GO-2024-2948 vulnerabilities

Vulnerabilities for packages: grype, k9s, snyk-cli, kots, tflint, zot, tfsec, trivy-fips, terraform, conftest, kubescape, trivy, wolfictl, conftest-fips, terragrunt, zarf...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: gitsign, neuvector-sigstore-interface, tekton-chains, trivy-operator-fips, kyverno-notation-aws, falcoctl, kyverno, slsa-verifier, kubescape-server-fips, cloudbeat-fips, tekton-chains-fips, ratify, zarf-fips, commercial-kyverno, ko-fips, falcoctl-fips,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: kubescape-operator, trufflehog, k9s, xeol, zarf, terraform, gptscript, opentofu, nsc, terragrunt, zot, gitness, filebrowser, grafana-alloy, trivy-operator, undock, rancher-fleet, envoy-gateway, tflint, vcluster, gitleaks, guac, nuclei, podman, trivy, steampipe...

GO-2024-2800 vulnerabilities

Vulnerabilities for packages: kubescape, tflint, k9s, zarf, zot, conftest, terraform, tfsec...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dbmate, gomplate, sigstore-scaffolding, restic, opentelemetry-collector-contrib, minio, fulcio, hubble-ui, kots, pulumi-language-dotnet, zarf, grafana-mimir, k3s, osv-scanner, dex, kube-rbac-proxy, terragrunt, grpc-health-probe, kubernetes-csi-driver-hostpath, spegel...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, zarf, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, zot, docker, kyverno-notation-aws, teleport, buildkitd, flux-source-controller, policy-controller, tekton-chains, vexctl, cosign, trivy-operator, skaffold, tkn,...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: crossplane, kubescape, tflint, zarf, trivy-operator, aactl, gitsign, kyverno-notation-aws, falcoctl, tekton-chains, policy-controller, tkn, kyverno, ratify, trivy, neuvector-sigstore-interface...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: slsa-verifier, zarf, gitsign, goreleaser, falcoctl, neuvector-sigstore-interface, crossplane, kyverno-notation-aws, teleport, tekton-chains, policy-controller, kyverno, trivy-operator, tkn, kubescape, tflint, spire-server, aactl, ratify, ko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gomplate, k9s, kots, cluster-api-azure-controller, crossplane-provider-aws-lambda, gitlab-kas, crossplane-provider-aws-firehose, crossplane-provider-aws-eks, crossplane-provider-aws-kinesis, zot, docker, buildkitd, crossplane-provider-aws-cloudwatchlogs,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, zarf, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, zot, kyverno-notation-aws, teleport, flux-source-controller, policy-controller, tekton-chains, vexctl, cosign, skaffold, tkn, kubescape, tflint, spire-server, aactl,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, slsa-verifier, zarf, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, crossplane, zot, docker, kyverno-notation-aws, teleport, buildkitd, flux-source-controller, policy-controller, tekton-chains, kyverno, vexctl, cosign,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, cluster-api-azure-controller, kind, kubernetes-dashboard-web, terraform, nri-redis, rabbitmq-default-user-credential-updater, cis-operator, polaris, dex, delve, regclient, aws-application-networking-k8s, zot, ip-masq-agent...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, slsa-verifier, zarf, gitsign, goreleaser, witness, falcoctl, gh, neuvector-sigstore-interface, zot, docker, kyverno-notation-aws, teleport, buildkitd, flux-source-controller, policy-controller, rekor, tekton-chains, vexctl, cosign, trivy-operato...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: gitsign, neuvector-sigstore-interface, tekton-chains, trivy-operator-fips, kyverno-notation-aws, falcoctl, trivy-fips, kyverno, image-factory, trivy, kubescape-server-fips, cloudbeat-fips, tekton-chains-fips, ratify, image-factory-fips, zarf-fips, commercial-kyverno,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: gitsign, neuvector-sigstore-interface, tekton-chains, trivy-operator-fips, kyverno-notation-aws, falcoctl, kyverno, slsa-verifier, kubescape-server-fips, cloudbeat-fips, tekton-chains-fips, ratify, zarf-fips, commercial-kyverno, ko-fips, falcoctl-fips,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: gitsign, neuvector-sigstore-interface, tekton-chains, trivy-operator-fips, kyverno-notation-aws, falcoctl, kyverno, slsa-verifier, kubescape-server-fips, cloudbeat-fips, tekton-chains-fips, ratify, zarf-fips, commercial-kyverno, ko-fips, falcoctl-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: slsa-verifier, zarf, gitsign, goreleaser, falcoctl, neuvector-sigstore-interface, crossplane, kyverno-notation-aws, teleport, tekton-chains, policy-controller, kyverno, trivy-operator, tkn, kubescape, tflint, spire-server, aactl, ratify, ko...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: slsa-verifier, zarf, gitsign, goreleaser, falcoctl, neuvector-sigstore-interface, crossplane, kyverno-notation-aws, teleport, tekton-chains, policy-controller, kyverno, trivy-operator, tkn, kubescape, tflint, spire-server, aactl, ratify, ko...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: slsa-verifier, gitlab-runner, zarf, gitsign, goreleaser, falcoctl, gh, neuvector-sigstore-interface, crossplane, zot, docker, kyverno-notation-aws, teleport, buildkitd, flux-source-controller, policy-controller, rekor, kyverno, tekton-chains, vexctl, cosign,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, skaffold-fips, kyverno, tekton-chains-fips, zarf-fips, ko-fips, crossplane, tflint-fips, docker-cli-buildx, docker-fips, cosign, gitlab-runner-fips, tkn-fips, kyverno-policy-reporter-plugins-kyverno, trivy-operator-fips, kyverno-notation-aws, zot,...