GO-2026-4910 vulnerabilities

Vulnerabilities for packages: syft, tfsec, nuclei, argo-workflows, crossplane, grafana-alloy, steampipe, trivy-operator, grype, guac, pulumi-language-java, flux-source-controller, gitlab-runner, trufflehog, zarf, wolfictl, k9s, dagger, cerbos, kubescape, teleport, pulumi-language-yaml, argo-event...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: syft, crossplane, grype, ctop, cilium-cli, tkn, wolfictl, dagger, kubescape, conftest, zot, melange, docker-compose, trivy, buf, kaniko, up, cadvisor, aactl, spire-server, buildkitd, kargo, ko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: syft, nuclei, kubernetes, steampipe, rancher, gitlab-kas, guac, openbao, tkn, datadog-agent, k9s, terraform-provider-azapi, k8sgpt, prometheus-operator, pulumi-language-yaml, tw, sealed-secrets, rancher-machine, cluster-api-azure-controller,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: syft, nuclei, kubernetes, rancher, gitlab-kas, guac, openbao, k9s, prometheus-operator, pulumi-language-yaml, docker-cli-buildx, caddy, podman, minio, pulumi-kubernetes-operator, containerd, snyk-cli, external-secrets-operator, chezmoi, gptscript, knative-serving,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.116.0-0.1.hum1 aarch64, x8664 grype-0.116.0-0.1.hum1.src src...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, libnvidia-container, kpt, victoriametrics-cluster, rke2-cloud-provider, oras, metacontroller, guac, ytt, hydra, rancher-system-upgrade-controller, prometheus-operator, rook, verticadb-operator, docker-cli-buildx, argo-rollouts, otel-cl...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.115.0-0.1.hum1 aarch64, x8664 grype-0.115.0-0.1.hum1.src src...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, packer, crossplane-provider-aws-autoscaling-fips, trivy-fips, cilium, terraform-provider-tls-fips, kargo, crossplane-provider-keycloak, crossplane-provider-aws-cloudformation, crossplane-provider-aws-cognitoidp, gomplate, knative-eventing-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, packer, crossplane-provider-aws-autoscaling-fips, trivy-fips, cilium, terraform-provider-tls-fips, kargo, crossplane-provider-keycloak, crossplane-provider-aws-cloudformation, crossplane-provider-aws-cognitoidp, gomplate, knative-eventing-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: syft, nuclei, kubernetes, steampipe, rancher, gitlab-kas, guac, openbao, tkn, datadog-agent, k9s, k8sgpt, prometheus-operator, pulumi-language-yaml, rancher-machine, cluster-api-azure-controller, flux-notification-controller, docker-cli-buildx, caddy, podman, chisel,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: syft, nuclei, kubernetes, rancher, gitlab-kas, guac, openbao, k9s, prometheus-operator, pulumi-language-yaml, docker-cli-buildx, caddy, podman, minio, pulumi-kubernetes-operator, containerd, snyk-cli, external-secrets-operator, chezmoi, gptscript, knative-serving,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-set-status, packer, cluster-api-helm-controller, beats, fuse-overlayfs-snapshotter, kube-mgmt-fips, trivy-fips, kargo, chainctl, helm-operator, skaffold, amazon-ecs-agent-fips, zarf-fips, scorecard, google-osconfig-agent, helm-fips, livekit-cli,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-set-status, packer, cluster-api-helm-controller, beats, fuse-overlayfs-snapshotter, kube-mgmt-fips, trivy-fips, kargo, chainctl, helm-operator, skaffold, amazon-ecs-agent-fips, zarf-fips, scorecard, google-osconfig-agent, helm-fips, livekit-cli,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-set-status, packer, cluster-api-helm-controller, beats, fuse-overlayfs-snapshotter, kube-mgmt-fips, trivy-fips, kargo, chainctl, helm-operator, skaffold, amazon-ecs-agent-fips, zarf-fips, scorecard, google-osconfig-agent, helm-fips, livekit-cli,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-set-status, packer, cluster-api-helm-controller, beats, fuse-overlayfs-snapshotter, kube-mgmt-fips, trivy-fips, kargo, chainctl, helm-operator, skaffold, amazon-ecs-agent-fips, zarf-fips, scorecard, google-osconfig-agent, helm-fips, livekit-cli,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-set-status, packer, cluster-api-helm-controller, fuse-overlayfs-snapshotter, kube-mgmt-fips, trivy-fips, kargo, chainctl, helm-operator, skaffold, amazon-ecs-agent-fips, zarf-fips, scorecard, google-osconfig-agent, helm-fips, livekit-cli, buildkitd,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: argo-cd, mapotf, packer, gptscript, trivy-fips, nuclei, kargo, terragrunt-fips, chainctl, skaffold, kyverno-fips, src-fingerprint, gomplate, zarf-fips, scorecard, google-osconfig-agent, melange, trivy-operator-fips, xeol, external-secrets-operator-fips,...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: argo-cd, mapotf, packer, gptscript, trivy-fips, nuclei, kargo, terragrunt-fips, chainctl, skaffold, kyverno-fips, src-fingerprint, gomplate, zarf-fips, scorecard, google-osconfig-agent, melange, trivy-operator-fips, xeol, external-secrets-operator-fips,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform-fips, k9s-fips, trivy, conftest, packer, xeol-fips, cloudbeat-fips, trivy-fips, tflint, steampipe, wolfictl, kubescape-server, task-fips, terragrunt-fips, chainctl, chainctl-fips, packer-fips, task, terragrunt,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform-fips, k9s-fips, trivy, conftest, packer, xeol-fips, cloudbeat-fips, trivy-fips, tflint, steampipe, wolfictl, kubescape-server, task-fips, terragrunt-fips, chainctl, chainctl-fips, packer-fips, task, terragrunt,...