GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: spegel, kaniko, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb, kubevela, scorecard...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: spegel, kaniko, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb, kubevela, scorecard...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: spegel, kaniko, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb, kubevela, scorecard...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: spegel, kaniko, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb, kubevela, scorecard...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: spegel, kaniko, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb, kubevela, scorecard...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: spegel, kaniko, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb, kubevela, scorecard...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: spegel, kaniko, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb, kubevela, scorecard...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: spegel, kaniko, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb, kubevela, scorecard...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: spegel, kaniko, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb, kubevela, scorecard...

openSUSE 16 Security Update : syft (openSUSE-SU-2026:20928-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20928-1 advisory. Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.45.1-0.1.hum1 aarch64, x8664 syft-1.45.1-0.1.hum1.src src...

OPENSUSE-SU-2026:20928-1 Security update for syft

This update for syft fixes the following issues: Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier should distinguish between MySQL Cluster ndb and MySQL 3297 4907 @witchcraze - Catalog...

Poking around in the Dark: Why a Shared Understanding of Components Matters

By listing the components included in an application, Software Bills of Materials SBOMs are intended to support the timely identification of vulnerable components and ensure the security of the software supply chain. However, we question the underlying assumption that there is agreement on the...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: spegel, kaniko, osv-scanner, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: spegel, kaniko, osv-scanner, neuvector-scanner, cluster-api-helm-controller, helm, helm-mapkubeapis, manifest-tool, falco-no-driver, kubescape-operator, rancher-helm, skaffold, teleport, envoy-gateway, docker-cli-buildx, trivy, steampipe, grype, kube-arangodb,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, upwind-agent, opa-fips, helm-mapkubeapis, helm-fips, xeol-fips, rancher, kubescape, xeol, helm-exporter-fips, kgateway-fips, syft, wolfictl, datadog-agent, grype-fips, redpanda-operator, teleport, docker-fips, chartmuseum-fips, ctop,...

CVE-2026-31220

PySyft Syft Datasite/Server versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code. The system allows low-privileged users to submit Python functions via @sy.syftfunction for remote execution on the server. While a...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.44.0-0.3.hum1 aarch64, x8664 syft-1.44.0-0.3.hum1.src src...

CVE-2026-31220

PySyft Syft Datasite/Server versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code. The system allows low-privileged users to submit Python functions via @sy.syftfunction for remote execution on the server. While a...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: kaniko, osv-scanner, snyk-cli, tfsec, gitea, witness, trivy, skaffold, teleport, argo-events, terragrunt, external-secrets-operator, gptscript, grype, argocd-image-updater, kubevela, grafana-alloy, scorecard, bom, rancher-fleet, src-fingerprint, pulumi, gitaly,...