OPENSUSE-SU-2026:11758-1 steampipe-2.4.6-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: bento, splunk-otel-collector-fips, teleport, splunk-otel-collector, grafana-alloy-fips, steampipe, kots, bento-fips, telegraf, grafana-alloy...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: teleport, linkerd2-fips, redpanda-operator, commercial-kyverno, trivy-operator, gogatekeeper, consul-k8s-fips, trivy, gitlab-operator-fips, cloudbeat-fips, k8ssandra-client, headlamp, cert-manager-cmctl-fips, oras-fips, helm-exporter, helm-mapkubeapis, gatekeeper,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, nova, flux-fips, metacontroller, polaris, victoriametrics-cluster, victoriametrics-cluster-fips, flux-image-reflector-controller, aws-load-balancer-controller-fips, temporal-fips, victoriametrics, cluster-autoscaler-fips, amazon-k8s-cni-fips,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: tflint, nsc, trivy, rancher-fleet, vcluster, trufflehog, podman, grafana-alloy, opentofu, gitness, trivy-operator, zarf, zot, gptscript, k9s, gitleaks, steampipe, filebrowser, nuclei, terraform, guac, terragrunt, kubescape-operator, envoy-gateway, undock, xeol...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, victoriametrics-cluster, grafana-operator, flux-helm-controller, dkron, pluto, metacontroller, flux-image-reflector-controller, grafana-rollout-operator, victoriametrics, flux-image-automation-controller, steampipe, flux-source-controlle...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: tflint, trivy, wolfictl, kots, kubescape, opentofu, tfsec, task, zarf, trivy-operator, zot, k9s, steampipe, syft, grype, terraform, snyk-cli, conftest, terragrunt, xeol...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, victoriametrics-cluster, grafana-operator, flux-helm-controller, dkron, pluto, metacontroller, flux-image-reflector-controller, grafana-rollout-operator, victoriametrics, flux-image-automation-controller, steampipe, flux-source-controlle...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: grafana-alloy, steampipe, telegraf, bento, splunk-otel-collector, kots...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: kubevela, cerbos, trivy, scorecard, rancher-fleet, wolfictl, argocd-image-updater, src-fingerprint, kots, osv-scanner, pulumi-language-dotnet, trufflehog, kubescape, grafana-alloy, chezmoi, argo-events, argo-workflows, argo-cd, kargo, tfsec, kyverno, nfpm,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: trivy, rancher-fleet, argocd-image-updater, consul-k8s, gatekeeper, kots, rancher, rancher-helm, vcluster, grafana-operator, opa-envoy, helm-mapkubeapis, flux-helm-controller, kyverno-notation-aws, oras, helm, tigera-operator, ratify, argo-cd, opentofu, kyverno,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubevela, spqr, dynamic-localpv-provisioner, metrics-server, percona-server-mongodb-operator, rancher-fleet, wuzz, consul-k8s, istio, cis-operator, vcluster, crossplane-provider-azure-managedidentity, ksops, kubescape, neuvector-dbgen, jaeger-operator, nri-consul,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: wolfictl, crossplane-provider-azure-managedidentity, gitlab-kas, ksops, kubescape, vault-benchmark, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudformation, prometheus-operator, mattermost, flux, tekton-chains, flux-image-automation-controller,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, wgcf, cis-operator, kyverno-notation-aws, clickhouse-operator, glow, ini-file, nri-consul, kubernetes-dashboard-api, nri-f5, dex, docker-machine-driver-harvester, prometheus-operator, terraform-mcp-server, flux, tekton-chains, harbor-cli,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, commercial-kyverno, harbor, trivy-operator, crossplane-provider-family-aws-fips, trivy, crossplane-provider-aws-sqs-fips, prometheus-podman-exporter-fips, crossplane-provider-aws-appflow, databricks-cli-fips, gitlab-cng, livekit-cli,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: teleport, linkerd2-fips, redpanda-operator, amazon-ecs-agent-fips, trivy-operator, consul-k8s-fips, trivy, ctop, k8sgpt, cloudbeat-fips, harvester-fips, datadog-agent-fips, k8ssandra-client, headlamp, livekit-cli, helm-exporter, syft-fips, kubevela-fips,...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10976-1 steampipe-2.4.4-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: kubevela, cerbos, trivy, scorecard, rancher-fleet, wolfictl, argocd-image-updater, src-fingerprint, kots, osv-scanner, pulumi-language-dotnet, trufflehog, kubescape, grafana-alloy, argo-events, goreleaser, argo-workflows, argo-cd, kargo, tfsec, kyverno, nfpm, act,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: kubevela, cerbos, trivy, scorecard, rancher-fleet, wolfictl, argocd-image-updater, src-fingerprint, kots, osv-scanner, pulumi-language-dotnet, trufflehog, kubescape, grafana-alloy, argo-events, goreleaser, argo-workflows, argo-cd, kargo, tfsec, kyverno, nfpm, act,...