GO-2024-2918 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, rclone, policy-controller, opentelemetry-collector-contrib, ksops, up, nuclei, restic, falcoctl, fulcio, flyte, flux-kustomize-controller, airflow, timestamp-authority, argo-workflows, chezmoi, step-ca, prometheus-operator, hugo-extended,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, spire-server, fulcio, flux-kustomize-controller, argo-workflows, terragrunt, flux-source-controller, rekor, kubescape, cloudflared, dex, cosign, vexctl, tkn, aactl, kots, gitsign, tekton-chains, slsa-verifier, sops...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, conftest, dagger, buf, crossplane, up, kargo, wolfictl, ko, buildkitd, melange, ctop, cilium-cli, kubescape, grype, cadvisor, zot, tkn, kaniko, aactl, docker-compose, syft...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: melange, apko, aactl, spire-server, policy-controller, skaffold, kubescape, tekton-chains, flux-source-controller, cosign, ko, slsa-verifier, tkn...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: spire-server, policy-controller, crossplane, tflint, falcoctl, ko, kyverno, kyverno-notation-aws, kubescape, goreleaser, tkn, zarf, aactl, teleport, neuvector-sigstore-interface, trivy-operator, gitsign, tekton-chains, ratify, slsa-verifier...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, kubernetes-dashboard, chisel, gptscript, terraform-provider-acme, cilium, nuclei, kargo, crossplane-provider-aws-rds, crossplane-provider-keycloak, fulcio, skaffold, crossplane-provider-aws-cloudformation, gomplate,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: spire-server, policy-controller, crossplane, tflint, falcoctl, skaffold, gh, flux-source-controller, sigstore-scaffolding, ko, kyverno, kyverno-notation-aws, kubescape, zot, goreleaser, cosign, vexctl, tkn, zarf, aactl, teleport, neuvector-sigstore-interface, witness...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, policy-controller, crossplane, tflint, falcoctl, skaffold, docker, gh, flux-source-controller, sigstore-scaffolding, ko, buildkitd, kyverno, kyverno-notation-aws, kubescape, zot, goreleaser, cosign, vexctl, tkn, zarf, aactl, teleport,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: aactl, policy-controller, teleport, witness, zot, gitsign, flux-source-controller, goreleaser, ratify, falcoctl, kyverno, kyverno-notation-aws, tkn...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, policy-controller, crossplane, tflint, falcoctl, skaffold, docker, gh, flux-source-controller, rekor, ko, buildkitd, kyverno, sigstore-scaffolding, kyverno-notation-aws, kubescape, zot, goreleaser, cosign, vexctl, tkn, zarf, aactl, teleport,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: chartmuseum, wire-go, kube-logging-operator, helm-set-status, cloud-provider-vsphere, cluster-api-helm-controller, kubernetes-dashboard, gptscript, kuberlr, nuclei, aws-otel-collector, fulcio, kpt, undock, helm-operator, azure-service-operator, polaris,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane-provider-azure-sql, glab, policy-controller, crossplane-provider-azure-managedidentity, opentelemetry-collector-contrib, crossplane-provider-azure-storage, pulumi-kubernetes-operator, ksops, nuclei, kargo, falcoctl, fulcio,...

CLEANSTART-2026-VX21477 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DU60388 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, neuvector-sigstore-interface-fips, gitsign, trivy-operator, kubescape-server, kyverno-notation-aws, falcoctl-fips, tbot, tflint, kubescape, crossplane, docker-fips, teleport-operator-fips, image-factory, ratify-fips, zarf, trivy,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, kubernetes-dashboard, chisel, gptscript, cilium, nuclei, kargo, fulcio, skaffold, gomplate, scorecard, vault-benchmark, buildkitd, melange, cilium-cli, step-issuer, atlantis, guac, age, flux, splunk-otel-collector,...

CLEANSTART-2026-EL22377 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JV06428 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ssm, crossplane-provider-aws-wafv2, openbao-fips, thanos-receive-controller-fips, cortex, chainloop-control-plane-fips, fleet-server-fips, crossplane-provider-aws-guardduty, argo-events-fips, upwind-agent, crossplane-provider-aws-ec2-fips,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ssm, crossplane-provider-aws-wafv2, openbao-fips, thanos-receive-controller-fips, cortex, chainloop-control-plane-fips, fleet-server-fips, crossplane-provider-aws-guardduty, argo-events-fips, upwind-agent, crossplane-provider-aws-ec2-fips,...