GO-2026-6237 vulnerabilities

Vulnerabilities for packages: kube-vip, cni-plugins...

OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-3042 vulnerabilities

Vulnerabilities for packages: podman...

GO-2023-2042 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-1897 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-3833 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GO-2023-2185 vulnerabilities

Vulnerabilities for packages: go...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, omnictl-multiarch-fips, harbor, telegraf, gatekeeper, vault, zitadel, kube-conformance, k3s, etcd-fips, containerd, kyverno-fips, apply-cve-bump, istio, mattermost-fips, traefik-fips, grafana, guac, terragrunt, harbor-fips, nemo,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, gops, argo-rollouts, prometheus-alertmanager-fips, vault-env, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, docker-credential-acr-env, prometheus-mysqld-exporter,...

GO-2026-5247 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2026-5757 vulnerabilities

Vulnerabilities for packages: minio...

GO-2025-4043 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GO-2023-1897 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-4740 vulnerabilities

Vulnerabilities for packages: flyte...

GO-2025-3845 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2025-4181 vulnerabilities

Vulnerabilities for packages: caddy...

GO-2026-4865 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gatus, dapr, bento, kubescape-operator, apko, kyverno-policy-reporter-ui, prometheus-adapter, argo-events, flux-source-controller, aws-node-termination-handler, istio, kubernetes-csi-external-attacher, step-issuer, timoni, ko, flannel,...

CVE-2026-56862 Limit handshake messages we are willing to accept post-handshake in crypto/tls

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...

Photon OS 5.0: Go PHSA-2026-5.0-90-0763

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0763. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Go PHSA-2026-5.0-92-0763

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0763. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...