GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, coder-fips, upwind-agent, grafana-fips, kots,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, upwind-agent, grafana-fips, kots, argo-workflows-fips,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, dynamic-localpv-provisioner, headlamp, hubble, kargo, skaffold, cilium, terraform-provider-kubernetes, cluster-api, rancher-fleet, postgres-operator, cert-manager-istio-csr, kube-arangodb, trivy-operator, velero, falcoctl, kubevela, consul-k8s,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, dynamic-localpv-provisioner, headlamp, hubble, kargo, skaffold, cilium, terraform-provider-kubernetes, cluster-api, rancher-fleet, postgres-operator, cert-manager-istio-csr, kube-arangodb, trivy-operator, velero, falcoctl, kubevela, consul-k8s,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: skaffold, ko, trivy-operator, kyverno, falcoctl, docker, sigstore-scaffolding, tkn, aactl, spire-server, buildkitd, ratify, policy-controller, neuvector-sigstore-interface, trivy, docker-cli-buildx, teleport, vexctl, cosign, kyverno-notation-aws, witness, kubescape,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: skaffold, ko, trivy-operator, kyverno, falcoctl, docker, sigstore-scaffolding, tkn, aactl, spire-server, buildkitd, ratify, policy-controller, neuvector-sigstore-interface, trivy, docker-cli-buildx, teleport, vexctl, cosign, kyverno-notation-aws, witness, kubescape,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kubescape, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, grafana-fips, kots, argo-workflows-fips, gomplate, melange, bom,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kubescape, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, grafana-fips, kots, argo-workflows-fips, gomplate, melange, bom,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: kubescape, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, grafana-fips, kots, argo-workflows-fips, gomplate, melange, bom,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kubescape, guac, skaffold, trivy, zot, podman, scorecard, trivy-operator, buildah, docker-compose, osv-scanner, kaniko, conftest...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kubescape, guac, skaffold, trivy, zot, podman, scorecard, trivy-operator, buildah, docker-compose, osv-scanner, kaniko, conftest...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kubescape, guac, skaffold, trivy, zot, podman, scorecard, trivy-operator, buildah, docker-compose, osv-scanner, kaniko, conftest...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kubescape, guac, skaffold, trivy, zot, podman, scorecard, trivy-operator, buildah, docker-compose, osv-scanner, kaniko, conftest...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: kubescape, skaffold, docker-fips, buildah, docker-compose-fips, docker-cli-buildx-fips, kaniko-fips, podman, trivy-operator, osv-scanner, docker-cli-buildx, conftest, kubescape-server-fips, trivy, kaniko, guac, livekit-cli, buildah-fips, cloudbeat-fips, trivy-fips,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: kubescape, skaffold, docker-fips, buildah, docker-compose-fips, docker-cli-buildx-fips, kaniko-fips, podman, trivy-operator, osv-scanner, docker-cli-buildx, conftest, kubescape-server-fips, trivy, kaniko, guac, livekit-cli, buildah-fips, cloudbeat-fips, trivy-fips,...

skaffold-2.18.0-1.1 on GA media (moderate)

skaffold-2.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10369-1 Rating: moderate Cross-References: CVE-2025-15558 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...