GO-2024-2493 vulnerabilities

Vulnerabilities for packages: trivy, buildkitd, kaniko, conftest, scorecard, skaffold, docker, guac, zot, kubescape...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: opa-envoy, crossplane-provider-aws-rds, db-operator, delve, argocd-image-updater, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, src-fingerprint,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: tkn, cilium-cli, up, syft, aactl, docker-compose, buildkitd, conftest, zot, kubescape, kaniko, ctop, crossplane, spire-server, ko, buf, grype, trivy, dagger, wolfictl, kargo, melange, cadvisor...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: minio, crossplane-provider-aws-rds, db-operator, sbomqs, crossplane-provider-aws-s3, extism, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, wgcf, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, clickhouse-operator, dockerize,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: wait-for-port, delve, portieris, glow, wgcf, amazon-cloudwatch-agent-operator, clickhouse-operator, nri-haproxy, aws-eks-pod-identity-agent, dex, nginx-prometheus-exporter, opentofu, kpt, dgraph, nri-mysql, harbor-cli, harbor-registry, nri-memcached, helm-operator,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: syft, kots, trivy-operator, terragrunt, conftest, zarf, opentofu, task, zot, kubescape, snyk-cli, terraform, steampipe, grype, tfsec, trivy, k9s, tflint, wolfictl, xeol...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: syft, kots, trivy-operator, terragrunt, conftest, zarf, opentofu, task, zot, kubescape, snyk-cli, terraform, steampipe, grype, tfsec, trivy, k9s, tflint, wolfictl, xeol...

conftest-0.67.1-2.1 on GA media (moderate)

conftest-0.67.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:10472-1 Rating: moderate Cross-References: CVE-2026-33747 CVSS scores: CVE-2026-33747 SUSE : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-33747 SUSE : 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10472-1 conftest-0.67.1-2.1 on GA media

These are all security issues fixed in the conftest-0.67.1-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose, podman, trivy, kaniko, trivy-operator, conftest, osv-scanner, scorecard, skaffold, guac, zot, kubescape, buildah...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose, podman, trivy, kaniko, trivy-operator, conftest, osv-scanner, scorecard, skaffold, guac, zot, kubescape, buildah...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose, podman, trivy, kaniko, trivy-operator, conftest, osv-scanner, scorecard, skaffold, guac, zot, kubescape, buildah...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose, podman, trivy, kaniko, trivy-operator, conftest, osv-scanner, scorecard, skaffold, guac, zot, kubescape, buildah...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: trivy, conftest-fips, docker-compose, kaniko-fips, kubescape-server-fips, skaffold, kubescape, docker-compose-fips, kaniko, guac, livekit-cli, zot, osv-scanner, docker-cli-buildx-fips, trivy-operator-fips, docker-cli-buildx, buildah, kubescape-server, docker-fips,...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: trivy, conftest-fips, docker-compose, kaniko-fips, kubescape-server-fips, skaffold, kubescape, docker-compose-fips, kaniko, guac, livekit-cli, zot, osv-scanner, docker-cli-buildx-fips, trivy-operator-fips, docker-cli-buildx, buildah, kubescape-server, docker-fips,...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: trivy, conftest-fips, docker-compose, kaniko-fips, kubescape-server-fips, skaffold, kubescape, docker-compose-fips, kaniko, guac, livekit-cli, zot, osv-scanner, docker-cli-buildx-fips, trivy-operator-fips, docker-cli-buildx, buildah, kubescape-server, docker-fips,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: trivy, conftest-fips, docker-compose, kaniko-fips, kubescape-server-fips, skaffold, kubescape, docker-compose-fips, kaniko, guac, livekit-cli, zot, osv-scanner, docker-cli-buildx-fips, trivy-operator-fips, docker-cli-buildx, buildah, kubescape-server, docker-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, listmonk, newrelic-fluent-bit-output-fips, prometheus-pgbouncer-exporter, cert-manager-google-cas-issuer-fips, knative-net-istio-fips, apm-server-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, crane-fips, listmonk, newrelic-fluent-bit-output-fips, percona-server-mongodb-operator, quic-go, prometheus-pgbouncer-exporter,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: wait-for-port, delve, portieris, glow, wgcf, amazon-cloudwatch-agent-operator, clickhouse-operator, nri-haproxy, aws-eks-pod-identity-agent, dex, nginx-prometheus-exporter, opentofu, kpt, dgraph, nri-mysql, harbor-cli, harbor-registry, nri-memcached, helm-operator,...