OPENSUSE-SU-2025:14839-1 teleport-17.2.9-1.1 on GA media

These are all security issues fixed in the teleport-17.2.9-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-8666

Name of the Vulnerable Software and Affected Versions Teleport affected versions not specified Description The issue allows a denial of service attack against SSH servers that implement file transfer protocols. This occurs when clients complete the key exchange slowly or not at all, causing pendi...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, containerd, sftpgo, kargo, harbor-registry, splunk-otel-collector, sftpgo-plugin-kms, neuvector-scanner, melange, frp, cosign, step-ca, kots, vault-benchmark, gatus, fulcio, sops, caddy, argo-workflows, sigstore-scaffolding, traefik, goreleaser,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, containerd, sftpgo, kargo, harbor-registry, splunk-otel-collector, sftpgo-plugin-kms, neuvector-scanner, melange, frp, cosign, step-ca, kots, vault-benchmark, gatus, fulcio, sops, caddy, argo-workflows, sigstore-scaffolding, traefik, goreleaser,...

OPENSUSE-SU-2024:14606-1 teleport-17.1.0-1.1 on GA media

These are all security issues fixed in the teleport-17.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14573-1 teleport-17.0.5-1.1 on GA media

These are all security issues fixed in the teleport-17.0.5-1.1 package on the GA media of openSUSE Tumbleweed...

teleport-17.0.3-1.1 on GA media (moderate)

teleport-17.0.3-1.1 on GA media Announcement ID: openSUSE-SU-2024:14544-1 Rating: moderate Cross-References: CVE-2024-53259 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2024:14544-1 teleport-17.0.3-1.1 on GA media

These are all security issues fixed in the teleport-17.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: caddy, traefik, traefik-fips, buf, kubernetes-dns-node-cache-fips, frp, eks-distro, q, spegel, cloudflared, k3s, eks-distro-fips, caddy-fips, kubernetes-dns-node-cache...

Malicious code in grv-teleport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6dfcd0021e0f1240c60e8000555475ca9c7eef5e0c7da1a3e54dbe3f288b1650 The OpenSSF Package Analysis project identified 'grv-teleport' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8898 Malicious code in grv-teleport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6dfcd0021e0f1240c60e8000555475ca9c7eef5e0c7da1a3e54dbe3f288b1650 The OpenSSF Package Analysis project identified 'grv-teleport' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

OPENSUSE-SU-2024:14105-1 teleport-15.4.7-1.1 on GA media

These are all security issues fixed in the teleport-15.4.7-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-2447 Withdrawn Advisory: Teleport Proxy and Teleport Agents: SSRF to arbitrary hosts is possible from low privileged users in github.com/gravitational/teleport

Withdrawn Advisory: Teleport Proxy and Teleport Agents: SSRF to arbitrary hosts is possible from low privileged users in github.com/gravitational/teleport. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions...

GO-2024-2442 Withdrawn Advisory: Teleport Access List owners can escalate their privileges in github.com/gravitational/teleport

Withdrawn Advisory: Teleport Access List owners can escalate their privileges in github.com/gravitational/teleport. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive repor...

GO-2024-2449 Withdrawn Advisory: User-provided environment values allow execution on macOS agents in github.com/gravitational/teleport

Withdrawn Advisory: User-provided environment values allow execution on macOS agents in github.com/gravitational/teleport. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positiv...

OPENSUSE-SU-2024:14048-1 teleport-15.4.3-1.1 on GA media

These are all security issues fixed in the teleport-15.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13782-1 teleport-15.1.6-1.1 on GA media

These are all security issues fixed in the teleport-15.1.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13565-1 teleport-14.3.0-1.1 on GA media

These are all security issues fixed in the teleport-14.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13903-1 teleport-15.2.4-1.1 on GA media

These are all security issues fixed in the teleport-15.2.4-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in teleport-app-example-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4554cad7be69cbff28d6e2e4d3535b5d7b4158f2efa1c79eaaf705151ec686ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...