GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-operator, omnictl-multiarch, victoriametrics, flux-notification-controller, dkron, terragrunt, steampipe, flux-operator-fips, victoriametrics-cluster-fips, temporal-fips, grafana-operator, stakater-reloader, victorialogs, amazon-k8s-cni-fips, pluto, podinfo,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: bom, crossplane, nuclei, argocd-image-updater, syft, kubescape, wolfictl, grafana-alloy, guac, kargo, flux-source-controller, flux, grype, flux-kustomize-controller, k9s, melange, argo-workflows, k8sgpt, snyk-cli, src-fingerprint, zarf, kubevela, goreleaser, scorecar...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: bom, crossplane, nuclei, argocd-image-updater, syft, kubescape, wolfictl, grafana-alloy, guac, kargo, flux-source-controller, flux, grype, flux-kustomize-controller, k9s, melange, argo-workflows, k8sgpt, snyk-cli, src-fingerprint, zarf, kubevela, goreleaser, scorecar...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: bom, crossplane, steampipe, gomplate, nuclei, argocd-image-updater, syft, kubescape, wolfictl, grafana-alloy, guac, kargo, argo-cd, flux-source-controller, flux, grype, k9s, melange, argo-workflows, snyk-cli, cerbos, gitlab-runner, src-fingerprint, nfpm, zarf,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-compose, crossplane-provider-aws-memorydb, gomplate, atlantis, terraform-provider-azapi, guac, buildah, k9s, openbao, crossplane-provider-azure-managedidentity, scorecard, hcloud, opentofu, crossplane-provider-aws-cloudfront, kaf, cloudflared,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: helm-set-status, litefs, dask-gateway, terraform-docs, kubernetes-dashboard-api, chart-testing, gcp-compute-persistent-disk-csi-driver, helm-operator, guac, falco-no-driver, kuma, ferretdb, amass, vault-k8s, stakater-reloader, wgcf, bank-vaults, croc,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: timestamp-authority, falcoctl, grafana-mimir, opentelemetry-collector, terraform-provider-azurerm, crossplane-provider-azure-sql, crossplane-provider-azure-authorization, crossplane-provider-family-azure, gomplate, glab, nuclei, kubescape, skopeo, spire-server, guac,...

CVE-2026-73308 Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders

Budibase is an open-source low-code platform. Prior to 3.39.25, packages/server/src/api/controllers/automation.ts returned automation test results containing trigger.outputs.user.oauth2, broadcast BuilderSocketEvent.AutomationTestProgress to the app room, and stored progress in...

RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:42079)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42079 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter, gitlab-kas, reports-server, kubescape, kubernetes-dashboard, external-secrets-operator, mattermost, opentofu, nemo, kyverno, flux, skaffold-fips, fscrypt, coder, tigera-operator, flux-fips, chisel, snyk-cli, kubevela-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gitlab-kas, crossplane-provider-azure-managedidentity, reports-server, sops, flux-operator-fips, terraform-provider-azapi-fips, crossplane-provider-aws-eks, crossplane-provider-aws-ram-fips, nemo, crossplane-provider-aws-sqs, packer,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gomplate, atlantis, guac, buildah, k9s, openbao, crossplane-provider-azure-managedidentity, scorecard, hcloud, opentofu, age, kaf, pulumi-kubernetes-operator, cilium, pulumi, rancher, vault-benchmark, buildkitd, apko, terraform-provider-azurerm,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: bank-vaults-vault-operator, rclone-fips, goose, gitlab-kas, crossplane-provider-azure-managedidentity, node-problem-detector-fips, kube-metrics-adapter-fips, ld-relay, crossplane-function-patch-and-transform-fips, jobset-fips, velero-plugin-for-gcp,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: bank-vaults-vault-operator, rclone-fips, goose, gitlab-kas, crossplane-provider-azure-managedidentity, node-problem-detector-fips, kube-metrics-adapter-fips, ld-relay, crossplane-function-patch-and-transform-fips, jobset-fips, velero-plugin-for-gcp,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: grype-db, kubescape, melange, grafana-alloy, external-secrets-operator, gitlab-runner, gitaly, pulumi-language-yaml, jfrog-cli, gptscript, nemo, kyverno, flux, packer, skaffold-fips, coder, google-osconfig-agent, flux-fips, snyk-cli, kubevela-fips, grafana-fips,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Delta Electronics AS320T Denial of Service Vulnerability

Delta Electronics AS320T is a high-performance programmable logic controller device for industrial automation control from Delta Electronics China. A denial of service vulnerability exists in the Delta Electronics AS320T, which can be exploited by an attacker to cause a denial of service...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, polaris, go, dgraph, newrelic-infra-operator, nodetaint, tailscale, kubewatch, secrets-store-csi-driver-provider-aws, oras, mountpoint-s3-csi-driver, newrelic-k8s-metadata-injection, spire-server, smokescreen,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: grafana-mimir, dask-gateway, terraform-docs, crossplane, direnv, configmap-reload, argo-rollouts, controller-gen, mariadb-operator, nri-prometheus, minio-object-browser, croc, tigera-operator, kafka-proxy, otel-cli, kserve-modelmesh-serving, nri-nginx,...