[SECURITY] Fedora 41 Update: uv-0.9.5-1.fc41

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: grafana-agent-operator, kubernetes-event-exporter, dbmate, gitleaks, minio-object-browser, logstash-exporter, kyverno-policy-reporter-ui, rancher-machine, distribution, go-tools, spire-controller-manager, kubebuilder, nri-prometheus, nfs-subdir-external-provisioner,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, cadvisor, bom, maru, kubernetes-event-exporter, falcoctl, wgcf,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, cadvisor, bom, maru, kubernetes-event-exporter, falcoctl, wgcf,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, stakater-reloader, nova, docker-machine-driver-linode, go-licenses, docker-credential-gcr, falco-no-driver, manifest-tool, scorecard, aws-s3-controller, vault-secrets-webhook, wire-go, cadvisor, bom, maru, kubernetes-event-exporter,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, container-object-storage-interface-fips, chisel, dragonfly-operator, wave-fips, vault-env, promxy-fips, azure-aad-pod-identity-mic, local-path-provisioner-fips, octo-sts, blob-csi, terraform-docs, gatekeeper, neuvector-dbgen-fips,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, container-object-storage-interface-fips, chisel, dragonfly-operator, wave-fips, vault-env, promxy-fips, azure-aad-pod-identity-mic, local-path-provisioner-fips, octo-sts, blob-csi, terraform-docs, gatekeeper, neuvector-dbgen-fips,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, container-object-storage-interface-fips, chisel, dragonfly-operator, wave-fips, vault-env, promxy-fips, azure-aad-pod-identity-mic, local-path-provisioner-fips, octo-sts, blob-csi, gatekeeper, neuvector-dbgen-fips, secrets-store-csi-driver...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, container-object-storage-interface-fips, chisel, dragonfly-operator, wave-fips, vault-env, promxy-fips, azure-aad-pod-identity-mic, local-path-provisioner-fips, octo-sts, blob-csi, terraform-docs, gatekeeper, neuvector-dbgen-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, container-object-storage-interface-fips, chisel, dragonfly-operator, wave-fips, vault-env, promxy-fips, azure-aad-pod-identity-mic, local-path-provisioner-fips, octo-sts, blob-csi, terraform-docs, gatekeeper, neuvector-dbgen-fips,...