GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, croc, crossplane-provider-aws-s3, crossplane-provider-aws-eks, src, k8ssandra-operator, openbao-k8s, authservice, neuvector-dbgen, docker-compose, telegraf, cluster-autoscaler, manifest-tool, kube-arangodb,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.115.0-0.1.hum1 aarch64, x8664 grype-0.115.0-0.1.hum1.src src...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: packer-fips, crossplane-provider-aws-networkmanager, crossplane-provider-aws-organizations, crossplane-provider-azure-signalrservice, spire-server, crossplane-provider-aws-elasticache-fips, grype-db, pulumi-kubernetes-operator, tflint, crossplane-provider-aws-route53...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: packer-fips, crossplane-provider-aws-networkmanager, crossplane-provider-aws-organizations, crossplane-provider-azure-signalrservice, spire-server, crossplane-provider-aws-elasticache-fips, grype-db, pulumi-kubernetes-operator, tflint, crossplane-provider-aws-route53...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: snyk-cli, chisel, pulumi-language-yaml, terragrunt, ksops, gomplate, wolfictl, caddy, fulcio, vault-benchmark, telegraf, cosign, dagger, witness, podman, pulumi-language-java, helm, kots, step-issuer, prometheus, crossplane-provider-azure-authorization, gh,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: snyk-cli, pulumi-language-yaml, terragrunt, gomplate, wolfictl, caddy, telegraf, dagger, witness, podman, pulumi-language-java, helm, kots, step-issuer, prometheus, pulumi-language-dotnet, teleport, go-discover, opentofu, gitlab-kas, zot, nerdctl, kubernetes-dashboar...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, zarf-fips, xeol, rancher, k9s-fips, grype-db, neuvector-scanner, trivy-fips, fuse-overlayfs-snapshotter, livekit-cli, cloudbeat, kubescape-operator, manifest-tool, kubescape-operator-fips, neuvector-fips, k8sgpt, rancher-helm, zot, tw,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, zarf-fips, xeol, rancher, k9s-fips, grype-db, neuvector-scanner, trivy-fips, fuse-overlayfs-snapshotter, livekit-cli, cloudbeat, kubescape-operator, manifest-tool, kubescape-operator-fips, neuvector-fips, k8sgpt, rancher-helm, zot, tw,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, zarf-fips, xeol, rancher, k9s-fips, grype-db, neuvector-scanner, trivy-fips, fuse-overlayfs-snapshotter, livekit-cli, cloudbeat, kubescape-operator, manifest-tool, kubescape-operator-fips, neuvector-fips, k8sgpt, rancher-helm, zot, tw,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, zarf-fips, xeol, rancher, k9s-fips, grype-db, neuvector-scanner, trivy-fips, fuse-overlayfs-snapshotter, livekit-cli, cloudbeat, kubescape-operator, manifest-tool, kubescape-operator-fips, neuvector-fips, k8sgpt, rancher-helm, zot, tw,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, zarf-fips, xeol, rancher, k9s-fips, grype-db, neuvector-scanner, trivy-fips, fuse-overlayfs-snapshotter, livekit-cli, cloudbeat, kubescape-operator, manifest-tool, kubescape-operator-fips, neuvector-fips, k8sgpt, rancher-helm, zot, tw,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, zarf-fips, xeol, osv-scanner, k9s-fips, argocd-image-updater, grype-db, pulumi-kubernetes-operator, trivy-fips, argo-events, apko, melange, cloudbeat, amazon-ssm-agent, external-secrets-operator, nuclei, trufflehog-fips,...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, zarf-fips, xeol, osv-scanner, k9s-fips, argocd-image-updater, grype-db, pulumi-kubernetes-operator, trivy-fips, argo-events, apko, melange, cloudbeat, amazon-ssm-agent, external-secrets-operator, nuclei, trufflehog-fips,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: conftest, packer-fips, task-fips, tfsec, zarf-fips, syft, xeol, zarf, conftest-fips, grype-fips, task, k9s-fips, trivy, chainctl-fips, kubescape-server, cloudbeat-fips, grype-db, opentofu-fips, tflint, trivy-fips, kubescape-server-fips, tflint-fips,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: conftest, packer-fips, task-fips, tfsec, zarf-fips, syft, xeol, zarf, conftest-fips, grype-fips, task, k9s-fips, trivy, chainctl-fips, kubescape-server, cloudbeat-fips, grype-db, opentofu-fips, tflint, trivy-fips, kubescape-server-fips, tflint-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, zarf-fips, xeol, osv-scanner, k9s-fips, argocd-image-updater, grype-db, pulumi-kubernetes-operator, trivy-fips, argo-events, apko, livekit-cli, melange, cloudbeat, amazon-ssm-agent, external-secrets-operator, nuclei,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, zarf-fips, xeol, osv-scanner, k9s-fips, argocd-image-updater, grype-db, pulumi-kubernetes-operator, trivy-fips, argo-events, apko, livekit-cli, melange, cloudbeat, amazon-ssm-agent, external-secrets-operator, nuclei,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, zarf-fips, xeol, osv-scanner, k9s-fips, argocd-image-updater, grype-db, pulumi-kubernetes-operator, trivy-fips, argo-events, apko, livekit-cli, melange, cloudbeat, amazon-ssm-agent, external-secrets-operator, nuclei,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: snyk-cli, pulumi-language-yaml, trufflehog, crossplane, rancher-fleet, kubescape, xeol, flux-source-controller, flux-image-automation-controller, nuclei, gomplate, wolfictl, gitaly, scorecard, apko, external-secrets-operator, grafana, grafana-alloy, melange, nfpm,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: snyk-cli, pulumi-language-yaml, trufflehog, crossplane, rancher-fleet, kubescape, xeol, flux-source-controller, flux-image-automation-controller, nuclei, gomplate, wolfictl, gitaly, scorecard, apko, external-secrets-operator, grafana, grafana-alloy, melange, nfpm,...