OPENSUSE-SU-2026:20809-1 Security update for trivy

This update for trivy fixes the following issues - CVE-2025-64702: github.com/quic-go/quic-go/http3: quic-go HTTP/3 QPACK Header Expansion DoS bsc1255366. - CVE-2025-69725: github.com/go-chi/chi/v5: incorrect input validation in the RedirectSlashes function can lead to an open redirect bsc1258513...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:20720-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20720-1 advisory. Changes in trivy: - update go-git to 5.18.0 bsc1264873, CVE-2026-41506 Tenable has extracted the preceding description block directly from the SUSE...

Security update for trivy (moderate)

openSUSE security update: security update for trivy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20720-1 Rating: moderate References: bsc1264873 Cross-References: CVE-2026-41506 CVSS scores: CVE-2026-41506 SUSE : 6.5...

OPENSUSE-SU-2026:20720-1 Security update for trivy

This update for trivy fixes the following issues: Changes in trivy: - update go-git to 5.18.0 bsc1264873, CVE-2026-41506...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: scorecard, osv-scanner, rancher-fleet, kots, pulumi-language-yaml, kaniko, gptscript, act, grafana-alloy, kubevela, kyverno, melange, crossplane, gitlab-runner, witness, skaffold, zot, guac, snyk-cli, src-fingerprint, tfsec, cerbos, gitea, kargo, trivy-operator,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: scorecard, osv-scanner, rancher-fleet, kots, pulumi-language-yaml, kaniko, gptscript, act, grafana-alloy, kubevela, kyverno, melange, crossplane, gitlab-runner, witness, skaffold, zot, guac, snyk-cli, src-fingerprint, tfsec, cerbos, gitea, kargo, trivy-operator,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: gomplate-fips, grafana, terragrunt-fips, trufflehog, crossplane, kubevela-fips, gitaly, pulumi, trivy-fips, google-osconfig-agent, kubescape-server, mapotf-fips, snyk-cli, redpanda-console, amazon-ssm-agent-fips, trivy-operator, kots, crossplane-fips,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: gomplate-fips, grafana, terragrunt-fips, trufflehog, crossplane, kubevela-fips, gitaly, pulumi, trivy-fips, google-osconfig-agent, kubescape-server, mapotf-fips, snyk-cli, redpanda-console, amazon-ssm-agent-fips, trivy-operator, kots, crossplane-fips,...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:20702-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20702-1 advisory. Changes in trivy: - Update to version 0.70.0 bsc1260193, CVE-2026-33186, bsc1260971, CVE-2026-33747, bsc1261052, CVE-2026-33748, bsc1262389,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: ratify, kyverno, crossplane, tflint, neuvector-sigstore-interface, gitlab-runner, cosign, ko, skaffold, zot, tkn, slsa-verifier, guac, spire-server, trivy-operator, zarf, policy-controller, gh, aactl, trivy, vexctl, kubescape, bom, docker-compose, goreleaser, docker,...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.69.3-1.2.hum1 aarch64, x8664 trivy-0.69.3-1.2.hum1.src src...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: gomplate-fips, grafana, terragrunt-fips, trufflehog, crossplane, kubevela-fips, flux-source-controller-fips, gitaly, pulumi, trivy-fips, google-osconfig-agent, kubescape-server, mapotf-fips, snyk-cli, redpanda-console, amazon-ssm-agent-fips, trivy-operator, kots,...

OPENSUSE-SU-2026:20702-1 Security update for trivy

This update for trivy fixes the following issues: Changes in trivy: - Update to version 0.70.0 bsc1260193, CVE-2026-33186, bsc1260971, CVE-2026-33747, bsc1261052, CVE-2026-33748, bsc1262389, CVE-2026-39984, bsc1262893, CVE-2026-34986: release: v0.70.0 main 10105 choredeps: bump...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2026:0163-1 Rating: important References: 1255366 1258094 1258513 1260193 1260971 1261052 1262389 1262893 Cross-References: CVE-2025-64702 CVE-2025-66564 CVE-2025-69725 CVE-2026-25934 CVE-2026-33186 CVE-2026-33747...

trivy-0.70.0-1.1 on GA media (moderate)

trivy-0.70.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10651-1 Rating: moderate Cross-References: CVE-2025-69725 CVE-2026-25934 CVE-2026-33186 CVE-2026-33747 CVE-2026-33748 CVE-2026-34986 CVE-2026-39984 CVSS scores: CVE-2025-69725 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

Fedora 44 : trivy (2026-6fc2f11089)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6fc2f11089 advisory. Update to 0.69.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

OPENSUSE-SU-2026:10651-1 trivy-0.70.0-1.1 on GA media

These are all security issues fixed in the trivy-0.70.0-1.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

[SECURITY] Fedora 43 Update: trivy-0.69.3-1.fc43

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more...

Fedora 43 : trivy (2026-868e266938)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-868e266938 advisory. Update to 0.69.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...