SUSE SLES15 Security Update : terraform-provider-susepubliccloud (SUSE-SU-2026:3198-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3198-1 advisory. This update for terraform-provider-susepubliccloud fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject...

Security update for terraform-provider-susepubliccloud

This update for terraform-provider-susepubliccloud fixes the following issue CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266477. Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:3198-1 Security update for terraform-provider-susepubliccloud

This update for terraform-provider-susepubliccloud fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266477...

SUSE SLES15 Security Update : terraform-provider-susepubliccloud (SUSE-SU-2026:3057-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3057-1 advisory. This update for terraform-provider-susepubliccloud fixes the following issues - CVE-2022-41723: go1.19,go1.20: net/http2: quadratic...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: nerdctl, local-static-provisioner, actions-runner-controller, aws-network-policy-agent, wgcf, docker-cli-buildx, aws-node-termination-handler, sriov-network-device-plugin, gostatsd, rancher, terraform-mcp-server, kubernetes-csi-external-snapshotter,...

CVE-2026-15067

Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...

CVE-2026-15067

Snowflake Terraform Provider before 2.18.0 is affected by SQL injection via an unsanitized data source input that can cause arbitrary SQL execution within the provider’s privileged Snowflake session, potentially enabling data exfiltration and creation of long‑lived credentials. DDL injection in u...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: nerdctl, guac, act, kaf, cluster-api-azure-controller, k3s, steampipe, docker-cli-buildx, sops, rancher, step-issuer, gomplate, openbao, docker, argo-cd, gitea, external-dns, istio, ko, melange, snyk-cli, containerd, pulumi-language-java, scorecard, osv-scanner, tkn,...

SUSE SLES15 Security Update : terraform-provider-local, terraform-provider-null (SUSE-SU-2026:2484-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2484-1 advisory. This update for terraform-provider-local, terraform-provider-null fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infini...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: grafana-mimir, perses, step, eks-node-monitoring-agent-fips, seaweedfs, aws-node-termination-handler, crossplane-provider-aws-efs-fips, argo-workflows, vcluster-fips, kaniko-fips, crossplane-provider-aws-kafka, velero-fips, redpanda, kueue,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: grafana-mimir, perses, step, eks-node-monitoring-agent-fips, seaweedfs, aws-node-termination-handler, crossplane-provider-aws-efs-fips, argo-workflows, vcluster-fips, kaniko-fips, crossplane-provider-aws-kafka, velero-fips, redpanda, kueue,...

SUSE SLES15: terraform-provider-local / terraform-provider-null / etc (SUSE-SU-2026:1411-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1411-1 advisory. This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue...

Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files can lead to the consumption of corrupted files bsc1258097...

SUSE-SU-2026:1411-1 Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: - CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files that can lead to the consumption of corrupted files...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: nerdctl, local-static-provisioner, act, ghaudit, actions-runner-controller, render-template, omnibump, aws-network-policy-agent, wgcf, cargobump, docker-cli-buildx, calico, aws-node-termination-handler, nats-server, sriov-network-device-plugin, gostatsd, rancher,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nerdctl, local-static-provisioner, act, ghaudit, actions-runner-controller, omnibump, aws-network-policy-agent, wgcf, docker-cli-buildx, calico, aws-node-termination-handler, nats-server, sriov-network-device-plugin, gostatsd, rancher, terraform-mcp-server, openbao,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nerdctl, local-static-provisioner, act, ghaudit, actions-runner-controller, omnibump, aws-network-policy-agent, wgcf, docker-cli-buildx, aws-node-termination-handler, nats-server, sriov-network-device-plugin, gostatsd, rancher, terraform-mcp-server, openbao,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: terraform-docs, nerdctl, k8s-device-plugin, kafka-proxy, terraform-provider-random, verticadb-operator, kaf, temporal-ui-server, rancher-agent, kyverno-policy-reporter-ui, aws-flb-cloudwatch, k3s, opentelemetry-operator, cadvisor, spiffe-helper, docker-cli-buildx,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-fips, aws-application-networking-k8s, tigera-operator, crossplane-aws-provider-fips, grafana-mimir, nri-apache, quic-go-fips, prometheus-pgbouncer-exporter, crossplane-provider-aws-eks-fips, mariadb-operator, nats-top, step,...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-fips, aws-application-networking-k8s, tigera-operator, crossplane-aws-provider-fips, grafana-mimir, nri-apache, quic-go-fips, prometheus-pgbouncer-exporter, crossplane-provider-aws-eks-fips, mariadb-operator, nats-top, step,...