OPENSUSE-SU-2026:20327-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

CVE-2026-25750 LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

Langchain Helm Charts 注入漏洞

Langchain Helm Charts is a Kubernetes Helm chart library developed by LangChain for deploying Langchain applications. Versions of Langchain Helm Charts prior to 0.12.71 contained a injection vulnerability. This vulnerability stemmed from URL parameter injections in LangSmith Studio, which could...

CVE-2026-25750: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

PT-2026-23069

Name of the Vulnerable Software and Affected Versions Langchain Helm Charts versions prior to 0.12.71 Description Langchain Helm Charts, used for deploying Langchain applications on Kubernetes, had a flaw where a specially crafted link could lead to the theft of authentication tokens. This allowe...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: ollama-fips, pluto-fips, flux, crossplane-provider-aws-elasticache-fips, crossplane-provider-aws-ecr, flux-operator-fips, azure-service-operator, crossplane-provider-aws-rds, seaweedfs-operator, crossplane-provider-aws-cloudformation-fips, deck, fleet-server, contour...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: ollama-fips, pluto-fips, flux, crossplane-provider-aws-elasticache-fips, crossplane-provider-aws-ecr, flux-operator-fips, azure-service-operator, crossplane-provider-aws-rds, seaweedfs-operator, crossplane-provider-aws-cloudformation-fips, deck, fleet-server, contour...

openSUSE 16 Security Update : openQA, os-autoinst, openQA-devel-container (openSUSE-SU-2026:20261-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20261-1 advisory. Changes in openQA: - Update to version 5.1771422749.560a3b26: fixmcp: set navbar check expression to read-only feat: support inverted result filters in...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, cert-manager-cmctl, tfsec, crossplane-provider-azure-sql, helm, ratify, terraform-provider-azuread, gitness, grafana, kyverno-notation-aws, gitsign, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, guac, kubescape,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, cert-manager-cmctl, tfsec, crossplane-provider-azure-sql, helm, ratify, terraform-provider-azuread, gitness, grafana, kyverno-notation-aws, gitsign, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, guac, kubescape,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: rclone-fips, argo-workflows, crossplane-provider-azure-authorization, src-fingerprint-fips, flux, crossplane-provider-aws-elasticache-fips, crossplane-provider-aws-ecr, openbao, witness, crossplane-provider-aws-rds, aactl, crossplane-provider-aws-cloudformation-fips,...

CLEANSTART-2026-VI85055 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-VZ85637 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-HA44046 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-IG94553 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-HW19594 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

openSUSE Security Advisory (SUSE-SU-2026:0480-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:0480-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2026-24044

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...