GO-2026-5013 vulnerabilities

Vulnerabilities for packages: snyk-cli, osv-scanner, gitlab-pages, tflint, wolfictl, terraform-provider-azurerm, gatus, kaf, skaffold, rancher-machine, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, podman, rancher, crossplane-provider-family-aws, kargo, steampipe,...

SUSE SLES15: terraform-provider-local / terraform-provider-null / etc (SUSE-SU-2026:1411-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1411-1 advisory. This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue...

Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files can lead to the consumption of corrupted files bsc1258097...

SUSE-SU-2026:1411-1 Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: - CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files that can lead to the consumption of corrupted files...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: onepassword-operator, nginx-prometheus-exporter-fips, spire-controller-manager-fips, tkn, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, newrelic-fluent-bit-output, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: onepassword-operator, nginx-prometheus-exporter-fips, spire-controller-manager-fips, tkn, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, newrelic-fluent-bit-output, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: onepassword-operator, nginx-prometheus-exporter-fips, spire-controller-manager-fips, tkn, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, newrelic-fluent-bit-output, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: onepassword-operator, nginx-prometheus-exporter-fips, spire-controller-manager-fips, tkn, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, newrelic-fluent-bit-output, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login-fips, flux, pulumi, chaos-mesh, clickhouse-operator, request-1279, cloudbeat-fips, kustomize-fips, go-licenses, cargobump, external-dns-fips, kubernetes-csi-external-attacher, nri-elasticsearch, longhorn-backing-image-manager,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, custom-pod-autoscaler-operator, openbao-k8s-fips, hivemind, confluent-common-docker, vault-k8s, prometheus-beat-exporter-fips, cloud-provider-aws-fips, secrets-store-csi-driver-provider-aws, gostatsd, kubernetes-dashboard-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, custom-pod-autoscaler-operator, openbao-k8s-fips, hivemind, confluent-common-docker, vault-k8s, prometheus-beat-exporter-fips, cloud-provider-aws-fips, secrets-store-csi-driver-provider-aws, gostatsd, kubernetes-dashboard-fips,...