GO-2024-2948 vulnerabilities

Vulnerabilities for packages: conftest-fips, snyk-cli, tflint, kubescape, terraform, zarf, terragrunt, tfsec, zot, kots, k9s, wolfictl, grype, conftest, trivy-fips, trivy...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: cloudbeat, tkn, goreleaser, aactl, zarf, policy-controller, crossplane-fips, kubescape-server, kyverno-fips, neuvector-sigstore-interface, neuvector-sigstore-interface-fips, tekton-chains, tkn-fips, kubescape-server-fips, tflint, kyverno-notation-aws-fips,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: terraform, gptscript, envoy-gateway, podman, vcluster, xeol, gitleaks, kubescape-operator, opentofu, nsc, trivy, filebrowser, zarf, gitness, zot, trivy-operator, grafana-alloy, tflint, nuclei, trufflehog, guac, k9s, undock, rancher-fleet, terragrunt, steampipe...

GO-2024-2800 vulnerabilities

Vulnerabilities for packages: terraform, kubescape, zot, conftest, tfsec, k9s, tflint, zarf...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: ferretdb, dbmate, smarter-device-manager, step, vcluster, gomplate, kaniko, kots, fulcio, k8sgpt-operator, terraform-provider-google, dex, spicedb, dagger, k8sgpt, trivy, zarf, falcosidekick, rqlite, cilium-cli, opa, opentelemetry-collector, restic, spire-server,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: buildkitd, falcoctl, cosign, tkn, skaffold, trivy, zarf, witness, gh, spire-server, sigstore-scaffolding, zot, docker, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, flux-source-controller, gitsign, policy-controller,...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: gitsign, trivy-operator, crossplane, zarf, kubescape, ratify, falcoctl, kyverno, policy-controller, tkn, aactl, tekton-chains, kyverno-notation-aws, neuvector-sigstore-interface, trivy, tflint...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: crossplane, ratify, falcoctl, tkn, aactl, zarf, spire-server, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, slsa-verifier, gitsign, kyverno, policy-controller, tekton-chains, kyverno-notation-aws...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, step, buildkitd, podman, falcoctl, crossplane-provider-aws-kinesis, crossplane-provider-aws-elasticache, helm, gitea, aactl, skaffold, prometheus, pulumi-language-java, k8sgpt, cilium-cli, zot,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: ratify, falcoctl, docker-cli-buildx, cosign, tkn, skaffold, aactl, zarf, witness, gh, spire-server, sigstore-scaffolding, zot, goreleaser, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, flux-source-controller, gitsign, policy-controller, tekton-chains...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: crossplane, buildkitd, ratify, docker-cli-buildx, cosign, falcoctl, tkn, skaffold, aactl, trivy, zarf, witness, gh, spire-server, sigstore-scaffolding, zot, docker, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: buildkitd, ratify, falcoctl, cosign, tkn, skaffold, aactl, trivy, zarf, witness, gh, spire-server, sigstore-scaffolding, zot, docker, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, rekor, neuvector-sigstore-interface, flux-source-controller,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: emissary, spark-operator, buildkitd, dgraph, falcoctl, ini-file, aactl, mongo-tools, prometheus, k8sgpt, nri-nginx, kube-bench, mockgen, cilium-cli, opa, kubecolor, zot, aws-eks-pod-identity-agent, envconsul, cluster-api-azure-controller, kpt, oauth2-proxy,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: cloudbeat, tkn, aactl, zarf, policy-controller, crossplane-fips, kubescape-server, kyverno-fips, neuvector-sigstore-interface, neuvector-sigstore-interface-fips, tekton-chains, tkn-fips, image-factory-fips, kubescape-server-fips, tflint, kyverno-notation-aws-fips,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: cloudbeat, tkn, goreleaser, aactl, zarf, policy-controller, crossplane-fips, kubescape-server, kyverno-fips, neuvector-sigstore-interface, neuvector-sigstore-interface-fips, tekton-chains, tkn-fips, kubescape-server-fips, tflint, kyverno-notation-aws-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: cloudbeat, tkn, goreleaser, aactl, zarf, policy-controller, crossplane-fips, kubescape-server, kyverno-fips, neuvector-sigstore-interface, neuvector-sigstore-interface-fips, tekton-chains, tkn-fips, kubescape-server-fips, tflint, kyverno-notation-aws-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: crossplane, ratify, falcoctl, tkn, aactl, zarf, spire-server, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, slsa-verifier, gitsign, kyverno, policy-controller, tekton-chains, kyverno-notation-aws...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: crossplane, ratify, falcoctl, tkn, aactl, zarf, spire-server, goreleaser, trivy-operator, tflint, teleport, kubescape, ko, neuvector-sigstore-interface, slsa-verifier, gitsign, kyverno, policy-controller, tekton-chains, kyverno-notation-aws...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: crossplane, buildkitd, ratify, docker-cli-buildx, cosign, falcoctl, tkn, skaffold, aactl, dagger, trivy, zarf, gh, spire-server, zot, docker, goreleaser, trivy-operator, tflint, gitlab-runner, bom, kubescape, teleport, ko, guac, rekor, docker-compose,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: chainctl, cloudbeat, rekor-fips, goreleaser, docker-compose, neuvector-sigstore-interface, tkn-fips, tflint, docker-fips, skaffold-fips, ko-fips, buildkitd, spire-server-fips, cosign-fips, gitsign, docker-cli-buildx-fips, falcoctl-fips, skaffold, gitlab-runner,...