GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: descheduler, docker-compose, nri-mysql, dagger, kubernetes-dashboard-metrics-scraper, q, otel-cli, rancher, conjur-cli, cloudnative-pg, controller-gen, kapp-controller, timestamp-authority, smokescreen, boring-registry, traefik, litestream, gobuster, datadog-agent,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.115.0-0.1.hum1 aarch64, x8664 grype-0.115.0-0.1.hum1.src src...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-backup, atlantis-fips, docker-machine-driver-linode, caddy, eksctl, crossplane-provider-aws-osis, mattermost, crossplane-provider-aws-s3, crossplane-provider-azure-relay, crossplane-provider-aws-vpc-fips...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-backup, atlantis-fips, docker-machine-driver-linode, caddy, eksctl, crossplane-provider-aws-osis, mattermost, crossplane-provider-aws-s3, crossplane-provider-azure-relay, crossplane-provider-aws-vpc-fips...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: hcloud, podman, steampipe, zarf, caddy, loki, dagger, flux-kustomize-controller, kubernetes, policy-controller, istio, opentofu, grype, kargo, flux-image-automation-controller, crossplane-provider-azure-authorization, eksctl, rancher, chezmoi, falcoctl, tflint,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: podman, zarf, caddy, loki, dagger, kubernetes, istio, opentofu, grype, flux-image-automation-controller, rancher, chezmoi, argo-cd, kots, k3s, fscrypt, argocd-image-updater, step, gomplate, containerd, snyk-cli, openbao, pulumi-kubernetes-operator, argo-events, gitea...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: spegel-fips, kubescape-operator-fips, eksctl, neuvector-scanner, tw, docker-cli-buildx-fips, helm-mapkubeapis, syft-fips, trivy-operator, helm-set-status, syft, docker-compose, chaos-mesh-fips, envoy-gateway-fips, kubescape-server, grype, cg, kube-mgmt,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: spegel-fips, kubescape-operator-fips, eksctl, neuvector-scanner, tw, docker-cli-buildx-fips, helm-mapkubeapis, syft-fips, trivy-operator, helm-set-status, syft, docker-compose, chaos-mesh-fips, envoy-gateway-fips, kubescape-server, grype, cg, kube-mgmt,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: spegel-fips, kubescape-operator-fips, eksctl, neuvector-scanner, tw, docker-cli-buildx-fips, helm-mapkubeapis, syft-fips, trivy-operator, helm-set-status, syft, docker-compose, chaos-mesh-fips, envoy-gateway-fips, kubescape-server, grype, cg, kube-mgmt,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: spegel-fips, kubescape-operator-fips, eksctl, neuvector-scanner, tw, docker-cli-buildx-fips, helm-mapkubeapis, syft-fips, trivy-operator, helm-set-status, syft, docker-compose, chaos-mesh-fips, envoy-gateway-fips, kubescape-server, grype, cg, kube-mgmt,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: spegel-fips, kubescape-operator-fips, eksctl, neuvector-scanner, tw, docker-cli-buildx-fips, helm-mapkubeapis, syft-fips, trivy-operator, helm-set-status, syft, docker-compose, chaos-mesh-fips, envoy-gateway-fips, kubescape-server, grype, cg, kube-mgmt,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, gomplate, terragrunt, syft-fips, pulumi-language-yaml, trivy-operator, terragrunt-fips, chainloop-cli-fips, nuclei, gitsign, syft, argo-workflows-fips, src-fingerprint-fips, nemo, gitlab-runner, kubescape-server, cerbos, flux, grype, cg,...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, gomplate, terragrunt, syft-fips, pulumi-language-yaml, trivy-operator, terragrunt-fips, chainloop-cli-fips, nuclei, gitsign, syft, argo-workflows-fips, src-fingerprint-fips, nemo, gitlab-runner, kubescape-server, cerbos, flux, grype, cg,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: packer, task-fips, tflint, snyk-cli, xeol, terraform, k9s, opentofu-fips, cloudbeat-fips, syft-fips, packer-fips, terragrunt, wolfictl, crossplane-provider-terraform, kubescape, trivy-operator, terraform-fips, tflint-fips, grype-fips, chainctl-fips, terragrunt-fips,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: packer, task-fips, tflint, snyk-cli, xeol, terraform, k9s, opentofu-fips, cloudbeat-fips, syft-fips, packer-fips, terragrunt, wolfictl, crossplane-provider-terraform, kubescape, trivy-operator, terraform-fips, tflint-fips, grype-fips, chainctl-fips, terragrunt-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, gomplate, syft-fips, pulumi-language-yaml, trivy-operator, nuclei, gitsign, syft, argo-workflows-fips, src-fingerprint-fips, nemo, gitlab-runner, kubescape-server, cerbos, flux, grype, cg, kyverno, cerbos-fips, apko-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, gomplate, syft-fips, pulumi-language-yaml, trivy-operator, nuclei, gitsign, syft, argo-workflows-fips, src-fingerprint-fips, nemo, gitlab-runner, kubescape-server, cerbos, flux, grype, cg, kyverno, cerbos-fips, apko-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, gomplate, syft-fips, pulumi-language-yaml, trivy-operator, nuclei, gitsign, syft, argo-workflows-fips, src-fingerprint-fips, nemo, gitlab-runner, kubescape-server, cerbos, flux, grype, cg, kyverno, cerbos-fips, apko-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: zarf, steampipe, nuclei, pulumi-language-yaml, dagger, bom, wolfictl, argocd-image-updater, grafana-alloy, gomplate, grype, kargo, snyk-cli, crossplane, flux-image-automation-controller, external-secrets-operator, kubescape, cerbos, argo-workflows, trufflehog,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: zarf, steampipe, nuclei, pulumi-language-yaml, dagger, bom, wolfictl, argocd-image-updater, grafana-alloy, gomplate, grype, kargo, snyk-cli, crossplane, flux-image-automation-controller, external-secrets-operator, kubescape, cerbos, argo-workflows, trufflehog,...