GO-2026-4910 vulnerabilities

Vulnerabilities for packages: chezmoi, kargo, pulumi-language-java, grype, gitea, snyk-cli, zarf, scorecard, cerbos, external-secrets-operator, k9s, gitaly, trufflehog, gitlab-runner, apko, argocd-image-updater, dagger, kubescape, pulumi-language-dotnet, steampipe, argo-workflows, skaffold, nfpm,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kubescape, ratify, policy-controller, kyverno, kyverno-notation-aws, trivy, slsa-verifier, crossplane, trivy-operator, aactl, zot, teleport...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, zarf, goreleaser, kubescape, tflint, aactl, gitsign, policy-controller, kyverno, falcoctl, neuvector-sigstore-interface, ko, spire-server, ratify, slsa-verifier, crossplane, trivy-operator, teleport, tekton-chains, tkn...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cilium-cli, kargo, crossplane-provider-azure-sql, gitea, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, loki, openbao, opentelemetry-collector, k9s, flux-notification-controller, dagger, apko, argocd-image-updater, kubescape, steampipe,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, kyverno-notation-aws, zarf, goreleaser, gh, docker-cli-buildx, vexctl, kubescape, skaffold, tflint, docker, aactl, zot, gitsign, flux-source-controller, policy-controller, kyverno, falcoctl, neuvector-sigstore-interface, ko, spire-server, trivy,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, kyverno-notation-aws, zarf, rekor, goreleaser, gh, vexctl, kubescape, skaffold, tflint, docker, aactl, zot, gitsign, flux-source-controller, policy-controller, kyverno, falcoctl, neuvector-sigstore-interface, ko, spire-server, trivy, buildkitd,...

GHSA-Q3FV-X8VG-QQM4 vulnerabilities

Vulnerabilities for packages: trivy-operator...

CVE-2026-54448 vulnerabilities

Vulnerabilities for packages: trivy-operator...

GHSA-Q3FV-X8VG-QQM4 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, trivy-operator, trivy-operator-fips, cloudbeat...

CVE-2026-54448 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, trivy-operator, trivy-operator-fips, cloudbeat...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: trivy-operator, crossplane, cloudbeat-fips, neuvector-sigstore-interface, kyverno, kubescape, teleport, tflint-fips, zarf-fips, kyverno-notation-aws-fips, tflint, spire-server-fips, kyverno-fips, trivy-fips, cloudbeat, policy-controller-fips, kyverno-notation-aws,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: k8s-driver-manager-fips, net-kourier-fips, sops-fips, cluster-api-gcp-controller, logstash-exporter-fips, databricks-cli, external-dns-fips, flannel-fips, prometheus-node-exporter, crossplane-provider-aws-rolesanywhere-fips, drone,...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: kubescape, ratify, policy-controller, kyverno, kyverno-notation-aws, falcoctl, zarf, neuvector-sigstore-interface, crossplane, tflint, goreleaser, trivy-operator, spire-server, aactl, trivy, gitsign, tekton-chains, tkn...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: kubescape, ratify, policy-controller, kyverno, kyverno-notation-aws, falcoctl, zarf, neuvector-sigstore-interface, crossplane, tflint, goreleaser, trivy-operator, spire-server, aactl, trivy, gitsign, tekton-chains, tkn...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: rancher-agent, spire-server, kine, k9s, elastic-agent-fips, seaweedfs-rocksdb, drone-fips, containerd, mattermost, vault-fips, argo-cd-fips, kube-arangodb-fips, backup-restore-operator, commercial-grafana, cloudbeat, traefik, istio, gatekeeper-fips, coder-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: rancher-machine, chainloop-cli-fips, nuclei, chainctl, rancher-agent, spire-server, kine, crossplane, chezmoi, elastic-agent-fips, k9s, seaweedfs-rocksdb, caddy, trivy, sops-fips, step-kms-plugin-fips, amazon-ssm-agent, drone-fips, step-issuer, teleport, containerd,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: rancher-machine, chainloop-cli-fips, nuclei, chainctl, rancher-agent, spire-server, kine, crossplane, chezmoi, elastic-agent-fips, k9s, seaweedfs-rocksdb, caddy, trivy, sops-fips, step-kms-plugin-fips, amazon-ssm-agent, drone-fips, step-issuer, teleport, containerd,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: rancher-agent, spire-server, kine, k9s, elastic-agent-fips, seaweedfs-rocksdb, drone-fips, containerd, mattermost, vault-fips, argo-cd-fips, kube-arangodb-fips, backup-restore-operator, commercial-grafana, cloudbeat, traefik, istio, gatekeeper-fips, coder-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: rancher-agent, chezmoi, sops-fips, crossplane-provider-aws-mediapackage, step-kms-plugin-fips, crossplane-provider-aws-backup-fips, backup-restore-operator, databricks-cli, istio, crossplane-provider-aws-cloudwatch, coder-fips, docker-fips, omnictl-multiarch-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: rancher-agent, chezmoi, sops-fips, crossplane-provider-aws-mediapackage, step-kms-plugin-fips, crossplane-provider-aws-backup-fips, backup-restore-operator, databricks-cli, istio, crossplane-provider-aws-cloudwatch, coder-fips, docker-fips, omnictl-multiarch-fips,...