CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: trivy, nuclei, gitlab-runner, scorecard, mapotf-fips, kubescape-server, grafana, kaniko-fips, google-osconfig-agent, redpanda-console, gitea, flux-fips, kubescape, guac, snyk-cli, argo-workflows-fips, argocd-image-updater, grype, argo-workflows, bom, cloudbeat-fips,...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: trivy, nuclei, gitlab-runner, scorecard, mapotf-fips, kubescape-server, grafana, kaniko-fips, google-osconfig-agent, redpanda-console, gitea, flux-fips, kubescape, guac, snyk-cli, argo-workflows-fips, argocd-image-updater, grype, argo-workflows, bom, cloudbeat-fips,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: trivy-fips, trivy, grype-fips, terragrunt-fips, terragrunt, tfsec, zot, task-fips, tflint, zarf-fips, chainctl, kubescape-server, xeol, syft, zarf, trivy-operator, opentofu-fips, terraform-fips, kubescape, kots, snyk-cli, k9s-fips, chainctl-fips, grype-db,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: trivy-fips, trivy, grype-fips, terragrunt-fips, terragrunt, tfsec, zot, task-fips, tflint, zarf-fips, chainctl, kubescape-server, xeol, syft, zarf, trivy-operator, opentofu-fips, terraform-fips, kubescape, kots, snyk-cli, k9s-fips, chainctl-fips, grype-db,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: trivy, nuclei, livekit-cli, gitlab-runner, scorecard, kubescape-server, grafana, kaniko-fips, google-osconfig-agent, gitea, flux-fips, kubescape, guac, snyk-cli, argo-workflows-fips, argocd-image-updater, grype, argo-workflows, bom, cloudbeat-fips, syft-fips, gitaly,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: trivy, nuclei, livekit-cli, gitlab-runner, scorecard, kubescape-server, grafana, kaniko-fips, google-osconfig-agent, gitea, flux-fips, kubescape, guac, snyk-cli, argo-workflows-fips, argocd-image-updater, grype, argo-workflows, bom, cloudbeat-fips, syft-fips, gitaly,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: trivy, nuclei, livekit-cli, gitlab-runner, scorecard, kubescape-server, grafana, kaniko-fips, google-osconfig-agent, gitea, flux-fips, kubescape, guac, snyk-cli, argo-workflows-fips, argocd-image-updater, grype, argo-workflows, bom, cloudbeat-fips, syft-fips, gitaly,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: nfpm, gitea, gptscript, external-secrets-operator, crossplane, kubescape, flux-image-automation-controller, teleport, wolfictl, kyverno, k9s, pulumi-language-dotnet, src-fingerprint, argo-cd, grafana-alloy, kaniko, pulumi-kubernetes-operator, gitlab-runner,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: nfpm, gitea, gptscript, external-secrets-operator, crossplane, kubescape, flux-image-automation-controller, teleport, wolfictl, kyverno, k9s, pulumi-language-dotnet, src-fingerprint, argo-cd, grafana-alloy, kaniko, pulumi-kubernetes-operator, gitlab-runner,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: nfpm, gitea, gptscript, external-secrets-operator, crossplane, kubescape, flux-image-automation-controller, teleport, wolfictl, kyverno, k9s, pulumi-language-dotnet, src-fingerprint, argo-cd, grafana-alloy, kaniko, pulumi-kubernetes-operator, gitlab-runner,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: nfpm, gitea, gptscript, external-secrets-operator, crossplane, kubescape, flux-image-automation-controller, teleport, wolfictl, kyverno, k9s, pulumi-language-dotnet, src-fingerprint, argo-cd, grafana-alloy, kaniko, pulumi-kubernetes-operator, gitlab-runner,...

grype-0.109.1-1.1 on GA media (moderate)

grype-0.109.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10317-1 Rating: moderate Cross-References: CVE-2025-12183 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grype-0.109.1-1.1...

OPENSUSE-SU-2026:10317-1 grype-0.109.1-1.1 on GA media

These are all security issues fixed in the grype-0.109.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gptscript, vcluster, wolfictl, pulumi-language-dotnet, boring-registry, docker, pulumi-kubernetes-operator, rclone, opentofu, argo-rollouts, datadog-agent, flux-kustomize-controller, cerbos, cilium-cli, crossplane-provider-aws-sns, crossplane-provider-aws-elasticache...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gptscript, vcluster, wolfictl, pulumi-language-dotnet, boring-registry, docker, pulumi-kubernetes-operator, rclone, opentofu, argo-rollouts, datadog-agent, flux-kustomize-controller, cerbos, cilium-cli, crossplane-provider-aws-sns, crossplane-provider-aws-elasticache...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: trivy, reports-server, datadog-agent, nuclei, cert-manager-cmctl, crossplane-provider-azure-managedidentity, terragrunt, livekit-cli, atlantis, gitlab-runner, crossplane-provider-aws-cloudwatchlogs-fips, scorecard, crossplane-provider-aws-route53-fips,...

exploit-chain-generator

Exploit Chain Generator Turn Noise into Signal: Correlate...

SUSE CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kapp, influxd, restic-fips, http-echo, kube-bench, custom-pod-autoscaler-fips, ingress-nginx-controller, opa, terraform-provider-azuread, elastic-agent, rabbitmq-messaging-topology-operator, kube-state-metrics, langfuse, ollama-fips, k8sgateway, envoy-gateway-fips,...

CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...