PT-2026-23069

Name of the Vulnerable Software and Affected Versions Langchain Helm Charts versions prior to 0.12.71 Description Langchain Helm Charts, used for deploying Langchain applications on Kubernetes, had a flaw where a specially crafted link could lead to the theft of authentication tokens. This allowe...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-iam-fips, crossplane-provider-aws-acm, tekton-pipelines, grafana-mimir, melange, crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-eks-fips, flux-fips, omni-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-iam-fips, crossplane-provider-aws-acm, tekton-pipelines, grafana-mimir, melange, crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-eks-fips, flux-fips, omni-fips,...

openSUSE 16 Security Update : openQA, os-autoinst, openQA-devel-container (openSUSE-SU-2026:20261-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20261-1 advisory. Changes in openQA: - Update to version 5.1771422749.560a3b26: fixmcp: set navbar check expression to read-only feat: support inverted result filters in...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, q, cerbos, crossplane-provider-family-azure, crossplane-provider-aws-firehose, argo-events, cilium-cli, crossplane-provider-aws-rds, flux-image-automation-controller, argocd-image-updater, crossplane-provider-azure-sql,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, q, cerbos, crossplane-provider-family-azure, crossplane-provider-aws-firehose, argo-events, cilium-cli, crossplane-provider-aws-rds, flux-image-automation-controller, argocd-image-updater, crossplane-provider-azure-sql,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam-fips, guac, skaffold, ratify, terraform-provider-databricks-fips, terragrunt, tekton-pipelines, melange, crossplane-provider-aws-kinesis-fips, extism, k9s, crossplane-provider-aws-eks-fips, flux-fips, crossplane-fips, omni-fips,...

CLEANSTART-2026-VI85055 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-VZ85637 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-HA44046 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-IG94553 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-HW19594 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

openSUSE Security Advisory (SUSE-SU-2026:0480-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:0480-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2026-24044

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:0480-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0480-1 advisory. This update for helm rebuilds it against the current GO security release. Tenable has extracted the preceding description bloc...

CVE-2026-24044

CVE-2026-24044 affects Element Server Suite Community Edition (ESS Community) Helm Chart. The issue arises in the Helm Chart secrets initialization hook (using matrix-tools container prior to 0.5.7) where an insecure Matrix server key generation method can produce the same key pair, enabling netw...

CVE-2026-24044 ESS Community Helm Chart has a weak server key generation method

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

CVE-2026-24044

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

CVE-2026-24044 ESS Community Helm Chart has a weak server key generation method

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...