GO-2026-5952 vulnerabilities

Vulnerabilities for packages: trivy, policy-controller, ratify, trivy-operator, crossplane, zarf, falcoctl, gitsign, neuvector-sigstore-interface, kyverno, tkn, kubescape, tekton-chains, tflint, kyverno-notation-aws, aactl...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: policy-controller, ko, flux-source-controller, apko, skaffold, melange, cosign, kubescape, tekton-chains, tkn, slsa-verifier, spire-server, aactl...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: fulcio, kots, terragrunt, vexctl, flux-source-controller, gitsign, tekton-chains, slsa-verifier, oauth2-proxy, rekor, tkn, aactl, flux-kustomize-controller, cloudflared, cosign, dex, kubescape, argo-workflows, spire-server, sops...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: policy-controller, crossplane, zarf, kyverno, kyverno-notation-aws, teleport, vexctl, ratify, sigstore-scaffolding, flux-source-controller, gitsign, buildkitd, tekton-chains, zot, slsa-verifier, trivy-operator, docker-cli-buildx, trivy, witness, tkn, tflint, gh,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, zarf, falcoctl, witness, gitsign, kots, cosign, falco-no-driver, kubescape, tekton-chains, slsa-verifier, skopeo, vexctl, aactl...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: policy-controller, zarf, kyverno-notation-aws, teleport, vexctl, ratify, sigstore-scaffolding, flux-source-controller, gitsign, tekton-chains, zot, docker-cli-buildx, witness, tkn, tflint, gh, aactl, ko, falcoctl, neuvector-sigstore-interface, skaffold, cosign,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ini-file, rancher-system-upgrade-controller, kubecolor, polaris, undock, opentofu, kubernetes-csi-driver-nfs, docker-cli, docker-credential-gcr, kubernetes-dashboard-auth, kyverno-notation-aws, kube-logging-operator, swagger, cni-plugins, gobump, zot,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: policy-controller, zarf, kyverno-notation-aws, teleport, vexctl, ratify, sigstore-scaffolding, flux-source-controller, gitsign, buildkitd, tekton-chains, zot, slsa-verifier, trivy-operator, trivy, witness, rekor, tkn, tflint, gh, docker, aactl, ko, falcoctl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: fulcio, policy-controller, rook, timestamp-authority, zarf, terragrunt, ksops, crossplane-provider-azure-authorization, opentelemetry-collector, crossplane-provider-azure-storage, flux-image-reflector-controller, skopeo, vexctl, gomplate, terraform-provider-azurerm,...

CLEANSTART-2026-RE30617 Security fixes in tekton-pipelines-fips 1.14.0-r1

Package tekton-pipelines-fips version 1.14.0-r1 fixes 1 vulnerabilities: CVE-2026-56852...

CLEANSTART-2026-PV97699 Security fixes in tekton-pipelines-fips 1.14.0-r2

Package tekton-pipelines-fips version 1.14.0-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-VH25364 Security fixes in tekton-pipelines-fips 1.14.0-r3

Package tekton-pipelines-fips version 1.14.0-r3 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

PT-2026-85991

Package tekton-pipelines-fips version 1.14.0-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

PT-2026-86061

Package tekton-pipelines-fips version 1.14.0-r3 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

tekton-cli-0.46.0-1.1 on GA media (moderate)

tekton-cli-0.46.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11471-1 Rating: moderate Cross-References: CVE-2026-42505 CVSS scores: CVE-2026-42505 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now ...

OPENSUSE-SU-2026:11471-1 tekton-cli-0.46.0-1.1 on GA media

These are all security issues fixed in the tekton-cli-0.46.0-1.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-LS74618 Security fixes in tekton-pipelines 1.11.0-r1

Package tekton-pipelines version 1.11.0-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-PK71881 Security fixes in tekton-chains 0.26.0-r1

Package tekton-chains version 0.26.0-r1 fixes 5 vulnerabilities: ghsa-4qg8-fj49-pxjh, ghsa-whqx-f9j3-ch6m, ghsa-846p-jg2w-w324, ghsa-fphv-w9fq-2525, ghsa-59jp-pj84-45mr...

CLEANSTART-2026-NP82781 Security fixes in tekton-chains-fips 0.26.0-r1

Package tekton-chains-fips version 0.26.0-r1 fixes 9 vulnerabilities: ghsa-4qg8-fj49-pxjh, ghsa-whqx-f9j3-ch6m, ghsa-846p-jg2w-w324, ghsa-fphv-w9fq-2525, ghsa-59jp-pj84-45mr...

CLEANSTART-2026-RM82878 Security fixes in tekton-pipelines 1.7.0-r1

Package tekton-pipelines version 1.7.0-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...