Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-2058)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2058 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has be...

Important: docker

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Issue Correction: Run dnf update docker --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2062 --releasever 2023.12.20260817 to...

Important: javapackages-bootstrap

Issue Overview: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core 5.4.2 and earlier, 5.5-beta1 and earlier allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of heade...

Important: gnome-remote-desktop

Issue Overview: A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel...

openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:21574-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21574-1 advisory. This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf:...

GO-2026-4406 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, cg, chainctl, dagdotdev...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: victoriametrics-fips, omnictl-multiarch, flux-image-automation-controller, amazon-k8s-cni-fips, nova-fips, victoriametrics, victoriametrics-cluster-fips, aws-load-balancer-controller-fips, polaris, cert-manager-fips, pgwatch, go, terragrunt, grafana-rollout-operator,...

GO-2026-4405 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, cg, chainctl, dagdotdev...

GO-2026-5422 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-ssm-agent-fips...

GO-2026-5497 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-ssm-agent-fips...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: vault, prometheus, amazon-cloudwatch-agent-operator-fips, promxy, pulumi, amazon-cloudwatch-agent-operator, promxy-fips...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: k8sgpt, argo-workflows, kargo, opentelemetry-collector, splunk-otel-collector, argo-rollouts, nats, amazon-cloudwatch-agent, opentelemetry-collector-contrib, grafana-alloy, kubeflow-pipelines...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: rancher-agent, kubevela, k3s, pulumi, amazon-cloudwatch-agent-operator, promxy...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, jitsucom-bulker, bento, opentelemetry-collector-contrib, amazon-cloudwatch-agent, sqlexporter, argo-events, cluster-api-aws-controller, grafana-alloy...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, promxy, pulumi...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: minio, k8sgpt, opentelemetry-collector, splunk-otel-collector, prometheus-pushgateway, mc, jaeger, istio, fluent-bit-plugin-loki, cloud-sql-proxy, certificate-transparency, karma, amazon-cloudwatch-agent-operator, keda, datadog-agent, aws-otel-collector,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: terraform-mcp-server, helm-operator, tkn, neuvector-sigstore-interface, gptscript, migrate, kubernetes-csi-driver-nfs, cloud-provider-vsphere, cis-operator, aws-privateca-issuer, rabbitmq-default-user-credential-updater, ko, libnvidia-container, k3s, k8sgateway,...

CVE-2026-12743: Improper Neutralization of Special Elements used in an SQL Command

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CLEANSTART-2026-DH17348 Security fixes in amazon-k8s-cni-fips 1.22.3-r1

Package amazon-k8s-cni-fips version 1.22.3-r1 fixes 1 vulnerabilities: ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-OQ69181 Security fixes in amazon-cloudwatch-agent 1.300065.0-r1

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...