Skip to content
OpenAdvisories
High · 7.5 CVE-2025-22868 EUVD-2025-5341GHSA-3wqc-mwfx-672pGHSA-6v2p-p543-phr9GO-2025-3488

Unexpected memory consumption during token parsing in golang.org/x/oauth2

Published Feb 26, 2025 · Updated Feb 26, 2025 · Assigned by Go

Vendor: golang.org/x/oauth2 Product: golang.org/x/oauth2/jws Package: aactl Package: actions-runner-controller Package: actions-runner-controller-compat Package: addon-resizer Package: addon-resizer-compat Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-all Package: amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard Package: amazon-cloudwatch-agent-compat Package: amazon-cloudwatch-agent-config-downloader Package: amazon-cloudwatch-agent-config-translator Package: amazon-cloudwatch-agent-operator Package: amazon-cloudwatch-agent-operator-compat Package: amazon-cloudwatch-agent-start-amazon-cloudwatch-agent Package: amazon-k8s-cni Package: amazon-k8s-cni-compat Package: amazon-k8s-cni-init Package: amazon-k8s-cni-init-compat Package: apko Package: argo-events Package: argo-rollouts Package: argo-workflows Package: argocd-image-updater Package: argocd-image-updater-compat Package: atlantis Package: authservice Package: authservice-compat Package: aws-application-networking-k8s Package: aws-application-networking-k8s-compat Package: aws-efs-csi-driver Package: aws-load-balancer-controller Package: aws-load-balancer-controller-compat Package: aws-network-policy-agent Package: aws-network-policy-agent-compat Package: aws-privateca-issuer Package: aws-privateca-issuer-compat Package: aws-s3-controller Package: azcopy Package: azcopy Package: azure-workload-identity-webhook Package: azure-workload-identity-webhook-compat Package: bank-vaults Package: bank-vaults-template Package: blobfuse2 Package: cadvisor Package: cadvisor-compat Package: cass-operator Package: cass-operator-compat Package: cass-operator-config Package: cert-exporter Package: cert-manager Package: cert-manager-cmctl Package: cert-manager-istio-csr Package: cert-manager-istio-csr-compat Package: cert-manager-webhook-pdns Package: certificate-transparency Package: certificate-transparency-trillian-ctserver Package: chartmuseum Package: chezmoi Package: cilium-cli Package: cloud-provider-aws-1.31 Package: cloud-provider-aws-1.31-cloud-controller-manager Package: cloud-provider-aws-1.31-ecr-credential-provider Package: cloudflared Package: cloudprober Package: cloudprober-compat Package: cluster-api-aws-controller Package: cluster-api-aws-controller-compat Package: cluster-proportional-autoscaler Package: cluster-proportional-autoscaler-compat Package: conftest Package: containerd-1 Package: containerd-2 Package: containerd-service-1 Package: containerd-service-2 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-stress-1 Package: containerd-stress-2 Package: containerized-data-importer Package: coredns Package: cortex Package: cosign Package: cri-tools Package: crictl Package: critest Package: crossplane-crank Package: crossplane-provider-aws Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudformation-compat Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudfront-compat Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-cloudwatchlogs-compat Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-dynamodb-compat Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-ec2-compat Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-eks-compat Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-elasticache-compat Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-firehose-compat Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-iam-compat Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kinesis-compat Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-kms-compat Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-lambda-compat Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-memorydb-compat Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-rds-compat Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-route53-compat Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-s3-compat Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sns-compat Package: crossplane-provider-aws-sqs Package: crossplane-provider-aws-sqs-compat Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-authorization-compat Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-managedidentity-compat Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-azure-storage-compat Package: crossplane-provider-family-aws Package: crossplane-provider-family-aws-compat Package: crossplane-provider-family-azure Package: crossplane-provider-family-azure-compat Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: ctr-1 Package: ctr-2 Package: cue Package: cue-bash-completion Package: cue-fish-completion Package: cue-zsh-completion Package: dagdotdev Package: dagger Package: dbmate Package: descheduler Package: dex Package: dex-iamguarded-compat Package: distribution Package: docker-cli-buildx Package: docker-compose Package: docker-credential-gcr Package: docker-dind Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: emissary Package: emissary-apiext Package: emissary-oci-entrypoint Package: falcoctl Package: falcosidekick Package: flannel Package: flannel-compat Package: fluent-bit-plugin-loki Package: fluent-operator Package: fluent-watcher Package: fluent-watcher-compat Package: fluent-watcher-config Package: flux Package: flux-helm-controller Package: flux-helm-controller-iamguarded-compat Package: flux-image-automation-controller Package: flux-image-automation-controller-iamguarded-compat Package: flux-image-reflector-controller Package: flux-image-reflector-controller-iamguarded-compat Package: flux-notification-controller Package: flux-notification-controller-iamguarded-compat Package: flux-source-controller Package: flux-source-controller-iamguarded-compat Package: flyte Package: frp Package: fulcio Package: gatus Package: gatus-compat Package: gcsfuse Package: gem-check Package: ghaudit Package: git-credential-oauth Package: gitness Package: gitsign Package: gitsign-config Package: gitsign-credential-cache Package: gke-gcloud-auth-plugin Package: glab Package: go-discover Package: golang-golang-x-oauth2 Package: golang-golang-x-oauth2 Package: golang.org/x/oauth2 Package: gomplate Package: goreleaser Package: gosh Package: gostatsd Package: gpu-feature-discovery Package: grafana-agent-operator Package: grafana-alloy Package: grafana-mimir Package: grafana-operator Package: grafana-operator-bitnami-compat Package: grafana-rollout-operator Package: grpcurl Package: grype Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: harbor-registry Package: header-check Package: helm Package: helm-3 Package: helm-4 Package: helm-operator Package: helm-operator-compat Package: helm-push Package: help-check Package: hubble Package: hubble-compat Package: hubble-ui Package: hubble-ui-backend Package: hydra Package: influxdb Package: ingress-nginx-controller-1.12 Package: istio-pilot-agent-1.25 Package: istio-pilot-agent-1.25-compat Package: jaeger-operator Package: jaeger-operator-compat Package: jitsucom-bulker Package: jitsucom-bulker-bulker Package: jitsucom-bulker-bulker-compat Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingest-compat Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-ingmgr-compat Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-sidecar-compat Package: jitsucom-bulker-syncctl Package: jitsucom-bulker-syncctl-compat Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s Package: k3s-1.32 Package: k3s-multicall Package: k3s-multicall-1.32 Package: k3s-static Package: k3s-static-1.32 Package: k8s-device-plugin Package: k8sgpt Package: k8sgpt-operator Package: k8sgpt-operator-compat Package: k8ssandra-client Package: k8ssandra-client-compat Package: k8ssandra-operator Package: k8ssandra-operator-compat Package: k9s Package: kaf Package: kafka-proxy Package: kafka-proxy-compat Package: kaniko Package: kaniko-compat Package: kaniko-warmer Package: kaniko-warmer-compat Package: kapp Package: kapp-controller Package: kapp-controller-compat Package: kargo Package: kargo-oci-compat Package: katib-controller Package: katib-controller-compat Package: katib-db-manager Package: katib-db-manager-compat Package: katib-earlystopping Package: katib-file-metricscollector Package: katib-file-metricscollector-compat Package: katib-suggestion-goptuna Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-hyperopt Package: katib-suggestion-nas-darts Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: keda Package: kiali Package: knative-client Package: ko Package: kor Package: kots Package: kots-compat Package: kots-symlink-compat Package: kpt Package: kserve Package: kserve-agent Package: kserve-agent-compat Package: kserve-manager Package: kserve-manager-compat Package: kserve-modelmesh-serving Package: kserve-modelmesh-serving-compat Package: kserve-qpext Package: kserve-qpext-compat Package: kserve-router Package: kserve-router-compat Package: kserve-storage-controller Package: ksops Package: ksops-compat Package: kube-bench Package: kube-bench-configs Package: kube-fluentd-operator Package: kube-fluentd-operator-compat Package: kube-fluentd-operator-default-config Package: kube-fluentd-operator-oci-entrypoint Package: kube-logging-operator Package: kube-logging-operator-compat Package: kube-logging-operator-config-reloader Package: kube-logging-operator-config-reloader-compat Package: kube-logging-operator-fluentd-outputs Package: kube-rbac-proxy Package: kube-state-metrics Package: kube-state-metrics-iamguarded-compat Package: kube-vip Package: kube-vip-compat Package: kubectl-1.27 Package: kubectl-1.27-default Package: kubectl-1.28 Package: kubectl-1.28-default Package: kubectl-1.29 Package: kubectl-1.29-default Package: kubectl-1.30 Package: kubectl-1.30-default Package: kubectl-1.31 Package: kubectl-1.32 Package: kubectl-1.32-default Package: kubectl-argo-rollouts Package: kubectl-bash-completion-1.27 Package: kubectl-bash-completion-1.28 Package: kubectl-bash-completion-1.29 Package: kubectl-bash-completion-1.30 Package: kubeflow-katib Package: kubeflow-pipelines Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-cache-deployer Package: kubeflow-pipelines-cache-deployer-compat Package: kubeflow-pipelines-frontend Package: kubeflow-pipelines-metadata-envoy-config Package: kubeflow-pipelines-metadata-writer Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: kuberay-operator Package: kuberay-operator-compat Package: kuberlr Package: kubernetes Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-driver-nfs-compat Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-attacher-compat Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-dashboard Package: kubernetes-dashboard-api Package: kubernetes-dashboard-api-compat Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-auth-compat Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-metrics-scraper-compat Package: kubernetes-dashboard-web Package: kubernetes-dashboard-web-compat Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubernetes-event-exporter-iamguarded-compat Package: kubernetes-replicator Package: kubescape Package: kubevela Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubevela-vela-core-compat Package: kubewatch Package: kwok Package: kwokctl Package: kyverno-notation-aws Package: kyverno-notation-aws-compat Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-kyverno-plugin-compat Package: ldd-check Package: linkerd2 Package: linkerd2-cli Package: linkerd2-controller Package: linkerd2-controller-compat Package: linkerd2-debug Package: linkerd2-metrics-api Package: linkerd2-metrics-api-compat Package: linkerd2-proxy-identity Package: linkerd2-tap Package: linkerd2-tap-compat Package: linkerd2-web Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: local-static-provisioner-compat Package: local-volume-node-cleanup Package: local-volume-node-cleanup-compat Package: lvm-driver Package: lvm-driver-compat Package: memcached-exporter Package: memcached-exporter-iamguarded-compat Package: metacontroller Package: metallb Package: metallb-controller Package: metallb-controller-compat Package: metallb-cp-tool Package: metallb-cp-tool-compat Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metallb-speaker-compat Package: metrics-server Package: metrics-server-compat Package: metrics-server-iamguarded-compat Package: minio Package: minio-iamguarded-2025-compat Package: minio-operator Package: minio-operator-compat Package: minio-operator-sidecar Package: minio-operator-sidecar-compat Package: moby-engine Package: mps-control-daemon Package: multus-cni Package: multus-cni-compat Package: neuvector-sigstore-interface Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-nri-kube-events Package: newrelic-nri-statsd Package: nfs-subdir-external-provisioner Package: nginx-prometheus-exporter Package: nginx-prometheus-exporter-iamguarded-compat Package: no-docs-check Package: node-problem-detector Package: nodetaint Package: nri-discovery-kubernetes Package: nri-discovery-kubernetes-compat Package: nri-kubernetes Package: nri-prometheus Package: nuclei Package: nvidia-device-plugin Package: oauth2-proxy Package: oauth2-proxy-iamguarded-compat Package: octo-sts Package: octo-sts-webhook Package: openbao Package: openbao-compat Package: openbao-k8s Package: openbao-k8s-compat Package: opencost Package: opencost-compat Package: openfga Package: openfga-compat Package: openfga-healthcheck-compat Package: opensearch-k8s-operator Package: opensearch-k8s-operator-compat Package: opentelemetry-collector Package: opentelemetry-collector-compat Package: opentelemetry-collector-ocb Package: opentelemetry-operator Package: opentelemetry-operator-compat Package: opentelemetry-operator-otel-allocator Package: opentelemetry-operator-otel-allocator-compat Package: opentofu-1.9 Package: package-type-check Package: packer Package: pluto Package: pluto-compat Package: podman Package: podman-doc Package: policy-controller Package: policy-controller-tester Package: portieris Package: portieris-compat Package: postgres-operator Package: postgres-operator-compat Package: prometheus Package: prometheus-3.2 Package: prometheus-adapter Package: prometheus-admission-webhook Package: prometheus-alertmanager Package: prometheus-alertmanager-iamguarded-compat Package: prometheus-config-reloader Package: prometheus-operator Package: prometheus-operator-iamguarded-compat Package: prometheus-pushgateway Package: prometheus-pushgateway-iamguarded-compat Package: promxy Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-go Package: pulumi-language-nodejs Package: pulumi-language-python Package: py3.10-ambassador Package: py3.11-ambassador Package: py3.12-ambassador Package: py3.13-ambassador Package: rabbitmq-cluster-operator Package: rabbitmq-cluster-operator-compat Package: rabbitmq-cluster-operator-iamguarded-compat Package: rabbitmq-messaging-topology-operator Package: rabbitmq-messaging-topology-operator-compat Package: rabbitmq-messaging-topology-operator-iamguarded-compat Package: rancher-fleet Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-fleet-termination-log Package: rclone Package: rclone-compat Package: redis-operator Package: redis-operator-compat Package: rekor Package: rekor-backfill-index Package: rekor-cli Package: rekor-server Package: restic Package: restic-compat Package: rook Package: rook-oci-compat Package: sbomqs Package: scorecard Package: seaweedfs Package: seaweedfs-iamguarded-compat Package: seaweedfs-oci-entrypoint Package: secrets-store-csi-driver Package: secrets-store-csi-driver-crds Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-gcp Package: sigstore-scaffolding Package: sigstore-scaffolding-cloudsqlproxy Package: sigstore-scaffolding-ctlog-createctconfig Package: sigstore-scaffolding-ctlog-managectroots Package: sigstore-scaffolding-ctlog-verifyfulcio Package: sigstore-scaffolding-fulcio-createcerts Package: sigstore-scaffolding-getoidctoken Package: sigstore-scaffolding-rekor-createsecret Package: sigstore-scaffolding-trillian-createdb Package: sigstore-scaffolding-trillian-createtree Package: sigstore-scaffolding-trillian-updatetree Package: sigstore-scaffolding-tsa-createcertchain Package: sigstore-scaffolding-tuf-createsecret Package: sigstore-scaffolding-tuf-server Package: skaffold Package: skopeo Package: snyk-cli Package: sonobuoy Package: sonobuoy-compat Package: sops Package: spark-operator Package: spark-operator-oci-entrypoint Package: spegel Package: spegel-compat Package: spire-agent Package: spire-controller-manager Package: spire-controller-manager-compat Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: splunk-otel-collector-compat Package: splunk-otel-collector-doc Package: sql_exporter Package: src Package: src-fingerprint Package: sriov-network-device-plugin Package: sriov-network-device-plugin-entrypoint Package: stakater-reloader Package: stakater-reloader-compat Package: step Package: step-ca Package: step-issuer Package: step-issuer-compat Package: step-kms-plugin Package: stern Package: symlink-check Package: syspeek Package: tailscale Package: tailscale-compat Package: tdbg Package: tdbg-compat Package: tekton-chains Package: telegraf Package: temporal Package: temporal-cassandra-tool Package: temporal-cassandra-tool-compat Package: temporal-compat Package: temporal-server Package: temporal-server-compat Package: temporal-server-oci-entrypoint Package: temporal-server-schema Package: temporal-sql-tool Package: temporal-sql-tool-compat Package: temporal-ui-server Package: temporal-ui-server-oci-entrypoint Package: terraform Package: terraform-compat Package: terraform-local-provider-config Package: terraform-provider-acme Package: terraform-provider-azuread Package: terraform-provider-azurerm Package: terraform-provider-google Package: terraform-provider-kubernetes Package: terraform-provider-pagerduty Package: terragrunt Package: terragrunt-docs Package: tflint Package: tflint-compat Package: tfsec Package: thanos Package: thanos-iamguarded-compat Package: thanos-operator Package: thanos-operator-compat Package: timestamp-authority Package: timestamp-authority-cli Package: timestamp-authority-server Package: timoni Package: tkn Package: traefik-3.3 Package: trillian Package: trillian-logserver Package: trillian-logsigner Package: trivy Package: trufflehog Package: trust-manager Package: tw Package: tw-pip-check Package: twt Package: up Package: usrmerge-tool Package: vault-benchmark Package: vault-benchmark-compat Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: velero Package: velero-compat Package: velero-plugin-for-aws Package: velero-plugin-for-aws-compat Package: velero-plugin-for-csi Package: velero-plugin-for-csi-compat Package: velero-plugin-for-microsoft-azure Package: velero-plugin-for-microsoft-azure-compat Package: velero-restore-helper Package: vendir Package: ver-check Package: verify-service Package: vertical-pod-autoscaler Package: vertical-pod-autoscaler-recommender Package: vertical-pod-autoscaler-updater Package: vexctl Package: victoriametrics Package: victoriametrics-cluster Package: victoriametrics-compat Package: victoriametrics-operator Package: victoriametrics-operator-compat Package: victoriametrics-vmagent Package: victoriametrics-vmagent-cluster Package: victoriametrics-vmagent-cluster-compat Package: victoriametrics-vmagent-compat Package: victoriametrics-vmalert Package: victoriametrics-vmalert-cluster Package: victoriametrics-vmalert-cluster-compat Package: victoriametrics-vmalert-compat Package: victoriametrics-vmauth Package: victoriametrics-vmauth-compat Package: victoriametrics-vminsert-cluster Package: victoriametrics-vminsert-cluster-compat Package: victoriametrics-vmselect-cluster Package: victoriametrics-vmselect-cluster-compat Package: victoriametrics-vmstorage-cluster Package: victoriametrics-vmstorage-cluster-compat Package: vitess Package: volume-modifier-for-k8s Package: wal-g Package: wal-g-pg Package: wave Package: weaviate Package: wgcf Package: whereabouts Package: whereabouts-compat Package: x509-certificate-exporter Package: x509-certificate-exporter-compat Package: xeol Package: xeol-compat Package: yunikorn-k8shim Package: yunikorn-k8shim-compat Package: zarf Package: zot Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

Affected products

VendorProductAffectedFixed
golang.org/x/oauth2 golang.org/x/oauth2/jws < 0.27.0 0.27.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-golang-x-oauth2 0.27.0-1 —
Debian 13 golang-golang-x-oauth2 0.27.0-1 —
Debian 12 golang-golang-x-oauth2 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-golang-x-oauth2 No fix yet —
Ubuntu 26.04 LTS golang-golang-x-oauth2 No fix yet —
Ubuntu 25.10 golang-golang-x-oauth2 No fix yet —
Ubuntu 24.04 LTS golang-golang-x-oauth2 No fix yet —
Ubuntu 22.04 LTS golang-golang-x-oauth2 No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS golang-golang-x-oauth2 No fix yet —
Ubuntu 18.04 LTS golang-golang-x-oauth2 No fix yet —
Ubuntu 16.04 LTS golang-golang-x-oauth2 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 opentelemetry-collector 0.107.0-9.el10_0 RHSA-2025:7479
RHEL 9 opentelemetry-collector 0.107.0-8.el9_5 RHSA-2025:7407, RHSA-2025:3335
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 EUS opentelemetry-collector 0.107.0-7.el9_4 RHSA-2025:3593

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 opentelemetry-collector 0.107.0-9.el10_0 RLSA-2025:7479

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 docker-stable 24.0.9_ce-150000.1.25.1 SUSE-SU-2026:0972-1, SUSE-SU-2025:03545-1
SLES 15 SP7 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP7 ignition 2.14.0-150400.9.9.1 SUSE-SU-2025:02014-1
SLES 15 SP6 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES 15 SP6 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES 15 SP6 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES 15 SP6 google-cloud-sap-agent 3.6-150100.3.44.1 SUSE-SU-2025:0882-1
SLES 15 SP6 google-guest-agent 20250116.00-150000.1.57.1 SUSE-SU-2026:2612-1, SUSE-SU-2025:1005-1
SLES 15 SP6 google-osconfig-agent 20250115.01-150000.1.47.1 SUSE-SU-2025:1006-1
SLES 15 SP6 govulncheck-vulndb 0.0.20250226T025151-150000.1.35.1 SUSE-SU-2025:0770-1
SLES 15 SP6 ignition 2.14.0-150400.9.9.1 SUSE-SU-2025:02014-1
SLES 15 SP6 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLES 15 SP5 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES 15 SP5 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES 15 SP5 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES 15 SP5 google-cloud-sap-agent 3.6-150100.3.44.1 SUSE-SU-2025:0882-1
SLES 15 SP5 google-guest-agent 20250116.00-150000.1.57.1 SUSE-SU-2026:2612-1, SUSE-SU-2025:1005-1
SLES 15 SP5 google-osconfig-agent 20250115.01-150000.1.47.1 SUSE-SU-2025:1006-1
SLES 15 SP5 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLES 15 SP4 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES 15 SP4 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES 15 SP4 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES 15 SP4 google-cloud-sap-agent 3.6-150100.3.44.1 SUSE-SU-2025:0882-1
SLES 15 SP4 google-guest-agent 20250116.00-150000.1.57.1 SUSE-SU-2026:2612-1, SUSE-SU-2025:1005-1
SLES 15 SP4 google-osconfig-agent 20250115.01-150000.1.47.1 SUSE-SU-2025:1006-1
SLES 15 SP4 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLES 15 SP3 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES 15 SP3 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES 15 SP3 google-cloud-sap-agent 3.6-150100.3.44.1 SUSE-SU-2025:0882-1
SLES 15 SP3 google-guest-agent 20250116.00-150000.1.57.1 SUSE-SU-2025:1005-1
SLES 15 SP3 google-osconfig-agent 20250115.01-150000.1.47.1 SUSE-SU-2025:1006-1
Show 21 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 docker 27.5.1_ce-98.126.1 SUSE-SU-2025:1102-1
SLES 12 SP5 docker-stable 24.0.9_ce-1.11.1 SUSE-SU-2026:1118-1, SUSE-SU-2025:1102-1, SUSE-SU-2025:03540-1
SLES 12 google-cloud-sap-agent 3.6-6.43.1 SUSE-SU-2025:0881-1
SLES 12 google-guest-agent 20250116.00-1.47.2 SUSE-SU-2026:2581-1, SUSE-SU-2025:0872-1
SLES 12 google-osconfig-agent 20250115.01-1.38.1 SUSE-SU-2025:0852-1
SLES for SAP 16.0 google-guest-agent 20260430.00-160000.1.1 SUSE-SU-2026:22128-1
SLES for SAP 16.0 google-osconfig-agent 20260615.01-160000.1.2 SUSE-SU-2026:22558-1
SLES for SAP 15 SP5 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES for SAP 15 SP5 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES for SAP 15 SP5 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES for SAP 15 SP5 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLES for SAP 15 SP4 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES for SAP 15 SP4 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES for SAP 15 SP4 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES for SAP 15 SP4 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLES for SAP 15 SP3 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES for SAP 15 SP3 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES 16.0 google-guest-agent 20260430.00-160000.1.1 SUSE-SU-2026:22128-1
SLES 16.0 google-osconfig-agent 20260615.01-160000.1.2 SUSE-SU-2026:22558-1
SLE Micro 6.1 docker 27.5.1_ce-slfo.1.1_2.1 SUSE-SU-2025:20393-1, SUSE-SU-2025:20360-1
SLE Micro 6.1 google-guest-agent 20260430.00-slfo.1.1_1.1 SUSE-SU-2026:22133-1
SLE Micro 6.1 google-osconfig-agent 20260615.01-slfo.1.1_1.1 SUSE-SU-2026:22249-1
SLE Micro 6.0 docker 27.5.1_ce-2.1 SUSE-SU-2025:20377-1, SUSE-SU-2025:20205-1
SLE Micro 6.0 google-osconfig-agent 20260615.01-1.1 SUSE-SU-2026:22242-1
SLE Micro 6.0 ignition 2.19.0-2.1 SUSE-SU-2025:20515-1
SLE Micro 5.5 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE Micro 5.5 google-guest-agent 20250116.00-150000.1.57.1 SUSE-SU-2026:2612-1, SUSE-SU-2025:1005-1
SLE Micro 5.5 google-osconfig-agent 20250115.01-150000.1.47.1 SUSE-SU-2025:1006-1
SLE Micro 5.5 ignition 2.17.0-150500.3.12.1 SUSE-SU-2025:02097-1
SLE Micro 5.4 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE Micro 5.4 ignition 2.15.0-150400.4.11.1 SUSE-SU-2025:02041-1
SLE Micro 5.3 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE Micro 5.3 ignition 2.14.0-150400.4.9.1 SUSE-SU-2025:02046-1
SLE Micro 5.2 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE Micro 5.2 ignition 2.14.0-150300.6.13.1 SUSE-SU-2025:02040-1
SLE Micro 5.1 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE Micro 5.1 ignition 2.14.0-150300.4.13.1 SUSE-SU-2025:02035-1
SLE HPC 15 SP5 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLE HPC 15 SP5 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE HPC 15 SP5 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLE HPC 15 SP5 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLE HPC 15 SP4 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLE HPC 15 SP4 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE HPC 15 SP4 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLE HPC 15 SP4 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLE HPC 15 SP3 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE HPC 15 SP3 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SUSE Package Hub 15 SP6 cadvisor 0.52.1-bp156.3.3.1 openSUSE-SU-2025:0103-1
SUSE Package Hub 15 SP6 restic 0.17.3-bp156.2.3.1 openSUSE-SU-2025:0091-1
SUSE Manager Server 4.3 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SUSE Manager Server 4.3 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SUSE Manager Proxy 4.3 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SUSE Manager Proxy 4.3 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SUSE Enterprise Storage 7.1 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SUSE Enterprise Storage 7.1 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed cadvisor 0.52.1-1.1 openSUSE-SU-2025:14904-1
openSUSE Tumbleweed cosign 2.5.0-1.1 openSUSE-SU-2025:14988-1
openSUSE Tumbleweed docker 27.5.1_ce-15.1 openSUSE-SU-2025:14985-1
openSUSE Tumbleweed docker-stable 24.0.9_ce-8.1 openSUSE-SU-2025:14923-1
openSUSE Tumbleweed fake-gcs-server 1.52.2-1.1 openSUSE-SU-2025:14868-1
openSUSE Tumbleweed go-containerregistry 0.20.3-2.1 openSUSE-SU-2025:14905-1
openSUSE Tumbleweed google-guest-agent 20250116.00-3.1 openSUSE-SU-2025:14869-1
openSUSE Tumbleweed google-osconfig-agent 20250115.01-3.1 openSUSE-SU-2025:14870-1
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250226T025151-1.1 openSUSE-SU-2025:14843-1
openSUSE Tumbleweed pluto 5.21.7-1.1 openSUSE-SU-2025:15184-1
openSUSE Tumbleweed rekor 1.3.10-1.1 openSUSE-SU-2025:14990-1
openSUSE Tumbleweed restic 0.17.3-2.1 openSUSE-SU-2025:14874-1
openSUSE Tumbleweed teleport 17.2.9-1.1 openSUSE-SU-2025:14839-1
openSUSE Tumbleweed traefik 3.4.3-1.1 openSUSE-SU-2025:15304-1
openSUSE Tumbleweed traefik2 2.11.26-1.1 openSUSE-SU-2025:15305-1
openSUSE Tumbleweed trivy 0.65.0-1.1 openSUSE-SU-2025:15454-1
openSUSE Tumbleweed velociraptor 0.7.0.4.git185.a5708584-2.1 openSUSE-SU-2026:11126-1
openSUSE Tumbleweed vexctl 0.4.1+git78.f951e3a-1.1 openSUSE-SU-2026:10230-1
openSUSE Leap 16.0 cadvisor 0.60.3-bp160.1.1 openSUSE-SU-2026:21265-1
openSUSE Leap 16.0 go-containerregistry 0.22.1-bp160.1.1 openSUSE-SU-2026:22227-1
openSUSE Leap 16.0 google-guest-agent 20260430.00-160000.1.1 openSUSE-SU-2026:20969-1
openSUSE Leap 16.0 google-osconfig-agent 20260615.01-160000.1.2 openSUSE-SU-2026:21210-1
openSUSE Leap 16.0 vexctl 0.4.4+git20.5d61136-160000.1.1 openSUSE-SU-2026:21481-1
openSUSE Leap 15.6 cadvisor 0.52.1-bp156.3.3.1 openSUSE-SU-2025:0103-1
openSUSE Leap 15.6 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
openSUSE Leap 15.6 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
openSUSE Leap 15.6 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2026:0972-1, SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
openSUSE Leap 15.6 google-cloud-sap-agent 3.6-150100.3.44.1 SUSE-SU-2025:0882-1
openSUSE Leap 15.6 google-guest-agent 20250116.00-150000.1.57.1 SUSE-SU-2025:1005-1
openSUSE Leap 15.6 google-osconfig-agent 20250115.01-150000.1.47.1 SUSE-SU-2025:1006-1
openSUSE Leap 15.6 govulncheck-vulndb 0.0.20250226T025151-150000.1.35.1 SUSE-SU-2025:0770-1
openSUSE Leap 15.6 ignition 2.14.0-150400.9.9.1 SUSE-SU-2025:02014-1
openSUSE Leap 15.6 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
openSUSE Leap 15.6 restic 0.17.3-bp156.2.3.1 openSUSE-SU-2025:0091-1
openSUSE Leap 15.6 vexctl 0.4.1+git78.f951e3a-150000.1.11.1 SUSE-SU-2026:0592-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 docker 25.0.8-1.amzn2023.0.2 ALAS2023-2025-934

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 azcopy 10.25.1-2 —
Azure Linux 3 cert-manager 1.12.15-2 —
Azure Linux 3 containerized-data-importer 1.57.0-13 —
Azure Linux 3 coredns 1.11.4-3 —
Azure Linux 3 influxdb 2.7.5-2 —
Azure Linux 3 keda 2.14.1-3 —
Azure Linux 3 kubernetes 1.30.10-3 —
Azure Linux 3 moby-engine 25.0.3-11 —
Azure Linux 3 node-problem-detector 0.8.20-2 —
Azure Linux 3 packer 1.9.5-6 —
Azure Linux 3 prometheus 2.45.4-10 —
Azure Linux 3 telegraf 1.31.0-7 —
Azure Linux 3 vitess 19.0.4-5 —
Azure Linux 2 (CBL-Mariner) azcopy 10.25.1-5 —
Azure Linux 2 (CBL-Mariner) blobfuse2 2.1.2-8 —
Azure Linux 2 (CBL-Mariner) cert-manager 1.11.2-20 —
Azure Linux 2 (CBL-Mariner) coredns 1.11.1-14 —
Azure Linux 2 (CBL-Mariner) kubernetes 1.28.4-15 —
Azure Linux 2 (CBL-Mariner) moby-engine 24.0.9-15 —
Azure Linux 2 (CBL-Mariner) node-problem-detector 0.8.17-6 —
Azure Linux 2 (CBL-Mariner) packer 1.9.5-10 —
Azure Linux 2 (CBL-Mariner) telegraf 1.29.4-13 —
Azure Linux 2 (CBL-Mariner) vitess 17.0.7-5 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r28 —
Wolfi rolling actions-runner-controller +1 0.10.1-r5 —
Wolfi rolling addon-resizer +1 1.8.23-r2 —
Wolfi rolling amazon-cloudwatch-agent +6 1.300053.0-r7 —
Wolfi rolling amazon-cloudwatch-agent-operator +1 2.2.0-r1 —
Wolfi rolling amazon-k8s-cni +3 1.19.3-r1 —
Wolfi rolling apko 0.25.5-r0 —
Wolfi rolling argo-events 1.9.5-r4 —
Wolfi rolling argo-rollouts +1 1.8.0-r32 —
Wolfi rolling argo-workflows 3.6.5-r2 —
Wolfi rolling argocd-image-updater +1 0.15.2-r7 —
Wolfi rolling atlantis 0.33.0-r3 —
Wolfi rolling authservice +1 1.0.4-r3 —
Wolfi rolling aws-application-networking-k8s +1 1.1.0-r4 —
Wolfi rolling aws-efs-csi-driver 2.1.6-r1 —
Wolfi rolling aws-load-balancer-controller +1 2.12.0-r1 —
Wolfi rolling aws-network-policy-agent +1 1.1.6-r3 —
Wolfi rolling aws-privateca-issuer +1 1.4.1-r1 —
Wolfi rolling aws-s3-controller 1.0.27-r31 —
Wolfi rolling azcopy 10.28.0-r3 —
Wolfi rolling bank-vaults +1 1.20.4-r29 —
Wolfi rolling cadvisor +1 0.52.1-r3 —
Wolfi rolling cass-operator +2 1.23.0-r4 —
Wolfi rolling cert-exporter 2.14.0-r8 —
Wolfi rolling cert-manager-cmctl 2.1.1-r6 —
Wolfi rolling cert-manager-istio-csr +1 0.14.0-r4 —
Wolfi rolling cert-manager-webhook-pdns 2.5.2-r1 —
Wolfi rolling certificate-transparency +1 1.3.1-r4 —
Wolfi rolling chartmuseum 0.16.2-r12 —
Wolfi rolling chezmoi 2.60.1-r0 —
Wolfi rolling cilium-cli 0.18.2-r2 —
Wolfi rolling cloud-provider-aws-1.31 +2 1.31.5-r32 —
Wolfi rolling cloudflared 2025.2.1-r1 —
Wolfi rolling cloudprober +1 0.13.9-r3 —
Wolfi rolling cluster-api-aws-controller +1 2.8.4-r2 —
Wolfi rolling cluster-proportional-autoscaler +1 1.9.1-r1 —
Wolfi rolling conftest 0.58.0-r3 —
Wolfi rolling cortex +1 1.19.0-r2 —
Wolfi rolling cosign 2.4.3-r3 —
Wolfi rolling crictl +2 1.32.0-r5 —
Wolfi rolling crossplane-provider-aws +38 1.21.0-r2 —
Wolfi rolling crossplane-provider-keycloak 1.7.0-r8 —
Wolfi rolling ctr-1 +4 1.7.26-r3 —
Wolfi rolling ctr-2 +4 2.0.3-r2 —
Wolfi rolling cue +3 0.12.0-r2 —
Wolfi rolling dagdotdev 0.0.13-r3 —
Wolfi rolling dagger 0.16.2-r2 —
Wolfi rolling dbmate 2.26.0-r2 —
Wolfi rolling descheduler 0.32.2-r32 —
Wolfi rolling dex +1 2.42.0-r3 —
Wolfi rolling distribution 3.0.0-r32 —
Wolfi rolling docker-cli-buildx 0.21.2-r2 —
Wolfi rolling docker-compose 2.33.1-r2 —
Wolfi rolling docker-credential-gcr 2.1.26-r4 —
Wolfi rolling docker-dind 28.0.1-r1 —
Wolfi rolling doppler-kubernetes-operator 1.5.7-r1 —
Wolfi rolling dynamic-localpv-provisioner 4.2.0-r4 —
Wolfi rolling eksctl 0.205.0-r2 —
Wolfi rolling emissary +6 3.9.1-r12 —
Wolfi rolling falcoctl +1 0.11.0-r4 —
Wolfi rolling falcosidekick 2.31.1-r2 —
Wolfi rolling flannel +1 0.26.5-r1 —
Wolfi rolling fluent-bit-plugin-loki 3.4.2-r2 —
Wolfi rolling fluent-watcher +3 3.2.0-r8 —
Wolfi rolling flux 2.5.1-r1 —
Wolfi rolling flux-helm-controller +1 1.2.0-r1 —
Wolfi rolling flux-image-automation-controller +1 0.40.0-r2 —
Wolfi rolling flux-image-reflector-controller +1 0.34.0-r2 —
Wolfi rolling flux-notification-controller +3 1.5.0-r1 —
Wolfi rolling flux-source-controller +1 1.5.0-r4 —
Wolfi rolling flyte 1.15.0-r3 —
Wolfi rolling frp 0.61.2-r0 —
Wolfi rolling fulcio 1.6.6-r4 —
Wolfi rolling gatus +1 5.16.0-r3 —
Wolfi rolling gcsfuse 1.4.2-r17 —
Wolfi rolling ghaudit 0.4.0-r10 —
Wolfi rolling git-credential-oauth 0.15.0-r1 —
Wolfi rolling gitness 3.1.1-r5 —
Wolfi rolling gitsign +2 0.12.0-r7 —
Wolfi rolling gke-gcloud-auth-plugin 0.1.0-r3 —
Wolfi rolling glab 1.54.0-r0 —
Wolfi rolling go-discover 0_git20250320-r0 —
Wolfi rolling gomplate 4.3.1-r0 —
Wolfi rolling goreleaser 2.7.0-r3 —
Wolfi rolling gostatsd 28.3.0-r12 —
Wolfi rolling grafana-agent-operator 0.44.5-r1 —
Wolfi rolling grafana-alloy 1.7.2-r2 —
Wolfi rolling grafana-mimir 2.15.0-r7 —
Wolfi rolling grafana-operator +1 5.17.0-r1 —
Wolfi rolling grafana-rollout-operator 0.24.0-r32 —
Wolfi rolling grpcurl 1.9.3-r1 —
Wolfi rolling grype 0.89.0-r1 —
Wolfi rolling guac +4 0.13.2-r4 —
Wolfi rolling harbor-registry 3.0.0_alpha1-r24 —
Wolfi rolling helm 3.17.2-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-operator +1 1.39.1-r3 —
Wolfi rolling helm-push 0.10.4-r24 —
Wolfi rolling hubble +1 1.17.1-r1 —
Wolfi rolling hubble-ui +1 0.13.2-r1 —
Wolfi rolling hydra 2.3.0-r4 —
Wolfi rolling ingress-nginx-controller-1.12 1.12.0-r14 —
Wolfi rolling istio-pilot-agent-1.25 +1 1.25.0-r5 —
Wolfi rolling jaeger-operator +1 1.65.0-r2 —
Wolfi rolling jitsucom-bulker +10 2.8.6-r3 —
Wolfi rolling k3d +2 5.8.3-r9 —
Wolfi rolling k3s +2 1.32.2.1-r31 —
Wolfi rolling k3s-1.32 +2 1.32.6.1-r0 —
Wolfi rolling k8s-device-plugin +3 0.17.0-r6 —
Wolfi rolling k8sgpt 0.4.0-r1 —
Wolfi rolling k8sgpt-operator +1 0.2.9-r1 —
Wolfi rolling k8ssandra-client +1 0.6.0-r5 —
Wolfi rolling k8ssandra-operator +1 1.21.1-r1 —
Wolfi rolling k9s 0.40.10-r1 —
Wolfi rolling kaf 0.2.8-r12 —
Wolfi rolling kafka-proxy +1 0.4.1-r2 —
Wolfi rolling kaniko +3 1.23.2-r11 —
Wolfi rolling kapp 0.64.0-r5 —
Wolfi rolling kapp-controller +1 0.55.1-r1 —
Wolfi rolling kargo +1 1.3.1-r3 —
Wolfi rolling kiali 2.6.0-r1 —
Wolfi rolling knative-client 1.17.0-r2 —
Wolfi rolling ko 0.17.1-r8 —
Wolfi rolling kor 0.5.9-r2 —
Wolfi rolling kots +2 1.124.5-r1 —
Wolfi rolling kpt 1.0.0_beta55-r4 —
Wolfi rolling kserve +9 0.14.1-r5 —
Wolfi rolling kserve-modelmesh-serving +1 0.12.0-r8 —
Wolfi rolling ksops +1 4.3.3-r5 —
Wolfi rolling kube-bench +1 0.10.4-r3 —
Wolfi rolling kube-fluentd-operator +3 1.18.2-r32 —
Wolfi rolling kube-logging-operator +4 5.2.0-r0 —
Wolfi rolling kube-rbac-proxy 0.19.0-r2 —
Wolfi rolling kube-state-metrics +1 2.15.0-r6 —
Wolfi rolling kube-vip +1 0.8.9-r4 —
Wolfi rolling kubectl-1.28 +2 1.28.15-r9 —
Wolfi rolling kubectl-1.29 +2 1.29.14-r3 —
Wolfi rolling kubectl-1.30 +2 1.30.11-r2 —
Wolfi rolling kubectl-1.31 1.31.14-r0 —
Wolfi rolling kubectl-1.32 +1 1.32.3-r2 —
Wolfi rolling kubeflow-katib +17 0.17.0-r12 —
Wolfi rolling kubeflow-pipelines +11 2.4.0-r6 —
Wolfi rolling kuberay-operator +3 1.3.0-r1 —
Wolfi rolling kuberlr 0.6.0-r1 —
Wolfi rolling kubernetes-csi-driver-nfs +1 4.10.0-r2 —
Wolfi rolling kubernetes-csi-external-attacher +1 4.8.1-r1 —
Wolfi rolling kubernetes-csi-external-provisioner 5.2.0-r3 —
Wolfi rolling kubernetes-csi-external-resizer 1.13.2-r1 —
Wolfi rolling kubernetes-dashboard 7.11.1-r1 —
Wolfi rolling kubernetes-dashboard-api +11 1.11.1-r1 —
Wolfi rolling kubernetes-dashboard-auth +1 1.2.4-r1 —
Wolfi rolling kubernetes-dashboard-metrics-scraper +1 1.2.2-r4 —
Wolfi rolling kubernetes-dashboard-web +1 1.6.2-r2 —
Wolfi rolling kubernetes-dns-node-cache 1.25.0-r3 —
Wolfi rolling kubernetes-event-exporter +1 1.7-r18 —
Wolfi rolling kubernetes-replicator 2.11.0-r4 —
Wolfi rolling kubescape 3.0.31-r1 —
Wolfi rolling kubevela +3 1.10.2-r1 —
Wolfi rolling kubewatch 2.9.0-r6 —
Wolfi rolling kwok +1 0.6.1-r5 —
Wolfi rolling kyverno-notation-aws +1 1.1-r7 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin +1 1.6.4-r5 —
Wolfi rolling linkerd2 +10 25.3.1-r1 —
Wolfi rolling litestream 0.3.13-r12 —
Wolfi rolling local-path-provisioner 0.0.31-r2 —
Wolfi rolling local-static-provisioner +3 2.7.0-r14 —
Wolfi rolling lvm-driver +1 1.6.2-r5 —
Wolfi rolling memcached-exporter +1 0.15.1-r2 —
Wolfi rolling metacontroller 4.11.22-r3 —
Wolfi rolling metallb +8 0.14.9-r5 —
Wolfi rolling metrics-server +2 0.7.2-r9 —
Wolfi rolling minio +1 0.20250228.095516-r1 —
Wolfi rolling minio-operator +3 7.0.0-r3 —
Wolfi rolling multus-cni +1 4.1.4-r4 —
Wolfi rolling neuvector-sigstore-interface 0_git20240801-r7 —
Wolfi rolling newrelic-infra-operator 0.21.6-r1 —
Wolfi rolling newrelic-infrastructure-agent 1.62.0-r1 —
Wolfi rolling newrelic-nri-kube-events 2.11.8-r1 —
Wolfi rolling newrelic-nri-statsd 2.11.0-r0 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r17 —
Wolfi rolling nginx-prometheus-exporter +1 1.4.1-r5 —
Wolfi rolling nodetaint 0.0.4-r29 —
Wolfi rolling nri-discovery-kubernetes +1 1.10.1-r1 —
Wolfi rolling nri-kubernetes 3.35.0-r0 —
Wolfi rolling nri-prometheus 2.24.1-r1 —
Wolfi rolling nuclei 3.3.10-r2 —
Wolfi rolling oauth2-proxy +1 7.8.1-r4 —
Wolfi rolling octo-sts +1 0.4.2-r7 —
Wolfi rolling openbao +1 2.2.0-r2 —
Wolfi rolling openbao-k8s +1 1.4.0-r31 —
Wolfi rolling opencost +1 1.114.0-r2 —
Wolfi rolling openfga +2 1.8.6-r1 —
Wolfi rolling opensearch-k8s-operator +1 2.7.0-r4 —
Wolfi rolling opentelemetry-collector +2 0.121.0-r1 —
Wolfi rolling opentelemetry-operator +3 0.120.0-r2 —
Wolfi rolling opentofu-1.9 1.9.0-r6 —
Wolfi rolling pluto +1 5.21.3-r1 —
Wolfi rolling podman +1 5.4.1-r2 —
Wolfi rolling policy-controller +1 0.12.0-r5 —
Wolfi rolling portieris +1 0.13.25-r1 —
Wolfi rolling postgres-operator +1 1.14.0-r4 —
Wolfi rolling prometheus-3.2 3.2.1-r2 —
Wolfi rolling prometheus-adapter 0.12.0-r10 —
Wolfi rolling prometheus-alertmanager +1 0.28.1-r2 —
Wolfi rolling prometheus-operator +3 0.81.0-r1 —
Wolfi rolling prometheus-pushgateway +1 1.11.0-r5 —
Wolfi rolling promxy 0.0.92-r33 —
Wolfi rolling pulumi +3 3.156.0-r1 —
Wolfi rolling pulumi-kubernetes-operator 1.16.0-r13 —
Wolfi rolling rabbitmq-cluster-operator +2 2.12.1-r2 —
Wolfi rolling rabbitmq-messaging-topology-operator +2 1.16.0-r2 —
Wolfi rolling rancher-fleet +4 0.11.5-r3 —
Wolfi rolling rclone +1 1.69.1-r2 —
Wolfi rolling redis-operator +1 0.19.1-r1 —
Wolfi rolling rekor +3 1.3.9-r6 —
Wolfi rolling restic +1 0.17.3-r5 —
Wolfi rolling rook +1 1.16.5-r1 —
Wolfi rolling sbomqs 1.0.2-r2 —
Wolfi rolling scorecard 5.1.1-r2 —
Wolfi rolling seaweedfs +2 3.85-r2 —
Wolfi rolling secrets-store-csi-driver +1 1.4.8-r3 —
Wolfi rolling secrets-store-csi-driver-provider-aws 0.3.11-r31 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.7.0-r6 —
Wolfi rolling sigstore-scaffolding +13 0.7.21-r1 —
Wolfi rolling skaffold 2.14.1-r3 —
Wolfi rolling skopeo 1.18.0-r3 —
Wolfi rolling snyk-cli 1.1295.4-r1 —
Wolfi rolling sonobuoy +1 0.57.3-r1 —
Wolfi rolling sops 3.9.4-r4 —
Wolfi rolling spark-operator +1 2.1.0-r7 —
Wolfi rolling spegel +1 0.0.30-r3 —
Wolfi rolling spire-agent +2 1.11.2-r4 —
Wolfi rolling spire-controller-manager +1 0.6.1-r3 —
Wolfi rolling splunk-otel-collector +2 0.120.0-r3 —
Wolfi rolling sql_exporter 0.17.1-r1 —
Wolfi rolling src 6.1.0-r3 —
Wolfi rolling src-fingerprint 0.19.0-r26 —
Wolfi rolling sriov-network-device-plugin +1 3.9.0-r3 —
Wolfi rolling step 0.28.5-r1 —
Wolfi rolling step-ca 0.28.2-r3 —
Wolfi rolling step-issuer +1 0.9.7-r6 —
Wolfi rolling step-kms-plugin 0.12.1-r3 —
Wolfi rolling stern 1.32.0-r2 —
Wolfi rolling tailscale +1 1.80.3-r2 —
Wolfi rolling tdbg +9 1.27.1-r2 —
Wolfi rolling tekton-chains 0.24.0-r4 —
Wolfi rolling temporal +4 1.3.0-r2 —
Wolfi rolling temporal-ui-server +1 2.36.0-r2 —
Wolfi rolling terraform +2 1.5.7-r23 —
Wolfi rolling terraform-provider-acme 2.31.0-r1 —
Wolfi rolling terraform-provider-azuread 3.2.0-r2 —
Wolfi rolling terraform-provider-azurerm 4.22.0-r2 —
Wolfi rolling terraform-provider-google 6.25.0-r1 —
Wolfi rolling terraform-provider-kubernetes 2.36.0-r1 —
Wolfi rolling terraform-provider-pagerduty 3.23.1-r1 —
Wolfi rolling terragrunt +1 0.76.1-r0 —
Wolfi rolling tflint +1 0.55.1-r4 —
Wolfi rolling tfsec 1.28.13-r4 —
Wolfi rolling thanos +1 0.37.2-r6 —
Wolfi rolling thanos-operator +1 0.3.7-r26 —
Wolfi rolling timestamp-authority +2 1.2.4-r5 —
Wolfi rolling timoni 0.24.0-r1 —
Wolfi rolling tkn 0.40.0-r3 —
Wolfi rolling traefik-3.3 3.3.4-r2 —
Wolfi rolling trillian +2 1.7.1-r4 —
Wolfi rolling trivy 0.60.0-r1 —
Wolfi rolling trufflehog 3.88.18-r0 —
Wolfi rolling trust-manager 0.16.0-r3 —
Wolfi rolling tw +14 0.0.7-r0 —
Wolfi rolling up +3 No fix yet —
Wolfi rolling vault-benchmark +1 0.3.0-r32 —
Wolfi rolling vcluster +2 0.23.0-r1 —
Wolfi rolling velero +2 1.15.2-r4 —
Wolfi rolling velero-plugin-for-aws +1 1.11.1-r31 —
Wolfi rolling velero-plugin-for-csi +1 0.7.1-r31 —
Wolfi rolling velero-plugin-for-microsoft-azure +1 1.11.1-r32 —
Wolfi rolling vendir 0.43.0-r4 —
Wolfi rolling vexctl 0.3.0-r8 —
Wolfi rolling victoriametrics +18 1.113.0-r1 —
Wolfi rolling victoriametrics-operator +1 0.54.1-r0 —
Wolfi rolling volume-modifier-for-k8s 0.5.1-r3 —
Wolfi rolling wal-g +1 3.0.7-r2 —
Wolfi rolling wave 0.10.0-r4 —
Wolfi rolling weaviate 1.29.1-r0 —
Wolfi rolling wgcf 2.2.25-r2 —
Wolfi rolling whereabouts +1 0.8.0-r5 —
Wolfi rolling x509-certificate-exporter +1 3.18.1-r4 —
Wolfi rolling xeol +1 0.10.8-r2 —
Wolfi rolling yunikorn-k8shim +1 1.6.1-r3 —
Wolfi rolling zarf 0.49.1-r1 —
Wolfi rolling zot 2.1.2-r4 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/oauth2 < 0.27.0 0.27.0 GHSA-6v2p-p543-phr9

Advisories 50

References