GO-2026-4518 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, steampipe, bento-fips, bento, kots, splunk-otel-collector-fips, grafana-alloy, splunk-otel-collector, telegraf, teleport...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kube-mgmt, helm-push, gitlab-operator-fips, kubescape-operator-fips, linkerd2-fips, envoy-gateway-fips, kyverno-notation-aws-fips, opentofu-fips, tigera-operator, eksctl, helm-operator, kgateway, helm, cloudbeat-fips, vcluster, xeol-fips, kyverno, trivy-operator,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-source-controller, librechat, victorialogs, victoriametrics-fips, dkron, cluster-autoscaler-fips, metacontroller, temporal-fips, stakater-reloader, flux-operator-fips, nova, flux-operator, nova-fips, grafana-fips, flux-image-reflector-controller,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: guac, tflint, undock, filebrowser, nsc, gitness, vcluster, steampipe, zarf, zot, rancher-fleet, k9s, trivy-operator, terragrunt, opentofu, xeol, trufflehog, nuclei, gitleaks, trivy, gptscript, terraform, grafana-alloy, envoy-gateway, podman, kubescape-operator...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: stakater-reloader, polaris, grafana-rollout-operator, flux-notification-controller, victoriametrics-cluster, steampipe, flux-image-reflector-controller, go, flux-image-automation-controller, terragrunt, podinfo, metacontroller, pluto, flux-helm-controller,...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: tflint, wolfictl, conftest, snyk-cli, steampipe, kots, zarf, zot, task, tfsec, k9s, trivy-operator, terragrunt, kubescape, opentofu, xeol, syft, trivy, terraform, grype...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: stakater-reloader, polaris, grafana-rollout-operator, flux-notification-controller, victoriametrics-cluster, steampipe, flux-image-reflector-controller, go, flux-image-automation-controller, terragrunt, podinfo, metacontroller, pluto, flux-helm-controller,...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: grafana-alloy, splunk-otel-collector, steampipe, telegraf, kots, bento...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: gitsign, guac, wolfictl, src-fingerprint, dagger, teleport, nfpm, snyk-cli, kots, steampipe, pulumi-language-yaml, zarf, zot, external-secrets-operator, argo-events, osv-scanner, tfsec, argocd-image-updater, gitaly, flux-image-automation-controller, k9s, rancher-flee...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: chartmuseum, conftest, vcluster, kots, steampipe, zarf, zot, argocd-image-updater, rancher-fleet, trivy-operator, consul-k8s, helm-operator, argo-cd, headlamp, linkerd2, opa-envoy, oras, falcoctl, gatekeeper, ratify, gogatekeeper, tigera-operator, grafana-operator,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: delve, stakater-reloader, cert-exporter, guac, crossplane-provider-aws-sns, authservice, crossplane-provider-aws-cloudformation, db-operator, octo-sts, sealed-secrets, terraform-provider-acme, argo-rollouts, crossplane-provider-azure-managedidentity, azcopy,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: guac, crossplane-provider-aws-sns, crossplane-provider-aws-cloudformation, sealed-secrets, terraform-provider-acme, flux-notification-controller, crossplane-provider-azure-managedidentity, neuvector-sigstore-interface, snyk-cli, falco-no-driver, osv-scanner, src,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: delve, guac, nri-mysql, rancher-system-upgrade-controller, wgcf, kubernetes-dashboard-auth, neuvector-sigstore-interface, docker-machine-driver-harvester, render-template, gobuster, docker-cli, dgraph, kubernetes-csi-external-health-monitor, kubeflow-katib, src,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: flux-source-controller, crossplane-provider-azure-network, crossplane-provider-azure-netapp, crossplane-provider-azure-servicebus, tekton-chains, reports-server, juicefs, crossplane-provider-aws-guardduty, kyverno-notation-aws-fips, opentofu-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: buildkitd-fips, kube-mgmt, helm-push, kubescape-operator-fips, linkerd2-fips, kaniko, packer, wolfictl, newrelic-infrastructure-agent-fips, k8sgpt, envoy-gateway-fips, skaffold-fips, tigera-operator, eksctl, k3s, grype-fips, helm-operator, kgateway, chainctl-fips,...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10976-1 steampipe-2.4.4-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitsign, guac, wolfictl, src-fingerprint, dagger, teleport, goreleaser, nfpm, snyk-cli, kots, act, pulumi-language-yaml, steampipe, zarf, external-secrets-operator, argo-events, osv-scanner, tfsec, zot, argocd-image-updater, gitaly, flux-image-automation-controller,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitsign, guac, wolfictl, src-fingerprint, dagger, teleport, goreleaser, nfpm, snyk-cli, kots, act, pulumi-language-yaml, steampipe, zarf, external-secrets-operator, argo-events, osv-scanner, tfsec, zot, argocd-image-updater, gitaly, flux-image-automation-controller,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gitsign, guac, wolfictl, src-fingerprint, dagger, teleport, goreleaser, nfpm, snyk-cli, kots, act, pulumi-language-yaml, steampipe, zarf, external-secrets-operator, argo-events, osv-scanner, tfsec, zot, argocd-image-updater, gitaly, flux-image-automation-controller,...