OPENSUSE-SU-2026:11758-1 steampipe-2.4.6-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, teleport, bento, splunk-otel-collector, grafana-alloy-fips, bento-fips, steampipe, telegraf, kots, grafana-alloy...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kubescape, teleport, kyverno-fips, conftest, falcoctl-fips, rancher-fleet-fips, conftest-fips, argo-cd, redpanda-operator, consul-k8s-fips, cert-manager-cmctl, kubescape-server-fips, jfrog-cli, crossplane, chartmuseum-fips, ratify-fips, helm-exporter-fips,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster, amazon-k8s-cni-fips, aws-ebs-csi-driver-fips, aws-load-balancer-controller-fips, victoriametrics, flux-notification-controller, grafana-operator-fips, grafana-operator, flux-operator, temporal-fips, aws-ebs-csi-driver, flux-operator-fips,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: terraform, zarf, undock, gptscript, gitleaks, steampipe, grafana-alloy, gitness, tflint, rancher-fleet, trufflehog, opentofu, envoy-gateway, trivy, vcluster, nuclei, guac, nsc, k9s, kubescape-operator, terragrunt, xeol, filebrowser, podman, zot, trivy-operator...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: terraform, zarf, wolfictl, steampipe, tflint, grype, opentofu, conftest, trivy, syft, k9s, task, kubescape, terragrunt, xeol, snyk-cli, tfsec, zot, trivy-operator, kots...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: nova, steampipe, podinfo, go, grafana-rollout-operator, pluto, polaris, dkron, victoriametrics-cluster, stakater-reloader, flux-image-automation-controller, flux-image-reflector-controller, victoriametrics, grafana-operator, terragrunt, flux-notification-controller,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: nova, steampipe, podinfo, go, grafana-rollout-operator, pluto, polaris, dkron, victoriametrics-cluster, stakater-reloader, flux-image-automation-controller, flux-image-reflector-controller, victoriametrics, grafana-operator, terragrunt, flux-notification-controller,...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: bento, splunk-otel-collector, steampipe, grafana-alloy, telegraf, kots...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, zarf, argocd-image-updater, rancher, steampipe, kyverno, oras, gitness, helm-mapkubeapis, cilium-cli, consul-k8s, rancher-fleet, chartmuseum, gogatekeeper, opentofu, conftest, helm-set-status, ratify, trivy, vcluster, gatekeeper, rancher-helm,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, zarf, argocd-image-updater, pulumi-kubernetes-operator, gitea, gptscript, steampipe, kyverno, wolfictl, pulumi, grafana-alloy, gitsign, src-fingerprint, scorecard, pulumi-language-dotnet, apko, grype, pulumi-language-yaml, rancher-fleet, truffleho...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, envconsul, vault-k8s, newrelic-nri-kube-events, argocd-image-updater, spark-operator, terraform-docs, amazon-cloudwatch-agent-operator, containerd, crossplane-provider-aws-rds, dbmate, goreleaser, local-path-provisioner,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, sealed-secrets, crossplane-provider-aws-eks, atlantis, scorecard, sops, eksctl, argo-events, docker-machine-driver-linode,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: terraform, envconsul, spark-operator, undock, amazon-cloudwatch-agent-operator, containerd, step-kms-plugin, chart-testing, portieris, wait-for-port, rabbitmq-cluster-operator, nri-nginx, grafana-alloy, aws-otel-collector, nri-apache, eksctl, argo-events,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, crossplane-provider-aws-route53resolver, agentbeat-fips, crossplane-provider-aws-cloudwatch-fips, crossplane-provider-aws-elb, grype-db, external-dns, gitlab-workhorse-ce, kubevela-fips, crossplane-provider-aws-elb-fips...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kubescape, teleport, docker-cli-buildx-fips, skaffold-fips, zot, spegel, grype-db, redpanda-operator, chainctl, kubevela-fips, consul-k8s-fips, cg, kubescape-server-fips, jfrog-cli, crossplane, chartmuseum-fips, helm-exporter-fips, kaniko, steampipe, linkerd2,...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10976-1 steampipe-2.4.4-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, zarf, argocd-image-updater, pulumi-kubernetes-operator, goreleaser, gitea, gptscript, steampipe, kyverno, wolfictl, pulumi, grafana-alloy, gitsign, src-fingerprint, scorecard, pulumi-language-dotnet, apko, grype, pulumi-language-yaml, act,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, zarf, argocd-image-updater, pulumi-kubernetes-operator, goreleaser, gitea, gptscript, steampipe, kyverno, wolfictl, pulumi, grafana-alloy, gitsign, src-fingerprint, scorecard, pulumi-language-dotnet, apko, grype, pulumi-language-yaml, act,...