CVE-2026-23992 affecting package gh for versions less than 2.62.0-13

CVE-2026-23992 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

Fedora 42 : gh (2026-de52e7caa1)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-de52e7caa1 advisory. Update to 2.87.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 43 : gh (2026-21a2f3709a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-21a2f3709a advisory. Update to 2.87.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Ubuntu: Security Advisory (USN-8012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-76958 CVE-2025-58190 affecting package gh 2.62.0-10

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

GHSA-273P-M2CW-6833 vulnerabilities

Vulnerabilities for packages: trivy, zarf, tekton-chains, tflint, gh, spire-server, tkn, buildkitd, trivy-operator, cosign, policy-controller, falcoctl, kubescape, ratify, kyverno, witness, flux-source-controller, slsa-verifier, zot, crossplane, teleport, vexctl, kyverno-notation-aws, skaffold,...

CVE-2026-23831 vulnerabilities

Vulnerabilities for packages: trivy, zarf, tekton-chains, tflint, gh, spire-server, tkn, buildkitd, trivy-operator, cosign, policy-controller, falcoctl, kubescape, ratify, kyverno, witness, flux-source-controller, slsa-verifier, zot, crossplane, teleport, vexctl, kyverno-notation-aws, skaffold,...

CVE-2026-24137 vulnerabilities

Vulnerabilities for packages: portieris, guac, trivy, zarf, falco-no-driver, tekton-chains, tflint, gh, spire-server, tkn, buildkitd, undock, rekor, trivy-operator, cosign, fulcio, xeol, skopeo, policy-controller, falcoctl, tekton-pipelines, kubescape, ratify, kyverno, podman, witness,...

GHSA-4C4X-JM2X-PF9J vulnerabilities

Vulnerabilities for packages: trivy, zarf, tekton-chains, tflint, gh, spire-server, tkn, buildkitd, trivy-operator, cosign, policy-controller, falcoctl, kubescape, ratify, kyverno, witness, flux-source-controller, slsa-verifier, zot, crossplane, teleport, vexctl, kyverno-notation-aws, skaffold,...

CVE-2026-24117 vulnerabilities

Vulnerabilities for packages: kyverno, trivy-operator, zarf, skaffold-fips, buildkitd-fips, aactl, ko-fips, kyverno-policy-reporter-plugins-kyverno-fips, gitsign, tekton-chains, kyverno-notation-aws, trivy-fips, vexctl, kyverno-notation-aws-fips, crossplane-fips, crossplane, cosign-fips,...

GHSA-273P-M2CW-6833 vulnerabilities

Vulnerabilities for packages: kyverno, trivy-operator, zarf, skaffold-fips, buildkitd-fips, aactl, ko-fips, kyverno-policy-reporter-plugins-kyverno-fips, gitsign, tekton-chains, kyverno-notation-aws, trivy-fips, vexctl, kyverno-notation-aws-fips, crossplane-fips, crossplane, cosign-fips,...

GHSA-FCV2-XGW5-PQXF vulnerabilities

Vulnerabilities for packages: kyverno, docker-compose-fips, tekton-chains, kyverno-notation-aws, vexctl, sigstore-scaffolding, crossplane-fips, cosign, kyverno-fips, neuvector-sigstore-interface, goreleaser, tkn-fips, witness, guac, kots, spire-server, skopeo, flux-source-controller-fips, falcoct...

Fedora: Security Advisory (FEDORA-2025-c6b2100f44)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : gh (2025-c6b2100f44)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c6b2100f44 advisory. Update to 2.83.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CVE-2025-58183 affecting package gh for versions less than 2.62.0-10

CVE-2025-58183 affecting package gh for versions less than 2.62.0-10. A patched version of the package is available...

Debian: Security Advisory (DLA-4378-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4378-1] r-cran-gh security update

Debian LTS Advisory DLA-4378-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert November 25, 2025 https://wiki.debian.org/LTS Package : r-cran-gh Version : 1.2.0-1+deb11u1 CVE ID : CVE-2025-54956 Debian Bug : 1110481 A vulnerability has been discovered in r-cran-gh,...

Debian dla-4378 : r-cran-gh - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4378 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4378-1 [email protected] https://www.debian.org/lts/security/...

Fedora: Security Advisory (FEDORA-2025-6981d97f47)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-921e4e1a22)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...