OPENSUSE-SU-2026:10894-1 kpt-cli-1.0.0~beta.64-1.1 on GA media

These are all security issues fixed in the kpt-cli-1.0.0beta.64-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: envoy-gateway, kubescape, kube-arangodb, rancher-fleet, teleport, velero, kots, kubevela, linkerd2, cri-tools, kubeflow-pipelines, docker-cli-buildx, falcoctl, datadog-agent, argocd-image-updater, headlamp, kubernetes-dashboard-api, istio, cert-manager-istio-csr,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: envoy-gateway, kubescape, kube-arangodb, rancher-fleet, teleport, velero, kots, kubevela, linkerd2, cri-tools, kubeflow-pipelines, docker-cli-buildx, falcoctl, datadog-agent, argocd-image-updater, headlamp, kubernetes-dashboard-api, istio, cert-manager-istio-csr,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: gitlab-kas-fips, kaf, tkn, aws-flb-cloudwatch, commercial-chainloop-cli, kbld, libnvidia-container, sonobuoy, commercial-grafana, kubernetes, crossplane, mesosphere-vsphere-csi-fips, ingress-nginx-controller, traefik-fips, xeol-fips, crossplane-fips, k9s-fips, task,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: gitlab-kas-fips, kaf, tkn, aws-flb-cloudwatch, commercial-chainloop-cli, kbld, libnvidia-container, sonobuoy, commercial-grafana, kubernetes, crossplane, mesosphere-vsphere-csi-fips, ingress-nginx-controller, traefik-fips, xeol-fips, crossplane-fips, k9s-fips, task,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, logstash-exporter, stern, nodetaint, kubeflow-katib, onepassword-operator, cert-manager-csi-driver-fips, cluster-api-provider-vsphere, gitlab-kas-fips, yunikorn-web, nri-elasticsearch-fips, maru, percona-server-mongodb-operator,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: yunikorn-web, cluster-api-provider-vsphere, nri-f5-fips, kubescape-http-request-fips, spire-controller-manager, commercial-grafana, emissary, cluster-api-ipam-provider-in-cluster, mesosphere-vsphere-csi-fips, step-issuer, prometheus-redis-exporter, crossplane-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, logstash-exporter, stern, nodetaint, onepassword-operator, yunikorn-web, cert-manager-csi-driver-fips, cluster-api-provider-vsphere, gitlab-kas-fips, nri-elasticsearch-fips, maru, percona-server-mongodb-operator,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: atlantis, fq, aws-eks-pod-identity-agent, cortex, nodetaint, dbmate, witness, chartmuseum, kubernetes-ingress-defaultbackend, vt-cli, podman, vertical-pod-autoscaler, pgpool2exporter, boring-registry, yq, sops, k8s-device-plugin, mkcert, grafana-image-renderer, k8sgp...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: atlantis, aws-eks-pod-identity-agent, cortex, nodetaint, dbmate, witness, chartmuseum, kubernetes-ingress-defaultbackend, vt-cli, podman, vertical-pod-autoscaler, pgpool2exporter, boring-registry, sops, k8s-device-plugin, grafana-image-renderer, k8sgpt, loki, git-lfs...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: nri-f5, wgcf, aws-eks-pod-identity-agent, nri-rabbitmq, kubernetes-csi-node-driver-registrar, kube-logging-operator, flux-operator, nodetaint, witness, helm-operator, chartmuseum, tekton-chains, zot, mongo-tools, swagger, conftest, helm-set-status, karpenter,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, cert-manager-fips, kubeflow-katib, amazon-ecs-agent, opentelemetry-operator-fips, istio, crossplane, redpanda, gitlab-rails-ce-fips, neuvector-scanner-fips, traefik-fips, xeol-fips, portieris, beats, lazydocker, k3d, crossplane-fips,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, cert-manager-fips, kubeflow-katib, amazon-ecs-agent, opentelemetry-operator-fips, istio, crossplane, redpanda, gitlab-rails-ce-fips, neuvector-scanner-fips, traefik-fips, xeol-fips, portieris, beats, lazydocker, k3d, crossplane-fips,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: cert-manager, up, tekton-chains, kubescape, ctop, chartmuseum, kpt, aactl, spire-server-fips, rancher-agent, falco, slsa-verifier, skaffold, paranoia, falcoctl-fips, scorecard, k3s, bom, k3d...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: atlantis, external-dns, pulumi-language-dotnet, amass, cortex, nodetaint, mc, haproxy-ingress, flux-source-controller, stakater-reloader, conftest, prometheus-adapter, kaf, metrics-server, hugo, kubeflow-katib, git-lfs, gobuster, gitness, memcached-exporter,...

CVE-2023-2253 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kpt, bom, aactl, kubernetes-dashboard, argocd-image-updater-fips...

CVE-2023-2253 vulnerabilities

Vulnerabilities for packages: kpt, argocd-image-updater, aactl, bom, kubernetes-dashboard...

GHSA-HQXW-F8MX-CPMW vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kpt, bom, aactl, kubernetes-dashboard, argocd-image-updater-fips...

GHSA-HQXW-F8MX-CPMW vulnerabilities

Vulnerabilities for packages: kpt, argocd-image-updater, aactl, bom, kubernetes-dashboard...