OPENSUSE-SU-2026:10894-1 kpt-cli-1.0.0~beta.64-1.1 on GA media

These are all security issues fixed in the kpt-cli-1.0.0beta.64-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

MAL-2026-4862 Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: fscrypt, snyk-cli, go-discover, pulumi-kubernetes-operator, gomplate, terragrunt, spire-server, steampipe, crossplane-provider-azure-managedidentity, skaffold, tkn, policy-controller, witness, glab, grype, trivy, argocd-image-updater, mattermost, teleport, gatus,...

CVE-2026-46595 vulnerabilities

Vulnerabilities for packages: cert-manager, fscrypt, istio, containerd, snyk-cli, cloud-provider-aws, gitlab-kas, external-secrets-operator, falco-no-driver, k3s, kubescape, kaf, nerdctl, cilium, spire-server, kots, opentelemetry-collector, aactl, skaffold, chisel, external-dns,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: fscrypt, snyk-cli, go-discover, pulumi-kubernetes-operator, age, gomplate, terragrunt, spire-server, steampipe, crossplane-provider-azure-managedidentity, skaffold, tkn, policy-controller, witness, glab, grype, trivy, argocd-image-updater, mattermost, teleport, gatus...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: fscrypt, snyk-cli, pulumi-kubernetes-operator, gomplate, terragrunt, spire-server, skaffold, witness, grype, trivy, argocd-image-updater, mattermost, gatus, telegraf, rancher, k9s, loki, melange, cilium-cli, pulumi, pulumi-language-java, gitlab-runner,...

CVE-2026-39832 vulnerabilities

Vulnerabilities for packages: fscrypt, snyk-cli, go-discover, pulumi-kubernetes-operator, gomplate, terragrunt, spire-server, skaffold, witness, grype, trivy, argocd-image-updater, mattermost, telegraf, rancher, k9s, loki, melange, cilium-cli, pulumi, pulumi-language-java, pulumi-language-dotnet,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: cert-manager, pulumi-language-java, dagger, fscrypt, istio, pulumi-language-dotnet, containerd, snyk-cli, apko, cloud-provider-aws, gitlab-kas, external-secrets-operator, falco-no-driver, k3s, pulumi-kubernetes-operator, syft, kubescape, gptscript, nfpm, argo-cd, kaf...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: cert-manager, fscrypt, istio, containerd, snyk-cli, cloud-provider-aws, gitlab-kas, external-secrets-operator, falco-no-driver, k3s, kaf, nerdctl, cilium, spire-server, kots, opentelemetry-collector, aactl, docker-cli-buildx, podman, external-dns, prometheus-operator...

CVE-2026-46598 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, gitlab-workhorse-ce, knative-kafka-broker-fips, external-secrets-operator-fips, mattermost-fips, elastic-agent-fips, external-dns, backup-restore-operator, gatekeeper, kyverno-fips, kubernetes-fips, opentelemetry-collector, cilium, vault,...

CVE-2026-39827 vulnerabilities

Vulnerabilities for packages: skaffold, coder-fips, docker-machine-driver-harvester, cloudbeat-fips, flux-source-controller, gh, gitlab-workhorse-ce, knative-kafka-broker, trivy-operator, knative-kafka-broker-fips, kubescape-server-fips, external-secrets-operator-fips, syft, witness,...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: skaffold, coder-fips, docker-machine-driver-harvester, cloudbeat-fips, flux-source-controller, gh, gitlab-workhorse-ce, knative-kafka-broker, trivy-operator, knative-kafka-broker-fips, kubescape-server-fips, external-secrets-operator-fips, syft, witness,...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, gitlab-workhorse-ce, knative-kafka-broker-fips, external-secrets-operator-fips, mattermost-fips, elastic-agent-fips, external-dns, backup-restore-operator, gatekeeper, kyverno-fips, kubernetes-fips, opentelemetry-collector, cilium, vault,...

CVE-2026-39828 vulnerabilities

Vulnerabilities for packages: skaffold, coder-fips, docker-machine-driver-harvester, cloudbeat-fips, flux-source-controller, gitlab-workhorse-ce, knative-kafka-broker, trivy-operator, knative-kafka-broker-fips, kubescape-server-fips, external-secrets-operator-fips, kubescape-server,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: skaffold, cloudbeat-fips, flux-source-controller, gitlab-workhorse-ce, knative-kafka-broker, trivy-operator, knative-kafka-broker-fips, kubescape-server-fips, external-secrets-operator-fips, syft, witness, kubescape-server, elastic-agent-fips, mattermost-fips,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: skaffold, coder-fips, docker-machine-driver-harvester, cloudbeat-fips, flux-source-controller, gh, gitlab-workhorse-ce, knative-kafka-broker, trivy-operator, knative-kafka-broker-fips, crossplane-provider-azure-alertsmanagement,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: skaffold, coder-fips, docker-machine-driver-harvester, cloudbeat-fips, flux-source-controller, gh, gitlab-workhorse-ce, knative-kafka-broker, trivy-operator, knative-kafka-broker-fips, crossplane-provider-azure-alertsmanagement,...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: terraform-provider-tls, eksctl, external-secrets-operator-fips, elastic-agent-fips, terraform-provider-acme-fips, apply-cve-bump, ko-fips, crossplane-provider-aws-memorydb-fips, kubevela-fips, glab, policy-controller, cg, vault, flux-kustomize-controller-fips,...

SUSE CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...