GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, jfrog-cli, chartmuseum, buildkitd, helm-set-status, newrelic-infrastructure-agent, zarf, fuse-overlayfs-snapshotter, k9s, kubevela-fips, chaos-mesh, chainctl, kube-arangodb-fips, trivy-operator-fips, cluster-api-helm-controller,...

OPENSUSE-SU-2026:11102-1 trivy-0.71.2-1.1 on GA media

These are all security issues fixed in the trivy-0.71.2-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm-set-status, skaffold, grype, rancher-helm, dagger, docker-cli-buildx, trivy-operator, tw, spegel, steampipe, neuvector-scanner, kubescape, chartmuseum, k3s, containerd, trivy, kots, helm-push, docker, manifest-tool, envoy-gateway,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm-set-status, skaffold, grype, rancher-helm, dagger, docker-cli-buildx, trivy-operator, tw, spegel, steampipe, neuvector-scanner, kubescape, chartmuseum, k3s, containerd, trivy, kots, helm-push, docker, manifest-tool, envoy-gateway,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm-set-status, skaffold, grype, rancher-helm, dagger, docker-cli-buildx, trivy-operator, tw, spegel, steampipe, neuvector-scanner, kubescape, chartmuseum, k3s, containerd, trivy, kots, helm-push, docker, manifest-tool, envoy-gateway,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm-set-status, skaffold, grype, rancher-helm, dagger, docker-cli-buildx, trivy-operator, tw, spegel, steampipe, neuvector-scanner, kubescape, chartmuseum, k3s, containerd, trivy, kots, helm-push, docker, manifest-tool, envoy-gateway,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm-set-status, skaffold, grype, rancher-helm, dagger, docker-cli-buildx, trivy-operator, tw, spegel, steampipe, neuvector-scanner, kubescape, chartmuseum, k3s, containerd, trivy, kots, helm-push, docker, manifest-tool, envoy-gateway,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm-set-status, skaffold, grype, rancher-helm, dagger, docker-cli-buildx, trivy-operator, tw, spegel, steampipe, neuvector-scanner, kubescape, chartmuseum, k3s, containerd, trivy, kots, helm-push, docker, manifest-tool, envoy-gateway,...

trivy-0.71.1-2.1 on GA media (moderate)

trivy-0.71.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11048-1 Rating: moderate Cross-References: CVE-2026-46680 CVSS scores: CVE-2026-46680 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

PT-2026-50251

Name of the Vulnerable Software and Affected Versions Trivy versions prior to 0.71.1 Description Trivy improperly trusts the org.opencontainers.image.title annotation in an OCI artifact manifest, using it as the destination filename when downloading content without proper validation or...

OPENSUSE-SU-2026:11048-1 trivy-0.71.1-2.1 on GA media

These are all security issues fixed in the trivy-0.71.1-2.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:20956-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20956-1 advisory. This update for trivy fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506:...

Security update for trivy (important)

openSUSE security update: security update for trivy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20956-1 Rating: important References: bsc1265648 bsc1266075 bsc1266495 bsc1267047 bsc1267268 Cross-References: CVE-2026-25680 CVE-2026-25681...

OPENSUSE-SU-2026:20956-1 Security update for trivy

This update for trivy fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files bsc1267047. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2025:0303-1 Rating: important References: 1232948 1235265 1246151 Cross-References: CVE-2024-45338 CVE-2024-51744 CVE-2025-53547 CVSS scores: CVE-2024-45338 SUSE: 8.2...

trivy-0.71.0-1.1 on GA media (moderate)

trivy-0.71.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10941-1 Rating: moderate Cross-References: CVE-2026-25680 CVE-2026-25681 CVE-2026-27136 CVE-2026-42502 CVE-2026-42506 CVE-2026-44740 CVSS scores: CVE-2026-25680 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25680 SU...

GHSA-VVGJ-X9JQ-8CJ9 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, dkron, coredns, teleport, mediamtx-fips, ipfs-cluster-fips, prometheus-blackbox-exporter-fips, kubernetes-dns-node-cache, rke2-runtime-fips, ipfs-cluster, kyverno-policy-reporter-plugins-trivy, prometheus-blackbox-exporter, k8sgateway,...

CVE-2026-40898 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, dkron, coredns, teleport, mediamtx-fips, ipfs-cluster-fips, prometheus-blackbox-exporter-fips, kubernetes-dns-node-cache, rke2-runtime-fips, ipfs-cluster, kyverno-policy-reporter-plugins-trivy, prometheus-blackbox-exporter, k8sgateway,...

PT-2026-45973

These are all security issues fixed in the trivy-0.71.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10941-1 trivy-0.71.0-1.1 on GA media

These are all security issues fixed in the trivy-0.71.0-1.1 package on the GA media of openSUSE Tumbleweed...