GO-2025-3488 vulnerabilities

Vulnerabilities for packages: trufflehog, tailscale, kubernetes-dashboard-api, wave, cadvisor, sriov-network-device-plugin, grafana-operator, openbao-k8s, crossplane-provider-aws-elasticache, yunikorn-k8shim, kubewatch, metallb, kubernetes-dns-node-cache, spegel, rancher-webhook,...

GO-2025-3447 vulnerabilities

Vulnerabilities for packages: nri-kafka, redka, aws-signer-notation-plugin, tailscale, spqr, kubernetes-dashboard-api, wave, cadvisor, php-fpmexporter, sriov-network-device-plugin, gobuster, bom, grafana-operator, openbao-k8s, crossplane-provider-aws-elasticache, yunikorn-k8shim, kubewatch,...

GO-2024-2888 vulnerabilities

Vulnerabilities for packages: nri-kafka, redka, tailscale, spqr, wave, cadvisor, php-fpmexporter, gobuster, bom, fuse-overlayfs-snapshotter, grafana-operator, kubewatch, ferretdb, metallb, kubernetes-dns-node-cache, spegel, nri-nginx, newrelic-infrastructure-agent, delve, stern, git-lfs, dex,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: snyk-cli, cosign, flux-helm-controller, buildkitd, rekor, flux-notification-controller, nuclei, terraform, k3d, terraform-provider-azurerm, guac, pulumi, sops, spire-server, sigstore-scaffolding, crossplane-provider-azure-sql, flux-source-controller, goreleaser,...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: wolfictl, spire-server, goreleaser, flux-source-controller, tekton-chains, zarf, vexctl, melange, tkn, ko, skaffold, policy-controller, slsa-verifier, neuvector-sigstore-interface, kubescape, apko, aactl, gitsign, zot, falcoctl...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.2-0.3.hum1 aarch64, x8664 cosign-3.1.2-0.3.hum1.src src Security Fixes: cosign: CVE-2026-56852...

GHSA-WQQC-JJCQ-VFXM vulnerabilities

Vulnerabilities for packages: zot, neuvector-sigstore-interface, kyverno-fips, tekton-chains, ko, teleport, tkn, policy-controller, policy-controller-fips, tkn-fips, cloudbeat-fips, crossplane-fips, trivy-operator-fips, aactl, kyverno-notation-aws-fips, jfrog-cli, spire-server, trivy,...

CVE-2026-54787 vulnerabilities

Vulnerabilities for packages: zot, neuvector-sigstore-interface, kyverno-fips, tekton-chains, ko, teleport, tkn, policy-controller, policy-controller-fips, tkn-fips, cloudbeat-fips, crossplane-fips, trivy-operator-fips, aactl, kyverno-notation-aws-fips, jfrog-cli, spire-server, trivy,...

CLEANSTART-2026-BA61304 Security fixes in cosign 2.4.3-r0

Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...

CLEANSTART-2026-VQ25749 Security fixes in cosign 3.0.6-r1

Package cosign version 3.0.6-r1 fixes 32 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-BB97886 Security fixes in cosign 2.5.3-r0

Package cosign version 2.5.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.2-0.2.hum1 aarch64, x8664 cosign-3.1.2-0.2.hum1.src src Security Fixes: cosign: CVE-2026-56852...

SUSE-SU-2026:3068-1 Security update for cosign

This update for cosign rebuilds it against the current go security release...

openSUSE 16: cosign / cosign-bash-completion / cosign-fish-completion / etc (openSUSE-SU-2026:21281-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21281-1 advisory. This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues...

SUSE-SU-2026:22613-1 Security update for cosign

This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues when parsing HTML files bsc1267044. - CVE-2026-33815: memory-safety vulnerability bsc1261811. -...

SUSE SLED15 / SLES15 Security Update : cosign (SUSE-SU-2026:2827-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2827-1 advisory. This update for cosign fixes the following issues -...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21262-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21262-1 advisory. Changes in hauler: - update to 2.0.1 bsc1269433, CVE-2026-48702: bump go to 1.26.4 to squash CVE noise Full v2 Release notes:...

OPENSUSE-SU-2026:11198-1 cosign-3.1.1-1.1 on GA media

These are all security issues fixed in the cosign-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21262-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: - update to 2.0.1 bsc1269433, CVE-2026-48702: bump go to 1.26.4 to squash CVE noise Full v2 Release notes: https://github.com/hauler- dev/hauler/releases/tag/v2.0.0 - update to 2.0.0: v2.0.0 is a major release. It replaces...

Security update for cosign (moderate)

openSUSE security update: security update for cosign ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21036-1 Rating: moderate References: bsc1261859 Cross-References: CVE-2026-39395 CVSS scores: CVE-2026-39395 SUSE : 6.5...