GO-2026-5039 vulnerabilities

Vulnerabilities for packages: temporal-server, nri-consul, chisel, pgpool2exporter, runc, terraform-provider-acme, conftest, temporal, emissary, omnibump, containerd, rancher-webhook, prometheus-adapter, crossplane-provider-aws-lambda, terraform-provider-grafana, azure-workload-identity-webhook,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: conftest, kaniko, cadvisor, buildkitd, kubescape, tkn, crossplane, kargo, zot, docker-compose, dagger, spire-server, ko, grype, up, ctop, melange, wolfictl, buf, aactl, syft, cilium-cli, trivy...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, nri-redis, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flanne...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nri-consul, conftest, emissary, nri-redis, helm-operator, containerd, helm-set-status, wait-for-port, wal-g, ini-file, caddy, controller-gen, nri-apache, kubernetes-dashboard-api, docker-machine-driver-harvester, harbor-cli, lazydocker, cloud-sql-proxy,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: tflint, kots, conftest, terragrunt, xeol, k9s, kubescape, task, snyk-cli, zot, trivy-operator, terraform, grype, tfsec, steampipe, opentofu, wolfictl, syft, trivy, zarf...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: tflint, kots, conftest, terragrunt, xeol, k9s, kubescape, task, snyk-cli, zot, trivy-operator, terraform, grype, tfsec, steampipe, opentofu, wolfictl, syft, trivy, zarf...

conftest-0.67.1-2.1 on GA media (moderate)

conftest-0.67.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:10472-1 Rating: moderate Cross-References: CVE-2026-33747 CVSS scores: CVE-2026-33747 SUSE : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-33747 SUSE : 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10472-1 conftest-0.67.1-2.1 on GA media

These are all security issues fixed in the conftest-0.67.1-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: zot, docker-cli-buildx, podman, kaniko, docker-compose, osv-scanner, conftest, kubescape, skaffold, trivy, trivy-operator, guac, scorecard, buildah...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: zot, docker-cli-buildx, podman, kaniko, docker-compose, osv-scanner, conftest, kubescape, skaffold, trivy, trivy-operator, guac, scorecard, buildah...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: zot, docker-cli-buildx, podman, kaniko, docker-compose, osv-scanner, conftest, kubescape, skaffold, trivy, trivy-operator, guac, scorecard, buildah...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: zot, docker-cli-buildx, podman, kaniko, docker-compose, osv-scanner, conftest, kubescape, skaffold, trivy, trivy-operator, guac, scorecard, buildah...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, skaffold, trivy-operator, buildah, docker-cli-buildx, kubescape-server, trivy-fips, zot, docker-compose-fips, conftest, cloudbeat-fips, podman, trivy, docker-cli-buildx-fips, kubescape-server-fips, podman-fips, scorecard, skaffold-fips, guac,...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, skaffold, trivy-operator, buildah, docker-cli-buildx, kubescape-server, trivy-fips, zot, docker-compose-fips, conftest, cloudbeat-fips, podman, trivy, docker-cli-buildx-fips, kubescape-server-fips, podman-fips, scorecard, skaffold-fips, guac,...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, skaffold, trivy-operator, buildah, docker-cli-buildx, kubescape-server, trivy-fips, zot, docker-compose-fips, conftest, cloudbeat-fips, podman, trivy, docker-cli-buildx-fips, kubescape-server-fips, podman-fips, scorecard, skaffold-fips, guac,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, skaffold, trivy-operator, buildah, docker-cli-buildx, kubescape-server, trivy-fips, zot, docker-compose-fips, conftest, cloudbeat-fips, podman, trivy, docker-cli-buildx-fips, kubescape-server-fips, podman-fips, scorecard, skaffold-fips, guac,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kubeflow-katib, gitlab-runner-fips, longhorn-backing-image-manager, teleport-operator-fips, buildkite-agent, plugin-barman-cloud, kiam, external-secrets-operator, kubernetes-fips, loki, grafana-mimir-fips, docker-cli-fips, grafana-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, kubeflow-katib, gitlab-runner-fips, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, plugin-barman-cloud, wave, kiam, external-secrets-operator,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: nri-consul, conftest, emissary, nri-redis, helm-operator, containerd, helm-set-status, wait-for-port, wal-g, ini-file, caddy, controller-gen, nri-apache, kubernetes-dashboard-api, docker-machine-driver-harvester, harbor-cli, lazydocker, cloud-sql-proxy,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, kubeflow-katib, ini-file, grafana-pyroscope, render-template, plugin-barman-cloud, rancher-agent, k3s, gcsfuse, google-osconfig-agent, yunikorn-k8shim, helm-set-status, envconsul, gatekeeper, chartmuseum, nova,...