GO-2025-4020 vulnerabilities

Vulnerabilities for packages: syft, gotenberg, chainctl, mattermost-fips, trufflehog-fips, k9s-fips, chezmoi, gptscript, nuclei, grype-db, filebrowser, kubescape, undock, cg, mattermost, zarf, k9s, trufflehog, grype-fips, kots, gitleaks, grype, wolfictl, syft-fips...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: kubescape, k9s, zarf, undock, trufflehog, nuclei, syft, wolfictl, kots, gitleaks, filebrowser, gptscript, chezmoi, grype...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, zarf, scorecard, dagger, nuclei, zot, pulumi-language-dotnet, kaniko, argo-workflows, skaffold, timoni, tfsec, pulumi, osv-scanner, kubescape, task, flux-source-controller, flux-image-automation-controller, crossplane, pulumi-language-java, syft...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, zarf, scorecard, dagger, nuclei, zot, pulumi-language-dotnet, kaniko, argo-workflows, skaffold, timoni, tfsec, pulumi, osv-scanner, kubescape, task, flux-source-controller, flux-image-automation-controller, crossplane, pulumi-language-java, syft...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, zarf, scorecard, dagger, nuclei, zot, pulumi-language-dotnet, kaniko, argo-workflows, skaffold, tfsec, cerbos, pulumi, osv-scanner, kubescape, teleport, trivy-operator, flux-source-controller, witness, flux-image-automation-controller, crossplan...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: zarf, cosign, grafana-agent-operator, prometheus-operator, bank-vaults, velero, step-ca, druid, flyte, nuclei, py3-azure-identity, tkn, zot, argo-workflows, boring-registry, pulumi, up, hugo-extended, harbor-registry, kubescape, py3-cassandra-medusa,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: ksops, sops, litestream, age, flux-kustomize-controller, chezmoi...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, cloud-provider-aws, k3s, cosign, scorecard, slsa-verifier, nerdctl, terraform-provider-acme, nuclei, pulumi-language-dotnet, crossplane-provider-aws-elasticache, openbao, cluster-api-azure-controller, kubescape, gatus, ksops, witness,...

[SECURITY] Fedora 44 Update: chezmoi-2.72.0-1.fc44

Manage your dotfiles across multiple diverse machines, securely...

Fedora 44 : chezmoi (2026-4ca48be67c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4ca48be67c advisory. Update to 2.72.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gatus, crossplane-aws-provider, flux-notification-controller-fips, crossplane-provider-aws-rds-fips, guac, crossplane-provider-aws-dynamodb, buildah, kubescape-server-fips, gitlab-rails-ce, crossplane-provider-aws-cloudsearch, crossplane-provider-aws-ecs,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: gatus, crossplane-aws-provider, flux-notification-controller-fips, crossplane-provider-aws-rds-fips, guac, crossplane-provider-aws-dynamodb, buildah, kubescape-server-fips, gitlab-rails-ce, crossplane-provider-aws-cloudsearch, crossplane-provider-aws-ecs,...

Fedora 44 : chezmoi (2026-905e9afc79)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-905e9afc79 advisory. Update to 2.70.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, k3s, kubernetes, falco-no-driver, gitlab-pages, helm, nerdctl, prometheus-operator, zot, karpenter, kubescape, runc, kaf, prometheus, aws-flb-firehose, kube-fluentd-operator, spire-server, flux, aws-flb-kinesis, snyk-cli, telegraf,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, k3s, kubernetes, falco-no-driver, gitlab-pages, helm, nerdctl, prometheus-operator, zot, karpenter, kubescape, runc, kaf, prometheus, aws-flb-firehose, kube-fluentd-operator, spire-server, flux, aws-flb-kinesis, snyk-cli, telegraf,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, k3s, cosign, scorecard, slsa-verifier, nerdctl, step-ca, nuclei, nats-server, chartmuseum, openbao, cerbos, ipfs-cluster, tigera-operator, helm-mapkubeapis, dive, kubescape, kpt, witness, pulumi-language-java, wal-g, syft, envoy-gateway, dex,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, pgpool2exporter, kubewatch, ytt, pvc-autoresizer, openbao, conjur-cli, cerbos, nri-elasticsearch, apisix-ingress-controller, swagger, jitsucom-bulker, omnibump, wal-g, envoy-gateway, kyverno-notation-aws, ingress-nginx-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, pgpool2exporter, kubewatch, ytt, pvc-autoresizer, openbao, conjur-cli, cerbos, nri-elasticsearch, apisix-ingress-controller, swagger, jitsucom-bulker, omnibump, wal-g, envoy-gateway, kyverno-notation-aws, ingress-nginx-controller,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, pgpool2exporter, kubewatch, ytt, pvc-autoresizer, openbao, conjur-cli, cerbos, nri-elasticsearch, apisix-ingress-controller, swagger, jitsucom-bulker, omnibump, wal-g, envoy-gateway, kyverno-notation-aws, ingress-nginx-controller,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, pgpool2exporter, kubewatch, ytt, pvc-autoresizer, openbao, conjur-cli, cerbos, nri-elasticsearch, apisix-ingress-controller, swagger, jitsucom-bulker, omnibump, wal-g, envoy-gateway, kyverno-notation-aws, ingress-nginx-controller,...