GO-2025-4020 vulnerabilities

Vulnerabilities for packages: grype, syft, gotenberg, k9s, nuclei, syft-fips, chezmoi, filebrowser, trufflehog, cg, mattermost, zarf, trufflehog-fips, grype-fips, grype-db, mattermost-fips, gptscript, kubescape, k9s-fips, kots, chainctl, undock, gitleaks, wolfictl...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: grype, nuclei, syft, kubescape, gitleaks, trufflehog, chezmoi, k9s, kots, zarf, gptscript, wolfictl, undock, filebrowser...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: grype, goreleaser, k8sgpt, syft, flux-source-controller, kubescape, bom, melange, chezmoi, tfsec, trivy, gptscript, wolfictl, scorecard, pulumi, flux, osv-scanner, flux-kustomize-controller, gitsign, nuclei, gitea, grafana-alloy, crossplane, pulumi-language-dotnet,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: grype, goreleaser, k8sgpt, syft, flux-source-controller, kubescape, bom, melange, chezmoi, tfsec, trivy, gptscript, wolfictl, scorecard, pulumi, flux, osv-scanner, flux-kustomize-controller, gitsign, nuclei, gitea, grafana-alloy, crossplane, pulumi-language-dotnet,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: grype, teleport, syft, flux-source-controller, kubescape, bom, gitlab-runner, melange, chezmoi, xeol, tfsec, trivy, gptscript, wolfictl, scorecard, pulumi, flux, osv-scanner, rancher-fleet, gitsign, nuclei, gitaly, gitea, grafana-alloy, crossplane,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: trino, goreleaser, k8sgpt, flux-source-controller, kubescape, prometheus-operator, ksops, step-ca, chezmoi, py3-azure-identity, trivy, wal-g, opentelemetry-collector-contrib, pulumi, fulcio, flux, rekor, restic, flux-kustomize-controller, up, nuclei, harbor-registry,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: litestream, age, ksops, chezmoi, sops, flux-kustomize-controller...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: grype, k8sgpt, kubescape, prometheus-operator, crossplane-provider-aws-rds, chezmoi, crossplane-provider-aws-cloudformation, crossplane-provider-aws-elasticache, gh, pulumi, fulcio, crossplane-provider-aws-s3, gatus, crossplane-provider-aws-cloudfront,...

[SECURITY] Fedora 44 Update: chezmoi-2.72.0-1.fc44

Manage your dotfiles across multiple diverse machines, securely...

Fedora 44 : chezmoi (2026-4ca48be67c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4ca48be67c advisory. Update to 2.72.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticsearch, cilium, crossplane-provider-aws-macie2-fips, crossplane-provider-aws-sns-fips, crossplane-provider-aws-acm, crossplane-provider-aws-cloudwatchlogs-fips, splunk-otel-collector, crossplane-provider-aws-guardduty, vitess,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticsearch, cilium, crossplane-provider-aws-macie2-fips, crossplane-provider-aws-sns-fips, crossplane-provider-aws-acm, crossplane-provider-aws-cloudwatchlogs-fips, splunk-otel-collector, crossplane-provider-aws-guardduty, vitess,...

Fedora 44 : chezmoi (2026-905e9afc79)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-905e9afc79 advisory. Update to 2.70.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: regclient, kubescape, prometheus-operator, chezmoi, xeol, oras, gh, pulumi, weaviate, gitaly, redka, terraform, istio, witness, kbld, dive, coredns, kind, rook, kine, cerbos, k3s, splunk-otel-collector, gitlab-kas, docker-cli, gitness, trivy-operator, task,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kubescape, aws-flb-cloudwatch, aws-flb-firehose, prometheus-operator, chezmoi, external-dns, flux, gitaly, redka, gitlab-pages, prometheus, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, aactl, kubernetes-dashboard, falco-no-driver, snyk-cli, istio, go,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: kubescape, aws-flb-cloudwatch, aws-flb-firehose, prometheus-operator, chezmoi, external-dns, flux, gitaly, redka, gitlab-pages, prometheus, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, aactl, kubernetes-dashboard, falco-no-driver, snyk-cli, istio, go,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: kustomize, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, prometheus-operator, chezmoi, net-kourier, spark-operator, terraform-provider-time, terraform-mcp-server, kubernetes-csi-external-resizer, git-sync, weaviate, http-echo,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kustomize, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, prometheus-operator, chezmoi, net-kourier, spark-operator, terraform-provider-time, terraform-mcp-server, kubernetes-csi-external-resizer, git-sync, weaviate, http-echo,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kustomize, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, prometheus-operator, chezmoi, net-kourier, spark-operator, terraform-provider-time, terraform-mcp-server, kubernetes-csi-external-resizer, git-sync, weaviate, http-echo,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: kustomize, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, prometheus-operator, chezmoi, net-kourier, spark-operator, terraform-provider-time, terraform-mcp-server, kubernetes-csi-external-resizer, git-sync, weaviate, http-echo,...