GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, terraform-provider-tls, knative-serving, syft, tw, buildah, openbao, fscrypt, grype, kubescape, crossplane-provider-aws-dynamodb, cloudflared, gitlab-runner, cosign, kots, crossplane-provider-aws-elasticache, external-dns,...

SUSE SLES15: terraform-provider-local / terraform-provider-null / etc (SUSE-SU-2026:1411-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1411-1 advisory. This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue...

Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files can lead to the consumption of corrupted files bsc1258097...

SUSE-SU-2026:1411-1 Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: - CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files that can lead to the consumption of corrupted files...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, kube-oidc-proxy, rancher-loglevel, crossplane-provider-sql, terraform-provider-aws-fips, eks-node-monitoring-agent-fips, volcano-fips, envconsul, mongo-tools, buf, ytt-fips, prometheus-blackbox-exporter, crossplane-function-go-templating,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, kube-oidc-proxy, rancher-loglevel, crossplane-provider-sql, terraform-provider-aws-fips, eks-node-monitoring-agent-fips, volcano-fips, envconsul, mongo-tools, buf, ytt-fips, prometheus-blackbox-exporter, crossplane-function-go-templating,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, kube-oidc-proxy, rancher-loglevel, crossplane-provider-sql, terraform-provider-aws-fips, eks-node-monitoring-agent-fips, volcano-fips, envconsul, mongo-tools, buf, ytt-fips, prometheus-blackbox-exporter, crossplane-function-go-templating,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, terraform-provider-aws-fips, envconsul, buf, crossplane-function-go-templating, wire-go, docker-credential-acr-env, openbao-k8s, cluster-api-gcp-controller-fips, kiali-fips, crossplane-provider-aws-elbv2, argo-cd, bazelisk,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, kube-oidc-proxy, rancher-loglevel, crossplane-provider-sql, terraform-provider-aws-fips, eks-node-monitoring-agent-fips, volcano-fips, envconsul, mongo-tools, buf, ytt-fips, prometheus-blackbox-exporter, crossplane-function-go-templating,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, knative-eventing-fips, karma-fips, local-path-provisioner, docker-credential-ecr-login, prometheus-bind-exporter, octo-sts, hivemind, addon-resizer, vault-benchmark, dagdotdev, knative-serving, karpenter-fips, checksec,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, knative-eventing-fips, karma-fips, local-path-provisioner, docker-credential-ecr-login, prometheus-bind-exporter, octo-sts, hivemind, addon-resizer, vault-benchmark, dagdotdev, knative-serving, karpenter-fips, checksec,...