GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: beats-fips, yace-fips, milvus, velero-fips, peerdb-flow, temporal, longhorn-engine, rclone-fips, amazon-ecs-agent-fips, rqlite, crossplane-provider-aws-kinesis, trivy-fips, keda-fips, crossplane-provider-aws-rds, clickhouse-backup-fips, docker, steampipe,...

CLEANSTART-2026-YY85909 Security fixes for CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-61727, CVE-2025-61729, CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186, ghsa-6g7g-w4f8-9c9x, ghsa-9h8m-3fm2-qjrq, ghsa-fw7p-63qq-7hpr, ghsa-q9hv-hpm4-hj6x applied in versions: 0.93.13-r1, 0.99.4-r0, 0.99.4-r1, 0.99.4-r2, 0.99.4-r3

Multiple security vulnerabilities affect the terragrunt-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, eksctl, datadog-agent-fips, kubevela, nuclei, deck, tempo, witness, goreleaser, rclone-fips, terragrunt-fips, weaviate, ollama, ollama-fips, dagger, elastic-agent, mcp-grafana, gitlab-runner-fips, influxd, grafana-beyla,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: cri-tools, opentelemetry-collector-contrib, weaviate, terragrunt, minio, dgraph, gitlab-runner, datadog-agent, ollama, prometheus, loki, lazygit, kubevela, vcluster, redpanda, mcp-grafana, maru, terraform-mcp-server, nfpm, eksctl, k3s, k8sgpt, opentelemetry-collector...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, chezmoi, vexctl, kserve, amass, postgres-operator, eksctl, kubeflow-pipelines, snyk-cli, fulcio, helm-set-status, mods, crossplane-provider-aws-kinesis, terraform-docs, terraform-provider-azurerm, dagdotdev, migrate, k9s,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, chezmoi, vexctl, kserve, amass, postgres-operator, eksctl, kubeflow-pipelines, snyk-cli, fulcio, helm-set-status, mods, crossplane-provider-aws-kinesis, terraform-docs, ko, dagdotdev, migrate, k9s, docker-machine-driver-linode, argo-cd, syft,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, chezmoi, vexctl, kserve, amass, postgres-operator, eksctl, kubeflow-pipelines, snyk-cli, fulcio, helm-set-status, mods, crossplane-provider-aws-kinesis, terraform-docs, terraform-provider-azurerm, dagdotdev, migrate, k9s,...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, chezmoi, vexctl, kserve, amass, postgres-operator, eksctl, kubeflow-pipelines, snyk-cli, fulcio, helm-set-status, mods, crossplane-provider-aws-kinesis, terraform-docs, ko, dagdotdev, migrate, k9s, docker-machine-driver-linode, argo-cd, syft,...

terragrunt-0.85.1-1.1 on GA media (moderate)

terragrunt-0.85.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15486-1 Rating: moderate Cross-References: CVE-2025-8959 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2025:15485-1 terragrunt-0.85.1-1.1 on GA media

These are all security issues fixed in the terragrunt-0.85.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: zarf, kots, zot, k9s, conftest, terragrunt, rancher-fleet, tflint, syft, trivy, grype, steampipe, kubescape, opentofu, snyk-cli, wolfictl, trivy-operator, xeol, tfsec, terraform...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: zarf, kots, zot, k9s, conftest, terragrunt, rancher-fleet, tflint, syft, trivy, grype, steampipe, kubescape, opentofu, snyk-cli, wolfictl, trivy-operator, xeol, tfsec, terraform...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: tfsec, xeol-fips, xeol, chainctl, trivy, trivy-fips, wolfictl, trivy-operator, steampipe, cloudbeat-fips, opentofu, conftest, terraform-fips, terraform, syft-fips, k9s-fips, cloudbeat, kubescape, tflint, k9s, rancher-fleet-fips, conftest-fips, zarf, rancher-fleet,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: tfsec, xeol-fips, xeol, chainctl, trivy, trivy-fips, wolfictl, trivy-operator, steampipe, cloudbeat-fips, opentofu, conftest, terraform-fips, terraform, syft-fips, k9s-fips, cloudbeat, kubescape, tflint, k9s, rancher-fleet-fips, conftest-fips, zarf, rancher-fleet,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: gatus, fuse-overlayfs-snapshotter, net-kourier-fips, prometheus-stackdriver-exporter, apache-exporter, kubo-fips, trivy-fips, yunikorn-web, yunikorn-k8shim, steampipe, prometheus-pushgateway-fips, dive, ip-masq-agent, harbor-registry, kubernetes-release,...

CVE-2021-36230 vulnerabilities

Vulnerabilities for packages: terragrunt, terraform...

GHSA-6CGG-F8V8-8RXW vulnerabilities

Vulnerabilities for packages: terragrunt, terraform...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: tflint, tfsec, k9s, trivy-fips, wolfictl, conftest-fips, terraform, zarf, snyk-cli, kubescape, kots, terragrunt, trivy, grype, conftest, zot...

CVE-2024-6257 vulnerabilities

Vulnerabilities for packages: tflint, tfsec, k9s, trivy-fips, wolfictl, conftest-fips, terraform, zarf, snyk-cli, kubescape, kots, terragrunt, trivy, grype, conftest, zot...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: nerdctl, oauth2-proxy, zarf, slsa-verifier, cloudflared, kots, zot, weaviate, cosign, terragrunt, guac, melange, minio, sops, bank-vaults, grpc-health-probe, vexctl, flux-kustomize-controller, rabbitmq-messaging-topology-operator, dgraph, aactl, timestamp-authority,...