GO-2026-4945 vulnerabilities

Vulnerabilities for packages: distribution, grafana-pyroscope, cerbos, step-ca, istio, loki, sftpgo, grafana-mimir, opencost, frp, rook, vault-secrets-webhook, sqlexporter, undock, azcopy, zot, vault-benchmark, falcoctl, sftpgo-plugin-kms, gomplate, weaviate, boring-registry, gitsign, teleport,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: vexctl, knative-serving, k3s, traefik, trufflehog, vitess, istio, k9s, kubescape-operator, kbld, kyverno, trivy, incert, cosign, slsa-verifier, xeol, flux-image-reflector-controller, vault-secrets-webhook, guac, flux-kustomize-controller, zot, kargo, gh, tekton-chain...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: vexctl, sigstore-scaffolding, kyverno, ratify, zarf, trivy, cosign, slsa-verifier, buildkitd, zot, falcoctl, neuvector-sigstore-interface, gh, tekton-chains, trivy-operator, kubescape, gitsign, flux-source-controller, policy-controller, tkn, crossplane, skaffold,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: vexctl, ratify, zarf, trivy, cosign, slsa-verifier, buildkitd, zot, falcoctl, neuvector-sigstore-interface, gh, tekton-chains, trivy-operator, kubescape, gitsign, flux-source-controller, policy-controller, tkn, skaffold, goreleaser, teleport, aactl,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: vexctl, sigstore-scaffolding, ratify, zarf, trivy, cosign, slsa-verifier, buildkitd, zot, falcoctl, neuvector-sigstore-interface, gh, tekton-chains, trivy-operator, kubescape, gitsign, flux-source-controller, policy-controller, tkn, rekor, skaffold, goreleaser,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: wire-go, cerbos, nri-haproxy, rclone, kubernetes-csi-external-health-monitor, kapp, portieris, kapp-controller, undock, zot, falcoctl, polaris, hubble, kubernetes-dashboard-api, nginx-prometheus-exporter, wal-g, k8sgateway, lazydocker, nuclei, helm-operator, nodetain...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: vexctl, sigstore-scaffolding, ratify, zarf, trivy, cosign, slsa-verifier, buildkitd, zot, falcoctl, neuvector-sigstore-interface, gh, tekton-chains, trivy-operator, kubescape, gitsign, flux-source-controller, policy-controller, tkn, rekor, skaffold, goreleaser,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: vexctl, sigstore-scaffolding, apko, zarf, trivy, cosign, slsa-verifier, zot, falcoctl, neuvector-sigstore-interface, gh, tekton-chains, kubescape, gitsign, flux-source-controller, policy-controller, tkn, wolfictl, rekor, aactl, melange, spire-server...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: vexctl, rclone, crossplane-provider-azure-storage, k3s, kine, crossplane-provider-azure-sql, terraform-provider-azurerm, zarf, grafana-alloy, trivy, cosign, argo-events, argo-rollouts, flux-image-reflector-controller, guac, temporal-server, azcopy, bank-vaults,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.73.0-0.1.hum1 aarch64, x8664 trivy-0.73.0-0.1.hum1.src src...

CLEANSTART-2026-SJ20797 Security fixes in trivy-fips 0.67.2-r0

Package trivy-fips version 0.67.2-r0 fixes 5 vulnerabilities: ghsa-cgrx-mc8f-2prm, ghsa-pwhc-rpq9-4c8w, ghsa-m6hq-p25p-ffr2, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-RR89078 Security fixes in harbor-scanner-trivy 0.35.1-r0

Package harbor-scanner-trivy version 0.35.1-r0 fixes 3 vulnerabilities: CVE-2025-54410, CVE-2025-15558, CVE-2025-29923...

CLEANSTART-2026-QI00029 Security fixes in harbor-scanner-trivy-fips 0.35.1-r0

Package harbor-scanner-trivy-fips version 0.35.1-r0 fixes 3 vulnerabilities: CVE-2025-54410, CVE-2025-15558, CVE-2025-29923...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.72.0-0.1.3.hum1 aarch64, x8664 trivy-0.72.0-0.1.3.hum1.src src Security Fixes: trivy: CVE-2026-49834...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.72.0-0.1.2.hum1 aarch64, x8664 trivy-0.72.0-0.1.2.hum1.src src Security Fixes: trivy: CVE-2026-15788 CVE-2026-15792 CVE-2026-56852...

GO-2026-5983 Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2026:0263-1 Rating: important References: 1266495 1268356 1269269 1269271 1271658 1271670 Cross-References: CVE-2026-39821 CVE-2026-46680 CVE-2026-50151 CVE-2026-54448 CVE-2026-55092 CVE-2026-56852 CVSS scores:...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21395-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21395-1 advisory. This update for trivy fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels...

Security update for trivy (important)

openSUSE security update: security update for trivy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21395-1 Rating: important References: bsc1266495 bsc1271658 bsc1271670 Cross-References: CVE-2026-39821 CVE-2026-50151 CVE-2026-56852 CVSS scores:...

CLEANSTART-2026-LZ81863 Security fixes for CVE-2025-29923, CVE-2026-34040, CVE-2026-39822, CVE-2026-49834, CVE-2026-49835, CVE-2026-50151 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the harbor-trivy-adapter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...