GO-2025-4020 vulnerabilities

Vulnerabilities for packages: syft, gotenberg, k9s-fips, grype-fips, gitleaks, nuclei, chezmoi, cg, k9s, trufflehog, mattermost, grype, undock, syft-fips, kubescape, gptscript, zarf, chainctl, mattermost-fips, grype-db, kots, wolfictl, filebrowser, trufflehog-fips...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: chezmoi, gptscript, undock, kots, grype, gitleaks, trufflehog, nuclei, filebrowser, kubescape, k9s, zarf, syft, wolfictl...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gptscript, kaniko, flux-kustomize-controller, snyk-cli, nuclei, trivy, bom, src-fingerprint, scorecard, wolfictl, chezmoi, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, kargo, zot, apko, argo-workflows, grafana-alloy,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gptscript, kaniko, flux-kustomize-controller, snyk-cli, nuclei, trivy, bom, src-fingerprint, scorecard, wolfictl, chezmoi, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, kargo, zot, apko, argo-workflows, grafana-alloy,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argo-cd, gptscript, kaniko, snyk-cli, steampipe, nuclei, trivy, bom, src-fingerprint, xeol, teleport, scorecard, wolfictl, chezmoi, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, gitlab-runner, kargo, gomplate, apko, zot, argo-workflows...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: rekor, step, prometheus-operator, flux-kustomize-controller, cortex, nuclei, trivy, grafana-mimir, airflow, rclone, up, trino, opentelemetry-collector-contrib, tekton-chains, chezmoi, thanos, tempo, argo-events, falcoctl, fluent-bit-plugin-loki, zot, tkn,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: chezmoi, flux-kustomize-controller, age, litestream, sops, ksops...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, prometheus, flux-kustomize-controller, crossplane-provider-aws-cloudfront, nuclei, cilium, traefik, crossplane-provider-aws-memorydb, chezmoi, nerdctl, sealed-secrets, argo-events, crossplane-provider-keycloak, pulumi-language-yaml,...

[SECURITY] Fedora 44 Update: chezmoi-2.72.0-1.fc44

Manage your dotfiles across multiple diverse machines, securely...

Fedora 44 : chezmoi (2026-4ca48be67c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4ca48be67c advisory. Update to 2.72.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, etcd, osv-scanner, skaffold-fips, terraform-provider-tls-fips, seaweedfs-rocksdb, crossplane-provider-aws-ssm, k9s-fips, crossplane-provider-aws-route53resolver, gitlab-pages, cg, k9s, nemo, ksops, longhorn-manager-fips, syft-fips, consul-fip...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, etcd, osv-scanner, skaffold-fips, terraform-provider-tls-fips, seaweedfs-rocksdb, crossplane-provider-aws-ssm, k9s-fips, crossplane-provider-aws-route53resolver, gitlab-pages, cg, k9s, nemo, ksops, longhorn-manager-fips, syft-fips, consul-fip...

Fedora 44 : chezmoi (2026-905e9afc79)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-905e9afc79 advisory. Update to 2.70.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: argo-cd, external-dns, go, prometheus-operator, fscrypt, prometheus, telegraf, snyk-cli, datadog-agent, falco-no-driver, kubernetes, cilium, kube-fluentd-operator, newrelic-fluent-bit-output, hubble, chezmoi, nerdctl, zot, kubernetes-csi-node-driver-registrar, runc,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: argo-cd, envconsul, prometheus, falco-no-driver, nuclei, newrelic-fluent-bit-output, cilium, chezmoi, nerdctl, grafana-operator, rancher-agent, chartmuseum, pulumi-language-yaml, rabbitmq-messaging-topology-operator, kubernetes-dashboard, dex, nsc, aws-flb-firehose,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: argo-cd, external-dns, go, prometheus-operator, fscrypt, prometheus, telegraf, snyk-cli, datadog-agent, falco-no-driver, kubernetes, cilium, kube-fluentd-operator, newrelic-fluent-bit-output, hubble, chezmoi, nerdctl, zot, kubernetes-csi-node-driver-registrar, runc,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: envconsul, contour, swagger, infinispan-operator, rancher-loglevel, k8sgpt-operator, nerdctl, pdfcpu, nova, neuvector-dbgen, ytt, flannel, rabbitmq-messaging-topology-operator, kubernetes-dashboard, nsc, kubernetes-event-exporter, nri-nginx,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: envconsul, contour, swagger, infinispan-operator, rancher-loglevel, k8sgpt-operator, nerdctl, pdfcpu, nova, neuvector-dbgen, ytt, flannel, rabbitmq-messaging-topology-operator, kubernetes-dashboard, nsc, kubernetes-event-exporter, nri-nginx,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: envconsul, contour, swagger, infinispan-operator, rancher-loglevel, k8sgpt-operator, nerdctl, pdfcpu, nova, neuvector-dbgen, ytt, flannel, rabbitmq-messaging-topology-operator, kubernetes-dashboard, nsc, kubernetes-event-exporter, nri-nginx,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: envconsul, contour, swagger, infinispan-operator, rancher-loglevel, k8sgpt-operator, nerdctl, pdfcpu, nova, neuvector-dbgen, ytt, flannel, rabbitmq-messaging-topology-operator, kubernetes-dashboard, nsc, kubernetes-event-exporter, nri-nginx,...