GO-2025-3922 vulnerabilities

Vulnerabilities for packages: gitness, gptscript, podman, rancher-fleet, zarf, grafana-alloy, trivy, trivy-operator, filebrowser, k9s, gitleaks, nuclei, kubescape-operator, xeol, tflint, zot, terraform, terragrunt, nsc, trufflehog, guac, vcluster, steampipe, undock, opentofu, envoy-gateway...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: trivy, trivy-operator, kaniko, scorecard, guac, docker-compose, kubescape, podman, zot, osv-scanner, conftest, skaffold, buildah, docker-cli-buildx...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: trivy, trivy-operator, kaniko, scorecard, guac, docker-compose, kubescape, podman, zot, osv-scanner, conftest, skaffold, buildah, docker-cli-buildx...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, buildkitd, kyverno-notation-aws, tkn, zarf, kubescape, gitsign, cosign, trivy, trivy-operator, policy-controller, docker, flux-source-controller, goreleaser, teleport, vexctl, skaffold, tekton-chains, tflint, witness, zot, ko, falcoctl,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, kaniko, bom, kargo, gptscript, pulumi-language-dotnet, gitlab-runner, rancher-fleet, syft, pulumi-language-java, flux-image-automation-controller, cerbos, argo-events, zarf, external-secrets-operator, kubescape, gitsign, grafana-alloy,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: trivy, trivy-operator, policy-controller, kyverno-notation-aws, slsa-verifier, ratify, teleport, kyverno, aactl, zot, kubescape, crossplane...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, kyverno-notation-aws, slsa-verifier, ratify, tkn, zarf, kubescape, gitsign, trivy-operator, policy-controller, goreleaser, teleport, kyverno, crossplane, tekton-chains, tflint, aactl, ko, falcoctl, spire-server...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: chisel, external-dns, gptscript, podman, cosign, crossplane-provider-aws-sns, traefik, argo-cd, docker-machine-driver-linode, policy-controller, crossplane-provider-aws-iam, rootlesskit, docker, flux-kustomize-controller, kaf, wolfictl, k9s, step-kms-plugin, flux,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, buildkitd, kyverno-notation-aws, slsa-verifier, ratify, tkn, zarf, docker-cli-buildx, kubescape, gitsign, cosign, trivy, trivy-operator, policy-controller, docker, flux-source-controller, goreleaser, teleport, kyverno, vexctl, skaffold,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, buildkitd, rekor, kyverno-notation-aws, slsa-verifier, ratify, tkn, zarf, kubescape, gitsign, cosign, trivy, trivy-operator, policy-controller, docker, flux-source-controller, goreleaser, teleport, vexctl, skaffold, tekton-chains, tflint...

trivy-operator v0.33.0

Kubernetes-native security toolkit. Documentation Introduction The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernete...

GHSA-Q3FV-X8VG-QQM4 vulnerabilities

Vulnerabilities for packages: trivy-operator...

CVE-2026-54448 vulnerabilities

Vulnerabilities for packages: trivy-operator...

GHSA-Q3FV-X8VG-QQM4 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, trivy-operator-fips, cloudbeat, trivy-operator...

CVE-2026-54448 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, trivy-operator-fips, cloudbeat, trivy-operator...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: spire-server-fips, tbot, tkn, tkn-fips, docker-fips, teleport-operator-fips, tekton-chains, trivy-operator-fips, kyverno-notation-aws, ratify, teleport, kubescape-server, tflint-fips, zarf, cloudbeat-fips, zarf-fips, kubescape, trivy, falcoctl,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, mlrun-log-collector-fips, perses-fips, kcp, kafkaexporter-fips, crossplane-provider-aws-cloud9-fips, vexctl, cluster-proportional-autoscaler, crossplane-provider-aws-organizations, multus-cni-fips, gitlab-workhorse-ce,...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: crossplane, trivy, trivy-operator, policy-controller, neuvector-sigstore-interface, tekton-chains, goreleaser, kyverno-notation-aws, spire-server, ratify, tflint, kyverno, aactl, tkn, zarf, falcoctl, kubescape, gitsign...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: crossplane, trivy, trivy-operator, policy-controller, neuvector-sigstore-interface, tekton-chains, goreleaser, kyverno-notation-aws, spire-server, ratify, tflint, kyverno, aactl, tkn, zarf, falcoctl, kubescape, gitsign...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: containerd, falco-no-driver, kine, nemo, gitlab-workhorse-ce-fips, cloud-provider-aws, minio, tekton-pipelines, gitlab-workhorse-ce, kubescape, kubernetes-dashboard, upwind-agent, external-dns, frankenphp-8.3, k9s-fips, gitea-fips, fscrypt, gatekeeper, calico-fips,...