Fedora 44 : chezmoi (2026-8ba9889b7c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8ba9889b7c advisory. Update to 2.73.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: grype-db, cg, mattermost-fips, mattermost, wolfictl, syft, grype, trufflehog-fips, k9s-fips, kubescape, k9s, gptscript, syft-fips, chezmoi, zarf, filebrowser, kots, trufflehog, undock, chainctl, gotenberg, grype-fips, nuclei, gitleaks...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: trufflehog, chezmoi, grype, filebrowser, syft, nuclei, kubescape, undock, gitleaks, kots, wolfictl, gptscript, zarf, k9s...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: skaffold, grype, syft, timoni, kubescape, zot, pulumi-language-yaml, pulumi, gitsign, grafana-alloy, zarf, crossplane, tfsec, k8sgpt, flux-kustomize-controller, kubevela, go-licenses, apko, gptscript, scorecard, melange, osv-scanner, flux-source-controller, k9s, kots...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: steampipe, skaffold, trufflehog, argo-cd, grype, syft, kubescape, zot, pulumi-language-yaml, pulumi, kyverno, gitsign, grafana-alloy, zarf, crossplane, nfpm, tfsec, xeol, gitaly, witness, external-secrets-operator, kubevela, apko, gptscript, teleport, scorecard,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: skaffold, grype, syft, timoni, kubescape, zot, pulumi-language-yaml, pulumi, gitsign, grafana-alloy, zarf, crossplane, tfsec, k8sgpt, flux-kustomize-controller, kubevela, go-licenses, apko, gptscript, scorecard, melange, osv-scanner, flux-source-controller, k9s, kots...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: druid, py3-azure-identity, rclone, wal-g, hugo, cosign, kubescape, opentelemetry-collector-contrib, terragrunt, zot, pulumi, policy-controller, spire-server, timestamp-authority, secrets-store-csi-driver-provider-azure, sops, prometheus-operator, zarf, harbor-registr...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: chezmoi, flux-kustomize-controller, age, litestream, ksops, sops...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, cloudflared, pulumi-language-yaml, terraform-provider-tls, kaf, spire-server, crossplane-provider-aws-route53, crossplane-provider-aws-cloudformation, prometheus-operator, zarf, cloud-provider-aws,...

[SECURITY] Fedora 44 Update: chezmoi-2.72.0-1.fc44

Manage your dotfiles across multiple diverse machines, securely...

Fedora 44 : chezmoi (2026-4ca48be67c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4ca48be67c advisory. Update to 2.72.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: buildah-fips, crossplane-provider-aws-s3, crossplane-provider-aws-autoscaling, crossplane-provider-azure-servicelinker, kyverno-policy-reporter-plugins-kyverno, policy-controller, flux-fips, crossplane-provider-aws-macie2-fips, crossplane-provider-aws-kinesis,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: buildah-fips, crossplane-provider-aws-s3, crossplane-provider-aws-autoscaling, crossplane-provider-azure-servicelinker, kyverno-policy-reporter-plugins-kyverno, policy-controller, flux-fips, crossplane-provider-aws-macie2-fips, crossplane-provider-aws-kinesis,...

Fedora 44 : chezmoi (2026-905e9afc79)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-905e9afc79 advisory. Update to 2.70.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, fscrypt, kubernetes-dashboard, argo-cd, telegraf, kubescape, zot, fuse-overlayfs-snapshotter, kaf, kyverno, spire-server, prometheus-operator, external-dns, kine, cloud-provider-aws, gitlab-kas, helm, karpenter, runc, dask-gateway, gitaly,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, redpanda, oras, kbld, pulumi-language-yaml, kaf, newrelic-infrastructure-agent, spire-server, dex, envoy-gateway, prometheus-operator, buf, cloud-provider-aws, sonobuoy, flux-helm-controller, rabbitmq-messaging-topology-operator, witness, dgraph, g...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, fscrypt, kubernetes-dashboard, argo-cd, telegraf, kubescape, zot, fuse-overlayfs-snapshotter, kaf, kyverno, spire-server, prometheus-operator, external-dns, kine, cloud-provider-aws, gitlab-kas, helm, karpenter, runc, dask-gateway, gitaly,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: migrate, kbld, harbor-cli, oauth2-proxy, terraform-provider-tls, php-fpmexporter, spire-server, timestamp-authority, envoy-gateway, terraform-provider-time, grpc-health-probe, logstash-exporter, dapr, rabbitmq-messaging-topology-operator, maru, sbom-convert, dgraph,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: migrate, kbld, harbor-cli, oauth2-proxy, terraform-provider-tls, php-fpmexporter, spire-server, timestamp-authority, envoy-gateway, terraform-provider-time, grpc-health-probe, logstash-exporter, dapr, rabbitmq-messaging-topology-operator, maru, sbom-convert, dgraph,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: migrate, kbld, harbor-cli, oauth2-proxy, terraform-provider-tls, php-fpmexporter, spire-server, timestamp-authority, envoy-gateway, terraform-provider-time, grpc-health-probe, logstash-exporter, dapr, rabbitmq-messaging-topology-operator, maru, dgraph, go-licenses,...