips, podman, tekton-chains, falcoctl-fips, podman-fips, flux-source-controller-fips, flux-source-controller,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: vitess, prometheus-operator, zarf, falco-no-driver, harbor-fips, cert-manager, trivy-fips, coder-fips, spire-server, commercial-expanso-edge, argo-workflows-fips, chisel-fips, knative-kafka-broker-fips, etcd-fips, snyk-cli, knative-serving, kubescape-server-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: vitess, prometheus-operator, zarf, falco-no-driver, harbor-fips, cert-manager, trivy-fips, coder-fips, spire-server, commercial-expanso-edge, argo-workflows-fips, chisel-fips, knative-kafka-broker-fips, etcd-fips, snyk-cli, knative-serving, kubescape-server-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: caddy, crossplane-provider-azure-securityinsights, vitess, crossplane-provider-azure-solutions, prometheus-operator, zarf, falco-no-driver, kargo, packer-fips, terraform-provider-azurerm-fips, harbor-fips, cert-manager, hcloud, grype-db, trivy-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: vitess, prometheus-operator, zarf, falco-no-driver, packer-fips, harbor-fips, cert-manager, grype-db, trivy-fips, gptscript, spire-server, commercial-expanso-edge, argo-workflows-fips, terraform-fips, knative-kafka-broker-fips, etcd-fips, snyk-cli,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: vitess, prometheus-operator, zarf, falco-no-driver, packer-fips, harbor-fips, cert-manager, grype-db, trivy-fips, coder-fips, gptscript, spire-server, commercial-expanso-edge, argo-workflows-fips, terraform-fips, chisel-fips, knative-kafka-broker-fips, etcd-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: nuclei, step-kms-plugin, skaffold, teleport, guac, scorecard, opentofu, vault-benchmark, tekton-chains, act, step-issuer, terragrunt, ko, witness, go-discover, argo-events, crossplane-provider-azure-sql, k8sgpt, kubernetes, chisel, flux-kustomize-controller, buildkit...

GO-2026-5472 Source controller: Improper path handling allows traversal in github.com/fluxcd/source-controller

Source controller: Improper path handling allows traversal in github.com/fluxcd/source-controller...