GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: multus-cni, k8sgpt, cluster-api-aws-controller, crossplane-provider-aws-elasticache, nri-discovery-kubernetes, haproxy-ingress, crossplane-provider-azure-authorization, kine, traefik, restic, wolfictl, kaniko, kuberlr, infinispan-operator, melange, http-echo,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.115.0-0.1.hum1 aarch64, x8664 grype-0.115.0-0.1.hum1.src src...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane-provider-aws-s3, telegraf, grype-db, tekton-chains, crossplane-provider-family-aws, kargo, crossplane-provider-keycloak, crossplane-fips, crossplane-provider-azure-securityinsights, flux-kustomize-controller-fips, glab, longhorn-cli-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: kyverno, crossplane-provider-aws-s3, telegraf, grype-db, tekton-chains, crossplane-provider-family-aws, kargo, crossplane-provider-keycloak, crossplane-fips, crossplane-provider-azure-securityinsights, flux-kustomize-controller-fips, glab, longhorn-cli-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: trivy, zarf, wal-g, tekton-chains, external-dns, nfpm, step-issuer, rancher, spire-server, k8sgpt, kine, crossplane-provider-azure-authorization, dagger, fulcio, vault-benchmark, flux-image-automation-controller, wolfictl, podman, pulumi, melange, zot,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: trivy, zarf, external-dns, nfpm, step-issuer, rancher, spire-server, kine, dagger, flux-image-automation-controller, wolfictl, podman, pulumi, melange, zot, argocd-image-updater, gomplate, gitea, trivy-operator, cilium-cli, scorecard, go-discover,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, kube-mgmt, grype-db, consul-k8s-fips, envoy-gateway-fips, kargo, crossplane-fips, helm-fips, livekit-cli, k9s-fips, eksctl, k9s, newrelic-infrastructure-agent-fips, kube-arangodb-fips, kaniko, helm-exporter-fips, dagger, kubescape-operator, kots,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, kube-mgmt, grype-db, consul-k8s-fips, envoy-gateway-fips, kargo, crossplane-fips, helm-fips, livekit-cli, k9s-fips, eksctl, k9s, newrelic-infrastructure-agent-fips, kube-arangodb-fips, kaniko, helm-exporter-fips, dagger, kubescape-operator, kots,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: docker-compose-fips, kube-mgmt, grype-db, consul-k8s-fips, envoy-gateway-fips, kargo, crossplane-fips, helm-fips, livekit-cli, k9s-fips, eksctl, k9s, newrelic-infrastructure-agent-fips, kube-arangodb-fips, kaniko, helm-exporter-fips, dagger, kubescape-operator, kots,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, kube-mgmt, grype-db, consul-k8s-fips, envoy-gateway-fips, kargo, crossplane-fips, helm-fips, livekit-cli, k9s-fips, eksctl, k9s, newrelic-infrastructure-agent-fips, kube-arangodb-fips, kaniko, helm-exporter-fips, dagger, kubescape-operator, kots,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-compose-fips, kube-mgmt, grype-db, consul-k8s-fips, envoy-gateway-fips, kargo, crossplane-fips, helm-fips, livekit-cli, k9s-fips, eksctl, k9s, newrelic-infrastructure-agent-fips, kube-arangodb-fips, kaniko, helm-exporter-fips, dagger, kubescape-operator, kots,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kyverno, grype-db, kargo, crossplane-fips, grafana-alloy-fips, pulumi-language-dotnet, kyverno-fips, snyk-cli, k9s-fips, grafana-fips, k9s, kaniko, argo-cd, gitea, goreleaser, dagger, witness, guac, kots, mapotf, pulumi, osv-scanner, flux-source-controller-fips,...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: kyverno, grype-db, kargo, crossplane-fips, grafana-alloy-fips, pulumi-language-dotnet, kyverno-fips, snyk-cli, k9s-fips, grafana-fips, k9s, kaniko, argo-cd, gitea, goreleaser, dagger, witness, guac, kots, mapotf, pulumi, osv-scanner, flux-source-controller-fips,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: trivy-operator, xeol, crossplane-provider-terraform, zarf, wolfictl, grype-db, syft, terraform-fips, trivy-fips, trivy-operator-fips, grype-fips, xeol-fips, terragrunt, grype, tflint, opentofu, cg, snyk-cli, zarf-fips, conftest-fips, k9s-fips, kubescape, k9s, trivy,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: trivy-operator, xeol, crossplane-provider-terraform, zarf, wolfictl, grype-db, syft, terraform-fips, trivy-fips, trivy-operator-fips, grype-fips, xeol-fips, terragrunt, grype, tflint, opentofu, cg, snyk-cli, zarf-fips, conftest-fips, k9s-fips, kubescape, k9s, trivy,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kyverno, grype-db, kargo, crossplane-fips, grafana-alloy-fips, pulumi-language-dotnet, kyverno-fips, snyk-cli, livekit-cli, k9s-fips, grafana-fips, k9s, kaniko, argo-cd, gitea, dagger, witness, guac, kots, pulumi, osv-scanner, flux-source-controller-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kyverno, grype-db, kargo, crossplane-fips, grafana-alloy-fips, pulumi-language-dotnet, kyverno-fips, snyk-cli, livekit-cli, k9s-fips, grafana-fips, k9s, kaniko, argo-cd, gitea, dagger, witness, guac, kots, pulumi, osv-scanner, flux-source-controller-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: kyverno, grype-db, kargo, crossplane-fips, grafana-alloy-fips, pulumi-language-dotnet, kyverno-fips, snyk-cli, livekit-cli, k9s-fips, grafana-fips, k9s, kaniko, argo-cd, gitea, dagger, witness, guac, kots, pulumi, osv-scanner, flux-source-controller-fips,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: trivy, guac, trufflehog, zarf, nuclei, argocd-image-updater, gomplate, argo-workflows, cerbos, nfpm, gitaly, gitea, trivy-operator, tfsec, grafana-alloy, dagger, xeol, flux-image-automation-controller, scorecard, wolfictl, kaniko, grype, external-secrets-operator,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: trivy, guac, trufflehog, zarf, nuclei, argocd-image-updater, gomplate, argo-workflows, cerbos, nfpm, gitaly, gitea, trivy-operator, tfsec, grafana-alloy, dagger, xeol, flux-image-automation-controller, scorecard, wolfictl, kaniko, grype, external-secrets-operator,...