GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: cg, coder, external-secrets-operator-fips, grype, kaniko, gomplate-fips, guac, teleport, flux-fips, apko-fips, kubevela-fips, flux, argo-cd, act, trufflehog-fips, argocd-image-updater-fips, crossplane-fips, grafana-alloy, grype-db, gitaly, kyverno-fips, gitsign,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: cg, external-secrets-operator-fips, flux-source-controller-fips, grype, kaniko, gomplate-fips, guac, teleport, flux-fips, apko-fips, kubevela-fips, flux, argo-cd, act, trufflehog-fips, argocd-image-updater-fips, crossplane-fips, grafana-alloy, grype-db, gitaly,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: cluster-api, helm, kubernetes-dashboard-api, k8ssandra-client, sonobuoy, hubble, terraform-provider-kubernetes, argo-cd, kots, kwok, velero, cilium-cli, cri-tools, teleport, juicefs-csi-driver, istio, cert-manager-istio-csr, rancher-fleet, kubeflow-pipelines,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: cluster-api, helm, kubernetes-dashboard-api, k8ssandra-client, sonobuoy, hubble, terraform-provider-kubernetes, argo-cd, kots, kwok, velero, cilium-cli, cri-tools, teleport, juicefs-csi-driver, istio, cert-manager-istio-csr, rancher-fleet, kubeflow-pipelines,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: witness, sigstore-scaffolding, ko, goreleaser, kyverno-notation-aws, docker, zot, tflint, policy-controller, teleport, crossplane, slsa-verifier, spire-server, trivy, zarf, vexctl, gh, gitsign, docker-cli-buildx, kyverno, falcoctl, buildkitd, trivy-operator,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: witness, sigstore-scaffolding, ko, goreleaser, kyverno-notation-aws, docker, zot, tflint, policy-controller, teleport, crossplane, slsa-verifier, spire-server, trivy, zarf, vexctl, gh, gitsign, docker-cli-buildx, kyverno, falcoctl, buildkitd, trivy-operator,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cg, external-secrets-operator-fips, flux-source-controller-fips, grype, kaniko, gomplate-fips, guac, teleport, flux-fips, apko-fips, kubevela-fips, flux, argo-cd, trufflehog-fips, argocd-image-updater-fips, crossplane-fips, grafana-alloy, grype-db, gitaly,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: cg, external-secrets-operator-fips, flux-source-controller-fips, grype, kaniko, gomplate-fips, guac, teleport, flux-fips, apko-fips, kubevela-fips, flux, argo-cd, trufflehog-fips, argocd-image-updater-fips, crossplane-fips, grafana-alloy, grype-db, gitaly,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cg, external-secrets-operator-fips, flux-source-controller-fips, grype, kaniko, gomplate-fips, guac, teleport, flux-fips, apko-fips, kubevela-fips, flux, argo-cd, trufflehog-fips, argocd-image-updater-fips, crossplane-fips, grafana-alloy, grype-db, gitaly,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: syft, external-secrets-operator, flux, witness, osv-scanner, gitaly, nfpm, argo-cd, kots, nuclei, gptscript, gitea, zot, steampipe, teleport, src-fingerprint, crossplane, rancher-fleet, kaniko, trivy, gomplate, kargo, pulumi, zarf, pulumi-language-java, apko, kubevel...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: syft, external-secrets-operator, flux, witness, osv-scanner, gitaly, nfpm, argo-cd, kots, nuclei, gptscript, gitea, zot, steampipe, teleport, src-fingerprint, crossplane, rancher-fleet, kaniko, trivy, gomplate, kargo, pulumi, zarf, pulumi-language-java, apko, kubevel...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: syft, external-secrets-operator, flux, witness, osv-scanner, gitaly, nfpm, argo-cd, kots, nuclei, gptscript, gitea, zot, steampipe, teleport, src-fingerprint, crossplane, rancher-fleet, kaniko, trivy, gomplate, kargo, pulumi, zarf, pulumi-language-java, apko, kubevel...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: syft, external-secrets-operator, flux, witness, osv-scanner, gitaly, nfpm, argo-cd, kots, nuclei, gptscript, gitea, zot, steampipe, teleport, src-fingerprint, crossplane, rancher-fleet, kaniko, trivy, gomplate, kargo, pulumi, zarf, pulumi-language-java, apko, kubevel...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: scorecard, conftest, skaffold, kubescape, kaniko, trivy, osv-scanner, podman, trivy-operator, docker-compose, zot, buildah, guac, docker-cli-buildx...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: scorecard, conftest, skaffold, kubescape, kaniko, trivy, osv-scanner, podman, trivy-operator, docker-compose, zot, buildah, guac, docker-cli-buildx...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: scorecard, conftest, skaffold, kubescape, kaniko, trivy, osv-scanner, podman, trivy-operator, docker-compose, zot, buildah, guac, docker-cli-buildx...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: scorecard, conftest, skaffold, kubescape, kaniko, trivy, osv-scanner, podman, trivy-operator, docker-compose, zot, buildah, guac, docker-cli-buildx...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, trivy-operator, cloudbeat-fips, trivy, kaniko, buildah-fips, guac, skaffold, trivy-fips, kaniko-fips, conftest, livekit-cli, kubescape-server-fips, docker-cli-buildx-fips, cloudbeat, podman-fips, osv-scanner, podman, kubescape-server, scorecard,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: docker-compose-fips, trivy-operator, cloudbeat-fips, trivy, kaniko, buildah-fips, guac, skaffold, trivy-fips, kaniko-fips, conftest, livekit-cli, kubescape-server-fips, docker-cli-buildx-fips, cloudbeat, podman-fips, osv-scanner, podman, kubescape-server, scorecard,...

skaffold-2.18.0-1.1 on GA media (moderate)

skaffold-2.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10369-1 Rating: moderate Cross-References: CVE-2025-15558 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...