GO-2024-2918 vulnerabilities

Vulnerabilities for packages: cosign, nuclei, cortex, boring-registry, flux-image-reflector-controller, falcoctl, fulcio, rekor, zot, grafana-mimir, flux-source-controller, argo-events, airflow, terragrunt, fluent-bit-plugin-loki, tekton-chains, argo-workflows, hugo-extended, py3-azure-identity,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: cosign, fulcio, rekor, flux-source-controller, kots, terragrunt, slsa-verifier, tekton-chains, argo-workflows, kubescape, spire-server, dex, vexctl, sops, tkn, cloudflared, oauth2-proxy, flux-kustomize-controller, gitsign, aactl...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: wolfictl, grype, crossplane, dagger, docker-compose, ko, kubescape, spire-server, cilium-cli, aactl, buf, tkn, buildkitd, trivy, up, conftest, cadvisor, melange, kaniko, ctop, zot, syft, kargo...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: cosign, skaffold, slsa-verifier, apko, tekton-chains, policy-controller, ko, melange, kubescape, spire-server, flux-source-controller, tkn, aactl...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, trivy-operator, falcoctl, crossplane, teleport, slsa-verifier, tekton-chains, ratify, ko, kyverno-notation-aws, kubescape, spire-server, policy-controller, zarf, tkn, kyverno, goreleaser, tflint, gitsign, aactl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cosign, crossplane-provider-aws-ec2, docker, k9s, falcoctl, fulcio, kubernetes-dashboard, grype, mattermost, crossplane-provider-azure-storage, gptscript, flux-notification-controller, hcloud, crossplane-provider-aws-sns, terragrunt, tekton-chains, gitea, loki, act,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: cosign, neuvector-sigstore-interface, falcoctl, docker-cli-buildx, flux-source-controller, crossplane, teleport, skaffold, gh, tekton-chains, ratify, ko, kyverno-notation-aws, kubescape, spire-server, sigstore-scaffolding, vexctl, witness, policy-controller, zarf, tk...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: teleport, ratify, witness, policy-controller, falcoctl, gitsign, goreleaser, kyverno-notation-aws, flux-source-controller, tkn, kyverno, zot, aactl...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: cosign, neuvector-sigstore-interface, docker, trivy-operator, falcoctl, docker-cli-buildx, flux-source-controller, crossplane, teleport, skaffold, gh, slsa-verifier, tekton-chains, ratify, ko, kyverno-notation-aws, kubescape, spire-server, sigstore-scaffolding, vexct...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: cosign, neuvector-sigstore-interface, docker, trivy-operator, falcoctl, rekor, flux-source-controller, crossplane, teleport, skaffold, gh, slsa-verifier, tekton-chains, ratify, ko, kyverno-notation-aws, kubescape, spire-server, sigstore-scaffolding, vexctl, witness,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, helm-set-status, falcoctl, fulcio, portieris, kubernetes-dashboard, gptscript, kapp-controller, helm-operator, delve, kuberlr, cloud-provider-gcp-cloud-controller-manager, bom, tekton-chains, emissary,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: cosign, nuclei, neuvector-sigstore-interface, flux-image-reflector-controller, falcoctl, fulcio, glab, kubevela, rekor, pulumi-kubernetes-operator, zot, grafana-mimir, flux-helm-controller, crossplane-provider-azure-storage, argo-events, flux-source-controller,...

CLEANSTART-2026-VX21477 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DU60388 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: falcoctl, kubescape, kubescape-server, ratify-fips, spire-server-fips, policy-controller-fips, kyverno-notation-aws, crossplane-fips, zarf-fips, tkn-fips, tekton-chains-fips, cloudbeat-fips, kyverno, trivy-fips, neuvector-sigstore-interface, tkn, image-factory-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cosign, docker, k9s, falcoctl, fulcio, kubernetes-dashboard, grype, mattermost, crossplane-provider-azure-storage, gptscript, flux-notification-controller, hcloud, terragrunt, tekton-chains, gitea, loki, act, sops, kubernetes, fscrypt, witness, policy-controller,...

CLEANSTART-2026-EL22377 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JV06428 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-emr-fips, go-slim, argo-events, gatus-fips, crossplane-provider-aws-networkmanager, crossplane-provider-aws-vpc, crossplane-provider-azure-securityinsights, kube-conformance, prometheus-operator, karpenter, argocd-image-updater-fips,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-emr-fips, go-slim, argo-events, gatus-fips, crossplane-provider-aws-networkmanager, crossplane-provider-aws-vpc, crossplane-provider-azure-securityinsights, kube-conformance, prometheus-operator, karpenter, argocd-image-updater-fips,...