GO-2023-2379 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, tekton-chains, gitsign, falcoctl, cosign-fips, kubescape, vexctl...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: boring-registry, spire-server-fips, falcoctl-fips, tekton-chains, gitsign, mc, falcoctl, cosign-fips, external-secrets-fips, minio, vexctl, kubescape, spire-server...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: skaffold, apko, zot, spire-server, flux-source-controller, ko-fips, zarf, wolfictl, tkn, aactl, melange, kubescape, spire-server-fips, ko, gitsign, neuvector-sigstore-interface, chainctl, goreleaser, tkn-fips, slsa-verifier, falcoctl-fips, tekton-chains, falcoctl,...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: tekton-chains, falcoctl, gitsign, kubescape, vexctl...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, gitsign, gh, tkn, witness, zot, neuvector-sigstore-interface, falcoctl, tflint, skaffold, trivy, kubescape, flux-source-controller, vexctl, spire-server, cosign, goreleaser, sigstore-scaffolding, tekton-chains, zarf, trivy-operator, docker,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: spire-server, minio, boring-registry, tekton-chains, falcoctl, mc, gitsign, kubescape, vexctl...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: kots, terragrunt, cloudflared, gitsign, oauth2-proxy, aactl, slsa-verifier, tkn, argo-workflows, fulcio, sops, dex, kubescape, flux-source-controller, vexctl, spire-server, flux-kustomize-controller, cosign, tekton-chains, rekor...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, docker-cli-buildx, gitsign, aactl, gh, tkn, witness, zot, neuvector-sigstore-interface, falcoctl, tflint, skaffold, kubescape, flux-source-controller, vexctl, spire-server, cosign, goreleaser, sigstore-scaffolding, tekton-chains, zarf, teleport,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, docker-cli-buildx, gitsign, gh, aactl, slsa-verifier, tkn, witness, zot, neuvector-sigstore-interface, falcoctl, tflint, skaffold, trivy, kubescape, flux-source-controller, vexctl, spire-server, cosign, goreleaser, kyverno, sigstore-scaffolding,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: skopeo, kots, cosign, slsa-verifier, sigstore-scaffolding, tekton-chains, falcoctl, falco-no-driver, gitsign, aactl, zarf, kubescape, witness, vexctl...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, gitsign, gh, aactl, slsa-verifier, tkn, witness, zot, neuvector-sigstore-interface, falcoctl, tflint, skaffold, trivy, kubescape, flux-source-controller, vexctl, spire-server, cosign, goreleaser, sigstore-scaffolding, tekton-chains, zarf,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kubevela, rabbitmq-messaging-topology-operator, actions-runner-controller, rook, src-fingerprint, pulumi, step-ca, terragrunt, argo-events, bank-vaults, crossplane-provider-azure-authorization, crossplane-provider-azure-managedidentity,...

openSUSE 16 Security Update : vexctl (openSUSE-SU-2026:21481-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21481-1 advisory. - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto...

OPENSUSE-SU-2026:21481-1 Security update for vexctl

This update for vexctl fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto bsc1234486. - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, step, openbao, spqr, seaweedfs, kubernetes-csi-driver-nfs, falco-exporter, runc, filebrowser, argo-events, lazydocker, jitsucom-bulker, kyverno-notation-aws, dapr, terraform-provider-azapi, k8sgpt-operator, gitsign, mc,...

GHSA-P436-GJF2-799P vulnerabilities

Vulnerabilities for packages: openbao, k9s, rancher-fleet, nerdctl, lazydocker, trufflehog, kubeflow-katib, kyverno-notation-aws, vitess, gitsign, harbor, aactl, gh, kargo, manifest-tool, dagdotdev, slsa-verifier, k3d, witness, xeol, zot, traefik, vcluster, argo-workflows, minio-operator, kbld,...

CVE-2025-15558 vulnerabilities

Vulnerabilities for packages: openbao, k9s, rancher-fleet, nerdctl, lazydocker, trufflehog, kubeflow-katib, kyverno-notation-aws, vitess, gitsign, harbor, aactl, gh, kargo, manifest-tool, dagdotdev, slsa-verifier, k3d, witness, xeol, zot, traefik, vcluster, argo-workflows, minio-operator, kbld,...

GHSA-P436-GJF2-799P vulnerabilities

Vulnerabilities for packages: traefik, kyverno-policy-reporter-plugins-kyverno, minio-operator-fips, istio-fips, kyverno, kubescape-operator-fips, harbor-fips, istio, nerdctl-fips, cloudbeat, gh, tekton-chains, guac, openbao, policy-controller, kyverno-notation-aws, k3s, flux-helm-controller-fips...

CVE-2025-15558 vulnerabilities

Vulnerabilities for packages: traefik, kyverno-policy-reporter-plugins-kyverno, minio-operator-fips, istio-fips, kyverno, kubescape-operator-fips, harbor-fips, istio, nerdctl-fips, cloudbeat, gh, tekton-chains, guac, openbao, policy-controller, kyverno-notation-aws, k3s, flux-helm-controller-fips...

Security update for vexctl

This update for vexctl fixes the following issues: Update to version 0.4.1+git78.f951e3a: CVE-2025-22868: Unexpected memory consumption during token parsing in golang.org/x/oauth2. bsc1239186 CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in...