GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-macie2, crossplane-provider-aws-eks-fips, caddy-fips, crossplane-provider-azure-policyinsights, knative-kafka-broker, crossplane-provider-aws-sagemaker-fips, crossplane-provider-aws-lambda, cloudbeat, crossplane,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-fips, trivy-fips, linkerd2-fips, helm-operator, helm-exporter-fips, newrelic-infrastructure-agent, neuvector, cloudbeat, cluster-api-helm-controller, crossplane, helm-exporter, headlamp-fips, datadog-agent, xeol, rancher-helm, chaos-mesh-fips, helm-push,...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10976-1 steampipe-2.4.4-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: skaffold, external-secrets-operator, src-fingerprint, argo-cd, apko, terragrunt, gptscript, gitea, argo-workflows, grafana-alloy, syft, teleport, trivy, trivy-operator, trufflehog, dagger, bom, act, osv-scanner, pulumi-language-java, snyk-cli, wolfictl, gomplate,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: skaffold, external-secrets-operator, src-fingerprint, argo-cd, apko, terragrunt, gptscript, gitea, argo-workflows, grafana-alloy, syft, teleport, trivy, trivy-operator, trufflehog, dagger, bom, act, osv-scanner, pulumi-language-java, snyk-cli, wolfictl, gomplate,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: skaffold, external-secrets-operator, src-fingerprint, argo-cd, apko, terragrunt, gptscript, gitea, argo-workflows, grafana-alloy, syft, teleport, trivy, trivy-operator, trufflehog, dagger, bom, act, osv-scanner, pulumi-language-java, snyk-cli, wolfictl, gomplate,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: skaffold, external-secrets-operator, src-fingerprint, argo-cd, apko, terragrunt, gptscript, gitea, argo-workflows, grafana-alloy, syft, teleport, trivy, trivy-operator, trufflehog, dagger, bom, act, osv-scanner, pulumi-language-java, snyk-cli, wolfictl, gomplate,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: trivy-fips, gomplate, tfsec, argo-events, flux-fips, osv-scanner, pulumi-language-java, gomplate-fips, argo-workflows-fips, cloudbeat, crossplane, gitea, gitlab-runner, xeol, cerbos, chainloop-cli, argocd-image-updater-fips, amazon-ssm-agent, act, argo-cd-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: trivy-fips, gomplate, tfsec, argo-events, flux-fips, osv-scanner, pulumi-language-java, gomplate-fips, argo-workflows-fips, cloudbeat, crossplane, gitea, gitlab-runner, xeol, cerbos, chainloop-cli, argocd-image-updater-fips, amazon-ssm-agent, act, argo-cd-fips,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trivy-fips, gomplate, tfsec, argo-events, flux-fips, osv-scanner, pulumi-language-java, gomplate-fips, argo-workflows-fips, cloudbeat, crossplane, gitea, gitlab-runner, xeol, cerbos, chainloop-cli, argocd-image-updater-fips, amazon-ssm-agent, act, argo-cd-fips,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: skaffold, external-secrets-operator, src-fingerprint, argo-cd, apko, terragrunt, gptscript, gitea, argo-workflows, grafana-alloy, syft, teleport, trivy, trivy-operator, trufflehog, dagger, bom, act, osv-scanner, pulumi-language-java, snyk-cli, wolfictl, gomplate,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: trivy-fips, gomplate, tfsec, argo-events, flux-fips, osv-scanner, pulumi-language-java, gomplate-fips, argo-workflows-fips, cloudbeat, crossplane, gitea, gitlab-runner, xeol, cerbos, chainloop-cli, argocd-image-updater-fips, amazon-ssm-agent, flux-source-controller,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: trivy-fips, gomplate, tfsec, argo-events, flux-fips, osv-scanner, pulumi-language-java, gomplate-fips, argo-workflows-fips, cloudbeat, crossplane, gitea, gitlab-runner, xeol, cerbos, chainloop-cli, argocd-image-updater-fips, amazon-ssm-agent, flux-source-controller,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: terragrunt, syft, trivy-operator, trivy, snyk-cli, wolfictl, tfsec, terraform, zarf, conftest, zot, xeol, grype, kots, steampipe, kubescape, k9s, tflint, task, opentofu...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: terragrunt, syft, trivy-operator, trivy, snyk-cli, wolfictl, tfsec, terraform, zarf, conftest, zot, xeol, grype, kots, steampipe, kubescape, k9s, tflint, task, opentofu...

OPENSUSE-SU-2026:10509-1 steampipe-2.4.1-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-32286 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, telegraf, steampipe, grafana-alloy-fips, bento, splunk-otel-collector-fips, grafana-alloy, bento-fips, teleport...

CVE-2026-32286 vulnerabilities

Vulnerabilities for packages: telegraf, bento, teleport, steampipe, grafana-alloy, splunk-otel-collector...

GHSA-7HFW-R8QC-89V4 vulnerabilities

Vulnerabilities for packages: pluto, terragrunt, dkron, flux-image-reflector-controller, polaris, flux-image-automation-controller, flux-operator, nova, stakater-reloader, victoriametrics-cluster, flux-helm-controller, go, victoriametrics, metacontroller, podinfo, steampipe, grafana-operator,...