Fedora 45 : docker-buildx (2026-3c4c98309d)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3c4c98309d advisory. Automatic update for docker-buildx-0.34.0-1.fc45. Changelog Wed May 13 2026 Bradley G Smith - 0.34.0-1 - Update to release v0.34.0 - Resolves: rhbz2467576 -...

CVE-2026-39882 affecting package docker-buildx for versions less than 0.14.0-11

CVE-2026-39882 affecting package docker-buildx for versions less than 0.14.0-11. A patched version of the package is available...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kargo, aws-node-termination-handler, dynamic-localpv-provisioner, istio, kubescape, kubevela, gitlab-kas, consul-k8s, kpt, trivy-operator, linkerd2, skaffold, kwok, argo-workflows, terraform-provider-kubernetes, cilium, jitsucom-bulker, sonobuoy, kube-arangodb,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kargo, aws-node-termination-handler, dynamic-localpv-provisioner, istio, kubescape, kubevela, gitlab-kas, consul-k8s, kpt, trivy-operator, linkerd2, skaffold, kwok, argo-workflows, terraform-provider-kubernetes, cilium, jitsucom-bulker, sonobuoy, kube-arangodb,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: sonobuoy-fips, cloudbeat, kubernetes, argocd-image-updater, rancher, redis-operator, k8ssandra-client-fips, zarf-fips, trivy-operator-fips, rancher-support-bundle-kit, argo-rollouts-fips, aws-node-termination-handler-fips, grafana, terraform-provider-kubernetes-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, contour, azure-service-operator, dkron, docker-cli, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, kserve-modelmesh-serving, flux-source-controller, kubernetes-csi-livenessprobe, trillian, witness, step, fscryp...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, contour, azure-service-operator, dkron, docker-cli, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, kserve-modelmesh-serving, flux-source-controller, kubernetes-csi-livenessprobe, trillian, witness, step, fscryp...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: cloudbeat, syncthing, openbao, azuredisk-csi-fips, chezmoi, splunk-otel-collector-fips, conftest-fips, rancher-fleet, xeol-fips, task, minio-fips, vault-env, atlantis, kubernetes-csi-node-driver-registrar, nats-server-fips, envconsul-fips, mailpit-fips, falcoctl,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: cloudbeat, syncthing, openbao, azuredisk-csi-fips, chezmoi, splunk-otel-collector-fips, conftest-fips, rancher-fleet, xeol-fips, task, minio-fips, vault-env, atlantis, kubernetes-csi-node-driver-registrar, nats-server-fips, envconsul-fips, mailpit-fips, falcoctl,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter-fips, nginx-kubernetes-ingress-fips, step-issuer-fips, step-kms-plugin, crossplane-provider-aws-memorydb-fips, cloudbeat, prometheus-pgbouncer-exporter, apisix-ingress-controller, docker-credential-gcr, openbao, azuredisk-csi-fips,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter-fips, nginx-kubernetes-ingress-fips, step-issuer-fips, step-kms-plugin, crossplane-provider-aws-memorydb-fips, cloudbeat, syncthing, gostatsd, prometheus-pgbouncer-exporter, apisix-ingress-controller, scanner-test-golang-vulnerability-fixed,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter-fips, nginx-kubernetes-ingress-fips, step-issuer-fips, step-kms-plugin, crossplane-provider-aws-memorydb-fips, cloudbeat, syncthing, gostatsd, prometheus-pgbouncer-exporter, apisix-ingress-controller, scanner-test-golang-vulnerability-fixed,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter-fips, nginx-kubernetes-ingress-fips, step-issuer-fips, step-kms-plugin, crossplane-provider-aws-memorydb-fips, cloudbeat, syncthing, gostatsd, prometheus-pgbouncer-exporter, apisix-ingress-controller, scanner-test-golang-vulnerability-fixed,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, harbor-registry, dkron, azure-service-operator, node-problem-detector, tekton-pipelines, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, kserve-modelmesh-serving, flux-source-controller, trillian, minio, tkn,...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: zot, kubescape, buildah, kaniko, scorecard, conftest, podman, docker-cli-buildx, trivy-operator, skaffold, guac, osv-scanner, docker-compose, trivy...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: zot, kubescape, buildah, kaniko, scorecard, conftest, podman, docker-cli-buildx, trivy-operator, skaffold, guac, osv-scanner, docker-compose, trivy...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: zot, kubescape, buildah, kaniko, scorecard, conftest, podman, docker-cli-buildx, trivy-operator, skaffold, guac, osv-scanner, docker-compose, trivy...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: zot, kubescape, buildah, kaniko, scorecard, conftest, podman, docker-cli-buildx, trivy-operator, skaffold, guac, osv-scanner, docker-compose, trivy...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: trivy-fips, trivy-operator, cloudbeat, cloudbeat-fips, osv-scanner, trivy, buildah, docker-fips, livekit-cli, kaniko-fips, podman, trivy-operator-fips, docker-compose, conftest, conftest-fips, kaniko, kubescape-server, scorecard, docker-compose-fips, guac,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: trivy-fips, trivy-operator, cloudbeat, cloudbeat-fips, osv-scanner, trivy, buildah, docker-fips, livekit-cli, kaniko-fips, podman, trivy-operator-fips, docker-compose, conftest, conftest-fips, kaniko, kubescape-server, scorecard, docker-compose-fips, guac,...