Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-47914 EUVD-2025-198227GHSA-f6x5-jh6r-wrfvGO-2025-4135

Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

Published Nov 19, 2025 · Updated Nov 20, 2025 · Assigned by Go

Vendor: golang.org/x/crypto Product: golang.org/x/crypto/ssh/agent Package: aactl Package: actions-runner-controller Package: actions-runner-controller-compat Package: age Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-config-downloader Package: amazon-cloudwatch-agent-operator Package: amazon-cloudwatch-agent-operator-compat Package: amazon-cloudwatch-agent-start-amazon-cloudwatch-agent Package: apache-exporter Package: apisix-ingress-controller Package: apisix-ingress-controller-compat Package: apisix-ingress-controller-iamguarded-compat Package: argo-cd-3.2 Package: argo-cd-3.2-compat Package: argo-cd-3.2-repo-server Package: argo-events Package: argo-rollouts Package: argocd-image-updater Package: atlantis Package: authservice Package: authservice-compat Package: aws-node-termination-handler Package: aws-otel-collector Package: azcopy Package: azure-ipam Package: azure-workload-identity-webhook Package: azure-workload-identity-webhook-compat Package: bank-vaults-template Package: bento Package: bento-compat Package: blob-csi-1.27 Package: blob-csi-1.27-compat Package: blobfuse2 Package: blobfuse2-health-monitor Package: blobfuse2-syslog Package: bom Package: boring-registry Package: buf Package: buildah Package: buildctl Package: buildkitd Package: caddy Package: caddy-man Package: caddy-src Package: cadvisor Package: calico-3.31 Package: calico-apiserver-3.31 Package: calico-apiserver-compat-3.31 Package: calico-app-policy-3.31 Package: calico-cni-3.31 Package: calico-cni-compat-3.31 Package: calico-felix-3.31 Package: calico-goldmane-3.31 Package: calico-key-cert-provisioner-3.31 Package: calico-kube-controllers-3.31 Package: calico-node-3.31 Package: calico-pod2daemon-3.31 Package: calico-pod2daemon-flexvol-compat-3.31 Package: calico-typha-client-3.31 Package: calico-typhad-3.31 Package: calico-whisker-3.31 Package: calico-whisker-backend-3.31 Package: calicoctl-3.31 Package: cert-exporter Package: cert-manager-cmctl Package: cert-manager-csi-driver Package: cert-manager-csi-driver-compat Package: cert-manager-istio-csr Package: cert-manager-istio-csr-compat Package: cert-manager-webhook-pdns Package: certificate-transparency-trillian-ctserver Package: cfssl-bundle Package: cfssl-mkbundle Package: chartmuseum Package: chezmoi Package: cilium-cli Package: cloud-provider-gcp-cloud-controller-manager Package: cloud-provider-vsphere Package: cloud-sql-proxy-2.16 Package: cloudflared Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cloudprober Package: cluster-api-aws-controller Package: cluster-api-aws-controller-compat Package: cluster-api-azure-controller Package: cluster-api-azure-controller-compat Package: cluster-api-gcp-controller Package: cluster-api-gcp-controller-compat Package: containerd-1 Package: containerd-2 Package: coredns-1.13 Package: coredns-1.13-compat Package: cosign Package: crossplane-crank Package: crossplane-provider-aws Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudformation-compat Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudfront-compat Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-cloudwatchlogs-compat Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-dynamodb-compat Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-ec2-compat Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-eks-compat Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-elasticache-compat Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-firehose-compat Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-iam-compat Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kinesis-compat Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-kms-compat Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-lambda-compat Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-memorydb-compat Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-rds-compat Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sqs Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-authorization-compat Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-managedidentity-compat Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-azure-storage-compat Package: crossplane-provider-family-aws Package: crossplane-provider-family-aws-compat Package: crossplane-provider-family-azure Package: crossplane-provider-family-azure-compat Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: dagdotdev Package: db-operator Package: db-operator-compat Package: db-operator-oci-entrypoint Package: dbmate Package: descheduler Package: dex Package: dex-iamguarded-compat Package: dgraph Package: distribution Package: dkron Package: dkron-executor-kafka Package: dkron-executor-nats Package: docker-cli-buildx Package: docker-compose Package: docker-credential-acr-env Package: docker-dind Package: docker-machine-driver-harvester Package: docker-machine-driver-linode Package: dockerize Package: dynamic-localpv-provisioner Package: eksctl Package: envoy-gateway Package: envoy-gateway-compat Package: envoy-gateway-egctl Package: etcd Package: etcd-3.6 Package: etcd-3.6-iamguarded-compat Package: falco-no-driver Package: falcoctl Package: falcosidekick Package: ferretdb Package: filebrowser Package: flannel Package: flannel-compat Package: fluent-bit-plugin-loki Package: flux Package: flux-2.7 Package: flux-image-automation-controller Package: flux-image-automation-controller-iamguarded-compat Package: flux-image-reflector-controller Package: flux-image-reflector-controller-iamguarded-compat Package: flux-kustomize-controller Package: flux-kustomize-controller-iamguarded-compat Package: flux-notification-controller Package: flux-notification-controller-iamguarded-compat Package: flux-source-controller Package: flux-source-controller-iamguarded-compat Package: flyte Package: fq Package: fscrypt Package: fulcio Package: gatus Package: gcsfuse Package: gh Package: gh-doc Package: git-lfs Package: git-lfs-config Package: gitea-compat Package: gitleaks Package: gitsign Package: gitsign-config Package: gitsign-credential-cache Package: glab Package: go-discover Package: go-jsonnet Package: gobuster Package: gogatekeeper Package: golang-go.crypto Package: golang-go.crypto Package: golang.org/x/crypto Package: gomplate Package: goreleaser Package: gptscript Package: grafana-agent-operator Package: grafana-operator Package: grafana-operator-bitnami-compat Package: grype Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: harbor-2.14 Package: harbor-2.14-exporter Package: harbor-2.14-jobservice Package: harbor-registry Package: hcloud Package: headlamp Package: helm Package: helm-3 Package: helm-4 Package: helm-docs Package: helm-mapkubeapis Package: helm-push Package: helm-set-status Package: hugo Package: hugo-extended Package: hydra Package: infinispan-operator Package: infinispan-operator-compat Package: ipfs-cluster Package: ipfs-cluster-compat Package: ipfs-cluster-oci-entrypoint Package: jaeger-2 Package: jaeger-2-anonymizer Package: jaeger-2-anonymizer-compat Package: jaeger-2-es-index-cleaner Package: jaeger-2-es-index-cleaner-compat Package: jaeger-2-es-rollover Package: jaeger-2-es-rollover-compat Package: jaeger-2-esmapping-generator Package: jaeger-2-esmapping-generator-compat Package: jaeger-2-iamguarded-cassandra-schema Package: jaeger-2-iamguarded-compat Package: jaeger-2-jaeger Package: jaeger-2-jaeger-compat Package: jaeger-2-remote-storage Package: jaeger-2-remote-storage-compat Package: jaeger-2-tracegen Package: jaeger-2-tracegen-compat Package: juicefs-1.3 Package: juicefs-1.3-compat Package: juicefs-csi-driver Package: juicefs-csi-driver-compat Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s Package: k3s-1.32 Package: k3s-1.34 Package: k3s-multicall Package: k3s-multicall-1.32 Package: k3s-static Package: k3s-static-1.32 Package: k3s-static-1.34 Package: k6 Package: k8s_gateway Package: k8s_gateway-compat Package: k8sgpt Package: k9s Package: kaf Package: kafka_exporter Package: kafka-proxy Package: kafka-proxy-compat Package: kapp-controller Package: kapp-controller-compat Package: kargo Package: kargo-oci-compat Package: katib-controller Package: katib-controller-compat Package: katib-db-manager-compat Package: katib-earlystopping Package: katib-file-metricscollector-compat Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: kine Package: ko Package: kots Package: kots-compat Package: kots-symlink-compat Package: kserve Package: kserve-agent Package: kserve-agent-compat Package: kserve-manager Package: kserve-manager-compat Package: kserve-modelmesh-serving Package: kserve-modelmesh-serving-compat Package: kserve-qpext Package: kserve-qpext-compat Package: kserve-router Package: kserve-router-compat Package: kserve-storage-controller Package: ksops Package: kube-apiserver-1.34 Package: kube-apiserver-1.34-default Package: kube-apiserver-1.34-default-compat Package: kube-bench Package: kube-bench-configs Package: kube-controller-manager-1.34 Package: kube-controller-manager-1.34-default Package: kube-controller-manager-1.34-default-compat Package: kube-fluentd-operator Package: kube-proxy-1.34 Package: kube-proxy-1.34-default Package: kube-proxy-1.34-default-compat Package: kube-scheduler-1.34 Package: kube-scheduler-1.34-default Package: kube-scheduler-1.34-default-compat Package: kube-state-metrics Package: kube-state-metrics-iamguarded-compat Package: kube-vip Package: kube-vip-cloud-provider Package: kube-vip-cloud-provider-compat Package: kube-vip-compat Package: kubeadm-1.34 Package: kubeadm-1.34-default Package: kubeadm-1.34-default-compat Package: kubectl-1.32 Package: kubectl-1.32-default Package: kubectl-1.33 Package: kubectl-1.33-default Package: kubectl-1.34 Package: kubectl-1.34-default Package: kubectl-1.34-default-compat Package: kubectl-1.34-iamguarded-compat Package: kubectl-argo-rollouts Package: kubectl-bash-completion-1.34 Package: kubeflow-katib Package: kubeflow-pipelines Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-cache-deployer Package: kubeflow-pipelines-cache-deployer-compat Package: kubeflow-pipelines-frontend Package: kubeflow-pipelines-metadata-envoy-config Package: kubeflow-pipelines-metadata-writer Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: kubelet-1.34 Package: kubelet-1.34-default Package: kubelet-1.34-default-compat Package: kubernetes-1.34 Package: kubernetes-1.34-default Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-attacher-compat Package: kubernetes-csi-external-health-monitor Package: kubernetes-csi-external-health-monitor-compat Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-dashboard Package: kubernetes-dns-node-cache Package: kubernetes-pause-1.34 Package: kubernetes-pause-compat-1.34 Package: kubescape-operator Package: kubevela Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubo Package: kubo-compat Package: kuma-2.12 Package: kuma-cni-compat-2.12 Package: kuma-coredns-1.13 Package: kuma-cp-2.12 Package: kuma-dp-2.12 Package: kuma-install-cni-2.12 Package: kumactl-2.12 Package: kyverno-policy-reporter Package: local-static-provisioner Package: local-static-provisioner-compat Package: local-volume-node-cleanup Package: local-volume-node-cleanup-compat Package: lxd Package: mailpit Package: mariadb-operator Package: mc Package: mc-iamguarded-2025-compat Package: metrics-server Package: metrics-server-compat Package: metrics-server-iamguarded-compat Package: migrate Package: migrate-compat Package: minio Package: minio-iamguarded-2025-compat Package: minio-object-browser Package: minio-object-browser-iamguarded-compat Package: minio-operator Package: minio-operator-compat Package: minio-operator-sidecar Package: minio-operator-sidecar-compat Package: mkcert Package: mods Package: mongo-tools Package: nats Package: nats-server Package: nats-top Package: nats-top-compat Package: nerdctl Package: nfpm Package: nginx-prometheus-exporter Package: nginx-prometheus-exporter-iamguarded-compat Package: no-docs-check Package: nri-kafka Package: nri-kafka-jdk11 Package: nri-mssql Package: nri-mssql-compat Package: nsc Package: oauth2-proxy Package: oauth2-proxy-iamguarded-compat Package: octo-sts-webhook Package: ollama Package: ollama-cpu Package: op-geth Package: op-geth-abigen Package: op-geth-clef Package: op-geth-compat Package: op-geth-devp2p Package: op-geth-evm Package: op-geth-rlpdump Package: opa Package: opa-envoy Package: openbao-k8s Package: openbao-k8s-compat Package: opencost Package: opencost-compat Package: opentelemetry-collector Package: opentelemetry-collector-compat Package: opentelemetry-collector-contrib Package: opentelemetry-collector-contrib-compat Package: opentelemetry-collector-ocb Package: opentofu-1.9 Package: oras Package: pg_timetable Package: pg_timetable-compat Package: podman Package: podman-doc Package: policy-controller-tester Package: portieris Package: portieris-compat Package: postgres-operator Package: postgres-operator-compat Package: prometheus-adapter Package: prometheus-admission-webhook Package: prometheus-alertmanager Package: prometheus-config-reloader Package: prometheus-operator Package: prometheus-operator-iamguarded-compat Package: prometheus-pushgateway Package: prometheus-pushgateway-iamguarded-compat Package: promxy Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-yaml Package: q Package: rancher-fleet Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-fleet-termination-log Package: rancher-helm-3 Package: rancher-machine Package: rancher-system-agent Package: rancher-telemetry Package: rekor Package: rekor-backfill-index Package: rekor-cli Package: rekor-server Package: restic Package: restic-compat Package: rke2-cloud-provider Package: rke2-cloud-provider-compat Package: rook Package: rook-oci-compat Package: rqlite Package: rqlite-oci-entrypoint Package: scorecard Package: sealed-secrets Package: sealed-secrets-compat Package: sealed-secrets-kubeseal Package: sealed-secrets-kubeseal-compat Package: seaweedfs Package: seaweedfs-iamguarded-compat Package: seaweedfs-oci-entrypoint Package: secrets-store-csi-driver Package: secrets-store-csi-driver-crds Package: secrets-store-csi-driver-provider-azure Package: sftpgo Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-kms Package: sftpgo-plugin-pubsub Package: skaffold Package: skopeo Package: snapd Package: snyk-cli Package: sops Package: spegel Package: spegel-compat Package: spicedb-operator Package: spicedb-operator-compat Package: spire-agent Package: spire-oidc-discovery-provider Package: spire-server Package: spqr Package: sql_exporter Package: src Package: src-fingerprint Package: step Package: step-kms-plugin Package: syft Package: symlink-check Package: task Package: tdbg Package: tdbg-compat Package: temporal Package: temporal-cassandra-tool Package: temporal-cassandra-tool-compat Package: temporal-compat Package: temporal-server Package: temporal-server-compat Package: temporal-server-oci-entrypoint Package: temporal-server-schema Package: temporal-sql-tool Package: temporal-sql-tool-compat Package: temporal-ui-server Package: terraform Package: terraform-compat Package: terraform-docs Package: terraform-local-provider-config Package: terraform-provider-azapi Package: terraform-provider-azuread Package: terraform-provider-google Package: terraform-provider-pagerduty Package: terraform-provider-tls Package: terragrunt Package: terragrunt-docs Package: tflint Package: tflint-compat Package: tfsec Package: thanos Package: thanos-iamguarded-compat Package: timescaledb-parallel-copy Package: timestamp-authority Package: timestamp-authority-cli Package: timestamp-authority-server Package: traefik-3.4 Package: trillian Package: trillian-logserver Package: trillian-logsigner Package: tw Package: twt Package: undock Package: vale Package: vault-env Package: vault-k8s Package: vault-secrets-webhook Package: vault-secrets-webhook-compat Package: velero Package: velero-compat Package: velero-plugin-for-microsoft-azure Package: velero-plugin-for-microsoft-azure-compat Package: velero-restore-helper Package: vexctl Package: vitess-23-binaries Package: vitess-23-compat Package: weaviate Package: wgcf Package: wireguard-go Package: witness Package: wolfictl Package: xeol Package: xeol-compat Package: zarf Ecosystem: Alpine Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

Affected products

VendorProductAffectedFixed
golang.org/x/crypto golang.org/x/crypto/ssh/agent < 0.45.0 0.45.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-go.crypto 1:0.45.0-1 —
Debian 13 golang-go.crypto No fix yet —
Debian 12 golang-go.crypto No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 snapd +1 No fix yet —
Ubuntu 26.04 LTS snapd No fix yet —
Ubuntu 25.10 snapd +1 No fix yet —
Ubuntu 24.04 LTS snapd No fix yet —
Ubuntu 22.04 LTS snapd No fix yet —
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 26.04 LTS golang-go.crypto No fix yet —
Ubuntu Pro 24.04 LTS golang-go.crypto No fix yet —
Ubuntu Pro 22.04 LTS golang-go.crypto No fix yet —
Ubuntu Pro 20.04 LTS snapd +1 No fix yet —
Ubuntu Pro 18.04 LTS lxd +2 No fix yet —
Ubuntu Pro 16.04 LTS lxd +2 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 golang1.25 +6 1.25.9-1.hum1 RHSA-2026:7385
Red Hat Hardened Images 1 golang1.26 +6 1.26.2-1.hum1 RHSA-2026:7291

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 apptainer 1.4.5-150600.4.12.1 SUSE-SU-2026:0439-1
SLES 15 SP7 buildah 1.35.5-150500.3.53.1 SUSE-SU-2026:2733-1, SUSE-SU-2026:0014-1
SLES 15 SP7 containerized-data-importer 1.64.0-150700.9.11.1 SUSE-SU-2026:2493-1
SLES 15 SP7 kubevirt 1.7.4-150700.3.24.2 SUSE-SU-2026:2400-1
SLES 15 SP7 kubevirt-1.6 1.6.6-150700.15.7.1 SUSE-SU-2026:3630-1, SUSE-SU-2026:2401-1
SLES 15 SP7 podman 4.9.5-150500.3.62.2 SUSE-SU-2026:0067-1
SLES 15 SP7 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1
SLES 15 SP6 apptainer 1.4.5-150600.4.12.1 SUSE-SU-2026:0439-1
SLES 15 SP6 buildah 1.35.5-150500.3.53.1 SUSE-SU-2026:2733-1, SUSE-SU-2026:0014-1
SLES 15 SP6 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1
SLES 15 SP5 buildah 1.35.5-150500.3.53.1 SUSE-SU-2026:2733-1, SUSE-SU-2026:0014-1
SLES 15 SP5 terraform-provider-aws 3.11.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-azurerm 2.32.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-external 2.0.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-google 3.43.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-helm 2.9.0-150200.6.23.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-kubernetes 1.13.2-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-local 2.0.0-150200.6.17.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-null 3.0.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-random 3.0.0-150200.6.15.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-tls 3.0.0-150200.5.15.1 SUSE-SU-2026:3056-1
SLES 15 SP4 buildah 1.35.5-150400.3.59.1 SUSE-SU-2026:2706-1, SUSE-SU-2025:4526-1
SLES 15 SP4 terraform-provider-aws 3.11.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-azurerm 2.32.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-external 2.0.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-google 3.43.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-helm 2.9.0-150200.6.23.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-kubernetes 1.13.2-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-local 2.0.0-150200.6.17.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-null 3.0.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-random 3.0.0-150200.6.15.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-tls 3.0.0-150200.5.15.1 SUSE-SU-2026:3056-1
SLES 12 amazon-ssm-agent 3.3.5678.0-4.55.1 SUSE-SU-2026:5067-1
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 buildah 1.39.5-160000.1.1 SUSE-SU-2026:20123-1
SLES for SAP 16.0 docker-compose 2.33.1-160000.4.1 SUSE-SU-2026:20976-1
SLES for SAP 16.0 podman 5.4.2-160000.4.1 SUSE-SU-2026:20626-1
SLES for SAP 15 SP6 buildah 1.35.5-150500.3.53.1 SUSE-SU-2026:2733-1, SUSE-SU-2026:0014-1
SLES for SAP 15 SP5 buildah 1.35.5-150500.3.53.1 SUSE-SU-2026:2733-1, SUSE-SU-2026:0014-1
SLES for SAP 15 SP4 buildah 1.35.5-150400.3.59.1 SUSE-SU-2026:2706-1, SUSE-SU-2025:4526-1
SLES 16.0 buildah 1.39.5-160000.1.1 SUSE-SU-2026:20123-1
SLES 16.0 docker-compose 2.33.1-160000.4.1 SUSE-SU-2026:20976-1
SLES 16.0 podman 5.4.2-160000.4.1 SUSE-SU-2026:20626-1
SLE Micro 6.2 docker-compose 2.33.1-160000.4.1 SUSE-SU-2026:20949-1
SLE Micro 6.2 elemental-register 1.8.1-160000.1.1 SUSE-SU-2026:20176-1
SLE Micro 6.2 elemental-toolkit 2.3.2-160000.1.1 SUSE-SU-2026:20176-1
SLE Micro 6.2 podman 5.4.2-160000.4.1 SUSE-SU-2026:20641-1
SLE Micro 6.1 docker-compose 2.33.1-slfo.1.1_2.1 SUSE-SU-2026:20656-1
SLE Micro 6.1 elemental-operator 1.7.4-slfo.1.1_1.1 SUSE-SU-2026:20357-1
SLE Micro 6.1 elemental-toolkit 2.2.7-slfo.1.1_1.1 SUSE-SU-2026:20357-1
SLE Micro 6.1 podman 5.4.2-slfo.1.1_5.1 SUSE-SU-2026:24378-1, SUSE-SU-2026:22451-1
SLE Micro 6.0 docker-compose 2.33.1-3.1 SUSE-SU-2026:20451-1
SLE Micro 6.0 elemental-operator 1.6.10-1.1 SUSE-SU-2026:20244-1
SLE Micro 6.0 elemental-toolkit 2.1.5-1.1 SUSE-SU-2026:20244-1
SLE Micro 6.0 podman 4.9.5-10.1 SUSE-SU-2026:22516-1, SUSE-SU-2026:20035-1
SLE Micro 5.5 podman 4.9.5-150500.3.62.2 SUSE-SU-2026:0067-1
SLE Micro 5.4 podman 4.9.5-150400.4.65.2 SUSE-SU-2026:0125-1
SLE Micro 5.3 podman 4.9.5-150400.4.65.2 SUSE-SU-2026:0125-1
SLE Micro 5.2 podman 4.9.5-150300.9.69.1 SUSE-SU-2025:4536-1
SLE HPC 15 SP5 buildah 1.35.5-150500.3.53.1 SUSE-SU-2026:2733-1, SUSE-SU-2026:0014-1
SLE HPC 15 SP4 buildah 1.35.5-150400.3.59.1 SUSE-SU-2026:2706-1, SUSE-SU-2025:4526-1
SUSE Enterprise Storage 7.1 podman 4.9.5-150300.9.69.1 SUSE-SU-2025:4536-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed amazon-ssm-agent 3.3.5678.0-1.1 openSUSE-SU-2026:12314-1
openSUSE Tumbleweed apptainer 1.4.5-1.1 openSUSE-SU-2026:10013-1
openSUSE Tumbleweed cheat 4.4.2-3.1 openSUSE-SU-2025:15773-1
openSUSE Tumbleweed git-bug 0.10.1-3.1 openSUSE-SU-2025:15771-1
openSUSE Tumbleweed k3sup 0.13.14-1.1 openSUSE-SU-2026:12295-1
openSUSE Tumbleweed kubeshark-cli 53.1.0-1.1 openSUSE-SU-2026:10302-1
openSUSE Tumbleweed kumactl 3.0.0-1.1 openSUSE-SU-2026:12300-1
openSUSE Tumbleweed mcphost 0.32.0-1.1 openSUSE-SU-2026:10042-1
openSUSE Tumbleweed rz-pm 0.3.6-1.1 openSUSE-SU-2026:11781-1
openSUSE Tumbleweed trivy 0.68.2-1.1 openSUSE-SU-2025:15852-1
openSUSE Leap 16.0 buildah 1.39.5-160000.1.1 openSUSE-SU-2026:20080-1
openSUSE Leap 16.0 cheat 4.4.2-bp160.2.1 openSUSE-SU-2025:20177-1
openSUSE Leap 16.0 containerized-data-importer1.65 1.65.0-160000.3.1 openSUSE-SU-2026:21824-1
openSUSE Leap 16.0 docker-compose 2.33.1-160000.4.1 openSUSE-SU-2026:20438-1
openSUSE Leap 16.0 elemental-register 1.8.1-160000.1.1 openSUSE-SU-2026:20132-1
openSUSE Leap 16.0 elemental-toolkit 2.3.2-160000.1.1 openSUSE-SU-2026:20132-1
openSUSE Leap 16.0 git-bug 0.10.1-bp160.1.1 openSUSE-SU-2025:20143-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1
openSUSE Leap 16.0 podman 5.4.2-160000.4.1 openSUSE-SU-2026:21244-1, openSUSE-SU-2026:20305-1
openSUSE Leap 15.6 apptainer 1.4.5-150600.4.12.1 SUSE-SU-2026:0439-1
openSUSE Leap 15.6 buildah 1.35.5-150500.3.53.1 SUSE-SU-2026:0014-1
openSUSE Leap 15.6 podman 4.9.5-150500.3.62.2 SUSE-SU-2026:0067-1
openSUSE Leap 15.6 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 etcd 3.6.8-r0 —
Alpine v3.23 etcd 3.6.8-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300062.1-1.amzn2023 ALAS2023-2025-1358
Amazon Linux 2023 docker 25.0.14-1.amzn2023.0.1 ALAS2023-2025-1340
Amazon Linux 2023 nerdctl 2.2.1-1.amzn2023.0.1 ALAS2023-2026-1400
Amazon Linux 2023 runfinch-finch 1.10.0-1.amzn2023.0.6 ALAS2023-2025-1336
Amazon Linux 2 amazon-cloudwatch-agent 1.300062.1-1.amzn2 ALAS2-2025-3120
Amazon Linux 2 nerdctl 2.2.1-1.amzn2.0.1 ALAS2-2026-3155

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r38 —
Wolfi rolling age 1.2.1-r9 —
Wolfi rolling amass 5.0.1-r2 —
Wolfi rolling amazon-cloudwatch-agent +2 1.300062.0-r1 —
Wolfi rolling amazon-cloudwatch-agent-operator +1 3.3.0-r2 —
Wolfi rolling apache-exporter 1.0.11-r1 —
Wolfi rolling apisix-ingress-controller +2 1.8.4-r5 —
Wolfi rolling argo-cd-3.2 +2 3.2.0-r1 —
Wolfi rolling argo-events 1.9.8-r2 —
Wolfi rolling argo-rollouts +1 1.8.3-r5 —
Wolfi rolling argocd-image-updater 1.0.1-r1 —
Wolfi rolling atlantis 0.37.1-r1 —
Wolfi rolling authservice +1 1.1.2-r1 —
Wolfi rolling aws-node-termination-handler 1.25.3-r1 —
Wolfi rolling aws-otel-collector 0.45.1-r1 —
Wolfi rolling azcopy 10.31.0-r1 —
Wolfi rolling azure-ipam 0.4.0-r5 —
Wolfi rolling azure-workload-identity-webhook +1 1.5.1-r4 —
Wolfi rolling bank-vaults-template 1.32.0-r3 —
Wolfi rolling bento +1 1.12.1-r3 —
Wolfi rolling blob-csi-1.27 +1 1.27.0-r2 —
Wolfi rolling blobfuse2 +2 2.4.2-r6 —
Wolfi rolling bom 0.7.1-r2 —
Wolfi rolling boring-registry 0.16.6-r3 —
Wolfi rolling buf 1.60.0-r1 —
Wolfi rolling buildah 1.42.1-r1 —
Wolfi rolling buildctl +1 0.26.2-r0 —
Wolfi rolling caddy +2 2.10.2-r4 —
Wolfi rolling cadvisor 0.53.0-r8 —
Wolfi rolling calico-3.31 +17 3.31.2-r1 —
Wolfi rolling cert-manager-cmctl 2.3.0-r7 —
Wolfi rolling cert-manager-csi-driver +1 0.11.1-r2 —
Wolfi rolling cert-manager-istio-csr +1 0.14.3-r2 —
Wolfi rolling cert-manager-webhook-pdns 2.5.3-r2 —
Wolfi rolling certificate-transparency-trillian-ctserver 1.3.2-r5 —
Wolfi rolling cfssl-bundle +1 1.6.5-r24 —
Wolfi rolling chartmuseum 0.16.3-r10 —
Wolfi rolling chezmoi 2.67.0-r1 —
Wolfi rolling cilium-cli 0.18.8-r2 —
Wolfi rolling cloud-provider-gcp-cloud-controller-manager 34.1.0-r1 —
Wolfi rolling cloud-provider-vsphere 1.34.0-r3 —
Wolfi rolling cloud-sql-proxy-2.16 2.16.0-r11 —
Wolfi rolling cloudflared 2025.11.1-r1 —
Wolfi rolling cloudnative-pg +1 1.27.1-r1 —
Wolfi rolling cloudprober 0.14.1-r2 —
Wolfi rolling cluster-api-aws-controller +1 2.9.2-r2 —
Wolfi rolling cluster-api-azure-controller +1 1.21.1-r1 —
Wolfi rolling cluster-api-gcp-controller +1 1.10.0-r5 —
Wolfi rolling containerd-1 1.7.29-r2 —
Wolfi rolling coredns-1.13 +2 1.13.1-r2 —
Wolfi rolling cosign 3.0.2-r2 —
Wolfi rolling crossplane-crank 2.1.1-r1 —
Wolfi rolling crossplane-provider-aws +34 2.2.0-r1 —
Wolfi rolling crossplane-provider-keycloak 2.10.0-r1 —
Wolfi rolling dagdotdev 0.0.17-r4 —
Wolfi rolling db-operator +2 2.16.0-r2 —
Wolfi rolling dbmate 2.28.0-r3 —
Wolfi rolling descheduler 0.34.0-r1 —
Wolfi rolling dex +1 2.44.0-r4 —
Wolfi rolling dgraph 25.0.0-r2 —
Wolfi rolling distribution 3.0.0-r43 —
Wolfi rolling dkron +2 4.0.9-r0 —
Wolfi rolling docker-cli-buildx 0.30.1-r1 —
Wolfi rolling docker-compose 2.40.3-r2 —
Wolfi rolling docker-credential-acr-env 0.7.0-r25 —
Wolfi rolling docker-dind 28.5.2-r5 —
Wolfi rolling docker-machine-driver-harvester 1.0.5-r1 —
Wolfi rolling docker-machine-driver-linode 0.1.15-r7 —
Wolfi rolling dockerize +1 0.9.7-r1 —
Wolfi rolling dynamic-localpv-provisioner 4.4.0-r1 —
Wolfi rolling eksctl 0.217.0-r1 —
Wolfi rolling envoy-gateway +2 1.6.0-r1 —
Wolfi rolling etcd-3.6 +1 3.6.6-r1 —
Wolfi rolling falco-no-driver 0.43.0-r0 —
Wolfi rolling falcoctl 0.11.4-r2 —
Wolfi rolling falcosidekick 2.32.0-r2 —
Wolfi rolling filebrowser 2.48.2-r1 —
Wolfi rolling flannel +1 0.27.4-r3 —
Wolfi rolling fluent-bit-plugin-loki 3.6.1-r0 —
Wolfi rolling flux +1 2.7.3-r1 —
Wolfi rolling flux-image-reflector-controller +3 1.0.4-r1 —
Wolfi rolling flux-kustomize-controller +1 1.7.3-r1 —
Wolfi rolling flux-notification-controller +1 1.7.5-r1 —
Wolfi rolling flux-source-controller +1 1.7.4-r1 —
Wolfi rolling flyte 1.16.2-r1 —
Wolfi rolling fq 0.15.1-r4 —
Wolfi rolling fscrypt 0.3.6-r1 —
Wolfi rolling fulcio 1.8.2-r1 —
Wolfi rolling gatus 5.32.0-r1 —
Wolfi rolling gcsfuse 2.12.2-r7 —
Wolfi rolling gh +1 2.83.1-r1 —
Wolfi rolling git-lfs +1 3.7.1-r1 —
Wolfi rolling gitea-compat 1.25.2-r0 —
Wolfi rolling gitleaks 8.29.1-r1 —
Wolfi rolling gitsign +2 0.13.0-r6 —
Wolfi rolling glab 1.77.0-r1 —
Wolfi rolling go-discover 0_git20251120-r1 —
Wolfi rolling go-jsonnet 0.21.0-r1 —
Wolfi rolling gobuster 3.8.2-r3 —
Wolfi rolling gogatekeeper 4.3.0-r2 —
Wolfi rolling gomplate 4.3.3-r4 —
Wolfi rolling goreleaser 2.12.7-r1 —
Wolfi rolling grafana-agent-operator 0.44.6-r0 —
Wolfi rolling grafana-operator +1 5.20.0-r1 —
Wolfi rolling grype 0.104.0-r1 —
Wolfi rolling guac +4 1.0.1-r2 —
Wolfi rolling harbor-2.14 +2 2.14.1-r3 —
Wolfi rolling harbor-registry 3.0.0-r12 —
Wolfi rolling hcloud 1.57.0-r1 —
Wolfi rolling headlamp 0.38.0-r1 —
Wolfi rolling helm 4.0.0-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-docs 1.14.2-r16 —
Wolfi rolling helm-mapkubeapis 0.6.1-r6 —
Wolfi rolling helm-push 0.10.4-r37 —
Wolfi rolling helm-set-status 0.3.0-r7 —
Wolfi rolling hugo +1 0.152.2-r1 —
Wolfi rolling hydra 25.4.0-r1 —
Wolfi rolling infinispan-operator +1 2.5.0-r1 —
Wolfi rolling ipfs-cluster +2 1.1.4-r9 —
Wolfi rolling jaeger-2 +16 2.12.0-r1 —
Wolfi rolling juicefs-1.3 +1 1.3.0-r8 —
Wolfi rolling juicefs-csi-driver +1 0.30.2-r1 —
Wolfi rolling k3d +2 5.8.3-r19 —
Wolfi rolling k3s +2 1.34.1.1-r4 —
Wolfi rolling k3s-1.32 +1 1.32.13.1-r2 —
Wolfi rolling k3s-1.34 +1 1.34.6.1-r11 —
Wolfi rolling k3s-multicall-1.32 1.32.10.1-r0 —
Wolfi rolling k6 1.4.1-r1 —
Wolfi rolling k8s_gateway +1 1.6.1-r1 —
Wolfi rolling k8sgpt 0.4.26-r2 —
Wolfi rolling k9s 0.50.16-r3 —
Wolfi rolling kaf 0.2.13-r6 —
Wolfi rolling kafka-proxy +1 0.4.3-r6 —
Wolfi rolling kafka_exporter 1.9.0-r40 —
Wolfi rolling kapp-controller +1 0.59.0-r1 —
Wolfi rolling kargo +1 1.8.3-r2 —
Wolfi rolling kine 0.14.6-r1 —
Wolfi rolling ko 0.18.0-r8 —
Wolfi rolling kots +2 1.128.3-r2 —
Wolfi rolling kserve +9 0.16.0-r1 —
Wolfi rolling ksops 4.4.0-r2 —
Wolfi rolling kube-bench +6 0.14.0-r1 —
Wolfi rolling kube-fluentd-operator 1.18.2-r51 —
Wolfi rolling kube-state-metrics +1 2.17.0-r2 —
Wolfi rolling kube-vip +1 1.0.2-r1 —
Wolfi rolling kube-vip-cloud-provider +1 0.0.12-r6 —
Wolfi rolling kubeadm-1.34 +28 1.34.2-r1 —
Wolfi rolling kubectl-1.32 +1 1.32.10-r1 —
Wolfi rolling kubectl-1.33 +1 1.33.6-r1 —
Wolfi rolling kubeflow-katib +12 0.19.0-r1 —
Wolfi rolling kubeflow-pipelines +11 2.14.4-r1 —
Wolfi rolling kubernetes-csi-external-attacher +1 4.10.0-r2 —
Wolfi rolling kubernetes-csi-external-health-monitor +1 0.16.0-r2 —
Wolfi rolling kubernetes-csi-external-provisioner 6.1.0-r1 —
Wolfi rolling kubernetes-csi-external-resizer 2.0.0-r1 —
Wolfi rolling kubernetes-dashboard 7.14.0-r1 —
Wolfi rolling kubernetes-dns-node-cache 1.26.7-r1 —
Wolfi rolling kubescape-operator 0.2.114-r1 —
Wolfi rolling kubevela +2 1.10.5-r1 —
Wolfi rolling kubo +1 0.38.2-r1 —
Wolfi rolling kuma-2.12 +5 2.12.3-r1 —
Wolfi rolling kyverno-policy-reporter 3.5.0-r2 —
Wolfi rolling local-static-provisioner +3 2.8.0-r5 —
Wolfi rolling mailpit 1.27.11-r1 —
Wolfi rolling mariadb-operator 25.10.2-r1 —
Wolfi rolling mc +1 0.20250813.083541-r2 —
Wolfi rolling metrics-server +2 0.8.0-r5 —
Wolfi rolling migrate +1 4.19.0-r3 —
Wolfi rolling minio +1 0.20251015.172955-r1 —
Wolfi rolling minio-object-browser +1 2.0.4-r2 —
Wolfi rolling minio-operator +3 7.1.1-r5 —
Wolfi rolling mkcert 1.4.4-r18 —
Wolfi rolling mods 1.8.1-r4 —
Wolfi rolling mongo-tools 100.13.0-r4 —
Wolfi rolling nats 0.3.0-r2 —
Wolfi rolling nats-server 2.12.2-r1 —
Wolfi rolling nats-top +1 0.6.3-r10 —
Wolfi rolling nerdctl +11 2.2.0-r2 —
Wolfi rolling nfpm 2.43.4-r2 —
Wolfi rolling nri-kafka +1 3.15.0-r1 —
Wolfi rolling nri-mssql +1 2.25.0-r1 —
Wolfi rolling nsc 2.12.0-r2 —
Wolfi rolling oauth2-proxy +1 7.13.0-r1 —
Wolfi rolling octo-sts-webhook 0.5.4-r0 —
Wolfi rolling ollama +4 0.13.0-r1 —
Wolfi rolling op-geth +6 1.101603.5-r1 —
Wolfi rolling opa 1.10.1-r2 —
Wolfi rolling opa-envoy 1.10.0-r2 —
Wolfi rolling openbao-k8s +1 1.4.0-r41 —
Wolfi rolling opencost +1 1.118.0-r1 —
Wolfi rolling opentelemetry-collector +2 0.140.0-r1 —
Wolfi rolling opentelemetry-collector-contrib +1 0.140.1-r1 —
Wolfi rolling opentofu-1.9 1.9.4-r3 —
Wolfi rolling oras 1.3.0-r2 —
Wolfi rolling pg_timetable +1 6.2.0-r1 —
Wolfi rolling podman +1 5.7.0-r1 —
Wolfi rolling policy-controller-tester 0.13.1-r2 —
Wolfi rolling portieris +1 0.13.33-r1 —
Wolfi rolling postgres-operator +1 1.15.0-r1 —
Wolfi rolling prometheus-adapter +2 0.12.0-r17 —
Wolfi rolling prometheus-alertmanager 0.29.0-r1 —
Wolfi rolling prometheus-operator +3 0.87.0-r0 —
Wolfi rolling prometheus-pushgateway +1 1.11.2-r1 —
Wolfi rolling promxy 0.0.93-r5 —
Wolfi rolling pulumi-kubernetes-operator 1.16.0-r21 —
Wolfi rolling pulumi-language-dotnet 3.94.0-r1 —
Wolfi rolling pulumi-language-yaml 1.25.0-r1 —
Wolfi rolling q 0.19.11-r1 —
Wolfi rolling rancher-helm-3 3.19.0-r3 —
Wolfi rolling rancher-machine 0.15.0.137-r1 —
Wolfi rolling rancher-system-agent 0.3.14-r1 —
Wolfi rolling rancher-telemetry 0.6.2-r6 —
Wolfi rolling rekor +3 1.4.3-r1 —
Wolfi rolling restic +1 0.18.1-r2 —
Wolfi rolling rook +1 1.18.7-r1 —
Wolfi rolling rqlite +1 9.3.1-r1 —
Wolfi rolling scorecard 5.4.0-r1 —
Wolfi rolling sealed-secrets +3 0.33.1-r1 —
Wolfi rolling seaweedfs +2 4.00-r1 —
Wolfi rolling secrets-store-csi-driver +1 1.5.4-r2 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.7.2-r1 —
Wolfi rolling sftpgo +1 2.7.0-r1 —
Wolfi rolling sftpgo-plugin-auth 1.0.13-r1 —
Wolfi rolling sftpgo-plugin-eventsearch 1.0.21-r1 —
Wolfi rolling sftpgo-plugin-eventstore 1.0.22-r1 —
Wolfi rolling sftpgo-plugin-kms 1.0.16-r1 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.15-r1 —
Wolfi rolling skaffold +1 2.17.0-r1 —
Wolfi rolling skopeo 1.20.0-r5 —
Wolfi rolling snyk-cli 1.1301.0-r1 —
Wolfi rolling sops 3.11.0-r2 —
Wolfi rolling spegel +1 0.5.1-r2 —
Wolfi rolling spicedb-operator +1 1.21.0-r2 —
Wolfi rolling spire-agent +2 1.13.3-r1 —
Wolfi rolling spqr 2.8.0-r1 —
Wolfi rolling sql_exporter 0.18.4-r2 —
Wolfi rolling src 6.10.0-r1 —
Wolfi rolling src-fingerprint 0.19.0-r34 —
Wolfi rolling step 0.28.7-r5 —
Wolfi rolling step-kms-plugin 0.15.1-r3 —
Wolfi rolling syft 1.38.0-r1 —
Wolfi rolling task 3.45.5-r1 —
Wolfi rolling tdbg +9 1.29.1-r1 —
Wolfi rolling temporal +3 1.5.1-r1 —
Wolfi rolling temporal-ui-server 2.43.3-r1 —
Wolfi rolling terraform +2 1.5.7-r35 —
Wolfi rolling terraform-docs 0.20.0-r6 —
Wolfi rolling terraform-provider-azapi 2.7.0-r2 —
Wolfi rolling terraform-provider-azuread 3.7.0-r1 —
Wolfi rolling terraform-provider-google 7.12.0-r1 —
Wolfi rolling terraform-provider-pagerduty 3.30.5-r1 —
Wolfi rolling terraform-provider-tls 4.1.0-r5 —
Wolfi rolling terragrunt +1 0.93.10-r1 —
Wolfi rolling tflint +1 0.60.0-r1 —
Wolfi rolling tfsec 1.28.14-r8 —
Wolfi rolling thanos +1 0.40.1-r1 —
Wolfi rolling timescaledb-parallel-copy 0.11.1-r1 —
Wolfi rolling timestamp-authority +2 2.0.2-r1 —
Wolfi rolling traefik-3.4 3.4.5-r5 —
Wolfi rolling trillian +2 1.7.2-r6 —
Wolfi rolling tw +3 0.0.35-r0 —
Wolfi rolling undock 0.10.0-r8 —
Wolfi rolling vale 3.13.0-r1 —
Wolfi rolling vault-env 1.22.0-r4 —
Wolfi rolling vault-k8s 1.7.0-r5 —
Wolfi rolling vault-secrets-webhook +1 1.22.1-r2 —
Wolfi rolling velero +2 1.17.1-r1 —
Wolfi rolling velero-plugin-for-microsoft-azure +1 1.13.1-r1 —
Wolfi rolling vexctl 0.4.1-r2 —
Wolfi rolling vitess-23-compat +1 23.0.0-r1 —
Wolfi rolling weaviate 1.34.0-r1 —
Wolfi rolling wgcf 2.2.29-r3 —
Wolfi rolling wireguard-go 0.0.20250522-r6 —
Wolfi rolling witness 0.10.1-r1 —
Wolfi rolling wolfictl 0.38.21-r3 —
Wolfi rolling xeol +1 0.10.8-r19 —
Wolfi rolling zarf 0.66.0-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/crypto < 0.45.0 0.45.0 GHSA-f6x5-jh6r-wrfv

Advisories 50

References