GO-2026-5013 vulnerabilities

Vulnerabilities for packages: melange, kaf, zarf, argo-events, terraform-provider-acme, hcloud, crossplane-provider-azure-managedidentity, helm, vault-benchmark, crossplane-provider-azure-storage, prometheus-operator, cilium-cli, apko, podman, cloud-provider-aws, pulumi, buildah, wolfictl, gh,...

SUSE SLES15: terraform-provider-local / terraform-provider-null / etc (SUSE-SU-2026:1411-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1411-1 advisory. This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue...

Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files can lead to the consumption of corrupted files bsc1258097...

SUSE-SU-2026:1411-1 Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: - CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files that can lead to the consumption of corrupted files...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: kyverno-fips, nri-mongodb-fips, trivy, modelmesh-runtime-adapter, go-licenses, kafka-proxy, kube-state-metrics, k9s-fips, qemu-guesthelper, keda, dockerize, newrelic-k8s-metadata-injection, crossplane-provider-aws-elasticache-fips, dcgm-exporter,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kyverno-fips, nri-mongodb-fips, trivy, modelmesh-runtime-adapter, go-licenses, kafka-proxy, kube-state-metrics, k9s-fips, qemu-guesthelper, keda, dockerize, newrelic-k8s-metadata-injection, crossplane-provider-aws-elasticache-fips, dcgm-exporter,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kyverno-fips, nri-mongodb-fips, trivy, modelmesh-runtime-adapter, go-licenses, kafka-proxy, kube-state-metrics, k9s-fips, qemu-guesthelper, keda, dockerize, newrelic-k8s-metadata-injection, crossplane-provider-aws-elasticache-fips, dcgm-exporter,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kyverno-fips, nri-mongodb-fips, modelmesh-runtime-adapter, go-licenses, qemu-guesthelper, keda, crossplane-provider-aws-elasticache-fips, dcgm-exporter, rke2-cloud-provider-fips, go-discover-fips, prometheus-beat-exporter-fips, vertical-pod-autoscaler-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kyverno-fips, nri-mongodb-fips, trivy, modelmesh-runtime-adapter, go-licenses, kafka-proxy, kube-state-metrics, k9s-fips, qemu-guesthelper, keda, dockerize, newrelic-k8s-metadata-injection, crossplane-provider-aws-elasticache-fips, dcgm-exporter,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, gcp-compute-persistent-disk-csi-driver-fips, modelmesh-runtime-adapter, mongodb-kubernetes-operator, cluster-api, kube-logging-operator-custom-runner-fips, mattmoor-chainit, nvidia-nsight-compute-13.2, k8sgpt-operator, bank-vaults,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, gcp-compute-persistent-disk-csi-driver-fips, modelmesh-runtime-adapter, mongodb-kubernetes-operator, cluster-api, kube-logging-operator-custom-runner-fips, mattmoor-chainit, nvidia-nsight-compute-13.2, k8sgpt-operator, bank-vaults,...