Linux Distros Unpatched Vulnerability : CVE-2026-40011

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: vault, etcd, gitlab-workhorse-ce-fips, containerd, argo-workflows, terragrunt, harbor, gitsign, commercial-grafana, vitess, grafana, gitlab-workhorse-ce, prometheus-fips, omnictl-multiarch-fips, argo-events-fips, mattermost, argo-cd-fips, argo-cd, istio, k3s, helm,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: vault, snyk-cli, argo-workflows-fips, kubevela-fips, containerd, argo-workflows, frankenphp-8.3, terraform, rancher-agent, omnictl-multiarch-fips, kubernetes-dashboard, kots, tekton-pipelines, trivy-operator-fips, zitadel, etcd-fips, seaweedfs-rocksdb,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: vault, snyk-cli, argo-workflows-fips, kubevela-fips, containerd, argo-workflows, frankenphp-8.3, terraform, rancher-agent, omnictl-multiarch-fips, kubernetes-dashboard, kots, tekton-pipelines, trivy-operator-fips, zitadel, etcd-fips, seaweedfs-rocksdb,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: buildkitd, crossplane-provider-azure-spring, argo-workflows-fips, docker-cli-buildx, kubevela-fips, melange, snyk-cli, sops, containerd, pulumi-language-dotnet, amazon-ssm-agent, cluster-api-azure-controller-fips, helmfile, argo-workflows, policy-controller-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, snyk-cli, argo-workflows-fips, vault, containerd, argo-workflows, frankenphp-8.3, terraform, rancher-agent, omnictl-multiarch-fips, podman, kubernetes-dashboard, kots, tekton-pipelines, zitadel, etcd-fips, cloud-provider-aws, gitlab-rails-ce,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: buildkitd, crossplane-provider-azure-spring, argo-workflows-fips, docker-cli-buildx, kubevela-fips, melange, snyk-cli, sops, containerd, pulumi-language-dotnet, amazon-ssm-agent, cluster-api-azure-controller-fips, helmfile, argo-workflows, policy-controller-fips,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, melange, argo-workflows-fips, kubevela-fips, snyk-cli, vault, containerd, pulumi-language-dotnet, amazon-ssm-agent, argo-workflows, frankenphp-8.3, gptscript, grype-fips, terraform, rancher-agent, step-issuer-fips, omnictl-multiarch-fips, podman,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, snyk-cli, argo-workflows-fips, vault, containerd, argo-workflows, frankenphp-8.3, terraform, rancher-agent, omnictl-multiarch-fips, podman, kubernetes-dashboard, kots, tekton-pipelines, zitadel, etcd-fips, cloud-provider-aws, gitlab-rails-ce,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-spring, longhorn-manager, crossplane-provider-aws-dynamodb-fips, google-guest-agent-manager, crossplane-provider-azure-notificationhubs, tflint-fips, crossplane-provider-aws-appflow-fips, flux-notification-controller, podman, atlantis-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: buildkitd, docker-cli-buildx, argo-workflows-fips, kubevela-fips, melange, snyk-cli, vault, containerd, pulumi-language-dotnet, amazon-ssm-agent, argo-workflows, frankenphp-8.3, longhorn-manager, gptscript, grype-fips, terraform, rancher-agent, omnictl-multiarch-fips...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-spring, longhorn-manager, crossplane-provider-aws-dynamodb-fips, google-guest-agent-manager, crossplane-provider-azure-notificationhubs, tflint-fips, crossplane-provider-aws-appflow-fips, flux-notification-controller, podman, atlantis-fips,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: falco-no-driver, helm, external-secrets-operator, containerd, telegraf, prometheus, argo-cd, k3s, argocd-image-updater, argo-events, opentofu, guac, terragrunt, gitsign, kyverno, istio, mattermost...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: trivy-operator, containerd, argocd-image-updater, flux, fscrypt, kubescape, rancher-agent, gitlab-kas, trivy, kyverno, rancher, aactl, gitea, cilium-cli, kine, kubernetes-dashboard, cloud-provider-aws, k3s, cilium, osv-scanner, k9s, minio,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: trivy-operator, gptscript, nfpm, containerd, grype, nuclei, splunk-otel-collector, argocd-image-updater, flux, fscrypt, argo-events, kubescape, podman, opentofu, pulumi-language-java, pulumi-language-yaml, gitlab-kas, trivy, syft, kyverno, aactl, gomplate, gitea,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: trivy-operator, containerd, argocd-image-updater, flux, fscrypt, kubescape, rancher-agent, gitlab-kas, trivy, kyverno, rancher, aactl, gitea, cilium-cli, kine, kubernetes-dashboard, cloud-provider-aws, k3s, cilium, osv-scanner, k9s, minio,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: containerd, buildah, flux, docker-cli-buildx, fscrypt, podman, rancher-agent, gitlab-kas, kyverno, rancher, aactl, cilium-cli, kine, kubernetes-dashboard, cloud-provider-aws, k3s, cilium, minio, istio, cert-manager, prometheus, loki, kots, spire-server, mattermost,...

SUSE CVE-2026-40011

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires...

GO-2026-5662 Prometheus has Stored XSS via metric names and label values in Prometheus web UI in github.com/prometheus/prometheus

Prometheus has Stored XSS via metric names and label values in Prometheus web UI in github.com/prometheus/prometheus...

GO-2026-5710 Prometheus Azure AD remote write OAuth client secret exposed via config API in github.com/prometheus/prometheus

Prometheus Azure AD remote write OAuth client secret exposed via config API in github.com/prometheus/prometheus...