Teleport - Authentication Bypass

Teleport versions prior to 17.5.2 are vulnerable to a remote authentication bypass vulnerability. This issue allows attackers to gain unauthorized access to affected systems. id: CVE-2025-49825 info: name: Teleport - Authentication Bypass author: pdteam severity: critical description: | Teleport...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, teleport-operator-fips, falcoctl, docker-fips, trivy-operator, zarf, kubescape-server, trivy-operator-fips, zarf-fips, tflint, cloudbeat-fips, neuvector-sigstore-interface, policy-controller, kyverno-notation-aws, aactl, gitsign,...

GHSA-9R4W-JG96-92MV vulnerabilities

Vulnerabilities for packages: teleport...

GHSA-9R4W-JG96-92MV vulnerabilities

Vulnerabilities for packages: tbot, teleport-operator-fips, teleport...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: trivy-operator, kubescape, aactl, falcoctl, teleport, tkn, kyverno, crossplane, ratify, zarf, spire-server, tekton-chains, goreleaser, neuvector-sigstore-interface, tflint, trivy, policy-controller, kyverno-notation-aws, gitsign...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: trivy-operator, kubescape, aactl, falcoctl, teleport, tkn, kyverno, crossplane, ratify, zarf, spire-server, tekton-chains, goreleaser, neuvector-sigstore-interface, tflint, trivy, policy-controller, kyverno-notation-aws, gitsign...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, trivy-operator, falcoctl, docker-fips, zarf, kubescape-server, slsa-verifier, trivy-operator-fips, zarf-fips, ko, tflint, cloudbeat-fips, neuvector-sigstore-interface, policy-controller, kyverno-notation-aws, aactl, gitsign, chainctl-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, trivy-operator, falcoctl, docker-fips, zarf, kubescape-server, slsa-verifier, trivy-operator-fips, zarf-fips, ko, tflint, cloudbeat-fips, neuvector-sigstore-interface, policy-controller, kyverno-notation-aws, aactl, gitsign, chainctl-fips,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: trivy-operator, kubescape, aactl, falcoctl, teleport, tkn, kyverno, crossplane, ratify, zarf, spire-server, tekton-chains, slsa-verifier, goreleaser, neuvector-sigstore-interface, tflint, ko, policy-controller, kyverno-notation-aws, gitsign...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: trivy-operator, kubescape, aactl, falcoctl, teleport, tkn, kyverno, crossplane, ratify, zarf, spire-server, tekton-chains, slsa-verifier, goreleaser, neuvector-sigstore-interface, tflint, ko, policy-controller, kyverno-notation-aws, gitsign...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: k9s, kine, melange, snyk-cli, kubernetes-dashboard, trivy-operator, witness, kubescape, telegraf, loki, pulumi-language-yaml, kots, zot, aactl, gptscript, gitea, prometheus-operator, knative-serving, argocd-image-updater, cert-manager, kyverno, flux-source-controller...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kine, snyk-cli, kubernetes-dashboard, zot, telegraf, loki, kots, aactl, docker-cli-buildx, prometheus-operator, rancher, knative-serving, cert-manager, kyverno, kubernetes, containerd, istio, spire-server, external-dns, prometheus, flux, minio,...

GHSA-XGRM-4FWX-7QM8 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, commercial-grafana, gitaly, teleport...

CVE-2026-33815 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, commercial-grafana, gitaly, teleport...

CVE-2026-33815 vulnerabilities

Vulnerabilities for packages: gitaly, teleport...

GHSA-XGRM-4FWX-7QM8 vulnerabilities

Vulnerabilities for packages: gitaly, teleport...

GHSA-W5PP-99CH-QJ29 vulnerabilities

Vulnerabilities for packages: guac, gitaly, external-secrets-operator, terragrunt, teleport...

GHSA-W5PP-99CH-QJ29 vulnerabilities

Vulnerabilities for packages: flux, guac, flux-fips, nemo, external-secrets-operator-fips, teleport, grafana, gitlab-rails-ce, upwind-agent, argo-cd, grafana-fips, argo-cd-fips, terragrunt, external-secrets-operator, terragrunt-fips, gitlab-rails-ce-fips, gitaly...

OPENSUSE-SU-2026:10684-1 teleport-17.7.23-1.1 on GA media

These are all security issues fixed in the teleport-17.7.23-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: gomplate-fips, crossplane-provider-aws-firehose, crossplane-provider-aws-sqs, teleport-operator-fips, boring-registry-fips, amazon-ecs-agent, crossplane-provider-aws-ecs-fips, gitlab-runner, chainloop-artifact-cas, crossplane-provider-aws-cloudformation-fips, omni,...