GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: syft-fips, scorecard, argo-workflows, google-osconfig-agent, cerbos-fips, external-secrets-operator-fips, kubescape-server-fips, grafana-alloy-fips, gitlab-runner-fips, gitea, k9s, chainctl-fips, nuclei, teleport, pulumi, gomplate, trivy-fips, gitsign, grype-db,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: syft-fips, scorecard, argo-workflows, google-osconfig-agent, cerbos-fips, external-secrets-operator-fips, kubescape-server-fips, grafana-alloy-fips, flux-source-controller, gitlab-runner-fips, gitea, k9s, chainctl-fips, nuclei, teleport, pulumi, gomplate, trivy-fips,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: gitlab-runner, cluster-api, istio, percona-server-mongodb-operator, trivy-operator, juicefs-csi-driver, cert-manager-istio-csr, kiali, zarf, trivy, kargo, emissary, kubevela, aws-node-termination-handler, argo-workflows, skaffold, cloudnative-pg, datadog-agent,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: gitlab-runner, cluster-api, istio, percona-server-mongodb-operator, trivy-operator, juicefs-csi-driver, cert-manager-istio-csr, kiali, zarf, trivy, kargo, emissary, kubevela, aws-node-termination-handler, argo-workflows, skaffold, cloudnative-pg, datadog-agent,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: crossplane, docker, ko, gitsign, sigstore-scaffolding, tkn, trivy, zarf, buildkitd, zot, policy-controller, skaffold, kubescape, flux-source-controller, gh, aactl, docker-cli-buildx, spire-server, witness, tekton-chains, slsa-verifier, goreleaser, ratify, kyverno,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: crossplane, docker, ko, gitsign, sigstore-scaffolding, tkn, trivy, zarf, buildkitd, zot, policy-controller, skaffold, kubescape, flux-source-controller, gh, aactl, docker-cli-buildx, spire-server, witness, tekton-chains, slsa-verifier, goreleaser, ratify, kyverno,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: syft-fips, scorecard, argo-workflows, google-osconfig-agent, cerbos-fips, external-secrets-operator-fips, kubescape-server-fips, grafana-alloy-fips, flux-source-controller, gitlab-runner-fips, gitea, k9s, chainctl-fips, nuclei, teleport, pulumi, gomplate, trivy-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: syft-fips, scorecard, argo-workflows, google-osconfig-agent, cerbos-fips, external-secrets-operator-fips, kubescape-server-fips, grafana-alloy-fips, flux-source-controller, gitlab-runner-fips, gitea, k9s, chainctl-fips, nuclei, teleport, pulumi, gomplate, trivy-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: syft-fips, scorecard, argo-workflows, google-osconfig-agent, cerbos-fips, external-secrets-operator-fips, kubescape-server-fips, grafana-alloy-fips, flux-source-controller, gitlab-runner-fips, gitea, k9s, chainctl-fips, nuclei, teleport, pulumi, gomplate, trivy-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: crossplane, gitlab-runner, gitsign, kaniko, external-secrets-operator, apko, argo-events, pulumi-language-java, src-fingerprint, gomplate, pulumi-language-yaml, zarf, trivy, osv-scanner, kargo, kubevela, scorecard, grype, melange, zot, argo-workflows,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: crossplane, gitlab-runner, gitsign, kaniko, external-secrets-operator, apko, argo-events, pulumi-language-java, src-fingerprint, gomplate, pulumi-language-yaml, zarf, trivy, osv-scanner, kargo, kubevela, scorecard, grype, melange, zot, argo-workflows,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: crossplane, gitlab-runner, gitsign, kaniko, external-secrets-operator, apko, argo-events, pulumi-language-java, src-fingerprint, gomplate, pulumi-language-yaml, zarf, trivy, osv-scanner, kargo, kubevela, scorecard, grype, melange, zot, argo-workflows,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: crossplane, gitlab-runner, gitsign, kaniko, external-secrets-operator, apko, argo-events, pulumi-language-java, src-fingerprint, gomplate, pulumi-language-yaml, zarf, trivy, osv-scanner, kargo, kubevela, scorecard, grype, melange, zot, argo-workflows,...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: buildah, docker-cli-buildx, podman, scorecard, kaniko, zot, guac, skaffold, docker-compose, kubescape, trivy, osv-scanner, conftest, trivy-operator...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: buildah, docker-cli-buildx, podman, scorecard, kaniko, zot, guac, skaffold, docker-compose, kubescape, trivy, osv-scanner, conftest, trivy-operator...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: buildah, docker-cli-buildx, podman, scorecard, kaniko, zot, guac, skaffold, docker-compose, kubescape, trivy, osv-scanner, conftest, trivy-operator...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: buildah, docker-cli-buildx, podman, scorecard, kaniko, zot, guac, skaffold, docker-compose, kubescape, trivy, osv-scanner, conftest, trivy-operator...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: kubescape-server, podman-fips, zot, scorecard, trivy-operator, cloudbeat, kubescape-server-fips, trivy, osv-scanner, docker-cli-buildx-fips, docker-cli-buildx, guac, buildah, podman, kaniko-fips, kubescape, docker-fips, docker-compose, trivy-fips, conftest,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: kubescape-server, podman-fips, zot, scorecard, trivy-operator, cloudbeat, kubescape-server-fips, trivy, osv-scanner, docker-cli-buildx-fips, docker-cli-buildx, guac, buildah, podman, kaniko-fips, kubescape, docker-fips, docker-compose, trivy-fips, conftest,...

skaffold-2.18.0-1.1 on GA media (moderate)

skaffold-2.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10369-1 Rating: moderate Cross-References: CVE-2025-15558 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...