Teleport - Authentication Bypass

Teleport versions prior to 17.5.2 are vulnerable to a remote authentication bypass vulnerability. This issue allows attackers to gain unauthorized access to affected systems. id: CVE-2025-49825 info: name: Teleport - Authentication Bypass author: pdteam severity: critical description: | Teleport...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, policy-controller, image-factory, policy-controller-fips, falcoctl, kyverno, tkn, trivy-operator, trivy, gitsign, tekton-chains, cloudbeat-fips, tflint-fips, crossplane, docker-fips, kubescape, tkn-fips, teleport-operator-fips, tflint,...

GHSA-9R4W-JG96-92MV vulnerabilities

Vulnerabilities for packages: teleport...

GHSA-9R4W-JG96-92MV vulnerabilities

Vulnerabilities for packages: tbot, teleport-operator-fips, teleport...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: tflint, teleport, neuvector-sigstore-interface, kyverno, tekton-chains, policy-controller, trivy-operator, aactl, zarf, kubescape, gitsign, goreleaser, crossplane, kyverno-notation-aws, trivy, falcoctl, spire-server, tkn, ratify...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: tflint, teleport, neuvector-sigstore-interface, kyverno, tekton-chains, policy-controller, trivy-operator, aactl, zarf, kubescape, gitsign, goreleaser, crossplane, kyverno-notation-aws, trivy, falcoctl, spire-server, tkn, ratify...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, policy-controller, policy-controller-fips, falcoctl, kyverno, spire-server, tkn, trivy-operator, gitsign, tekton-chains, cloudbeat-fips, tflint-fips, chainctl-fips, crossplane, docker-fips, kubescape, tkn-fips, tflint, kubescape-server-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: falcoctl-fips, policy-controller, policy-controller-fips, falcoctl, kyverno, spire-server, tkn, trivy-operator, gitsign, tekton-chains, cloudbeat-fips, tflint-fips, chainctl-fips, crossplane, docker-fips, kubescape, tkn-fips, tflint, kubescape-server-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tflint, ko, teleport, neuvector-sigstore-interface, kyverno, tekton-chains, policy-controller, trivy-operator, aactl, zarf, kubescape, gitsign, slsa-verifier, goreleaser, crossplane, kyverno-notation-aws, falcoctl, spire-server, tkn, ratify...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tflint, ko, teleport, neuvector-sigstore-interface, kyverno, tekton-chains, policy-controller, trivy-operator, aactl, zarf, kubescape, gitsign, slsa-verifier, goreleaser, crossplane, kyverno-notation-aws, falcoctl, spire-server, tkn, ratify...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: snyk-cli, flux, fscrypt, external-secrets-operator, melange, nerdctl, kubernetes-dashboard, grype, kaf, kine, helm, flux-image-automation-controller, pulumi-language-java, guac, minio, act, pulumi, containerd, kyverno, k9s, cloud-provider-aws, trivy-operator, wolfict...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: snyk-cli, flux, fscrypt, nerdctl, kubernetes-dashboard, kaf, kine, helm, minio, containerd, kyverno, cloud-provider-aws, cilium-cli, gitlab-kas, mattermost, rancher, aactl, zot, cilium, k3s, opentelemetry-collector, kots, istio, telegraf, prometheus-operator,...

GHSA-XGRM-4FWX-7QM8 vulnerabilities

Vulnerabilities for packages: gitaly, envoy-gateway-fips, commercial-grafana, teleport...

CVE-2026-33815 vulnerabilities

Vulnerabilities for packages: gitaly, envoy-gateway-fips, commercial-grafana, teleport...

CVE-2026-33815 vulnerabilities

Vulnerabilities for packages: teleport, gitaly...

GHSA-XGRM-4FWX-7QM8 vulnerabilities

Vulnerabilities for packages: teleport, gitaly...

GHSA-W5PP-99CH-QJ29 vulnerabilities

Vulnerabilities for packages: terragrunt, guac, teleport, gitaly...

GHSA-W5PP-99CH-QJ29 vulnerabilities

Vulnerabilities for packages: gitaly, gitlab-rails-ce, guac, upwind-agent, teleport, argo-cd-fips, terragrunt, gitlab-rails-ce-fips, terragrunt-fips, nemo, argo-cd...

OPENSUSE-SU-2026:10684-1 teleport-17.7.23-1.1 on GA media

These are all security issues fixed in the teleport-17.7.23-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, crossplane-provider-aws-acm-fips, task, velero-plugin-for-aws, cluster-api-aws-controller, loki-fips, crossplane-provider-aws-ec2, steampipe, crossplane-provider-aws-sns, bank-vaults-fips, crossplane-provider-aws-servicediscovery-fips,...