Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, loki-fips, terragrunt, metacontroller, grafana-fips, omnictl-multiarch, pluto, cert-manager-fips, grafana-operator-fips, victoriametrics-cluster-fips, pgwatch, stakater-reloader, temporal-fips, aws-load-balancer-controller-fips, victoriametrics,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: timoni, apko, flux-kustomize-controller, tfsec, gptscript, zot, goreleaser, argo-events, snyk-cli, zarf, dagger, go-licenses, kubevela, k9s, flux-source-controller, k8sgpt, argocd-image-updater, pulumi-language-yaml, syft, crossplane, kots, grafana-alloy, scorecard,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: timoni, apko, flux-kustomize-controller, tfsec, gptscript, zot, goreleaser, argo-events, snyk-cli, zarf, dagger, go-licenses, kubevela, k9s, flux-source-controller, k8sgpt, argocd-image-updater, pulumi-language-yaml, syft, crossplane, kots, grafana-alloy, scorecard,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: apko, tfsec, gptscript, witness, zot, snyk-cli, argo-events, zarf, cerbos, dagger, kubevela, k9s, steampipe, flux-source-controller, pulumi-language-yaml, argocd-image-updater, syft, argo-cd, crossplane, kots, grafana-alloy, scorecard, teleport, gitaly, xeol, gomplat...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, flux-kustomize-controller, fscrypt, witness, snyk-cli, zarf, k9s, docker-machine-driver-linode, ko, traefik, crossplane-provider-aws-route53, pulumi-language-yaml, falcoctl, k8sgpt, atlantis, fulcio, step, terragrunt,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, spqr, x509-certificate-exporter, docker-credential-gcr, flux-kustomize-controller, kubo, fuse-overlayfs-snapshotter, spire-controller-manager, goreleaser, octo-sts, gcp-compute-persistent-disk-csi-driver, go-licenses, dask-gateway,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: slsa-verifier, crossplane-provider-azure-authorization, kubernetes-event-exporter, timestamp-authority, flux-kustomize-controller, actions-runner-controller, zot, goreleaser, argo-events, policy-controller, snyk-cli, zarf, crossplane-provider-azure-storage,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CVE-2026-73308 Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders

Budibase is an open-source low-code platform. Prior to 3.39.25, packages/server/src/api/controllers/automation.ts returned automation test results containing trigger.outputs.user.oauth2, broadcast BuilderSocketEvent.AutomationTestProgress to the app room, and stored progress in...

RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:42079)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42079 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: nerdctl, osv-scanner, grafana-fips, zarf-fips, cloud-provider-aws, external-secrets-operator, snyk-cli, cloudbeat-fips, harbor-fips, helm, kubernetes-fips, kaf, frankenphp-8.5, kube-state-metrics, kubevela-fips, fscrypt, gitlab-kas, grafana,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane, nerdctl, crossplane-provider-azure-web, zarf-fips, crossplane-provider-aws-secretsmanager-fips, flux-notification-controller-fips, nuclei, crossplane-provider-azure-relay, flux-kustomize-controller-fips, crossplane-provider-aws-organizations,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, fscrypt, witness, snyk-cli, zarf, k9s, ko, pulumi-language-yaml, falcoctl, k8sgpt, atlantis, fulcio, step, terragrunt, flux-notification-controller, prometheus-operator, nfpm, melange, cilium-cli, pulumi, step-kms-plugin, wolfictl, chezmoi,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane, k6-operator-fips, crossplane-provider-azure-web, apisix-ingress-controller, flyte, kube-arangodb, zarf-fips, crossplane-provider-aws-secretsmanager-fips, stunner-gateway-operator, addon-resizer-fips, google-cloud-otel-ops-collector, nuclei,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane, k6-operator-fips, crossplane-provider-azure-web, apisix-ingress-controller, flyte, kube-arangodb, zarf-fips, crossplane-provider-aws-secretsmanager-fips, stunner-gateway-operator, addon-resizer-fips, google-cloud-otel-ops-collector, nuclei,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: crossplane, osv-scanner, grafana-fips, witness, zarf-fips, external-secrets-operator, snyk-cli, cloudbeat-fips, nuclei, pulumi-kubernetes-operator, amazon-ssm-agent, gitlab-runner-fips, gitsign, kubevela-fips, chainctl, chainctl-fips, trufflehog-fips,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...