185 matches found
checkov
Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...
SUSE SLES15 Security Update : terraform-provider-null (SUSE-SU-2026:4062-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4062-1 advisory. - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies vi...
GHSA-2V4P-QF9Q-27WJ vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, metallb, container-object-storage-interface, cloudflared, crossplane-provider-aws-eks, dynamic-localpv-provisioner, kuma, calico, flyte, envoy-ratelimit, podman, terraform, victoriametrics-operator, xeol, nuclei, temporal-ui-server,...
CVE-2026-84445 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, metallb, container-object-storage-interface, cloudflared, crossplane-provider-aws-eks, dynamic-localpv-provisioner, kuma, calico, flyte, envoy-ratelimit, podman, terraform, victoriametrics-operator, xeol, nuclei, temporal-ui-server,...
SUSE-SU-2026:4062-1 Security update for terraform-provider-null
This update for terraform-provider-null fixes the following issues: - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1278269. - CVE-2026-84304: github.com/grpc/grpc-g...
SUSE-SU-2026:3962-1 Security update for terraform-provider-susepubliccloud
This update for terraform-provider-susepubliccloud fixes the following issue: - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of truncated/invalid UTF-8 input can lead to infinite loop bsc1271995...
GO-2025-3847 vulnerabilities
Vulnerabilities for packages: terraform-provider-acme, traefik, traefik-fips, sftpgo, terraform-provider-acme-fips...
GO-2022-1144 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, terraform-provider-sendgrid-fips, kubeflow, kubeflow-katib, terraform-provider-sendgrid...
GO-2022-0236 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, hey, k3d, grpcurl, terraform-provider-sendgrid...
GO-2021-0238 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, hey, k3d, grpcurl, terraform-provider-sendgrid...
GO-2022-0969 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, hey, terraform-provider-sendgrid-fips, kubeflow, dynamic-localpv-provisioner-fips, k3d, dynamic-localpv-provisioner, grpcurl, kube-state-metrics, wireguard-go, kubeflow-katib, terraform-provider-sendgrid...
GO-2023-1571 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, hey, restic, terraform-provider-sendgrid-fips, gke-gcloud-auth-plugin, kubeflow, dynamic-localpv-provisioner-fips, k3d, dynamic-localpv-provisioner, grpcurl, kube-state-metrics, wireguard-go, go, kubeflow-katib, terraform-provider-sendgrid...
GO-2021-0113 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, hey, dynamic-localpv-provisioner-fips, vt-cli, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid, gitleaks...
GO-2021-0356 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, terraform-provider-sendgrid-fips, kubeflow, dynamic-localpv-provisioner-fips, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid...
GO-2022-1059 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, hey, php-fpmexporter, terraform-provider-sendgrid-fips, kubeflow, dynamic-localpv-provisioner-fips, vt-cli, k3d, dynamic-localpv-provisioner, grpcurl, kube-state-metrics, terraform-provider-sendgrid, gitleaks...
GO-2022-0968 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, terraform-provider-sendgrid-fips, kubeflow, dynamic-localpv-provisioner-fips, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid...
GO-2022-0493 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, kind, kubeflow, dynamic-localpv-provisioner-fips, k3d, dynamic-localpv-provisioner, grpcurl, ctop, terraform-provider-sendgrid...
GO-2025-3787 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, trivy-fips, grafana-alloy-fips, terraform-mcp-server, atlantis, amazon-cloudwatch-agent-operator, prometheus, envoy-gateway-fips, kyverno-policy-reporter-ui, istio, spark-operator-fips, kube-bench, istio-fips, amazon-cloudwatch-agent-operator-fips,...