GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: nri-f5, aws-eks-pod-identity-agent, pulumi-language-dotnet, nodetaint, witness, chartmuseum, kubernetes-ingress-defaultbackend, vertical-pod-autoscaler, apko, pgpool2exporter, boring-registry, helm-set-status, cloudnative-pg, sops, k8s-device-plugin, k8sgpt, loki,...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.115.0-0.1.hum1 aarch64, x8664 grype-0.115.0-0.1.hum1.src src...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kafka, kaf, crossplane-provider-aws-cloudwatchevents, tkn, crossplane-provider-azure-resources, crossplane-provider-aws-kafka-fips, crossplane-provider-aws-lightsail-fips, packer-fips, crossplane-provider-aws-cloudwatchlogs, commercial-grafana...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kafka, kaf, crossplane-provider-aws-cloudwatchevents, tkn, crossplane-provider-azure-resources, crossplane-provider-aws-kafka-fips, crossplane-provider-aws-lightsail-fips, packer-fips, crossplane-provider-aws-cloudwatchlogs, commercial-grafana...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: atlantis, flux-image-automation-controller, external-dns, pulumi-language-dotnet, flux-operator, witness, podman, kine, tekton-chains, flux-source-controller, zot, apko, sops, kaf, k8sgpt, cert-manager, loki, step, trivy-operator, kargo,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, external-dns, pulumi-language-dotnet, witness, podman, kine, zot, flux-source-controller, apko, kaf, cert-manager, loki, step, trivy-operator, gptscript, kubescape, argocd-image-updater, grype, istio, zarf, step-issuer, buildah,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: kaniko, docker-compose-fips, kots, kubescape, helm, amazon-ecs-agent, kube-mgmt, envoy-gateway-fips, helm-push, trivy-operator-fips, wolfictl, packer-fips, steampipe, chaos-mesh, crossplane, gitlab-rails-ce-fips, neuvector-scanner-fips, manifest-tool, chartmuseum-fip...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kaniko, docker-compose-fips, kots, kubescape, helm, amazon-ecs-agent, kube-mgmt, envoy-gateway-fips, helm-push, trivy-operator-fips, wolfictl, packer-fips, steampipe, chaos-mesh, crossplane, gitlab-rails-ce-fips, neuvector-scanner-fips, manifest-tool, chartmuseum-fip...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: kaniko, docker-compose-fips, kots, kubescape, helm, amazon-ecs-agent, kube-mgmt, envoy-gateway-fips, helm-push, trivy-operator-fips, wolfictl, packer-fips, steampipe, chaos-mesh, crossplane, gitlab-rails-ce-fips, neuvector-scanner-fips, manifest-tool, chartmuseum-fip...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kaniko, docker-compose-fips, kots, kubescape, helm, amazon-ecs-agent, kube-mgmt, envoy-gateway-fips, helm-push, trivy-operator-fips, wolfictl, packer-fips, steampipe, chaos-mesh, crossplane, gitlab-rails-ce-fips, neuvector-scanner-fips, manifest-tool, chartmuseum-fip...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kaniko, docker-compose-fips, kots, kubescape, helm, amazon-ecs-agent, kube-mgmt, envoy-gateway-fips, helm-push, trivy-operator-fips, wolfictl, packer-fips, steampipe, chaos-mesh, crossplane, gitlab-rails-ce-fips, neuvector-scanner-fips, manifest-tool, chartmuseum-fip...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, commercial-chainloop-cli, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog,...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, commercial-chainloop-cli, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: zarf, kubescape-server-fips, crossplane-provider-terraform, kubescape-server, kots, kubescape, cloudbeat, grype-db, trivy-operator-fips, wolfictl, packer-fips, trivy, steampipe, xeol, terragrunt, cg, zot, grype-fips, trivy-operator, conftest-fips, tfsec, zarf-fips,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: zarf, kubescape-server-fips, crossplane-provider-terraform, kubescape-server, kots, kubescape, cloudbeat, grype-db, trivy-operator-fips, wolfictl, packer-fips, trivy, steampipe, xeol, terragrunt, cg, zot, grype-fips, trivy-operator, conftest-fips, tfsec, zarf-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, commercial-chainloop-cli, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, commercial-chainloop-cli, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, commercial-chainloop-cli, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, flux-source-controller, bom, apko, nuclei, zot, dagger,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, flux-source-controller, bom, apko, nuclei, zot, dagger,...