GO-2026-4518 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, grafana-alloy-fips, steampipe, telegraf, bento, grafana-alloy, teleport, bento-fips, splunk-otel-collector...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: oras, k8ssandra-client-fips, kube-mgmt-fips, crossplane-fips, vcluster-fips, headlamp, kyverno-notation-aws, kube-arangodb, consul-k8s-fips, consul-k8s, gogatekeeper, kgateway-fips, kubescape-operator-fips, vcluster, kyverno-notation-aws-fips, linkerd2-fips,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: pgwatch, loki-fips, cert-manager-fips, flux-notification-controller, pluto, nova, victoriametrics-cluster-fips, polaris, stakater-reloader, temporal-fips, omnictl-multiarch, flux-operator-fips, amazon-k8s-cni-fips, flux-source-watcher, grafana-rollout-operator,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: filebrowser, grafana-alloy, trufflehog, zot, undock, podman, opentofu, xeol, rancher-fleet, zarf, terragrunt, nuclei, kubescape-operator, steampipe, envoy-gateway, terraform, trivy-operator, nsc, trivy, gptscript, guac, gitleaks, k9s, gitness, vcluster, tflint...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: polaris, nova, terragrunt, dkron, steampipe, flux-source-controller, go, victoriametrics-cluster, victoriametrics, grafana-operator, stakater-reloader, pluto, flux-notification-controller, flux-helm-controller, metacontroller, grafana-rollout-operator,...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: zot, opentofu, grype, xeol, zarf, conftest, snyk-cli, terragrunt, steampipe, kubescape, syft, tfsec, terraform, trivy-operator, trivy, wolfictl, k9s, task, kots, tflint...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: polaris, nova, terragrunt, dkron, steampipe, flux-source-controller, go, victoriametrics-cluster, victoriametrics, grafana-operator, stakater-reloader, pluto, flux-notification-controller, flux-helm-controller, metacontroller, grafana-rollout-operator,...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: grafana-alloy, steampipe, splunk-otel-collector, telegraf, bento...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: grafana-alloy, trufflehog, melange, pulumi-language-yaml, gitlab-runner, nfpm, osv-scanner, zot, argo-events, teleport, scorecard, grype, pulumi-kubernetes-operator, pulumi-language-dotnet, rancher-fleet, xeol, zarf, gitsign, snyk-cli, nuclei,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: zot, chartmuseum, gogatekeeper, k8ssandra-client, opa, rancher-fleet, conftest, zarf, rancher-agent, steampipe, argo-cd, consul-k8s, trivy-operator, opa-envoy, argocd-image-updater, trivy, ratify, kots, cilium-cli, gatekeeper, oras, rancher, helm...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, bank-vaults, aws-nuke, addon-resizer, cluster-autoscaler, nfs-subdir-external-provisioner, nri-prometheus, octo-sts, pulumi-kubernetes-operator,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: atlantis, nfpm, rootlesskit, pulumi-kubernetes-operator, crossplane-provider-aws-cloudformation, external-secrets-operator, tkn, crossplane-provider-aws-memorydb, crossplane-provider-aws-rds, crossplane-provider-aws-sqs, kubescape,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kube-bench, chartmuseum, gobuster, cluster-api-provider-vsphere, kind, kubernetes-csi-driver-hostpath, gcsfuse, nats-server-config-reloader, mockgen, kpt, tkn, aws-privateca-issuer, docker-credential-gcr, k8sgateway, dgraph, dive, kubeflow-katib, ko, oauth2-proxy,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gatus-fips, kubernetes-dashboard, kyverno-policy-reporter-plugins-kyverno, policy-controller, grype, crossplane-fips, vault-fips, juicefs, policy-controller-fips, crossplane-provider-aws-organizations-fips, crossplane-provider-aws-networkmanager-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-fips, k3s, livekit-cli, neuvector-scanner, syft-fips, grype-db, kube-mgmt-fips, grype, crossplane-fips, headlamp, kube-arangodb, consul-k8s-fips, amazon-ecs-agent, consul-k8s, kubescape-operator-fips, kgateway-fips, neuvector-scanner-fips, grype-fips,...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10976-1 steampipe-2.4.4-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: grafana-alloy, trufflehog, melange, pulumi-language-yaml, gitlab-runner, nfpm, osv-scanner, zot, argo-events, teleport, scorecard, grype, pulumi-kubernetes-operator, pulumi-language-dotnet, rancher-fleet, xeol, zarf, gitsign, snyk-cli, terragrunt, nuclei,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: grafana-alloy, trufflehog, melange, pulumi-language-yaml, gitlab-runner, nfpm, osv-scanner, zot, argo-events, teleport, scorecard, grype, pulumi-kubernetes-operator, pulumi-language-dotnet, rancher-fleet, xeol, zarf, gitsign, snyk-cli, terragrunt, nuclei,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: grafana-alloy, trufflehog, melange, pulumi-language-yaml, gitlab-runner, nfpm, osv-scanner, zot, argo-events, teleport, scorecard, grype, pulumi-kubernetes-operator, pulumi-language-dotnet, rancher-fleet, xeol, zarf, gitsign, snyk-cli, terragrunt, nuclei,...