OPENSUSE-SU-2026:20525-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group bsc1259652. - CVE-2026-28387: potential use-after-free in DANE client code bsc1260441. - CVE-2026-28388: NULL pointer dereference when processing...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: stakater-reloader, flux-source-controller, aws-load-balancer-controller, gh, flux-notification-controller, nodetaint, nfs-subdir-external-provisioner, victoriametrics, envoy-ratelimit, oras, goreleaser, pluto, actions-runner-controller, dgraph, apko, smokescreen,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: hubble-ui, aws-load-balancer-controller, yace, keda, vt-cli, dgraph, crossplane-provider-azure-storage, kafkaexporter, litefs, consul-k8s, opentelemetry-collector, promxy, rabbitmq-default-user-credential-updater, newrelic-k8s-metadata-injection, pulumi-language-yaml...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: hubble-ui, aws-load-balancer-controller, yace, keda, vt-cli, dgraph, crossplane-provider-azure-storage, kafkaexporter, litefs, consul-k8s, opentelemetry-collector, promxy, rabbitmq-default-user-credential-updater, newrelic-k8s-metadata-injection, pulumi-language-yaml...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: weaviate, hubble-ui, flux-source-controller, redpanda, libnvidia-container, kube-arangodb, keda, dgraph, crossplane-provider-azure-storage, cert-manager-csi-driver, external-dns, witness, kubernetes-csi-external-attacher, etcd, promxy, step-ca, k8sgpt-operator,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: weaviate, hubble-ui, flux-source-controller, redpanda, libnvidia-container, kube-arangodb, keda, dgraph, crossplane-provider-azure-storage, cert-manager-csi-driver, external-dns, witness, kubernetes-csi-external-attacher, etcd, promxy, step-ca, k8sgpt-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: hubble-ui, aws-load-balancer-controller, yace, keda, vt-cli, dgraph, crossplane-provider-azure-storage, kafkaexporter, litefs, consul-k8s, promxy, rabbitmq-default-user-credential-updater, newrelic-k8s-metadata-injection, pulumi-language-yaml, k3s,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: kubescape-server, grype-fips, k9s-fips, chainctl-fips, kubescape, terragrunt-fips, trivy-fips, packer-fips, snyk-cli, cg, opentofu-fips, task, xeol-fips, grype, terraform-fips, chainctl, zarf, tfsec, task-fips, cloudbeat, packer, wolfictl, kots, zot, steampipe,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: kubescape-server, grype-fips, k9s-fips, chainctl-fips, kubescape, terragrunt-fips, trivy-fips, packer-fips, snyk-cli, cg, opentofu-fips, task, xeol-fips, grype, terraform-fips, chainctl, zarf, tfsec, task-fips, cloudbeat, packer, wolfictl, kots, zot, steampipe,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: nats-fips, argo-workflows-fips, commercial-expanso-edge, newrelic-infrastructure-agent-fips, opa-fips-envoy, amazon-ssm-agent, etcd-fips, omni-fips, pulumi-language-java, podman, backup-restore-operator-fips, vendir, azurefile-csi, knative-eventing, telegraf,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, kubernetes-csi-livenessprobe, azure-service-operator-fips, argo-workflows-fips, commercial-expanso-edge, kyverno-policy-reporter-kyverno-plugin-fips, newrelic-infrastructure-agent-fips, opa-fips-envoy, memcached-exporter, dcgm-exporter,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: nats-fips, argo-workflows-fips, commercial-expanso-edge, newrelic-infrastructure-agent-fips, opa-fips-envoy, amazon-ssm-agent, etcd-fips, omni-fips, pulumi-language-java, podman, backup-restore-operator-fips, vendir, azurefile-csi, knative-eventing, telegraf,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: minc-fips, opentelemetry-operator, kubernetes-csi-livenessprobe, azure-service-operator-fips, argo-workflows-fips, commercial-expanso-edge, nats-fips, kyverno-policy-reporter-kyverno-plugin-fips, victoriametrics-operator-fips, zabbix-agent2,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: minc-fips, opentelemetry-operator, kubernetes-csi-livenessprobe, azure-service-operator-fips, argo-workflows-fips, commercial-expanso-edge, nats-fips, kyverno-policy-reporter-kyverno-plugin-fips, victoriametrics-operator-fips, zabbix-agent2,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: minc-fips, opentelemetry-operator, kubernetes-csi-livenessprobe, azure-service-operator-fips, argo-workflows-fips, commercial-expanso-edge, nats-fips, kyverno-policy-reporter-kyverno-plugin-fips, victoriametrics-operator-fips, zabbix-agent2,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, newrelic-infrastructure-agent-fips, pulumi-language-java, chart-testing-fips, azure-ipam, crossplane-provider-aws-ecr, amazon-eks-ami, backup-restore-operator-fips, vendir, gcsfuse, azurefile-csi, kubernetes-event-exporter-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: minc-fips, opentelemetry-operator, kubernetes-csi-livenessprobe, azure-service-operator-fips, argo-workflows-fips, commercial-expanso-edge, nats-fips, kyverno-policy-reporter-kyverno-plugin-fips, victoriametrics-operator-fips, zabbix-agent2,...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: minc-fips, opentelemetry-operator, kubernetes-csi-livenessprobe, azure-service-operator-fips, argo-workflows-fips, commercial-expanso-edge, nats-fips, kyverno-policy-reporter-kyverno-plugin-fips, victoriametrics-operator-fips, zabbix-agent2,...

CVE-2026-39943

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus stores revision records in directusrevisions whenever items are created or updated. Due to the revision snapshot code not consistently calling the prepareDelta sanitization pipeline,...

CVE-2026-33781

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on specific EX and QFX Series devices allow an unauthenticated, adjacent attacker to cause a complete Denial of Service DoS. On EX4k, and QFX5k platforms configur...