GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-compose, crossplane-provider-aws-memorydb, gomplate, atlantis, terraform-provider-azapi, guac, buildah, k9s, openbao, crossplane-provider-azure-managedidentity, scorecard, hcloud, opentofu, crossplane-provider-aws-cloudfront, kaf, cloudflared,...

SUSE SLES15: terraform-provider-local / terraform-provider-null / etc (SUSE-SU-2026:1411-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1411-1 advisory. This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue...

Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files can lead to the consumption of corrupted files bsc1258097...

SUSE-SU-2026:1411-1 Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: - CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files that can lead to the consumption of corrupted files...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: chisel, aws-signer-notation-plugin, oras-fips, virt-api, git-credential-oauth, cue, newrelic-infrastructure-agent-fips, amazon-ssm-agent, rclone-fips, sriov-network-device-plugin-fips, cosign, sbomqs, crossplane-provider-keycloak, dynamic-localpv-provisioner-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: chisel, aws-signer-notation-plugin, oras-fips, virt-api, git-credential-oauth, cue, newrelic-infrastructure-agent-fips, amazon-ssm-agent, rclone-fips, sriov-network-device-plugin-fips, cosign, sbomqs, crossplane-provider-keycloak, dynamic-localpv-provisioner-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: chisel, aws-signer-notation-plugin, oras-fips, virt-api, git-credential-oauth, cue, newrelic-infrastructure-agent-fips, amazon-ssm-agent, rclone-fips, sriov-network-device-plugin-fips, cosign, sbomqs, crossplane-provider-keycloak, dynamic-localpv-provisioner-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: chisel, aws-signer-notation-plugin, oras-fips, virt-api, git-credential-oauth, cue, newrelic-infrastructure-agent-fips, amazon-ssm-agent, rclone-fips, sriov-network-device-plugin-fips, cosign, sbomqs, crossplane-provider-keycloak, dynamic-localpv-provisioner-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: cni-plugins, sbomqs, pvc-autoresizer-fips, kube-vip-cloud-provider, multus-cni-fips, spire-controller-manager-fips, kcp, nvidia-container-toolkit, spegel-fips, gitlab-kas, buildtools, grpcurl, flannel-cni-plugin-fips, flux-notification-controller, elastic-agent,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, rancher-machine, secrets-store-csi-driver-provider-aws-fips, sftpgo-plugin-pubsub, nemo, secrets-store-csi-driver-provider-aws, secrets-store-csi-driver-fips, kube-vip, mattmoor-chainit, azurefile-csi-fips, knative-eventing,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, rancher-machine, secrets-store-csi-driver-provider-aws-fips, sftpgo-plugin-pubsub, nemo, secrets-store-csi-driver-provider-aws, secrets-store-csi-driver-fips, kube-vip, mattmoor-chainit, azurefile-csi-fips, knative-eventing,...