GO-2026-4970 vulnerabilities

Vulnerabilities for packages: karpenter-fips, prometheus, virt-operator-fips, commercial-chainloop-backend, rekor, eks-distro-fips, cert-manager-fips, helm, virt-operator, nemo, cloud-provider-aws-fips, kubernetes-csi-node-driver-registrar, kine, vexctl, grafana-alloy, gatekeeper,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, kargo, k8ssandra-client, helm, headlamp, syft, osv-scanner, steampipe, opa-fips-envoy, gatekeeper, eksctl, neuvector-scanner-fips, cluster-api-helm-controller, consul-k8s, zot, chartmuseum-fips, containerd, trivy, dagger, tekton-pipelines-fips,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, kargo, k8ssandra-client, helm, headlamp, syft, osv-scanner, steampipe, opa-fips-envoy, gatekeeper, eksctl, neuvector-scanner-fips, cluster-api-helm-controller, consul-k8s, zot, chartmuseum-fips, containerd, trivy, dagger, tekton-pipelines-fips,...

GO-2026-5622 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, trivy, docker, helm, k3s, dagger, ctop, datadog-agent, trivy-operator, rancher-agent, docker-compose, tigera-operator, gatekeeper, teleport, helm-push, helm-set-status, rancher-helm, kubescape-operator, scorecard, syft, zarf, grype, falco-no-driver,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: trivy, helm, grafana-operator, rancher-fleet, falcoctl, trivy-operator, rancher-agent, ratify, tigera-operator, gatekeeper, helm-set-status, conftest, gitness, rancher-helm, zarf, cilium-cli, gogatekeeper, kube-arangodb, argo-cd, linkerd2, cert-manager-cmctl, kyverno...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k3s, http-echo, newrelic-infra-operator, clickhouse-operator, sftpgo-plugin-auth, azure-service-operator, cfssl, kubernetes-csi-driver-nfs, octo-sts, timoni, tofu-controller, verticadb-operator, mattermost, azcopy, ratify, ferretdb, x509-certificate-exporter, src,...

SUSE CVE-2026-42183

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, a nil pointer dereference in server/auth/gatekeeper.go rbacAuthorization causes a panic denial of service for SSO users whose claims match a...

vulnerabilities found in Apple MacOS

Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...

CVE-2026-64708

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may bypass Gatekeeper checks...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28849

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28900

A file quarantine bypass vulnerability exists in macOS that could allow a maliciously crafted ZIP archive to bypass Gatekeeper security checks. This issue has been addressed with additional checks. The vulnerability is fixed in macOS Sequoia 15.7.8 , macOS Sonoma 14.8.8 , and macOS Tahoe 26.5 . N...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

EUVD-2026-49445

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

EUVD-2026-49436

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28849

A logic issue in the BOM component of macOS allows a maliciously crafted ZIP archive to bypass Gatekeeper checks . This vulnerability is addressed in macOS Sequoia 15.7.8 , macOS Sonoma 14.8.8 , and macOS Tahoe 26.5 through improved checks and file handling. No exploit details are provided in the...

CVE-2026-28849

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28849

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...