CVE-2026-21726 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, grafana-fips, grafana, commercial-grafana, grafana-alloy...

CLEANSTART-2026-ML41879 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-32287, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, ghsa-37cx-329c-33x3, ghsa-6g7g-w4f8-9c9x, ghsa-fw7p-63qq-7hpr applied in versions: 1.13.2-r0, 1.14.0-r0, 1.14.0-r1, 1.14.1-r0

Multiple security vulnerabilities affect the grafana-alloy package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DQ17669 Security fixes for CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-32287, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, ghsa-37cx-329c-33x3, ghsa-6g7g-w4f8-9c9x, ghsa-fw7p-63qq-7hpr applied in versions: 1.13.2-r0, 1.14.1-r0, 1.14.1-r1

Multiple security vulnerabilities affect the grafana-alloy package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PW57640 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-25934, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-4427, ghsa-37cx-329c-33x3, ghsa-6g7g-w4f8-9c9x, ghsa-9h8m-3fm2-qjrq, ghsa-9mj6-hxhv-w67j, ghsa-cfpf-hrx2-8rv6, ghsa-f6x5-jh6r-wrfv, ghsa-fw7p-63qq-7hpr, ghsa-j5w8-q4qc-rx2x, ghsa-jqcq-xjh3-6g23, ghsa-p77j-4mvh-x3m3, ghsa-q9hv-hpm4-hj6x, ghsa-x6gf-mpr2-68h6 applied in versions: 1.12.1-r0, 1.12.1-r1, 1.12.1-r2

Multiple security vulnerabilities affect the grafana-alloy-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: kubevela, dagger, vcluster, grafana, k8sgpt, redpanda, terragrunt, datadog-agent, opentelemetry-collector, teleport, k3s, nfpm, nuclei, rclone, minio, cri-tools, malcontent, eksctl, lazygit, opentelemetry-collector-contrib, terraform-mcp-server, grafana-alloy, tempo,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-keycloak, crossplane-provider-aws-s3, aws-otel-collector, crossplane-provider-aws-memorydb, crossplane-provider-aws-kinesis, crossplane-provider-azure-sql, crossplane-provider-aws-sns,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-keycloak, crossplane-provider-aws-s3, aws-otel-collector, crossplane-provider-aws-memorydb, crossplane-provider-aws-kinesis, crossplane-provider-azure-sql, crossplane-provider-aws-sns,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-family-aws, crossplane-provider-aws-backup, crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-efs, crossplane-provider-aws-iam, crossplane-provider-aws-ssm, crossplane-provider-aws-cloudformation-fips,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-family-aws, crossplane-provider-aws-backup, crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-efs, crossplane-provider-aws-iam, crossplane-provider-aws-ssm, crossplane-provider-aws-cloudformation-fips,...

Malicious code in cat-ecommerce-alloy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78afabd939f190b79fbfccc3bbc3a75170c57fb5142f9ae07849e36bc48c199a The package cat-ecommerce-alloy was found to contain malicious code...

MAL-2026-1667 Malicious code in cat-ecommerce-alloy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78afabd939f190b79fbfccc3bbc3a75170c57fb5142f9ae07849e36bc48c199a The package cat-ecommerce-alloy was found to contain malicious code...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: flux-notification-controller, kubevela, dagger, zot, gomplate, gitea, cluster-api, argo-events, buildkitd, crossplane-provider-aws-sns, crossplane-provider-aws-dynamodb, datadog-agent, boring-registry, crossplane-provider-aws-ec2, crossplane-provider-aws-elasticache,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, kubevela, dagger, zot, gomplate, gitea, cluster-api, argo-events, buildkitd, crossplane-provider-aws-sns, crossplane-provider-aws-dynamodb, datadog-agent, boring-registry, crossplane-provider-aws-ec2, crossplane-provider-aws-elasticache,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: atlantis, kubevela, policy-controller-fips, docker-cli-buildx-fips, kubescape-server, crossplane-provider-aws-rds, terragrunt, datadog-agent-fips, crossplane-provider-aws-cognitoidentity, crossplane-provider-family-aws, external-secrets-operator, goreleaser, terrafor...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: atlantis, kubevela, policy-controller-fips, docker-cli-buildx-fips, kubescape-server, crossplane-provider-aws-rds, terragrunt, datadog-agent-fips, crossplane-provider-aws-cognitoidentity, crossplane-provider-family-aws, external-secrets-operator, goreleaser, terrafor...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: timestamp-authority, ory-kratos, terragrunt, crossplane-provider-sql, tkn, elastic-agent-fips, splunk-otel-collector, keda-fips, temporal, wolfictl, age, sftpgo-plugin-eventstore, vault, croc, goose-fips, fulcio, kine, spire-server-fips, beats, dbmate, seaweedfs,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: step-issuer, telegraf, step-ca, kine, gitea, croc, flux-kustomize-controller, nri-mysql, seaweedfs, temporal-server, age, splunk-otel-collector, step-kms-plugin, dbmate, trufflehog, kots, tailscale, db-operator, terragrunt, crossplane-provider-sql, rekor, spire-serve...

SUSE: Security Advisory (SUSE-SU-2026:20214-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 16 Security Update : alloy (openSUSE-SU-2026:20140-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20140-1 advisory. Update to 1.12.2: Security fixes: - CVE-2025-68156: github.com/expr-lang/expr/builtin: Fixed potential DoS via unbounded recursion bsc1255333: -...

Security update for alloy (important)

openSUSE security update: security update for alloy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20140-1 Rating: important References: bsc1255074 bsc1255333 Cross-References: CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 CVE-2025-68156 CVSS scores...