Medium: golang-github-burntsushi-toml-test

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2026-131)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-131 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2026-153)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-153 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificat...

Medium: ecs-init

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2023 : ecs-init (ALAS2023-2026-3359)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3359 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-3374)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3374 advisory. Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. CVE-2026-114148 Out-of-bounds write in .NET allows an unauthorized attacker to execut...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-120)

The version of kernel installed on the remote host is prior to 5.15.222-158.256. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.15-2026-120 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU...

Medium: rclone

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : soci-snapshotter (ALASDOCKER-2026-157)

The version of soci-snapshotter installed on the remote host is prior to 0.16.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-157 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificat...

Medium: oci-add-hooks

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-3358)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3358 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2 : oci-add-hooks (ALASDOCKER-2026-160)

The version of oci-add-hooks installed on the remote host is prior to 0-0.13.20200504git325a340. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-160 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific...

Medium: cni-plugins

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-3339)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3339 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : rclone (ALAS2023-2026-3348)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3348 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Medium: golist

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: oci-add-hooks

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : rclone (ALAS-2026-4055)

The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4055 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's...

Medium: rclone

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: containerd

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...