GO-2026-5486 vulnerabilities

Vulnerabilities for packages: tekton-chains, tkn, tekton-pipelines...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: tekton-chains, gitsign, kubescape, vexctl, falcoctl...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: policy-controller, kyverno, cosign, zarf, skaffold, gh, flux-source-controller, witness, tkn, ko, docker, crossplane, buildkitd, kyverno-notation-aws, zot, gitsign, kubescape, sigstore-scaffolding, trivy-operator, neuvector-sigstore-interface, tekton-chains, trivy,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: tekton-chains, boring-registry, gitsign, kubescape, mc, vexctl, spire-server, falcoctl, minio...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sops, k8sgpt, policy-controller, velero, guac, flux-kustomize-controller, sqlpad, wal-g, opentelemetry-collector-contrib, rekor, ksops, cosign, grafana-agent-operator, secrets-store-csi-driver-provider-azure, flyte, bank-vaults, argo-workflows, prometheus-operator,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: kots, sops, cloudflared, flux-kustomize-controller, slsa-verifier, rekor, cosign, argo-workflows, oauth2-proxy, fulcio, flux-source-controller, tkn, terragrunt, dex, aactl, gitsign, kubescape, tekton-chains, vexctl, spire-server...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: aactl, kyverno-notation-aws, tekton-chains, trivy, policy-controller, kyverno, ratify, crossplane, gitsign, kubescape, tkn, trivy-operator, tflint, zarf, neuvector-sigstore-interface, falcoctl...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: aactl, kots, kyverno-notation-aws, tekton-chains, buildah, kyverno, ratify, undock, skopeo, podman, gitsign, flux-source-controller, kubescape, slsa-verifier, witness, zarf, falcoctl...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: policy-controller, kyverno, ratify, slsa-verifier, zarf, tkn, ko, crossplane, aactl, kyverno-notation-aws, gitsign, kubescape, trivy-operator, neuvector-sigstore-interface, tekton-chains, goreleaser, teleport, spire-server, tflint, falcoctl...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: aactl, tekton-chains, melange, policy-controller, skaffold, kubescape, flux-source-controller, slsa-verifier, apko, spire-server, tkn, ko, cosign...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: policy-controller, kyverno, ratify, cosign, zarf, docker-cli-buildx, skaffold, gh, flux-source-controller, witness, tkn, ko, crossplane, aactl, kyverno-notation-aws, zot, gitsign, kubescape, sigstore-scaffolding, neuvector-sigstore-interface, tekton-chains, gorelease...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: aactl, kots, tekton-chains, skopeo, gitsign, kubescape, slsa-verifier, falco-no-driver, witness, sigstore-scaffolding, vexctl, cosign, zarf, falcoctl...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: policy-controller, kyverno, ratify, slsa-verifier, cosign, zarf, docker-cli-buildx, skaffold, gh, flux-source-controller, witness, tkn, ko, docker, crossplane, buildkitd, aactl, kyverno-notation-aws, zot, gitsign, kubescape, sigstore-scaffolding, trivy-operator,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: policy-controller, kyverno, ratify, slsa-verifier, rekor, cosign, zarf, skaffold, gh, flux-source-controller, witness, tkn, ko, docker, crossplane, buildkitd, aactl, kyverno-notation-aws, zot, gitsign, kubescape, sigstore-scaffolding, trivy-operator,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k8sgpt, cerbos, wal-g, k3s, spark-operator, kind, docker-credential-gcr, opa, cloud-sql-proxy, docker-cli, dgraph, pluto, tempo, kapp-controller, nri-memcached, terraform-mcp-server, thanos-operator, clickhouse-operator, cloud-provider-gcp-cloud-controller-manager,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: gomplate, sops, actions-runner-controller, policy-controller, guac, flux-kustomize-controller, crossplane-provider-azure-storage, slsa-verifier, crossplane-provider-azure-authorization, opentelemetry-collector-contrib, pulumi-kubernetes-operator, ksops, rekor, cosign...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: kyverno-fips, image-factory-fips, ratify, tflint, zarf-fips, tkn-fips, teleport-operator-fips, kyverno, crossplane, crossplane-fips, falcoctl, policy-controller, kyverno-notation-aws, trivy, zarf, tekton-chains, kubescape, tekton-chains-fips, kyverno-notation-aws-fip...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: kyverno-fips, image-factory-fips, ratify, tflint, zarf-fips, tkn-fips, teleport-operator-fips, kyverno, crossplane, crossplane-fips, falcoctl, policy-controller, kyverno-notation-aws, trivy, zarf, tekton-chains, kubescape, tekton-chains-fips, kyverno-notation-aws-fip...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: aactl, kots, kyverno-notation-aws, tekton-chains, buildah, kyverno, ratify, undock, skopeo, podman, gitsign, flux-source-controller, kubescape, slsa-verifier, witness, zarf, falcoctl...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: aactl, kots, kyverno-notation-aws, tekton-chains, buildah, kyverno, ratify, undock, skopeo, podman, gitsign, flux-source-controller, kubescape, slsa-verifier, witness, zarf, falcoctl...