GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-osis, crossplane-provider-aws-kafkaconnect, docker-cli-buildx-fips, zitadel, crossplane-provider-aws-organizations, gitlab-workhorse-ce-fips, loki, coder-fips, crossplane-provider-aws-efs-fips, external-secrets-operator-fips, gatekeeper-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, docker-cli-buildx-fips, envoy-gateway, kargo, kube-arangodb, zarf-fips, fuse-overlayfs-snapshotter, crossplane-fips, spegel-fips, ctop, kubevela, kaniko, spegel, gatekeeper, tigera-operator, helm-push,...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10976-1 steampipe-2.4.4-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: act, src-fingerprint, argo-cd, pulumi-language-yaml, rancher-fleet, kargo, gitlab-runner, cerbos, dagger, steampipe, gomplate, apko, terragrunt, flux, argo-workflows, wolfictl, scorecard, skaffold, flux-image-automation-controller, goreleaser, kubevela,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: act, src-fingerprint, argo-cd, pulumi-language-yaml, rancher-fleet, kargo, gitlab-runner, cerbos, dagger, steampipe, gomplate, apko, terragrunt, flux, argo-workflows, wolfictl, scorecard, skaffold, flux-image-automation-controller, goreleaser, kubevela,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: act, src-fingerprint, argo-cd, pulumi-language-yaml, rancher-fleet, kargo, gitlab-runner, cerbos, dagger, steampipe, gomplate, apko, terragrunt, flux, argo-workflows, wolfictl, scorecard, skaffold, flux-image-automation-controller, goreleaser, kubevela,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: act, src-fingerprint, argo-cd, pulumi-language-yaml, rancher-fleet, kargo, gitlab-runner, cerbos, dagger, steampipe, gomplate, apko, terragrunt, flux, argo-workflows, wolfictl, scorecard, skaffold, flux-image-automation-controller, goreleaser, kubevela,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: cerbos, gomplate, coder-fips, kargo, argo-events-fips, zarf-fips, external-secrets-operator-fips, crossplane-fips, gitea, kubevela, kaniko, gitea-fips, gitlab-runner-fips, k9s-fips, k9s, goreleaser, external-secrets-operator, redpanda-console, src-fingerprint,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: cerbos, gomplate, coder-fips, kargo, argo-events-fips, zarf-fips, external-secrets-operator-fips, crossplane-fips, gitea, kubevela, kaniko, gitea-fips, gitlab-runner-fips, k9s-fips, k9s, goreleaser, external-secrets-operator, redpanda-console, src-fingerprint,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: cerbos, gomplate, coder-fips, kargo, argo-events-fips, zarf-fips, external-secrets-operator-fips, crossplane-fips, gitea, kubevela, kaniko, gitea-fips, gitlab-runner-fips, k9s-fips, k9s, goreleaser, external-secrets-operator, redpanda-console, src-fingerprint,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: act, src-fingerprint, argo-cd, pulumi-language-yaml, rancher-fleet, kargo, gitlab-runner, cerbos, dagger, steampipe, gomplate, apko, terragrunt, flux, argo-workflows, wolfictl, scorecard, skaffold, flux-image-automation-controller, goreleaser, kubevela,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: cerbos, flux-source-controller, gomplate, coder-fips, kargo, argo-events-fips, zarf-fips, external-secrets-operator-fips, crossplane-fips, gitea, kubevela, kaniko, gitea-fips, gitlab-runner-fips, k9s-fips, k9s, goreleaser, external-secrets-operator, redpanda-console,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: cerbos, flux-source-controller, gomplate, coder-fips, kargo, argo-events-fips, zarf-fips, external-secrets-operator-fips, crossplane-fips, gitea, kubevela, kaniko, gitea-fips, gitlab-runner-fips, k9s-fips, k9s, goreleaser, external-secrets-operator, redpanda-console,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: steampipe, terragrunt, wolfictl, conftest, task, trivy-operator, zot, opentofu, k9s, snyk-cli, syft, tflint, kots, grype, xeol, tfsec, zarf, kubescape, terraform, trivy...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: steampipe, terragrunt, wolfictl, conftest, task, trivy-operator, zot, opentofu, k9s, snyk-cli, syft, tflint, kots, grype, xeol, tfsec, zarf, kubescape, terraform, trivy...

OPENSUSE-SU-2026:10509-1 steampipe-2.4.1-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-32286 vulnerabilities

Vulnerabilities for packages: bento, splunk-otel-collector, splunk-otel-collector-fips, bento-fips, grafana-alloy-fips, grafana-alloy, telegraf, steampipe, teleport...

CVE-2026-32286 vulnerabilities

Vulnerabilities for packages: teleport, grafana-alloy, bento, steampipe, telegraf, splunk-otel-collector...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster, flux-operator, polaris, steampipe, grafana-operator, terragrunt, stakater-reloader, flux-image-automation-controller, podinfo, nova, pluto, dkron, flux-image-reflector-controller, flux-helm-controller, go, victoriametrics,...