GO-2025-4020 vulnerabilities

Vulnerabilities for packages: gotenberg, chainctl, filebrowser, trufflehog, kubescape, syft-fips, nuclei, kots, syft, undock, grype-db, cg, grype-fips, grype, k9s, mattermost, wolfictl, mattermost-fips, chezmoi, gitleaks, zarf, k9s-fips, trufflehog-fips, gptscript...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: grype, nuclei, gptscript, kubescape, trufflehog, chezmoi, zarf, syft, undock, k9s, kots, gitleaks, filebrowser, wolfictl...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubevela, argocd-image-updater, apko, kubescape, guac, zarf, flux-kustomize-controller, snyk-cli, dagger, skaffold, kaniko, go-licenses, gptscript, pulumi-language-yaml, pulumi-kubernetes-operator, trivy, zot, pulumi-language-dotnet,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubevela, argocd-image-updater, apko, kubescape, guac, zarf, flux-kustomize-controller, snyk-cli, dagger, skaffold, kaniko, go-licenses, gptscript, pulumi-language-yaml, pulumi-kubernetes-operator, trivy, zot, pulumi-language-dotnet,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubevela, cerbos, argocd-image-updater, apko, kubescape, guac, zarf, teleport, external-secrets-operator, snyk-cli, dagger, skaffold, gomplate, kaniko, gptscript, witness, pulumi-language-yaml, pulumi-kubernetes-operator, trivy, zot,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: thanos, cortex, cosign, flyte, rclone, kubescape, guac, zarf, timestamp-authority, sigstore-scaffolding, flux-kustomize-controller, falcoctl, druid, bank-vaults, sqlpad, fulcio, restic, py3-cassandra-medusa, sops, trino, zot, tkn, hugo-extended, pulumi,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: sops, ksops, chezmoi, age, flux-kustomize-controller, litestream...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: kaf, crossplane-provider-azure-storage, gitlab-pages, crossplane-provider-aws-memorydb, crossplane-provider-aws-sns, kubescape, crossplane-provider-aws-cloudfront, loki, crossplane-provider-azure-authorization, falcoctl, prometheus, pulumi-language-dotnet,...

[SECURITY] Fedora 44 Update: chezmoi-2.72.0-1.fc44

Manage your dotfiles across multiple diverse machines, securely...

Fedora 44 : chezmoi (2026-4ca48be67c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4ca48be67c advisory. Update to 2.72.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatch, jfrog-cli, terraform, crossplane-provider-aws-elasticache-fips, restic-fips, crossplane-provider-azure-orbital, reports-server, terraform-provider-aws-fips, etcd-fips, neuvector-sigstore-interface-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatch, jfrog-cli, terraform, crossplane-provider-aws-elasticache-fips, restic-fips, crossplane-provider-azure-orbital, reports-server, terraform-provider-aws-fips, etcd-fips, neuvector-sigstore-interface-fips,...

Fedora 44 : chezmoi (2026-905e9afc79)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-905e9afc79 advisory. Update to 2.70.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kaf, gitlab-pages, redka, libnvidia-container, kubescape, nerdctl, coredns, dask-gateway, external-secrets-operator, kubernetes, snyk-cli, external-dns, kine, prometheus, hubble, zot, karpenter, runc, aws-flb-cloudwatch, k8s-device-plugin, fuse-overlayfs-snapshotter,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, gitlab-pages, neuvector-scanner, kubescape, kind, incert, falcoctl, kubernetes-csi-driver-nfs, prometheus, extism, weaviate, dive, flux-helm-controller, aws-flb-cloudwatch, bom, vendir, cert-manager-cmctl, kyverno,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: kaf, gitlab-pages, redka, libnvidia-container, kubescape, nerdctl, coredns, dask-gateway, external-secrets-operator, kubernetes, snyk-cli, external-dns, kine, prometheus, hubble, zot, karpenter, runc, aws-flb-cloudwatch, k8s-device-plugin, fuse-overlayfs-snapshotter,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, kubernetes-ingress-defaultbackend, certificate-transparency, vale, kubescape, kind, incert, git-credential-oauth, sftpgo-plugin-eventstore, prometheus, sftpgo, weaviate, pgtimetable, cert-manager-cmctl, smokescreen, contour,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, kubernetes-ingress-defaultbackend, certificate-transparency, vale, kubescape, kind, incert, git-credential-oauth, sftpgo-plugin-eventstore, prometheus, sftpgo, weaviate, pgtimetable, cert-manager-cmctl, smokescreen, contour,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, kubernetes-ingress-defaultbackend, certificate-transparency, vale, kubescape, kind, incert, git-credential-oauth, sftpgo-plugin-eventstore, prometheus, sftpgo, weaviate, pgtimetable, cert-manager-cmctl, smokescreen, contour,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, kubernetes-ingress-defaultbackend, certificate-transparency, vale, kubescape, kind, incert, git-credential-oauth, sftpgo-plugin-eventstore, prometheus, sftpgo, weaviate, pgtimetable, cert-manager-cmctl, smokescreen, contour,...