GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: redpanda-console, flux-fips, goreleaser, gitaly, dagger, syft-fips, argo-events-fips, flux, grype, crossplane-fips, terragrunt, xeol-fips, trivy-operator-fips, argo-workflows-fips, chainloop-cli-fips, steampipe, jfrog-cli, kargo, coder-fips, crossplane, scorecard,...

OPENSUSE-SU-2026:10830-1 trivy-0.70.0-2.1 on GA media

These are all security issues fixed in the trivy-0.70.0-2.1 package on the GA media of openSUSE Tumbleweed...

Docker_MCP_POC

Java vulnerable scan POC Minimal Maven project used to comp...

OPENSUSE-SU-2026:20809-1 Security update for trivy

This update for trivy fixes the following issues - CVE-2025-64702: github.com/quic-go/quic-go/http3: quic-go HTTP/3 QPACK Header Expansion DoS bsc1255366. - CVE-2025-69725: github.com/go-chi/chi/v5: incorrect input validation in the RedirectSlashes function can lead to an open redirect bsc1258513...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:20720-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20720-1 advisory. Changes in trivy: - update go-git to 5.18.0 bsc1264873, CVE-2026-41506 Tenable has extracted the preceding description block directly from the SUSE...

Security update for trivy (moderate)

openSUSE security update: security update for trivy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20720-1 Rating: moderate References: bsc1264873 Cross-References: CVE-2026-41506 CVSS scores: CVE-2026-41506 SUSE : 6.5...

OPENSUSE-SU-2026:20720-1 Security update for trivy

This update for trivy fixes the following issues: Changes in trivy: - update go-git to 5.18.0 bsc1264873, CVE-2026-41506...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, gitea, grype, kaniko, pulumi, wolfictl, cerbos, witness, goreleaser, k9s, pulumi-language-dotnet, grafana-alloy, zot, gomplate, osv-scanner, pulumi-language-yaml, rancher-fleet, kubevela, gitlab-runner, zarf, kots, scorecard, nuclei,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, gitea, grype, kaniko, pulumi, wolfictl, cerbos, witness, goreleaser, k9s, pulumi-language-dotnet, grafana-alloy, zot, gomplate, osv-scanner, pulumi-language-yaml, rancher-fleet, kubevela, gitlab-runner, zarf, kots, scorecard, nuclei,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: redpanda-console, flux-fips, goreleaser, gitaly, dagger, syft-fips, argo-events-fips, flux, grype, crossplane-fips, terragrunt, xeol-fips, trivy-operator-fips, argo-workflows-fips, chainloop-cli-fips, steampipe, jfrog-cli, kargo, coder-fips, crossplane, scorecard,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: redpanda-console, flux-fips, goreleaser, gitaly, dagger, syft-fips, argo-events-fips, flux, grype, crossplane-fips, terragrunt, xeol-fips, trivy-operator-fips, argo-workflows-fips, chainloop-cli-fips, steampipe, jfrog-cli, kargo, coder-fips, crossplane, scorecard,...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:20702-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20702-1 advisory. Changes in trivy: - Update to version 0.70.0 bsc1260193, CVE-2026-33186, bsc1260971, CVE-2026-33747, bsc1261052, CVE-2026-33748, bsc1262389,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: buildkitd, docker, goreleaser, vexctl, zot, gh, slsa-verifier, gitlab-runner, policy-controller, aactl, zarf, spire-server, gitsign, teleport, neuvector-sigstore-interface, rekor, kyverno, falcoctl, kyverno-notation-aws, docker-cli-buildx, cosign, ratify, dagger,...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.69.3-1.2.hum1 aarch64, x8664 trivy-0.69.3-1.2.hum1.src src...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: redpanda-console, flux-fips, goreleaser, gitaly, dagger, syft-fips, argo-events-fips, flux, grype, crossplane-fips, terragrunt, xeol-fips, trivy-operator-fips, argo-workflows-fips, chainloop-cli-fips, steampipe, jfrog-cli, kargo, crossplane, scorecard, mapotf,...

OPENSUSE-SU-2026:20702-1 Security update for trivy

This update for trivy fixes the following issues: Changes in trivy: - Update to version 0.70.0 bsc1260193, CVE-2026-33186, bsc1260971, CVE-2026-33747, bsc1261052, CVE-2026-33748, bsc1262389, CVE-2026-39984, bsc1262893, CVE-2026-34986: release: v0.70.0 main 10105 choredeps: bump...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2026:0163-1 Rating: important References: 1255366 1258094 1258513 1260193 1260971 1261052 1262389 1262893 Cross-References: CVE-2025-64702 CVE-2025-66564 CVE-2025-69725 CVE-2026-25934 CVE-2026-33186 CVE-2026-33747...

trivy-0.70.0-1.1 on GA media (moderate)

trivy-0.70.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10651-1 Rating: moderate Cross-References: CVE-2025-69725 CVE-2026-25934 CVE-2026-33186 CVE-2026-33747 CVE-2026-33748 CVE-2026-34986 CVE-2026-39984 CVSS scores: CVE-2025-69725 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

OPENSUSE-SU-2026:10651-1 trivy-0.70.0-1.1 on GA media

These are all security issues fixed in the trivy-0.70.0-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 44 : trivy (2026-6fc2f11089)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6fc2f11089 advisory. Update to 0.69.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...