CLEANSTART-2026-HX30295 Security fixes in cosign 2.6.5-r0

Package cosign version 2.6.5-r0 fixes 4 vulnerabilities: CVE-2026-49478, ghsa-3fxj-6jh8-hvhx, ghsa-9g5q-2w5x-hmxf, ghsa-rjr7-jggh-pgcp...

CVE-2026-49478

creationtimestamp| type| source ---|---|--- 2026-08-13 14:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msxsmaze5x2l...

Linux Distros Unpatched Vulnerability : CVE-2026-49478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Versions through 1.8.5 improperly follow cross-host...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: falcoctl, aactl, kots, ratify, kyverno-notation-aws, kubescape, skopeo-fips, tekton-chains, kubescape-server, zarf, kyverno-notation-aws-fips, chainctl-fips, buildah, falco-no-driver, ratify-fips, prometheus-podman-exporter-fips, zarf-fips, portieris-fips,...