Security update for helm (moderate)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20327-1 Rating: moderate References: bsc1251442 bsc1251649 Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE : 5.3...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

SUSE-SU-2026:20685-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

OPENSUSE-SU-2026:20327-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

CVE-2026-25750 LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

Langchain Helm Charts 注入漏洞

Langchain Helm Charts is a Kubernetes Helm chart library developed by LangChain for deploying Langchain applications. Versions of Langchain Helm Charts prior to 0.12.71 contained a injection vulnerability. This vulnerability stemmed from URL parameter injections in LangSmith Studio, which could...

PT-2026-23069

Name of the Vulnerable Software and Affected Versions Langchain Helm Charts versions prior to 0.12.71 Description Langchain Helm Charts, used for deploying Langchain applications on Kubernetes, had a flaw where a specially crafted link could lead to the theft of authentication tokens. This allowe...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, crossplane-provider-aws-kms, livekit-server, cert-manager-webhook-pdns-fips, chainctl, step-issuer-fips, goreleaser, apache-beam-python-3.11-sdk, trivy, crossplane-provider-aws-cognitoidp, grafana-alloy, amazon-ssm-agent-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, crossplane-provider-aws-kms, livekit-server, cert-manager-webhook-pdns-fips, chainctl, step-issuer-fips, goreleaser, apache-beam-python-3.11-sdk, trivy, crossplane-provider-aws-cognitoidp, grafana-alloy, amazon-ssm-agent-fips,...

openSUSE 16 Security Update : openQA, os-autoinst, openQA-devel-container (openSUSE-SU-2026:20261-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20261-1 advisory. Changes in openQA: - Update to version 5.1771422749.560a3b26: fixmcp: set navbar check expression to read-only feat: support inverted result filters in...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-language-yaml, pulumi-language-java, tfsec, dagger, kubevela, zarf, crossplane-provider-keycloak, flux-source-controller, docker-cli-buildx, crossplane-provider-aws-s3, cert-manager-cmctl, melange, crossplane,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-language-yaml, pulumi-language-java, tfsec, dagger, kubevela, zarf, crossplane-provider-keycloak, flux-source-controller, docker-cli-buildx, crossplane-provider-aws-s3, cert-manager-cmctl, melange, crossplane,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-rollouts-fips, crossplane-provider-aws-sqs, crossplane-provider-aws-kms, argocd-image-updater, chainctl, flux-helm-controller, flux-source-controller-fips, cerbos, goreleaser, omnictl-multiarch, openbao-fips, trivy, openbao, grafana-alloy, amazon-ssm-agent-fips,...

CLEANSTART-2026-VI85055 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-VZ85637 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-HA44046 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-IG94553 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-HW19594 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

openSUSE Security Advisory (SUSE-SU-2026:0480-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...