GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: slsa-verifier, trivy-operator, crossplane-fips, zarf, neuvector-sigstore-interface, falcoctl, ko-fips, kubescape, crossplane, kyverno-notation-aws, aactl, tbot, tkn, tkn-fips, kyverno-fips, kubescape-server-fips, kyverno, ko, tflint-fips, cloudbeat, tekton-chains-fip...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cert-manager, osv-scanner, gatekeeper-fips, gatekeeper, argo-workflows, grafana, kyverno-fips, telegraf, traefik, commercial-grafana, cilium-cli, spire-server, kaf, etcd-fips, rancher-agent, flux-image-automation-controller-fips, argocd-image-updater, zitadel,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: witness, cert-manager, crossplane-provider-azure-notificationhubs, crossplane-provider-azure-relay, gitlab-pages-fips, crossplane-provider-aws-cloudwatch, crossplane-provider-aws-backup-fips, crossplane-provider-aws-elb-fips, crossplane-provider-aws-organizations-fip...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tflint, rootlesskit, aactl, cosign, pulumi, gitea, step, guac, kubernetes, grype, wolfictl, gh, mattermost, crossplane-provider-azure-storage, tkn, kaf, gitlab-kas, argo-cd, docker-machine-driver-harvester, fscrypt, k3s, policy-controller, prometheus, buildah,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: zot, zarf, argocd-image-updater, external-dns, k9s, aactl, opentelemetry-collector, knative-serving, kyverno, flux, cilium-cli, gitea, kubernetes-dashboard, minio, kubernetes, nerdctl, containerd, loki, mattermost, flux-source-controller, cloud-provider-aws, kots, ka...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: aactl, pulumi, gitea, step, guac, kubernetes, grype, wolfictl, mattermost, kaf, gitlab-kas, argo-cd, docker-machine-driver-harvester, fscrypt, k3s, prometheus, buildah, prometheus-operator, pulumi-language-java, opentofu, pulumi-language-dotnet, argo-events, cilium,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: zot, external-dns, aactl, opentelemetry-collector, knative-serving, kyverno, flux, cilium-cli, kubernetes-dashboard, minio, kubernetes, nerdctl, containerd, mattermost, cloud-provider-aws, kots, kaf, telegraf, gitlab-kas, cert-manager, istio, spire-server, helm,...

Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues CVE-2022-1996: CORS bypass bsc1200528. CVE-2022-2385: aws-iam-authenticator AccessKeyID validation bypass bsc1201395. CVE-2024-39689: remove root certificates from GLOBALTRUST from the root store. CVE-2025-47910: net/http:...

SUSE-SU-2026:2643-1 Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues - CVE-2022-1996: CORS bypass bsc1200528. - CVE-2022-2385: aws-iam-authenticator AccessKeyID validation bypass bsc1201395. - CVE-2024-39689: remove root certificates from GLOBALTRUST from the root store. - CVE-2025-47910: net/http:...

GO-2026-5601 AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance in github.com/aws/aws-advanced-go-wrapper/auth-helpers

AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance in github.com/aws/aws-advanced-go-wrapper/auth-helpers. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

MAL-2026-6486 Malicious code in unsafe-malicious-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3579cb796e48f446b07e2dbbce2e301d1a3e87d8a9a35ed1dbe825fc53f29da9 On npm install, the package's postinstall lifecycle script scripts/postinstall.js reads the installer's AWS credentials file at /.aws/credentials and...

MAL-2026-6432 Malicious code in rstreams-metrics (npm)

The rstreams-metrics npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

MAL-2026-6422 Malicious code in leo-config (npm)

The leo-config npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

MAL-2026-6418 Malicious code in leo-aws (npm)

The leo-aws npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

CVE-2026-57294

A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a81c3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins...

CVE-2026-57295

A cross-site request forgery CSRF vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a81c3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins...

CVE-2026-57295

A cross-site request forgery CSRF vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a81c3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins...

CVE-2026-57295

A cross-site request forgery CSRF vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a81c3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins...

CVE-2026-57294

A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a81c3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins...

CVE-2026-12958

Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local user opens a workspace with a maliciously crafted symlink that resolves to a file path outside the workspace trust boundary. To remediate...