GO-2026-5272 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tekton-chains, tkn...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: vexctl, kubescape, gitsign, falcoctl, tekton-chains...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: tflint, gh, teleport, sigstore-scaffolding, ko, kubescape, spire-server, kyverno, crossplane, gitsign, buildkitd, tkn, zot, witness, trivy, vexctl, neuvector-sigstore-interface, cosign, skaffold, falcoctl, flux-source-controller, zarf, kyverno-notation-aws,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: vexctl, kubescape, spire-server, mc, gitsign, falcoctl, boring-registry, tekton-chains, minio...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sops, velero, bank-vaults, restic, pulumi, airflow, tempo, guac, argo-workflows, py3-azure-identity, chezmoi, k8sgpt, sigstore-scaffolding, nuclei, ksops, kubescape, spire-server, step-ca, terragrunt, step, opentelemetry-collector-contrib, buildkitd,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: kots, sops, slsa-verifier, argo-workflows, kubescape, spire-server, terragrunt, gitsign, tkn, oauth2-proxy, vexctl, cosign, aactl, rekor, flux-kustomize-controller, flux-source-controller, cloudflared, fulcio, tekton-chains, dex...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, kubescape, ratify, zarf, kyverno, kyverno-notation-aws, crossplane, policy-controller, falcoctl, gitsign, tkn, aactl, tflint, tekton-chains, trivy-operator, trivy...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kots, kubescape, podman, ratify, kyverno, zarf, undock, kyverno-notation-aws, gitsign, falcoctl, slsa-verifier, aactl, tekton-chains, skopeo, buildah, witness, flux-source-controller...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: ko, kubescape, spire-server, cosign, skaffold, policy-controller, slsa-verifier, tkn, aactl, melange, apko, tekton-chains, flux-source-controller...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: ratify, slsa-verifier, tflint, teleport, ko, kubescape, spire-server, kyverno, crossplane, gitsign, tkn, neuvector-sigstore-interface, falcoctl, aactl, zarf, kyverno-notation-aws, policy-controller, tekton-chains, goreleaser, trivy-operator...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: ratify, tflint, gh, teleport, sigstore-scaffolding, ko, kubescape, spire-server, kyverno, crossplane, gitsign, zot, tkn, witness, vexctl, neuvector-sigstore-interface, cosign, skaffold, falcoctl, docker-cli-buildx, aactl, flux-source-controller, zarf,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, vexctl, kots, falco-no-driver, kubescape, cosign, gitsign, falcoctl, slsa-verifier, aactl, tekton-chains, skopeo, witness, zarf...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: ratify, slsa-verifier, tflint, gh, teleport, sigstore-scaffolding, ko, kubescape, spire-server, kyverno, crossplane, gitsign, buildkitd, tkn, zot, witness, trivy, vexctl, neuvector-sigstore-interface, cosign, skaffold, falcoctl, docker-cli-buildx, aactl,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: ratify, slsa-verifier, tflint, gh, teleport, sigstore-scaffolding, ko, kubescape, spire-server, kyverno, crossplane, gitsign, buildkitd, tkn, zot, witness, trivy, vexctl, neuvector-sigstore-interface, cosign, skaffold, falcoctl, aactl, rekor, flux-source-controller,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: thanos-operator, bom, ip-masq-agent, nri-f5, kind, emissary, nri-apache, spire-controller-manager, kubernetes-dashboard, aws-otel-collector, oauth2-proxy, migrate, kubernetes-csi-driver-hostpath, kubernetes-dashboard-api, aws-application-networking-k8s, eksctl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: sops, flux-helm-controller, terraform-provider-azurerm, glab, crossplane-provider-family-azure, slsa-verifier, bank-vaults, pulumi, skopeo, gh, guac, k3s, sigstore-scaffolding, nuclei, ksops, kubescape, spire-server, crossplane-provider-azure-managedidentity, step-ca...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: tkn-fips, image-factory-fips, tekton-chains-fips, ratify, kyverno-notation-aws, zarf-fips, kyverno-notation-aws-fips, docker-fips, policy-controller-fips, gitsign, tbot, trivy-fips, tflint-fips, tkn, falcoctl, trivy-operator, falcoctl-fips, tekton-chains,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tkn-fips, image-factory-fips, tekton-chains-fips, ratify, kyverno-notation-aws, zarf-fips, kyverno-notation-aws-fips, docker-fips, policy-controller-fips, gitsign, tbot, trivy-fips, tflint-fips, tkn, falcoctl, trivy-operator, falcoctl-fips, tekton-chains,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kots, kubescape, podman, ratify, kyverno, zarf, undock, kyverno-notation-aws, gitsign, falcoctl, slsa-verifier, aactl, tekton-chains, skopeo, buildah, witness, flux-source-controller...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kots, kubescape, podman, ratify, kyverno, zarf, undock, kyverno-notation-aws, gitsign, falcoctl, slsa-verifier, aactl, tekton-chains, skopeo, buildah, witness, flux-source-controller...