GHSA-HM74-P2XF-RQGC vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips...

GHSA-Q9J8-24P8-JQ8J vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips...

GHSA-7MQ5-3VCF-V96V vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips...

GHSA-R82J-G6Q9-MVX8 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-rails-ce, gitlab-cng, gitlab-runner, gitlab-runner-fips...

CVE-2026-9694 vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: grafana-alloy, rke2-cloud-provider-fips, caddy, gitlab-kas, authentik-fips, seaweedfs-fips, argo-workflows, gitaly-fips, src, sqlexporter, certificate-transparency, dapr-fips, temporal-server, bento-fips, gitlab-kas-fips, envoy-gateway, chainloop-control-plane,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, flux-source-controller, helm-exporter, k8sgpt-operator, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, terraform-provider-time-fips, beats, caddy, cloud-provider-aws-fips, seaweedfs-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, helm-exporter, k8sgpt-operator, gpu-operator, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, git-sync, terraform-provider-time-fips, beats,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, helm-exporter, k8sgpt-operator, gpu-operator, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, git-sync, terraform-provider-time-fips, beats,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, helm-exporter, gpu-operator, cluster-proportional-autoscaler-fips, howdy-yall, iptables-wrappers, mongodb-kubernetes-operator-fips, backup-restore-operator-fips, minc, jupyterhub-k8s-image-awaiter-fips, certificate-transparency,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, helm-exporter, k8sgpt-operator, gpu-operator, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, git-sync, terraform-provider-time-fips, beats,...

GHSA-P423-J2CM-9VMQ vulnerabilities

Vulnerabilities for packages: wazuh-manager, dagster, semgrep, airflow-core, kubeflow-pipelines-visualization-server, openstack-kolla-toolbox-2025.2, request-1276, tritonserver-backend-vllm-cuda-13.0, localstack, mitmproxy, apache-beam-python-3.13-sdk, superset, datadog-agent-fips, authentik,...

CVE-2026-39892 vulnerabilities

Vulnerabilities for packages: wazuh-manager, dagster, semgrep, airflow-core, kubeflow-pipelines-visualization-server, openstack-kolla-toolbox-2025.2, request-1276, tritonserver-backend-vllm-cuda-13.0, localstack, mitmproxy, apache-beam-python-3.13-sdk, superset, datadog-agent-fips, authentik,...

Security update for osslsigncode (critical)

openSUSE Security Update: Security update for osslsigncode Announcement ID: openSUSE-SU-2026:0115-1 Rating: critical References: 1260680 Cross-References: CVE-2025-70888 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This...

CVE-2026-27138 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, flux-source-watcher, flux-source-controller, flux-notification-controller, victoriametrics-cluster-fips, dkron, victorialogs, librechat, steampipe, localstack, metacontroller, nova-fips, aws-ebs-csi-driver-fips, podinfo, terragrunt,...

GHSA-7HFW-R8QC-89V4 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, flux-source-watcher, flux-source-controller, flux-notification-controller, victoriametrics-cluster-fips, dkron, victorialogs, librechat, steampipe, localstack, metacontroller, nova-fips, aws-ebs-csi-driver-fips, podinfo, terragrunt,...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: flux-operator-fips, flux-source-watcher, flux-source-controller, flux-notification-controller, victoriametrics-cluster-fips, dkron, victorialogs, librechat, steampipe, localstack, metacontroller, nova-fips, aws-ebs-csi-driver-fips, podinfo, terragrunt,...

CVE-2026-27137 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, flux-source-watcher, flux-source-controller, flux-notification-controller, victoriametrics-cluster-fips, dkron, victorialogs, librechat, steampipe, localstack, metacontroller, nova-fips, aws-ebs-csi-driver-fips, podinfo, terragrunt,...

GHSA-MXW3-3HH2-X2MH vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.3-rack, ruby3.3-rails, kube-fluentd-operator, ruby3.4-rack, logstash, gitlab-rails-ce, ruby3.2-rack, gitlab-cng, ruby3.2-rails, ruby4.0-rails, ruby4.0-rack...

GHSA-WHRJ-4476-WVMP vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.3-rack, ruby3.3-rails, kube-fluentd-operator, ruby3.4-rack, logstash, gitlab-rails-ce, ruby3.2-rack, gitlab-cng, ruby3.2-rails, ruby4.0-rails, ruby4.0-rack...