GO-2025-4020 vulnerabilities

Vulnerabilities for packages: mattermost, k9s-fips, gitleaks, trufflehog-fips, gotenberg, trufflehog, grype, chainctl, syft, chezmoi, zarf, undock, kubescape, grype-db, cg, wolfictl, kots, k9s, grype-fips, gptscript, syft-fips, nuclei, mattermost-fips, filebrowser...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: undock, k9s, chezmoi, gitleaks, grype, syft, kubescape, kots, wolfictl, gptscript, trufflehog, nuclei, zarf, filebrowser...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kubevela, kaniko, pulumi-kubernetes-operator, flux-kustomize-controller, trivy, nuclei, grafana-alloy, flux-image-automation-controller, melange, scorecard, zarf, timoni, chezmoi, guac, syft, flux-source-controller, snyk-cli, flux, gptscript, pulumi-language-java,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: kubevela, kaniko, pulumi-kubernetes-operator, flux-kustomize-controller, trivy, nuclei, grafana-alloy, flux-image-automation-controller, melange, scorecard, zarf, timoni, chezmoi, guac, syft, flux-source-controller, snyk-cli, flux, gptscript, pulumi-language-java,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: kubevela, kaniko, pulumi-kubernetes-operator, gitaly, gomplate, trivy, nuclei, grafana-alloy, flux-image-automation-controller, melange, scorecard, witness, zarf, chezmoi, guac, syft, flux-source-controller, snyk-cli, cerbos, flux, gptscript, trufflehog,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: py3-azure-identity, step, falcoctl, hugo, flyte, flux-kustomize-controller, py3-cassandra-medusa, rook, ksops, rclone, sops, trivy, step-ca, thanos, nuclei, up, zarf, sqlpad, hugo-extended, spire-server, chezmoi, flux-image-reflector-controller, guac,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: chezmoi, flux-kustomize-controller, ksops, sops, age, litestream...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, cilium-cli, gh, spire-server, crossplane-provider-aws-sns, go-discover, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, neuvector-sigstore-interface, kubernetes-dashboard, buildah, mods, aactl,...

[SECURITY] Fedora 44 Update: chezmoi-2.72.0-1.fc44

Manage your dotfiles across multiple diverse machines, securely...

Fedora 44 : chezmoi (2026-4ca48be67c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4ca48be67c advisory. Update to 2.72.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, terraform-provider-acme-fips, docker-compose-fips, crossplane-provider-aws-s3, k8sgpt, chainloop-control-plane, crossplane-provider-aws-ecs, tkn, gh, slsa-verifier, crossplane-provider-aws-cognitoidentity-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, terraform-provider-acme-fips, docker-compose-fips, crossplane-provider-aws-s3, k8sgpt, chainloop-control-plane, crossplane-provider-aws-ecs, tkn, gh, slsa-verifier, crossplane-provider-aws-cognitoidentity-fips,...

Fedora 44 : chezmoi (2026-905e9afc79)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-905e9afc79 advisory. Update to 2.70.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: go, external-dns, fscrypt, gitaly, hubble, aws-flb-cloudwatch, cilium-cli, falco-no-driver, nerdctl, datadog-agent, spire-server, k3s, chezmoi, libnvidia-container, prometheus-operator, cilium, snyk-cli, k8s-device-plugin, flux, kube-fluentd-operator, argo-cd,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: go, external-dns, fscrypt, gitaly, hubble, aws-flb-cloudwatch, cilium-cli, falco-no-driver, nerdctl, datadog-agent, spire-server, k3s, chezmoi, libnvidia-container, prometheus-operator, cilium, snyk-cli, k8s-device-plugin, flux, kube-fluentd-operator, argo-cd,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: gitleaks, step-ca, cilium-cli, gh, seaweedfs, spire-server, flux-source-controller, snyk-cli, kubernetes-dashboard, buildah, aactl, splunk-otel-collector, mattermost, docker-cli-buildx, fuse-overlayfs-snapshotter, sriov-network-device-plugin, kind, buf,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...