CVE-2026-9694 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-cng, gitlab-runner, gitlab-runner-fips...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: hydra, commercial-grafana, step, gitlab-kas-fips, bento-fips, harbor, juicefs, ory-kratos-fips, pgtimetable-fips, sftpgo, step-ca-fips, trillian, kubeflow-pipelines, goose, openbao, dapr, flyte, caddy-fips, splunk-otel-collector-fips, authentik, rke2-runtime,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, flux-source-controller-fips, nginx-kubernetes-ingress-fips, tailscale, mattermost-fips, prometheus-postgres-exporter, cloud-provider-aws,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: act, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: act, calico-fips, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fip...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: act, calico-fips, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fip...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubecolor, lazygit, datadog-agent, azuredisk-csi-fips, gosu, calico, dapr, crossplane-provider-aws-wafv2, hello-world-golang, nri-couchbase-fips, trivy-operator, kube-mgmt-fips, trivy, localstack, azure-container-networking, k8s-device-plugin, authservice-fips,...

GHSA-P423-J2CM-9VMQ vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, semgrep, ggshield, mitmproxy, airflow, kubeflow-pipelines-visualization-server, apache-beam-python-3.11-sdk, barman, metaflow-service, datadog-agent-fips, jupyter-base-notebook, label-studio, opal, kserve, datadog-agent, mycli, k8s-sidecar,...

CVE-2026-39892 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, semgrep, ggshield, mitmproxy, airflow, kubeflow-pipelines-visualization-server, apache-beam-python-3.11-sdk, barman, metaflow-service, datadog-agent-fips, jupyter-base-notebook, label-studio, opal, kserve, datadog-agent, mycli, k8s-sidecar,...

Security update for osslsigncode (critical)

openSUSE Security Update: Security update for osslsigncode Announcement ID: openSUSE-SU-2026:0115-1 Rating: critical References: 1260680 Cross-References: CVE-2025-70888 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This...

CVE-2026-27138 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, victoriametrics, aws-ebs-csi-driver, terragrunt, flux-fips, flux-image-automation-controller, aws-ebs-csi-driver-fips, flux-helm-controller, victoriametrics-fips, victoriametrics-cluster, amazon-k8s-cni-fips, grafana-fips,...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, victoriametrics, aws-ebs-csi-driver, terragrunt, flux-fips, flux-image-automation-controller, aws-ebs-csi-driver-fips, flux-helm-controller, victoriametrics-fips, victoriametrics-cluster, amazon-k8s-cni-fips, grafana-fips,...

GHSA-7HFW-R8QC-89V4 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, victoriametrics, aws-ebs-csi-driver, terragrunt, flux-fips, flux-image-automation-controller, aws-ebs-csi-driver-fips, flux-helm-controller, victoriametrics-fips, victoriametrics-cluster, amazon-k8s-cni-fips, grafana-fips,...

CVE-2026-27137 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, victoriametrics, aws-ebs-csi-driver, terragrunt, flux-fips, flux-image-automation-controller, aws-ebs-csi-driver-fips, flux-helm-controller, victoriametrics-fips, victoriametrics-cluster, amazon-k8s-cni-fips, grafana-fips,...

GHSA-MXW3-3HH2-X2MH vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-cng, ruby3.3-rack, ruby3.2-rails, ruby3.3-rails, ruby3.4-rack, gitlab-rails-ce-fips, ruby4.0-rack, ruby4.0-rails, ruby3.4-rails, logstash, kube-fluentd-operator, ruby3.2-rack...

GHSA-WHRJ-4476-WVMP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-cng, ruby3.3-rack, ruby3.2-rails, ruby3.3-rails, ruby3.4-rack, gitlab-rails-ce-fips, ruby4.0-rack, ruby4.0-rails, ruby3.4-rails, logstash, kube-fluentd-operator, ruby3.2-rack...

CVE-2026-22860 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-cng, ruby3.3-rack, ruby3.2-rails, ruby3.3-rails, ruby3.4-rack, gitlab-rails-ce-fips, ruby4.0-rack, ruby4.0-rails, ruby3.4-rails, logstash, kube-fluentd-operator, ruby3.2-rack...

CVE-2026-25500 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-cng, ruby3.3-rack, ruby3.2-rails, ruby3.3-rails, ruby3.4-rack, gitlab-rails-ce-fips, ruby4.0-rack, ruby4.0-rails, ruby3.4-rails, logstash, kube-fluentd-operator, ruby3.2-rack...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, bank-vaults, mattermost-fips, boring-registry-fips, grafana-fips, neuvector-sigstore-interface-fips, tkn-fips, zitadel, kyverno, pluto-fips, kyverno-notation-aws-fips, k9s-fips, istio-fips, beats, docker-compose-fips, grafana, gitlab-cng,...

Malicious code in cng-web-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018fca29734b6580902f0808df01db408d09cb6704720e6cac215827f5812f75 The package cng-web-lib was found to contain malicious code. Source: ghsa-malware ea72356f6a1b185aea027fcf291bdb55d1a3f4e6ae715b68e42c5e33834a28d9 An...