GO-2023-2379 vulnerabilities

Vulnerabilities for packages: gitsign, vexctl, falcoctl, falcoctl-fips, cosign-fips, tekton-chains, kubescape...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: gitsign, vexctl, falcoctl, mc, falcoctl-fips, external-secrets-fips, cosign-fips, spire-server, minio, tekton-chains, boring-registry, kubescape, spire-server-fips...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: policy-controller, apko, melange, spire-server, aactl, neuvector-sigstore-interface, tekton-chains, flux-source-controller, spire-server-fips, gitsign, falcoctl, tekton-chains-fips, skaffold, goreleaser, zarf, slsa-verifier, tkn, vexctl, falcoctl-fips, ko-fips,...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: gitsign, kubescape, tekton-chains, falcoctl, vexctl...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, sigstore-scaffolding, vexctl, gitsign, buildkitd, spire-server, falcoctl, goreleaser, trivy,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: gitsign, minio, kubescape, mc, tekton-chains, spire-server, falcoctl, boring-registry, vexctl...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tekton-chains, tkn, rekor, kubescape, flux-kustomize-controller, oauth2-proxy, kots, vexctl, gitsign, slsa-verifier, aactl, argo-workflows, sops, spire-server, terragrunt, cosign, cloudflared, dex, fulcio...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, sigstore-scaffolding, docker-cli-buildx, vexctl, gitsign, aactl, spire-server, falcoctl, goreleaser,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: gitsign, slsa-verifier, kubescape, aactl, tekton-chains, zarf, witness, falcoctl, skopeo, falco-no-driver, sigstore-scaffolding, kots, cosign, vexctl...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, sigstore-scaffolding, docker-cli-buildx, vexctl, gitsign, slsa-verifier, buildkitd, aactl,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, rekor, tflint, sigstore-scaffolding, vexctl, gitsign, slsa-verifier, buildkitd, aactl, spire-server,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tekton-chains, zarf, policy-controller, flux-image-automation-controller, bank-vaults, src-fingerprint, crossplane-provider-azure, tkn, crossplane-provider-azure-managedidentity, terraform, step-ca, k3d, neuvector-sigstore-interface, kubescape...

openSUSE 16 Security Update : vexctl (openSUSE-SU-2026:21481-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21481-1 advisory. - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto...

OPENSUSE-SU-2026:21481-1 Security update for vexctl

This update for vexctl fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto bsc1234486. - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, verticadb-operator, lvm-driver, gitaly, prometheus, harbor, envconsul, filebrowser, grpc-health-probe, ko, rancher-fleet, cerbos, fuse-overlayfs-snapshotter, grpcurl, policy-controller, bank-vaults, boring-registry, kine, net-kourier, terraform,...

GHSA-P436-GJF2-799P vulnerabilities

Vulnerabilities for packages: kyverno, harbor, rancher-system-agent, rancher-fleet, ko, k9s, tekton-chains, xeol, policy-controller, traefik, kyverno-notation-aws, kwok, crossplane, trufflehog, vendir, k3d, manifest-tool, rke2-cloud-provider, bento, flux-kustomize-controller, lazydocker, kbld,...

CVE-2025-15558 vulnerabilities

Vulnerabilities for packages: kyverno, harbor, rancher-system-agent, rancher-fleet, ko, k9s, tekton-chains, xeol, policy-controller, traefik, kyverno-notation-aws, kwok, crossplane, trufflehog, vendir, k3d, manifest-tool, rke2-cloud-provider, bento, flux-kustomize-controller, lazydocker, kbld,...

GHSA-P436-GJF2-799P vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, xeol, vault-secrets-webhook, minio-operator, knative-serving, image-factory, trufflehog-fips, vitess, ko-fips, harbor-scanner-trivy-fips, k3d, teleport, cloudbeat, flux-fips, trufflehog, rke2-cloud-provider, traefik,...

CVE-2025-15558 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, xeol, vault-secrets-webhook, minio-operator, knative-serving, image-factory, trufflehog-fips, vitess, ko-fips, harbor-scanner-trivy-fips, k3d, teleport, cloudbeat, flux-fips, trufflehog, rke2-cloud-provider, traefik,...

Security update for vexctl

This update for vexctl fixes the following issues: Update to version 0.4.1+git78.f951e3a: CVE-2025-22868: Unexpected memory consumption during token parsing in golang.org/x/oauth2. bsc1239186 CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in...