OPENSUSE-SU-2026:11758-1 steampipe-2.4.6-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, grafana-alloy, kots, telegraf, teleport, bento-fips, bento, grafana-alloy-fips, splunk-otel-collector, steampipe...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: gogatekeeper, cert-manager-cmctl, kyverno-notation-aws, trivy-fips, helm, kubescape-server, trivy-operator, kube-arangodb-fips, chaos-mesh-fips, conftest, ocm-kubernetes-controller-fips, headlamp-fips, ratify-fips, zarf-fips, teleport, zarf, ratify, kyverno,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: stakater-reloader, flux-source-watcher, flux-operator-fips, pgwatch, temporal-fips, amazon-k8s-cni-fips, victoriametrics, victoriametrics-cluster, victoriametrics-cluster-fips, loki-fips, steampipe, cert-manager-fips, aws-ebs-csi-driver, flux-helm-controller, polaris...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: zarf, gptscript, terragrunt, steampipe, terraform, podman, rancher-fleet, gitness, opentofu, trivy, nsc, filebrowser, trivy-operator, undock, gitleaks, kubescape-operator, guac, envoy-gateway, xeol, nuclei, grafana-alloy, vcluster, k9s, trufflehog, zot, tflint...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: dkron, flux-notification-controller, flux-helm-controller, pluto, stakater-reloader, terragrunt, steampipe, flux-source-controller, flux-image-automation-controller, polaris, victoriametrics-cluster, grafana-operator, flux-image-reflector-controller, go,...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: zarf, terragrunt, wolfictl, kots, steampipe, grype, terraform, opentofu, kubescape, trivy, trivy-operator, conftest, tfsec, snyk-cli, syft, xeol, task, k9s, zot, tflint...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: dkron, flux-notification-controller, flux-helm-controller, pluto, stakater-reloader, terragrunt, steampipe, flux-source-controller, flux-image-automation-controller, polaris, victoriametrics-cluster, grafana-operator, flux-image-reflector-controller, go,...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: kots, steampipe, splunk-otel-collector, bento, telegraf, grafana-alloy...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: zarf, headlamp, flux-helm-controller, kots, rancher, steampipe, helm-set-status, rancher-fleet, gitness, helm-mapkubeapis, opentofu, flux-source-controller, falcoctl, kube-arangodb, trivy, tigera-operator, trivy-operator, conftest, kyverno, grafana-operator,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: zarf, pulumi, gptscript, gitsign, pulumi-language-yaml, witness, wolfictl, apko, gomplate, grype, kots, steampipe, rancher-fleet, teleport, osv-scanner, flux-source-controller, gitaly, scorecard, kubescape, trivy, flux-image-automation-controller, trivy-operator,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: govulncheck, zarf, mattermost, speedtest-go, crossplane-provider-aws-cloudwatchlogs, gke-gcloud-auth-plugin, cloudnative-pg, haproxy-ingress, lazydocker, emissary, amazon-cloudwatch-agent-operator, kube-state-metrics, neuvector-dbgen, local-path-provisioner, opentofu...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: zarf, mattermost, crossplane-provider-aws-cloudwatchlogs, ko, gitlab-kas, crossplane-provider-aws-iam, buildkitd, go-discover, opentofu, prometheus, fscrypt, trivy-operator, nerdctl, external-dns, cloudflared, traefik, tflint, kargo, containerd,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, ko, kor, harbor-cli, kubernetes-dashboard-web, helm-set-status, emissary, kapp, lazydocker, nri-rabbitmq, buildkitd, amazon-cloudwatch-agent-operator, opentofu, ip-masq-agent, prometheus, rabbitmq-cluster-operator, nodetaint,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: spire-server, nuclei, vault-fips, trivy-fips, external-dns, kube-arangodb-fips, databricks-cli, longhorn-manager, frankenphp-8.3, gitlab-pages-fips, zarf-fips, act, crossplane-provider-aws-emr-fips, kyverno, crossplane-provider-aws-eks, amazon-ssm-agent-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent-fips, trivy-fips, helm, kubescape-server, trivy-operator, kube-arangodb-fips, chaos-mesh-fips, headlamp-fips, k8sgpt, spegel-fips, zarf-fips, teleport, zarf, docker-cli-buildx-fips, kubescape-server-fips, manifest-tool, google-osconfig-agent,...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10976-1 steampipe-2.4.4-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: zarf, pulumi, gptscript, gitsign, pulumi-language-yaml, terragrunt, witness, wolfictl, apko, gomplate, grype, kots, steampipe, rancher-fleet, teleport, osv-scanner, gitaly, scorecard, kubescape, trivy, flux-image-automation-controller, trivy-operator, argo-workflows,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: zarf, pulumi, gptscript, gitsign, pulumi-language-yaml, terragrunt, witness, wolfictl, apko, gomplate, grype, kots, steampipe, rancher-fleet, teleport, osv-scanner, gitaly, scorecard, kubescape, trivy, flux-image-automation-controller, trivy-operator, argo-workflows,...