GO-2026-4518 vulnerabilities

Vulnerabilities for packages: grafana-alloy, bento-fips, teleport, bento, splunk-otel-collector, grafana-alloy-fips, telegraf, splunk-otel-collector-fips, kots, steampipe...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: drone-fips, envoy-gateway, k9s, redpanda-operator, zarf, tigera-operator, argo-cd-fips, kyverno, ocm-cli, vcluster-fips, consul-k8s, eksctl, gatekeeper, kubescape-operator-fips, opentofu-fips, rancher, xeol-fips, helm-mapkubeapis, drone, gitness, opentofu,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller-fips, grafana-rollout-operator, flux-notification-controller, victorialogs, grafana-fips, cert-manager-fips, terragrunt, flux-source-watcher, pgwatch, flux-helm-controller, stakater-reloader, librechat, nova-fips, omnictl-multiarch,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: opentofu, terragrunt, guac, vcluster, trivy, gitleaks, undock, kubescape-operator, trivy-operator, nsc, filebrowser, k9s, envoy-gateway, podman, gptscript, rancher-fleet, grafana-alloy, nuclei, gitness, steampipe, trufflehog, tflint, zot, zarf, xeol, terraform...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: nova, dkron, terragrunt, pluto, polaris, metacontroller, flux-image-automation-controller, podinfo, victoriametrics-cluster, victoriametrics, flux-helm-controller, stakater-reloader, grafana-operator, flux-source-controller, flux-notification-controller, steampipe, g...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: grype, opentofu, terragrunt, conftest, syft, kots, trivy, wolfictl, trivy-operator, task, k9s, tfsec, snyk-cli, kubescape, steampipe, zot, tflint, zarf, xeol, terraform...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: nova, dkron, terragrunt, pluto, polaris, metacontroller, flux-image-automation-controller, podinfo, victoriametrics-cluster, victoriametrics, flux-helm-controller, stakater-reloader, grafana-operator, flux-source-controller, flux-notification-controller, steampipe, g...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: bento, splunk-otel-collector, steampipe, telegraf, kots, grafana-alloy...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: kargo, gitaly, grype, pulumi-kubernetes-operator, scorecard, dagger, gitea, gitsign, pulumi-language-java, guac, argocd-image-updater, teleport, melange, gomplate, syft, gitlab-runner, cerbos, kots, kubevela, flux-image-automation-controller, kyverno, trivy, wolfictl...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: gogatekeeper, oras, argocd-image-updater, opa, opa-envoy, ratify, k8ssandra-client, conftest, falcoctl, kots, trivy, kyverno, chartmuseum, helm, rancher, trivy-operator, linkerd2, rancher-agent, tigera-operator, argo-cd, grafana-operator, rancher-fleet, consul-k8s,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: slsa-verifier, nova, octo-sts, nri-prometheus, terragrunt, gostatsd, telegraf, guac, kube-logging-operator-custom-runner, act, spicedb-operator, sftpgo-plugin-pubsub, lazydocker, apisix-ingress-controller, cri-tools, jaeger-operator, rabbitmq-cluster-operator,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: slsa-verifier, k8sgpt, terragrunt, nerdctl, telegraf, guac, act, minio, opentelemetry-collector, teleport, rancher-machine, melange, gomplate, falcoctl, datadog-agent, trivy, external-dns, chisel, flux, crossplane-provider-aws-kinesis, chezmoi,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: fzf, nova, rabbitmq-default-user-credential-updater, aws-eks-pod-identity-agent, k8sgpt, guac, lazydocker, rabbitmq-cluster-operator, nri-consul, falcoctl, trivy, nginx-prometheus-exporter, chartmuseum, flux, bom, helm-set-status, clickhouse-operator,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, docker-compose, cluster-api-azure-controller, elastic-agent, argo-events-fips, kubernetes-fips, peerdb-flow, vitess, crossplane-provider-aws-emr-fips, eksctl, kubevela-fips, crossplane-provider-aws-emrserverless,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, tigera-operator, k3s, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, rancher,...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10976-1 steampipe-2.4.4-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: kargo, gitaly, grype, pulumi-kubernetes-operator, scorecard, dagger, gitea, gitsign, pulumi-language-java, terragrunt, guac, act, argocd-image-updater, teleport, melange, goreleaser, gomplate, syft, gitlab-runner, cerbos, kots, kubevela,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: kargo, gitaly, grype, pulumi-kubernetes-operator, scorecard, dagger, gitea, gitsign, pulumi-language-java, terragrunt, guac, act, argocd-image-updater, teleport, melange, goreleaser, gomplate, syft, gitlab-runner, cerbos, kots, kubevela,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: kargo, gitaly, grype, pulumi-kubernetes-operator, scorecard, dagger, gitea, gitsign, pulumi-language-java, terragrunt, guac, act, argocd-image-updater, teleport, melange, goreleaser, gomplate, syft, gitlab-runner, cerbos, kots, kubevela,...