GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: apko, cosign-fips, crossplane-provider-aws-iam, crossplane-provider-aws-elbv2-fips, crossplane-provider-aws-kafkaconnect-fips, k8sgpt, etcd, knative-eventing-fips, openbao, cluster-api-azure-controller-fips, crossplane-provider-aws-elb-fips, kube-state-metrics,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: linkerd2-fips, buildkitd-fips, xeol, k8sgpt, manifest-tool, kargo, k3s, kubescape-operator-fips, steampipe, gitlab-rails-ce, neuvector, docker-cli-buildx-fips, cluster-api-helm-controller-fips, zarf, kubescape-server-fips, harvester-fips, chainctl-fips, headlamp-fips...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10976-1 steampipe-2.4.4-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitea, bom, wolfictl, pulumi-kubernetes-operator, pulumi-language-java, src-fingerprint, k9s, gitsign, gomplate, trivy-operator, flux-image-automation-controller, trivy, trufflehog, nfpm, kargo, gptscript, gitaly, kots, syft, snyk-cli, grype, apko, kubescape,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitea, bom, wolfictl, pulumi-kubernetes-operator, pulumi-language-java, src-fingerprint, k9s, gitsign, gomplate, trivy-operator, flux-image-automation-controller, trivy, trufflehog, nfpm, kargo, gptscript, gitaly, kots, syft, snyk-cli, grype, apko, kubescape,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gitea, bom, wolfictl, pulumi-kubernetes-operator, pulumi-language-java, src-fingerprint, k9s, gitsign, gomplate, trivy-operator, flux-image-automation-controller, trivy, trufflehog, nfpm, kargo, gptscript, gitaly, kots, syft, snyk-cli, grype, apko, kubescape,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: gitea, bom, wolfictl, pulumi-kubernetes-operator, pulumi-language-java, src-fingerprint, k9s, gitsign, gomplate, trivy-operator, flux-image-automation-controller, trivy, trufflehog, nfpm, kargo, gptscript, gitaly, kots, syft, snyk-cli, grype, apko, kubescape,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: apko, grafana, xeol, snyk-cli, kargo, apko-fips, goreleaser, rancher-fleet, steampipe, gitlab-rails-ce, pulumi-language-yaml, argocd-image-updater-fips, witness, zarf, kubescape-server-fips, chainctl-fips, skaffold-fips, trufflehog-fips, terragrunt-fips,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: apko, grafana, xeol, snyk-cli, kargo, apko-fips, goreleaser, rancher-fleet, steampipe, gitlab-rails-ce, pulumi-language-yaml, argocd-image-updater-fips, witness, zarf, kubescape-server-fips, chainctl-fips, skaffold-fips, trufflehog-fips, terragrunt-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: apko, grafana, xeol, snyk-cli, kargo, apko-fips, goreleaser, rancher-fleet, steampipe, gitlab-rails-ce, pulumi-language-yaml, argocd-image-updater-fips, witness, zarf, kubescape-server-fips, chainctl-fips, skaffold-fips, trufflehog-fips, terragrunt-fips,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: gitea, bom, wolfictl, flux-source-controller, pulumi-kubernetes-operator, pulumi-language-java, src-fingerprint, k9s, gitsign, gomplate, trivy-operator, flux-image-automation-controller, trivy, trufflehog, nfpm, kargo, gptscript, gitaly, kots, syft, snyk-cli, grype,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: apko, grafana, xeol, snyk-cli, kargo, apko-fips, goreleaser, flux-source-controller, rancher-fleet, steampipe, gitlab-rails-ce, pulumi-language-yaml, argocd-image-updater-fips, witness, zarf, kubescape-server-fips, chainctl-fips, skaffold-fips, trufflehog-fips,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: apko, grafana, xeol, snyk-cli, kargo, apko-fips, goreleaser, flux-source-controller, rancher-fleet, steampipe, gitlab-rails-ce, pulumi-language-yaml, argocd-image-updater-fips, witness, zarf, kubescape-server-fips, chainctl-fips, skaffold-fips, trufflehog-fips,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: tflint, k9s, trivy-operator, trivy, kots, snyk-cli, grype, kubescape, xeol, opentofu, terragrunt, task, zarf, tfsec, conftest, steampipe, zot, terraform, syft, wolfictl...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: tflint, k9s, trivy-operator, trivy, kots, snyk-cli, grype, kubescape, xeol, opentofu, terragrunt, task, zarf, tfsec, conftest, steampipe, zot, terraform, syft, wolfictl...

OPENSUSE-SU-2026:10509-1 steampipe-2.4.1-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-32286 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, grafana-alloy-fips, teleport, telegraf, grafana-alloy, splunk-otel-collector-fips, bento, steampipe, bento-fips...

CVE-2026-32286 vulnerabilities

Vulnerabilities for packages: telegraf, splunk-otel-collector, steampipe, bento, teleport, grafana-alloy...

CVE-2026-27137 vulnerabilities

Vulnerabilities for packages: flux-source-controller, pluto, nova, flux-image-automation-controller, podinfo, flux-notification-controller, grafana-operator, grafana-rollout-operator, metacontroller, flux-image-reflector-controller, stakater-reloader, polaris, victoriametrics, flux-helm-controlle...