Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.116.0-0.1.hum1 aarch64, x8664 grype-0.116.0-0.1.hum1.src src...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: kubelet-csr-approver, kubeflow-pipelines, gomplate, nats, doppler-kubernetes-operator, crossplane-provider-sql, rqlite, terraform-provider-azapi, gh, crossplane-provider-azure-authorization, conftest, terraform-provider-acme, docker-credential-acr-env, octo-sts,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.115.0-0.1.hum1 aarch64, x8664 grype-0.115.0-0.1.hum1.src src...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: databricks-cli-fips, kaf, crossplane-provider-aws-athena-fips, drone, zot, knative-kafka-broker-fips, kyverno-notation-aws-fips, crossplane-provider-aws-firehose-fips, ko-fips, k3s, crossplane-provider-aws-ecs, gitea, gatus-fips, crossplane-provider-aws-eks-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: databricks-cli-fips, kaf, crossplane-provider-aws-athena-fips, drone, zot, knative-kafka-broker-fips, kyverno-notation-aws-fips, crossplane-provider-aws-firehose-fips, ko-fips, k3s, crossplane-provider-aws-ecs, gitea, gatus-fips, crossplane-provider-aws-eks-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, gomplate, chezmoi, spire-server, syft, skaffold, gh, external-secrets-operator, crossplane-provider-azure-authorization, pulumi-language-java, flux-image-automation-controller, cert-manager, flux-kustomize-controller, telegraf, cilium,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, gomplate, chezmoi, spire-server, syft, skaffold, pulumi-language-java, external-secrets-operator, flux-image-automation-controller, cert-manager, telegraf, cilium, guac, trivy, witness, nuclei, pulumi-kubernetes-operator, k9s, loki, dagger,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, tekton-pipelines-fips, zot, kots, k9s-fips, tigera-operator, cluster-api-helm-controller, rancher-helm, tigera-operator-fips, jfrog-cli, linkerd2-fips, trivy-fips, beats, zarf-fips, chainctl-fips, consul-k8s-fips, headlamp, cloudbeat,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, tekton-pipelines-fips, zot, kots, k9s-fips, tigera-operator, cluster-api-helm-controller, rancher-helm, tigera-operator-fips, jfrog-cli, linkerd2-fips, trivy-fips, beats, zarf-fips, chainctl-fips, consul-k8s-fips, headlamp, cloudbeat,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, tekton-pipelines-fips, zot, kots, k9s-fips, tigera-operator, cluster-api-helm-controller, rancher-helm, tigera-operator-fips, jfrog-cli, linkerd2-fips, trivy-fips, beats, zarf-fips, chainctl-fips, consul-k8s-fips, headlamp, cloudbeat,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, tekton-pipelines-fips, zot, kots, k9s-fips, tigera-operator, cluster-api-helm-controller, rancher-helm, tigera-operator-fips, jfrog-cli, linkerd2-fips, trivy-fips, beats, zarf-fips, chainctl-fips, consul-k8s-fips, headlamp, cloudbeat,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, zot, kots, k9s-fips, tigera-operator, cluster-api-helm-controller, rancher-helm, tigera-operator-fips, jfrog-cli, linkerd2-fips, trivy-fips, zarf-fips, chainctl-fips, consul-k8s-fips, headlamp, cloudbeat, teleport, cloudbeat-fips, tw, cg...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, terragrunt, chainctl-fips, gitaly-fips, cloudbeat, teleport, cloudbeat-fips,...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, terragrunt, chainctl-fips, gitaly-fips, cloudbeat, teleport, cloudbeat-fips,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: zarf, crossplane-provider-terraform-fips, zot, kots, k9s-fips, terraform, trivy-operator, grype-db, conftest-fips, tflint-fips, conftest, trivy-operator-fips, wolfictl, syft, kubescape-server, task-fips, trivy-fips, kubescape, zarf-fips, grype-fips, k9s, chainctl-fip...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: zarf, crossplane-provider-terraform-fips, zot, kots, k9s-fips, terraform, trivy-operator, grype-db, conftest-fips, tflint-fips, conftest, trivy-operator-fips, wolfictl, syft, kubescape-server, task-fips, trivy-fips, kubescape, zarf-fips, grype-fips, k9s, chainctl-fip...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, chainctl-fips, gitaly-fips, chezmoi, cloudbeat, teleport, cloudbeat-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, chainctl-fips, gitaly-fips, chezmoi, cloudbeat, teleport, cloudbeat-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, chainctl-fips, gitaly-fips, chezmoi, cloudbeat, teleport, cloudbeat-fips,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: argo-events, dagger, grafana-alloy, nfpm, bom, osv-scanner, flux-source-controller, gitea, gomplate, steampipe, chezmoi, snyk-cli, gitaly, syft, apko, trivy-operator, wolfictl, skaffold, pulumi-language-java, external-secrets-operator, kubevela, argo-workflows,...