Teleport - Authentication Bypass

Teleport versions prior to 17.5.2 are vulnerable to a remote authentication bypass vulnerability. This issue allows attackers to gain unauthorized access to affected systems. id: CVE-2025-49825 info: name: Teleport - Authentication Bypass author: pdteam severity: critical description: | Teleport...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, policy-controller-fips, cloudbeat, trivy-fips, tkn, crossplane, trivy-operator-fips, image-factory, kyverno-fips, policy-controller, tbot, tflint, tekton-chains, kubescape-server, trivy, falcoctl, aactl, kubescape, trivy-operator, spire-server-fips,...

GHSA-9R4W-JG96-92MV vulnerabilities

Vulnerabilities for packages: teleport...

GHSA-9R4W-JG96-92MV vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, tbot, teleport...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: spire-server, tkn, gitsign, trivy-operator, tflint, teleport, falcoctl, kyverno, policy-controller, kubescape, aactl, tekton-chains, zarf, neuvector-sigstore-interface, trivy, kyverno-notation-aws, crossplane, goreleaser...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: spire-server, tkn, gitsign, trivy-operator, tflint, teleport, falcoctl, kyverno, policy-controller, kubescape, aactl, tekton-chains, zarf, neuvector-sigstore-interface, trivy, kyverno-notation-aws, crossplane, goreleaser...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, policy-controller-fips, ratify, ko-fips, cloudbeat, tkn, crossplane, trivy-operator-fips, spire-server, kyverno-fips, slsa-verifier, policy-controller, tbot, tflint, tekton-chains, kubescape-server, falcoctl, aactl, kubescape, trivy-operator,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, policy-controller-fips, ratify, ko-fips, cloudbeat, tkn, crossplane, trivy-operator-fips, spire-server, kyverno-fips, slsa-verifier, policy-controller, tbot, tflint, tekton-chains, kubescape-server, falcoctl, aactl, kubescape, trivy-operator,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tkn, tflint, policy-controller, neuvector-sigstore-interface, goreleaser, falcoctl, kyverno, slsa-verifier, kubescape, aactl, trivy-operator, kyverno-notation-aws, spire-server, ratify, teleport, tekton-chains, zarf, crossplane, gitsign, ko...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tkn, tflint, policy-controller, neuvector-sigstore-interface, goreleaser, falcoctl, kyverno, slsa-verifier, kubescape, aactl, trivy-operator, kyverno-notation-aws, spire-server, ratify, teleport, tekton-chains, zarf, crossplane, gitsign, ko...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: mattermost, cert-manager, external-dns, k3s, snyk-cli, fscrypt, zot, argo-cd, docker-cli-buildx, kine, containerd, kubernetes-dashboard, kyverno, helm, aactl, knative-serving, minio, buildah, spire-server, prometheus, teleport, nerdctl, cilium, podman,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: mattermost, skaffold, cert-manager, dagger, pulumi-language-dotnet, opentofu, external-dns, k3s, snyk-cli, fscrypt, pulumi-language-yaml, scorecard, argo-cd, zot, kine, grype, osv-scanner, splunk-otel-collector, containerd, kubernetes-dashboard, argocd-image-updater,...

GHSA-XGRM-4FWX-7QM8 vulnerabilities

Vulnerabilities for packages: commercial-grafana, gitaly, teleport...

CVE-2026-33815 vulnerabilities

Vulnerabilities for packages: commercial-grafana, gitaly, teleport...

CVE-2026-33815 vulnerabilities

Vulnerabilities for packages: gitaly, teleport...

GHSA-XGRM-4FWX-7QM8 vulnerabilities

Vulnerabilities for packages: gitaly, teleport...

GHSA-W5PP-99CH-QJ29 vulnerabilities

Vulnerabilities for packages: guac, teleport, terragrunt, gitaly, argo-cd...

GHSA-W5PP-99CH-QJ29 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, argo-cd, teleport, terragrunt-fips, guac, gitlab-rails-ce, terragrunt, upwind-agent, nemo, gitaly, gitlab-rails-ce-fips...

OPENSUSE-SU-2026:10684-1 teleport-17.7.23-1.1 on GA media

These are all security issues fixed in the teleport-17.7.23-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: longhorn-instance-manager, amazon-cloudwatch-agent, cloudprober-fips, crossplane-provider-aws-ecs-fips, crossplane-provider-aws-ecr, yace, cloudbeat, kyverno-policy-reporter, crossplane-provider-aws-cognitoidp, jitsucom-bulker, milvus, crossplane-provider-aws-memoryd...