CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: chainctl, flux-image-automation-controller, kubevela, pulumi, grafana-alloy-fips, gitaly-fips, gptscript, syft-fips, apko, mapotf, skaffold-fips, dagger, flux, goreleaser, pulumi-language-dotnet, kubescape-server, cerbos-fips, cg, gitaly, zarf-fips, gitsign,...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: chainctl, flux-image-automation-controller, kubevela, pulumi, grafana-alloy-fips, gitaly-fips, gptscript, syft-fips, apko, mapotf, skaffold-fips, dagger, flux, goreleaser, pulumi-language-dotnet, kubescape-server, cerbos-fips, cg, gitaly, zarf-fips, gitsign,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: kots, chainctl, packer-fips, tfsec, trivy, trivy-operator-fips, grype, trivy-fips, cloudbeat, steampipe, grype-db, syft-fips, terragrunt-fips, kubescape, terragrunt, grype-fips, cloudbeat-fips, snyk-cli, syft, k9s, zarf, opentofu-fips, tflint-fips, conftest,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: kots, chainctl, packer-fips, tfsec, trivy, trivy-operator-fips, grype, trivy-fips, cloudbeat, steampipe, grype-db, syft-fips, terragrunt-fips, kubescape, terragrunt, grype-fips, cloudbeat-fips, snyk-cli, syft, k9s, zarf, opentofu-fips, tflint-fips, conftest,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: chainctl, flux-image-automation-controller, kubevela, pulumi, grafana-alloy-fips, gitaly-fips, gptscript, syft-fips, apko, livekit-cli, skaffold-fips, nfpm, dagger, flux, pulumi-language-dotnet, kubescape-server, cerbos-fips, cg, gitaly, zarf-fips, gitsign,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: chainctl, flux-image-automation-controller, kubevela, pulumi, grafana-alloy-fips, gitaly-fips, gptscript, syft-fips, apko, livekit-cli, skaffold-fips, nfpm, dagger, flux, pulumi-language-dotnet, kubescape-server, cerbos-fips, cg, gitaly, zarf-fips, gitsign,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: chainctl, flux-image-automation-controller, kubevela, pulumi, grafana-alloy-fips, gitaly-fips, gptscript, syft-fips, apko, livekit-cli, skaffold-fips, nfpm, dagger, flux, pulumi-language-dotnet, kubescape-server, cerbos-fips, cg, gitaly, zarf-fips, gitsign,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: trivy-operator, argo-cd, zot, kaniko, flux-image-automation-controller, trivy, witness, osv-scanner, bom, gitea, gitlab-runner, cerbos, kubevela, gitaly, skaffold, flux-source-controller, teleport, trufflehog, zarf, guac, tfsec, chezmoi, rancher-fleet, apko, gptscrip...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: trivy-operator, argo-cd, zot, kaniko, flux-image-automation-controller, trivy, witness, osv-scanner, bom, gitea, gitlab-runner, cerbos, kubevela, gitaly, skaffold, flux-source-controller, teleport, trufflehog, zarf, guac, tfsec, chezmoi, rancher-fleet, apko, gptscrip...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: trivy-operator, argo-cd, zot, kaniko, flux-image-automation-controller, trivy, witness, osv-scanner, bom, gitea, gitlab-runner, cerbos, kubevela, gitaly, skaffold, flux-source-controller, teleport, trufflehog, zarf, guac, tfsec, chezmoi, rancher-fleet, apko, gptscrip...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: trivy-operator, argo-cd, zot, kaniko, flux-image-automation-controller, trivy, witness, osv-scanner, bom, gitea, gitlab-runner, cerbos, kubevela, gitaly, skaffold, flux-source-controller, teleport, trufflehog, zarf, guac, tfsec, chezmoi, rancher-fleet, apko, gptscrip...

grype-0.109.1-1.1 on GA media (moderate)

grype-0.109.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10317-1 Rating: moderate Cross-References: CVE-2025-12183 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grype-0.109.1-1.1...

OPENSUSE-SU-2026:10317-1 grype-0.109.1-1.1 on GA media

These are all security issues fixed in the grype-0.109.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, q, gitea, zarf, cerbos, gitaly, flux-source-controller, crossplane-provider-aws-cloudwatchlogs, extism, rancher-fleet, grafana, k9s, pulumi-language-dotnet, flux-kustomize-controller, crossplane-provider-azure-sql, nuclei, pulumi,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, q, gitea, zarf, cerbos, gitaly, flux-source-controller, crossplane-provider-aws-cloudwatchlogs, extism, rancher-fleet, grafana, k9s, pulumi-language-dotnet, flux-kustomize-controller, crossplane-provider-azure-sql, nuclei, pulumi,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: chainctl, aactl, flux-image-automation-controller, kubevela, pulumi, terraform-provider-pagerduty, grafana-alloy-fips, lazygit, crossplane-provider-keycloak-fips, crossplane-provider-family-aws-fips, gitaly-fips, gptscript, syft-fips, crossplane-provider-aws-sns, apk...

exploit-chain-generator

Exploit Chain Generator Turn Noise into Signal: Correlate...

SUSE CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: longhorn-share-manager-fips, nvidia-container-toolkit, cluster-api-provider-vsphere-fips, protoc-gen-go-grpc, terraform-provider-random-fips, grafana-pyroscope, portieris-fips, rancher-webhook, newrelic-infrastructure-agent-fips, dynamic-localpv-provisioner-fips,...

CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...