CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: virt-api, prometheus-mysqld-exporter-fips, kube-logging-operator-custom-runner, oras, litefs, argocd-image-updater, crossplane-provider-gitlab-fips, kyverno-policy-reporter-plugins-trivy-fips, nri-mysql, rancher-machine, verticadb-operator, minc, go-discover, kaf,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: virt-api, go-spdk-helper-fips, hcl2json-fips, nri-mysql, verticadb-operator, minc, go-discover, kaf, grpc-health-probe, falco-exporter-fips, kcp-fips-0.29, otel-cli, opa-envoy, neuvector-dbgen, aws-eks-pod-identity-agent-fips, hey, listmonk, pvc-autoresizer-fips,...

OPENSUSE-SU-2026:10484-1 k6-1.7.1-1.1 on GA media

These are all security issues fixed in the k6-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in opengov-k6-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6d3e0e21551377d17f0e85338f6ea9650b7c18f717b6e1060b1d50962ed112 The package opengov-k6-core was found to contain malicious code. Source: ghsa-malware 1370c540f2157e1e42d9edb109b0b6c57f27d35cfcfd8ebef2a5dc2d44db6e3...

MAL-2026-2027 Malicious code in opengov-k6-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6d3e0e21551377d17f0e85338f6ea9650b7c18f717b6e1060b1d50962ed112 The package opengov-k6-core was found to contain malicious code. Source: ghsa-malware 1370c540f2157e1e42d9edb109b0b6c57f27d35cfcfd8ebef2a5dc2d44db6e3...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: gitlab-runner, argocd-image-updater, k8s-agents-operator, secrets-store-csi-driver-provider-gcp-fips, gitlab-operator-fips, ory-kratos, otel-cli, spicedb, helm-operator, azuredisk-csi-fips, kube-arangodb, volsync, skaffold-fips, kubescape-server-fips, src,...

k6-1.5.0-1.1 on GA media (moderate)

k6-1.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10030-1 Rating: moderate Cross-References: CVE-2025-61729 CVSS scores: CVE-2025-61729 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-61729 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affect...

OPENSUSE-SU-2026:10030-1 k6-1.5.0-1.1 on GA media

These are all security issues fixed in the k6-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter-fips, crossplane-provider-gitlab-fips, kyverno-policy-reporter-plugins-trivy-fips, karma, go-discover, grpc-health-probe, falco-exporter-fips, opa-envoy, helm-operator, aws-eks-pod-identity-agent-fips, azuredisk-csi-fips, wave-fips,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: rancher-machine, apisix-ingress-controller, chart-testing, s5cmd, gcsfuse, http-echo, cri-tools, cluster-api-gcp-controller, dbmate, amass, metrics-server, promxy, cert-exporter, kafkaexporter, cluster-api-provider-vsphere, regclient, smokescreen, lazydocker, spegel,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...