CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: runc, k3s, knative-serving, go, cilium-envoy, prometheus-operator, kaf, external-secrets-operator, fuse-overlayfs-snapshotter, kubescape, fscrypt, cilium, cilium-cli, hubble, kyverno, gitaly, cloud-provider-aws, keda, telegraf, argo-cd, nerdctl, kube-fluentd-operator...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT The nfsklookupslowv4 function performs the conntrack lookup for IPv4 packets in order to restore the original 5-tuple in case of SNAT, so that the correct socket if any can be...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992627)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992627 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql-fips, velero, kind, eksctl, apache-beam-python-3.11-sdk, extism, caddy, nginx-prometheus-exporter, prometheus-redis-exporter-fips, dask-gateway, mattermost, request-1279-14, zitadel, prometheus, cass-operator, trivy-operator,...

CVE-2025-4673 vulnerabilities

Vulnerabilities for packages: logstash-exporter, fscrypt, cargobump, addon-resizer, flux-helm-controller, gobump, kube-fluentd-operator, govulncheck, go-licenses, mongo-tools, wuzz, rancher-telemetry, docker-cli-buildx, yunikorn-k8shim, cloudnative-pg, nri-postgresql, hcloud, kubernetes-dashboard...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, prometheus-blackbox-exporter, terraform-provider-sendgrid, dgraph, cortex, aactl, kubeflow, kubescape, kubevela, up, k3d, buildkitd, spark-operator, falco, src, scorecard...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: timestamp-authority-fips, cortex, falcoctl-fips, prometheus-blackbox-exporter, kubescape, vault-csi-provider, buildkitd, volume-modifier-for-k8s-fips, metrics-server-fips, bank-vaults-fips, scorecard, aws-efs-csi-driver-fips, kubevela, spark-operator,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: haproxy-ingress, kubevela, flux-source-controller, flux-helm-controller, envoy-ratelimit, metacontroller, rqlite, amass, gitness, helm, kubeflow, weaviate, buildkitd, frp, prometheus-blackbox-exporter, terraform-provider-aws, aactl, nginx-mainline, memcached-exporter...