GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, tigera-operator, k3s, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, beats-fips, rancher,...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1-fips, awx, nvidia-nsight-compute-13.2, openstack-kolla-toolbox-2025.2, pypy-3.11, openstack-horizon-2025.1, openstack-horizon-2025.1-fips, openstack-keystone-2026.1, py3-cassandra-medusa, py3-pipenv, request-1276,...

GHSA-WJ3P-5H3X-C74Q vulnerabilities

Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...

CVE-2025-62879 vulnerabilities

Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: distribution, google-cloud-otel-ops-collector, cadence-fips, docker-compose, rekor, tetragon-fips, envoy-gateway, calico, argo-events-fips, trident-fips, k8s-agents-operator-fips, kube-logging-operator, kubernetes-fips, kubernetes-csi-node-driver-registrar,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, tigera-operator, k3s, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, rancher,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, tigera-operator, k3s, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, rancher,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: distribution, google-cloud-otel-ops-collector, cadence-fips, docker-compose, rekor, tetragon-fips, envoy-gateway, calico, argo-events-fips, trident-fips, k8s-agents-operator-fips, kube-logging-operator, kubernetes-fips, kubernetes-csi-node-driver-registrar,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, tigera-operator, k3s, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, rancher,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, tigera-operator, k3s, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, rancher,...

Malicious code in node-core-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33f74e3f73fd5580ecf994b7db0349ee540754d65d4467b8b04b8c79e3d257b scripts/postinstall.js runs automatically on npm install Windows only and behaves as a classic install-time dropper. It XOR-decodes key 0x5A a...

MAL-2026-6276 Malicious code in node-core-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33f74e3f73fd5580ecf994b7db0349ee540754d65d4467b8b04b8c79e3d257b scripts/postinstall.js runs automatically on npm install Windows only and behaves as a classic install-time dropper. It XOR-decodes key 0x5A a...

Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL

Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.3.2. Vulnerability Details CVEID:CVE-2026-27145 DESCRIPTION:x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused...

RHEL 9 : samba (RHSA-2026:28053)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28053 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

RHEL 9 : python-urllib3 (RHSA-2026:28158)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:28158 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

RHEL 10 : vim (RHSA-2026:28210)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28210 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Command injection allows arbitrary code execution vi...

RHEL 8 : postgresql:13 (RHSA-2026:28208)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28208 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Credential recovery via covert...

RHEL 9 : Red Hat OpenStack Platform 17.1 (openstack-keystone) (RHSA-2026:28044)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28044 advisory. Keystone is a Python implementation of the OpenStack http://www.openstack.org identity service API. Security Fixes: OpenStack Keystone:...

RHEL 9 : samba (RHSA-2026:28054)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28054 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

RHEL 9 : webkit2gtk3 (RHSA-2026:28146)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28146 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing maliciously...