RHSA-2026:25245 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

@forgeax/game (>=0.3.0, <=0.3.10), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +11 more potentially affected by CVE-2026-59195 via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.1.0-beta.3, =0.1.0-rc.20, =0.2.0-alpha.7, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: CVE-2026-59195 Source advisory: OSV:GHSA-QRV3-253H-G69C...

Critical Photon OS Security Update - PHSA-2026-5.0-90-0904

Updates of 'linux-esx' packages of Photon OS have been released...

EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2516)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly from the EulerO...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0904

Updates of 'linux', 'linux-esx', 'memcached' packages of Photon OS have been released...

SUSE SLES12: libpython3_6m1_0 / libpython3_6m1_0-32bit / python36 / etc (SUSE-SU-2026:2655-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:2655-1 advisory. - CVE-2026-3446: Base64 decoding stops at first padded quad by default bsc1261970. Tenable has extracted the preceding description block directly from...

pnpm Has an Integrity Check Bypass via Missing Lockfile Integrity Field

Summary pnpm's tarball extraction worker skips integrity verification when the integrity field is absent from the lockfile resolution. If an attacker can both modify pnpm-lock.yaml to remove the integrity: field and cause the referenced registry URL to serve altered package content, pnpm install...

NPM: pnpm: Unsafe default behavior breaks integrity check

NPM: pnpm: Unsafe default behavior breaks integrity check vulnerability discovered by ? in WordPress Npm pnpm versions 10.34.0...

GHSA-3V45-F3VH-WG7M vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator...

GHSA-9CV6-QCJW-4GRX vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator...

CVE-2026-54901 vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, splunk-otel-collector, external-secrets-operator, crossplane-provider-azure-netapp, crossplane-provider-family-azure, crossplane-provider-azure-signalrservice, crossplane-provider-azure-servicefabric,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, cilium, harbor-fips, kube-arangodb-fips, snyk-cli, gitlab-kas, trivy-fips, commercial-grafana, minio-fips, gatekeeper, kubevela-fips, mattermost, fscrypt, gitlab-rails-ce-fips, frankenphp-8.3, skaffold, osv-scanner, prometheus-mongodb-exporter,...

GHSA-M2V9-299J-RV96 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: osv-scanner, k9s, helm, kaf, external-secrets-operator, flux-image-automation-controller, istio, minio, prometheus-operator, loki, kyverno, cloud-provider-aws, k3s, kubernetes, opentelemetry-collector, flux, rancher, kine, kubernetes-dashboard, zot, cert-manager,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: kaf, docker-machine-driver-harvester, istio, minio, nuclei, syft, loki, kyverno, terragrunt, witness, kubernetes, pulumi-kubernetes-operator, opentelemetry-collector, podman, wal-g, gomplate, rancher-agent, act, zarf, dagger, gptscript, aactl, pulumi-language-java,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-azure-authorization, kaf, caddy, crossplane-provider-aws-cloudformation, crossplane-provider-aws-sqs, istio, minio, hcloud, nuclei, flux-kustomize-controller, syft, terraform-provider-tls, loki, kyverno, terragrunt,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: kaf, docker-machine-driver-harvester, istio, minio, nuclei, syft, loki, kyverno, terragrunt, witness, kubernetes, pulumi-kubernetes-operator, opentelemetry-collector, podman, wal-g, gomplate, rancher-agent, act, zarf, dagger, gptscript, aactl, pulumi-language-java,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: kaf, docker-machine-driver-harvester, caddy, istio, minio, nuclei, syft, loki, kyverno, terragrunt, witness, kubernetes, pulumi-kubernetes-operator, opentelemetry-collector, podman, gomplate, rancher-agent, act, zarf, dagger, gptscript, aactl, pulumi-language-java,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: osv-scanner, k9s, helm, kaf, docker-machine-driver-harvester, external-secrets-operator, flux-image-automation-controller, istio, minio, prometheus-operator, loki, kyverno, cloud-provider-aws, k3s, kubernetes, opentelemetry-collector, flux, rancher, kine,...