GO-2026-5853 vulnerabilities

Vulnerabilities for packages: flux-source-controller, ratify, skopeo, kubescape, tekton-chains, kyverno, podman, witness, zarf, kots, kyverno-notation-aws, slsa-verifier, undock, aactl, buildah, gitsign, falco-no-driver, falcoctl...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: flux-source-controller, ko, melange, spire-server, kubescape, apko, tekton-chains, cosign, slsa-verifier, tkn, skaffold, aactl, policy-controller...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: melange, kaf, zarf, argo-events, terraform-provider-acme, hcloud, crossplane-provider-azure-managedidentity, helm, vault-benchmark, crossplane-provider-azure-storage, prometheus-operator, cilium-cli, apko, podman, cloud-provider-aws, pulumi, buildah, wolfictl, gh,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: ratify, zarf, zot, policy-controller, spire-server, tekton-chains, sigstore-scaffolding, witness, vexctl, cosign, kyverno-notation-aws, gh, falcoctl, flux-source-controller, kubescape, neuvector-sigstore-interface, tflint, tkn, gitsign, teleport, ko, goreleaser,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: flux-source-controller, ratify, zot, witness, tkn, goreleaser, kyverno-notation-aws, aactl, gitsign, falcoctl, policy-controller, teleport...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: ratify, buildkitd, zarf, slsa-verifier, zot, policy-controller, spire-server, tekton-chains, sigstore-scaffolding, witness, vexctl, cosign, kyverno-notation-aws, gh, falcoctl, trivy-operator, flux-source-controller, kubescape, neuvector-sigstore-interface, tflint, tk...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: ratify, buildkitd, zarf, rekor, slsa-verifier, zot, policy-controller, spire-server, tekton-chains, sigstore-scaffolding, witness, vexctl, cosign, kyverno-notation-aws, gh, falcoctl, trivy-operator, flux-source-controller, kubescape, neuvector-sigstore-interface,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: melange, zarf, rekor, slsa-verifier, zot, policy-controller, spire-server, tekton-chains, apko, sigstore-scaffolding, vexctl, cosign, wolfictl, gh, falcoctl, flux-source-controller, kubescape, neuvector-sigstore-interface, tkn, trivy, gitsign, aactl...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, kubevela, skopeo, buildkitd, zarf, argo-events, rekor, sops, slsa-verifier, crossplane-provider-azure-managedidentity, flux-image-automation-controller, terraform-provider-azurerm, pulumi-kubernetes-operator,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: flux-source-controller, ratify, skopeo, kubescape, tekton-chains, kyverno, podman, witness, zarf, kots, kyverno-notation-aws, slsa-verifier, undock, aactl, buildah, gitsign, falco-no-driver, falcoctl...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, ratify, skopeo, kubescape, tekton-chains, kyverno, podman, witness, zarf, kots, kyverno-notation-aws, slsa-verifier, undock, aactl, buildah, gitsign, falco-no-driver, falcoctl...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kyverno-fips, kyverno-notation-aws-fips, falcoctl-fips, tekton-chains, chainctl-fips, ratify, kots, falco-no-driver, kubescape-server, flux-source-controller-fips, kubescape, skopeo, portieris-fips, zarf, kyverno-notation-aws, buildah-fips, podman-fips, witness,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kyverno-fips, kyverno-notation-aws-fips, falcoctl-fips, tekton-chains, chainctl-fips, ratify, kots, falco-no-driver, kubescape-server, flux-source-controller-fips, kubescape, skopeo, portieris-fips, zarf, kyverno-notation-aws, buildah-fips, podman-fips, witness,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, kyverno-fips, reports-server, gitlab-workhorse-ce-fips, trivy, chisel-fips, cloud-provider-aws, telegraf, external-dns, cert-manager, cilium-cli, kube-state-metrics, k9s-fips, cloudbeat-fips, commercial-grafana, keda-fips, upwind-agent, argo-workflow...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, amazon-ssm-agent, kyverno-fips, crossplane-provider-family-azure, reports-server, gitlab-workhorse-ce-fips, trivy, chisel-fips, cloud-provider-aws, tkn, telegraf, external-dns, grype, terraform-provider-azurerm-fips, wal-g, cert-manager, cilium-cli,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, kyverno-fips, reports-server, gitlab-workhorse-ce-fips, trivy, chisel-fips, cloud-provider-aws, telegraf, external-dns, cert-manager, cilium-cli, kube-state-metrics, k9s-fips, cloudbeat-fips, commercial-grafana, keda-fips, upwind-agent, argo-workflow...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, amazon-ssm-agent, kyverno-fips, reports-server, gitlab-workhorse-ce-fips, trivy, cloud-provider-aws, telegraf, external-dns, grype, cert-manager, cilium-cli, kube-state-metrics, amazon-ssm-agent-fips, k9s-fips, cloudbeat-fips, mapotf-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, amazon-ssm-agent, kyverno-fips, reports-server, gitlab-workhorse-ce-fips, trivy, chisel-fips, cloud-provider-aws, telegraf, external-dns, grype, wal-g, cert-manager, cilium-cli, clickhouse-backup-fips, kube-state-metrics, amazon-ssm-agent-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: melange, kaf, zarf, argo-events, hcloud, crossplane-provider-azure-managedidentity, helm, vault-benchmark, crossplane-provider-azure-storage, prometheus-operator, cilium-cli, apko, podman, cloud-provider-aws, pulumi, buildah, wolfictl, gh, fulcio, falcoctl, loki,...

GO-2026-5472 Source controller: Improper path handling allows traversal in github.com/fluxcd/source-controller

Source controller: Improper path handling allows traversal in github.com/fluxcd/source-controller...