CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: chezmoi, external-secrets-operator, kots, kubernetes-csi-node-driver-registrar, kubernetes, cilium-cli, istio, prometheus, aws-flb-firehose, libnvidia-container, snyk-cli, redka, argo-cd, cert-manager, cilium, k3s, kubernetes-dashboard, kyverno, datadog-agent,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992627)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992627 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: openfga, prometheus-operator, kepler, metallb-fips, local-path-provisioner-fips, op-geth, conftest, prometheus-podman-exporter, render-template, apko-fips, verticadb-operator, kubernetes-csi-livenessprobe-fips, dask-gateway, dbmate, kube-conformance,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT The nfsklookupslowv4 function performs the conntrack lookup for IPv4 packets in order to restore the original 5-tuple in case of SNAT, so that the correct socket if any can be...

CVE-2025-4673 vulnerabilities

Vulnerabilities for packages: rancher-helm, k8sgpt, rancher-telemetry, neuvector-dbgen, grafana-mimir, age, kyverno-policy-reporter-kyverno-plugin, velero-plugin-for-microsoft-azure, fulcio, portieris, spark-operator, wire-go, paranoia, dive, envoy-gateway, authservice, trillian, blobfuse2,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s-fips, k3d, slsa-verifier, kiam, prometheus-blackbox-exporter, scorecard, terraform-provider-sendgrid, kube-oidc-proxy, kubeflow-fips, cortex, buildkitd, timestamp-authority-fips, kubernetes-csi-livenessprobe-fips, src, conftest-fips, kubevela,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, up, dgraph, kubeflow, scorecard, aactl, spark-operator, src, slsa-verifier, cortex, buildkitd, k3d, kubescape, kubevela...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nginx-stable, kubeflow, flux-source-controller, grpcurl, atlantis, hey, sigstore-scaffolding, terraform-provider-aws, frp, hugo, rqlite, weaviate, kubewatch, kubevela, secrets-store-csi-driver-provider-gcp, spark-operator, k3d, prometheus-adapter,...