GO-2024-2948 vulnerabilities

Vulnerabilities for packages: snyk-cli, tflint, conftest-fips, terraform, kots, wolfictl, conftest, kubescape, trivy, trivy-fips, zarf, grype, zot, terragrunt, tfsec, k9s...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: cloudbeat, gitsign, goreleaser, cloudbeat-fips, crossplane-fips, aactl, tkn, ko, tbot, trivy-operator-fips, zarf-fips, tekton-chains-fips, tflint, kubescape-server-fips, kyverno-fips, trivy-operator, docker-fips, ratify, crossplane, slsa-verifier, tekton-chains, zarf...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: kubescape-operator, gptscript, vcluster, podman, tflint, gitleaks, trivy, rancher-fleet, opentofu, nuclei, k9s, trivy-operator, gitness, trufflehog, guac, undock, xeol, zarf, terragrunt, steampipe, grafana-alloy, envoy-gateway, filebrowser, zot, terraform, nsc...

GO-2024-2800 vulnerabilities

Vulnerabilities for packages: k9s, zot, zarf, kubescape, tfsec, tflint, conftest, terraform...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: spire-server, grpc-health-probe, opentelemetry-collector, vcluster, kwok, tflint, restic, sigstore-scaffolding, trivy, rqlite, dbmate, sops, melange, terraform-provider-google, pulumi-language-dotnet, terraform-docs, cilium-cli, certificate-transparency, k8sgpt, k3s,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, trivy, vexctl, kyverno-notation-aws, gitsign, trivy-operator, kubescape, buildkitd, teleport, falcoctl, witness, docker, policy-controller, tekton-chains, tkn, zarf, gh, zot, cosign,...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: tekton-chains, kyverno, tkn, gitsign, trivy-operator, zarf, neuvector-sigstore-interface, kubescape, aactl, tflint, falcoctl, ratify, policy-controller, trivy, kyverno-notation-aws, crossplane...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: spire-server, tflint, kyverno-notation-aws, crossplane, kyverno, gitsign, trivy-operator, kubescape, teleport, falcoctl, slsa-verifier, policy-controller, tekton-chains, tkn, zarf, ratify, neuvector-sigstore-interface, aactl, goreleaser, ko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-compose, crossplane-provider-aws-ec2, gitea, spire-server, pulumi, snyk-cli, crossplane-provider-azure-storage, flux-source-controller, trivy, falco-no-driver, tw, kubernetes, opentofu, cilium-cli, go-discover, kubescape, hcloud, rancher,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, vexctl, kyverno-notation-aws, gitsign, kubescape, teleport, falcoctl, witness, policy-controller, tekton-chains, tkn, zarf, gh, ratify, zot, cosign, docker-cli-buildx,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, trivy, vexctl, kyverno-notation-aws, crossplane, kyverno, gitsign, trivy-operator, kubescape, buildkitd, teleport, falcoctl, witness, slsa-verifier, docker, policy-controller, tekton-chains...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, trivy, vexctl, kyverno-notation-aws, gitsign, trivy-operator, kubescape, buildkitd, teleport, falcoctl, witness, slsa-verifier, docker, policy-controller, tekton-chains, tkn, zarf, gh,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: chartmuseum, nri-redis, grafana-rollout-operator, rabbitmq-default-user-credential-updater, trivy, migrate, hubble, kyverno-notation-aws, opentofu, cilium-cli, kubecolor, nri-f5, nats-server-config-reloader, controller-gen, witness, yunikorn-k8shim, render-template,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: cloudbeat, gitsign, cloudbeat-fips, crossplane-fips, aactl, tkn, tbot, trivy-operator-fips, zarf-fips, tekton-chains-fips, tflint, kubescape-server-fips, kyverno-fips, trivy-operator, docker-fips, ratify, crossplane, tekton-chains, zarf, kyverno, commercial-kyverno,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: cloudbeat, gitsign, goreleaser, cloudbeat-fips, crossplane-fips, aactl, tkn, ko, tbot, trivy-operator-fips, zarf-fips, tekton-chains-fips, tflint, kubescape-server-fips, kyverno-fips, trivy-operator, docker-fips, ratify, crossplane, slsa-verifier, tekton-chains, zarf...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: cloudbeat, gitsign, goreleaser, cloudbeat-fips, crossplane-fips, aactl, tkn, ko, tbot, trivy-operator-fips, zarf-fips, tekton-chains-fips, tflint, kubescape-server-fips, kyverno-fips, trivy-operator, docker-fips, ratify, crossplane, slsa-verifier, tekton-chains, zarf...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: spire-server, tflint, kyverno-notation-aws, crossplane, kyverno, gitsign, trivy-operator, kubescape, teleport, falcoctl, slsa-verifier, policy-controller, tekton-chains, tkn, zarf, ratify, neuvector-sigstore-interface, aactl, goreleaser, ko...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: spire-server, tflint, kyverno-notation-aws, crossplane, kyverno, gitsign, trivy-operator, kubescape, teleport, falcoctl, slsa-verifier, policy-controller, tekton-chains, tkn, zarf, ratify, neuvector-sigstore-interface, aactl, goreleaser, ko...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: docker-compose, skaffold, spire-server, flux-source-controller, tflint, trivy, vexctl, kyverno-notation-aws, crossplane, kyverno, gitsign, trivy-operator, kubescape, buildkitd, teleport, falcoctl, gitlab-runner, slsa-verifier, docker, policy-controller, tekton-chains...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: goreleaser, aactl, zarf-fips, tekton-chains-fips, kyverno-fips, docker-fips, ratify, flux-source-controller-fips, skaffold, commercial-kyverno, kubescape-server, kubescape, falcoctl, gh, chainloop-control-plane, trivy-fips, cg, kyverno-policy-reporter-plugins-kyverno...