GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: src, argo-events-fips, crossplane-provider-aws-directconnect, crossplane-provider-aws-cloudwatchevents, crossplane-provider-azure-synapse, flux-image-automation-controller, agentbeat, crossplane-provider-aws-emr-fips, loki, gomplate, docker-machine-driver-linode,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, syft, kubescape-operator, helm-push, neuvector-fips, docker-fips, gatekeeper, kgateway, fuse-overlayfs-snapshotter, docker, trivy-fips, amazon-ecs-agent-fips, neuvector, rancher-agent, dagger, newrelic-infrastructure-agent, grype,...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10976-1 steampipe-2.4.4-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: kyverno, guac, snyk-cli, pulumi, flux-image-automation-controller, gptscript, rancher-fleet, terragrunt, zot, dagger, gitsign, gitea, pulumi-language-dotnet, nfpm, external-secrets-operator, goreleaser, flux, gitlab-runner, kubevela, teleport, syft, argo-workflows,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: kyverno, guac, snyk-cli, pulumi, flux-image-automation-controller, gptscript, rancher-fleet, terragrunt, zot, dagger, gitsign, gitea, pulumi-language-dotnet, nfpm, external-secrets-operator, goreleaser, flux, gitlab-runner, kubevela, teleport, syft, argo-workflows,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: kyverno, guac, snyk-cli, pulumi, flux-image-automation-controller, gptscript, rancher-fleet, terragrunt, zot, dagger, gitsign, gitea, pulumi-language-dotnet, nfpm, external-secrets-operator, goreleaser, flux, gitlab-runner, kubevela, teleport, syft, argo-workflows,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: kyverno, guac, snyk-cli, pulumi, flux-image-automation-controller, gptscript, rancher-fleet, terragrunt, zot, dagger, gitsign, gitea, pulumi-language-dotnet, nfpm, external-secrets-operator, goreleaser, flux, gitlab-runner, kubevela, teleport, syft, argo-workflows,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: syft, pulumi-language-dotnet, argo-events-fips, flux-fips, chainloop-cli-fips, trivy-fips, flux-image-automation-controller, gitaly-fips, cerbos, kyverno-fips, gomplate, dagger, osv-scanner, cerbos-fips, grype, guac, xeol, syft-fips, kots, kubevela, witness, mapotf,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: syft, pulumi-language-dotnet, argo-events-fips, flux-fips, chainloop-cli-fips, trivy-fips, flux-image-automation-controller, gitaly-fips, cerbos, kyverno-fips, gomplate, dagger, osv-scanner, cerbos-fips, grype, guac, xeol, syft-fips, kots, kubevela, witness, mapotf,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: syft, pulumi-language-dotnet, argo-events-fips, flux-fips, chainloop-cli-fips, trivy-fips, flux-image-automation-controller, gitaly-fips, cerbos, kyverno-fips, gomplate, dagger, osv-scanner, cerbos-fips, grype, guac, xeol, syft-fips, kots, kubevela, witness, mapotf,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: kyverno, guac, snyk-cli, pulumi, flux-image-automation-controller, gptscript, rancher-fleet, terragrunt, zot, dagger, gitsign, gitea, pulumi-language-dotnet, nfpm, external-secrets-operator, grafana, goreleaser, flux, gitlab-runner, kubevela, teleport, syft,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: syft, pulumi-language-dotnet, argo-events-fips, flux-fips, grafana, chainloop-cli-fips, trivy-fips, flux-image-automation-controller, gitaly-fips, cerbos, kyverno-fips, gomplate, dagger, osv-scanner, cerbos-fips, grype, guac, xeol, syft-fips, kots, kubevela, witness,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: syft, pulumi-language-dotnet, argo-events-fips, flux-fips, grafana, chainloop-cli-fips, trivy-fips, flux-image-automation-controller, gitaly-fips, cerbos, kyverno-fips, gomplate, dagger, osv-scanner, cerbos-fips, grype, guac, xeol, syft-fips, kots, kubevela, witness,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: snyk-cli, zot, terragrunt, opentofu, conftest, tflint, task, syft, terraform, steampipe, wolfictl, k9s, kubescape, tfsec, trivy-operator, xeol, grype, kots, zarf, trivy...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: snyk-cli, zot, terragrunt, opentofu, conftest, tflint, task, syft, terraform, steampipe, wolfictl, k9s, kubescape, tfsec, trivy-operator, xeol, grype, kots, zarf, trivy...

OPENSUSE-SU-2026:10509-1 steampipe-2.4.1-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-32286 vulnerabilities

Vulnerabilities for packages: bento, bento-fips, telegraf, teleport, grafana-alloy, grafana-alloy-fips, splunk-otel-collector, splunk-otel-collector-fips, steampipe...

CVE-2026-32286 vulnerabilities

Vulnerabilities for packages: steampipe, grafana-alloy, bento, splunk-otel-collector, teleport, telegraf...

GHSA-7HFW-R8QC-89V4 vulnerabilities

Vulnerabilities for packages: dkron, flux-image-automation-controller, terragrunt, stakater-reloader, podinfo, grafana-rollout-operator, metacontroller, go, polaris, flux-image-reflector-controller, flux-helm-controller, steampipe, flux-operator, grafana-operator, flux-notification-controller,...