Vulnerability Database - OSV

GHSA-72c7-4g63-hpw5

Go/github.com/in-toto/go-witness

go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents 15 Oct 2025

Fix available
Severity - 6.9 (Medium)

CLEANSTART-2026-AQ99839

CleanStart/tekton-chains
CleanStart/tekton-chains-fips

Security fix for ghsa-72c7-4g63-hpw5 applied in: tekton-chains 0.26.0-r0, tekton-chains-fips 0.26.0-r0 18 Sep

Fix available

CGA-p6q9-65fm-f67h

Chainguard/tkn-fips

See record for full details 30 Oct 2025

Fix available
Severity - 6.9 (Medium)

CGA-pxwh-pwm2-rq33

Chainguard/tkn-fips

See record for full details 30 Oct 2025

Fix available
Severity - 6.9 (Medium)

CGA-3j9x-f9qq-j4c9

Chainguard/tkn
Wolfi/tkn

See record for full details 30 Oct 2025

Fix available
Severity - 6.9 (Medium)

CGA-fc63-p387-xgf4

Chainguard/tkn
Wolfi/tkn

See record for full details 30 Oct 2025

Fix available
Severity - 6.9 (Medium)

CGA-7jwv-3gcx-p9rx

Chainguard/tekton-chains
Wolfi/tekton-chains

See record for full details 30 Oct 2025

Fix available
Severity - 6.9 (Medium)

CGA-gj79-fm5w-m88c

Chainguard/tekton-chains
Wolfi/tekton-chains

See record for full details 30 Oct 2025

Fix available
Severity - 6.9 (Medium)

CGA-9hfv-29g5-r358

Chainguard/tekton-chains-fips

See record for full details 30 Oct 2025

Fix available
Severity - 6.9 (Medium)

CGA-3c4g-6336-9gx7

Chainguard/tekton-chains-fips

See record for full details 30 Oct 2025

Fix available
Severity - 6.9 (Medium)

GO-2025-4028

Go/github.com/in-toto/go-witness

go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents in github.com/in-toto/go-witness 30 Oct 2025

Fix available

CVE-2025-62375

github.com/in-toto/go-witness

go-witness Improper Verification of AWS EC2 Identity Documents 15 Oct 2025

Fix available
Severity - 6.9 (Medium)