GO-2025-4020 vulnerabilities

Vulnerabilities for packages: kots, kubescape, cg, gotenberg, wolfictl, zarf, gitleaks, mattermost, gptscript, chezmoi, grype-fips, mattermost-fips, filebrowser, k9s, syft-fips, syft, grype-db, chainctl, k9s-fips, grype, trufflehog-fips, nuclei, trufflehog, undock...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: kubescape, gptscript, nuclei, trufflehog, kots, k9s, zarf, filebrowser, chezmoi, undock, gitleaks, grype, wolfictl, syft...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kargo, pulumi-language-dotnet, skaffold, bom, nuclei, flux, chezmoi, syft, grafana-alloy, pulumi-language-java, kubevela, go-licenses, dagger, k9s, melange, scorecard, src-fingerprint, flux-image-automation-controller, grype, timoni, kaniko, gitea, trivy, task,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: kargo, pulumi-language-dotnet, skaffold, bom, nuclei, flux, chezmoi, syft, grafana-alloy, pulumi-language-java, kubevela, go-licenses, dagger, k9s, melange, scorecard, src-fingerprint, flux-image-automation-controller, grype, timoni, kaniko, gitea, trivy, task,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: ksops, step, terragrunt, sqlpad, opentelemetry-collector-contrib, fluent-bit-plugin-loki, nuclei, prometheus-operator, restic, airflow, flux, chezmoi, grafana-mimir, velero, falcoctl, harbor-registry, sigstore-scaffolding, spire-server, wal-g, opentelemetry-collector...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: ksops, age, litestream, chezmoi, flux-kustomize-controller, sops...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, ksops, act, flux-notification-controller, atlantis, prometheus-operator, nerdctl, gomplate, chezmoi, kyverno, chisel, syft, crossplane-provider-aws-cloudwatchlogs, terraform-provider-acme, spire-server, podman, steampipe, dagger,...

[SECURITY] Fedora 44 Update: chezmoi-2.72.0-1.fc44

Manage your dotfiles across multiple diverse machines, securely...

Fedora 44 : chezmoi (2026-4ca48be67c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4ca48be67c advisory. Update to 2.72.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-macie2-fips, kubescape, crossplane-provider-aws-kafkaconnect, longhorn-manager-fips, chisel-fips, crossplane-provider-family-aws-fips, seaweedfs-rocksdb, kine, go-discover, crossplane-provider-aws-athena,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-macie2-fips, kubescape, crossplane-provider-aws-kafkaconnect, longhorn-manager-fips, chisel-fips, crossplane-provider-family-aws-fips, seaweedfs-rocksdb, kine, go-discover, crossplane-provider-aws-athena,...

Fedora 44 : chezmoi (2026-905e9afc79)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-905e9afc79 advisory. Update to 2.70.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kine, hubble, coredns, cilium, kubernetes-dashboard, prometheus-operator, flux, nerdctl, chezmoi, gitaly, kyverno, telegraf, k8s-device-plugin, redka, aws-flb-firehose, libnvidia-container, aactl, spire-server, gitlab-kas, kube-fluentd-operator, dask-gateway,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: kine, hubble, coredns, cilium, kubernetes-dashboard, prometheus-operator, flux, nerdctl, chezmoi, gitaly, kyverno, telegraf, k8s-device-plugin, redka, aws-flb-firehose, libnvidia-container, aactl, spire-server, gitlab-kas, kube-fluentd-operator, dask-gateway,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: coredns, act, atlantis, redpanda, prometheus-operator, ipfs-cluster, nerdctl, chezmoi, kyverno, syft, newrelic-infrastructure-agent, redka, aws-flb-firehose, spire-server, seaweedfs, kube-fluentd-operator, podman, kubernetes, fuse-overlayfs-snapshotter,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, atlantis, ipfs-cluster, spqr, consul-k8s, kubernetes, cilium-cli, conjur-cli, external-dns, aws-flb-cloudwatch, harbor, metacontroller, witness, openbao, ingress-nginx-controller, step-issuer, kwok, pdfcpu, litestream, eksctl, envoy-gateway,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, atlantis, ipfs-cluster, spqr, consul-k8s, kubernetes, cilium-cli, conjur-cli, external-dns, aws-flb-cloudwatch, harbor, metacontroller, witness, openbao, ingress-nginx-controller, step-issuer, kwok, pdfcpu, litestream, eksctl, envoy-gateway,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, atlantis, ipfs-cluster, spqr, consul-k8s, kubernetes, cilium-cli, conjur-cli, external-dns, aws-flb-cloudwatch, harbor, metacontroller, witness, openbao, ingress-nginx-controller, step-issuer, kwok, pdfcpu, litestream, eksctl, envoy-gateway,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, atlantis, ipfs-cluster, spqr, consul-k8s, kubernetes, cilium-cli, conjur-cli, external-dns, aws-flb-cloudwatch, harbor, metacontroller, witness, openbao, ingress-nginx-controller, step-issuer, kwok, pdfcpu, litestream, eksctl, envoy-gateway,...