Skip to content
OpenAdvisories
Critical · 9.1 Public exploit CVE-2026-33186 EUVD-2026-13830GHSA-p77j-4mvh-x3m3GO-2026-4762

gRPC-Go has an authorization bypass via missing leading slash in :path

Published Mar 20, 2026 · Updated Sep 18, 2026 · Assigned by GitHub_M

Vendor: grpc Product: grpc-go Package: aactl Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-operator Package: amazon-k8s-cni Package: amazon-k8s-cni-compat Package: amazon-k8s-cni-init Package: amazon-k8s-cni-init-compat Package: apisix-ingress-controller Package: apko Package: argo-cd-3.2-compat Package: argo-cd-3.3 Package: argo-cd-3.3-compat Package: argo-events Package: argo-rollouts Package: argo-workflow-controller-4.0 Package: argo-workflow-executor-3.7 Package: argo-workflow-executor-4.0 Package: argo-workflows-3.7 Package: argo-workflows-4.0 Package: argocd-image-updater Package: authservice Package: aws-efs-csi-driver Package: aws-network-policy-agent Package: aws-otel-collector Package: azcopy Package: azure-service-operator Package: azuredisk-csi-1.34 Package: azurefile-csi-1.35 Package: bank-vaults Package: bank-vaults-template Package: bento Package: blob-csi-1.27 Package: boring-registry Package: buildah Package: buildctl Package: buildkitd Package: caddy Package: calico-apiserver-3.31 Package: calico-app-policy-3.31 Package: calico-cni-3.31 Package: calico-felix-3.31 Package: calico-goldmane-3.31 Package: calico-kube-controllers-3.31 Package: calico-node-3.31 Package: calico-pod2daemon-3.31 Package: calico-typhad-3.31 Package: calico-whisker-backend-3.31 Package: calicoctl-3.31 Package: cass-operator Package: cerbos Package: cerbosctl Package: cert-manager-1.20 Package: cert-manager-controller-1.20 Package: cert-manager-csi-driver Package: cert-manager-istio-csr Package: cert-manager-webhook-pdns Package: certificate-transparency-trillian-ctserver Package: chartmuseum Package: cilium-1.19 Package: cilium-1.19-clustermesh-apiserver Package: cilium-1.19-hubble-relay Package: cilium-1.19-operator-aws Package: cilium-1.19-operator-generic Package: cilium-cli Package: cloud-provider-aws-1.31-cloud-controller-manager Package: cloud-provider-aws-1.35-cloud-controller-manager Package: cloud-provider-azure-cloud-controller-manager-1.35 Package: cloud-provider-azure-cloud-node-manager-1.35 Package: cloud-provider-gcp-cloud-controller-manager Package: cloud-provider-vsphere Package: cloud-sql-proxy-2.16 Package: cloudflared Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cloudprober Package: cluster-api-1.12-controller Package: cluster-api-1.12-kubeadm-control-plane-controller Package: cluster-api-aws-controller Package: cluster-api-azure-controller Package: cluster-api-gcp-controller Package: cluster-api-helm-controller Package: cluster-api-ipam-provider-in-cluster Package: cluster-api-provider-vsphere Package: cluster-autoscaler-1.35 Package: conftest Package: consul-k8s-1.9 Package: consul-k8s-1.9-cli Package: container-object-storage-interface-sidecar Package: containerd-1 Package: containerd-2 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-stress-1 Package: containerd-stress-2 Package: coredns-1.13 Package: coredns-1.14 Package: cortex Package: cosign Package: cri-tools Package: crictl Package: crossplane-2.2 Package: crossplane-2.2-crank Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sqs Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-storage Package: crossplane-provider-family-aws Package: crossplane-provider-family-azure Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: ctr-1 Package: ctr-2 Package: dagdotdev Package: dagger Package: dapr-daprd-1.17 Package: dapr-injector-1.17 Package: dapr-operator-1.17 Package: dapr-placement-1.17 Package: dapr-scheduler-1.17 Package: dapr-sentry-1.17 Package: datadog-agent-7.72 Package: datadog-agent-7.73 Package: datadog-cluster-agent-7.72 Package: datadog-cluster-agent-7.73 Package: datadog-operator Package: dataplaneapi Package: db-operator Package: dbmate Package: descheduler Package: dex Package: dgraph Package: distribution Package: dkron-executor-kafka Package: docker-cli-buildx Package: docker-compose Package: dockerd-28 Package: dockerd-29 Package: dogstatsd-7.72 Package: dogstatsd-7.73 Package: eksctl Package: emissary Package: envoy-gateway Package: envoy-gateway-egctl Package: envoy-ratelimit Package: etcd-3.6 Package: external-secrets-operator-1.1 Package: falco-exporter Package: falco-no-driver Package: falcoctl Package: falcosidekick Package: ferretdb Package: flannel Package: fluent-bit-plugin-loki Package: fluent-operator Package: flux-2.7 Package: flux-2.8 Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: flux-notification-controller Package: flux-source-controller Package: flyte Package: fulcio Package: fuse-overlayfs-snapshotter Package: gatekeeper-3.22 Package: gatekeeper-3.22-gator Package: gatus Package: gcsfuse Package: gh Package: gitaly-18.6 Package: gitaly-18.7 Package: gitaly-18.8 Package: gitaly-18.9 Package: gitaly-backup-18.6 Package: gitaly-backup-18.7 Package: gitaly-backup-18.8 Package: gitaly-backup-18.9 Package: gitea Package: gitlab-agent-18.6 Package: gitlab-agent-18.7 Package: gitlab-agent-18.8 Package: gitlab-agent-18.9 Package: gitlab-docker-machine-18.6 Package: gitlab-docker-machine-18.7 Package: gitlab-docker-machine-18.8 Package: gitlab-docker-machine-18.9 Package: gitlab-kas-18.6 Package: gitlab-kas-18.7 Package: gitlab-kas-18.8 Package: gitlab-kas-18.9 Package: gitlab-pages-18.6 Package: gitlab-pages-18.7 Package: gitlab-pages-18.8 Package: gitlab-pages-18.9 Package: gitlab-runner-18.6 Package: gitlab-runner-18.7 Package: gitlab-runner-18.8 Package: gitlab-runner-18.9 Package: gitlab-runner-helper-18.6 Package: gitlab-runner-helper-18.7 Package: gitlab-runner-helper-18.8 Package: gitlab-runner-helper-18.9 Package: gitness Package: gitsign Package: go-discover Package: golang-google-grpc Package: golang-google-grpc Package: gomplate-5 Package: google-guest-agent Package: google.golang.org/grpc Package: goreleaser Package: grafana-12.3 Package: grafana-12.4 Package: grafana-agent-operator Package: grafana-alloy Package: grafana-image-renderer Package: grafana-mimir-3.0 Package: grafana-mimir-3.0-metaconvert-3.0 Package: grafana-mimir-3.0-mimirtool-3.0 Package: grafana-mimir-3.0-query-tee-3.0 Package: grafana-pyroscope-1.19 Package: grafana-rollout-operator Package: grpc-1.66 Package: grpc-1.67 Package: grpc-1.68 Package: grpc-1.69 Package: grpc-health-probe Package: grpcurl Package: grype Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: harbor-2.14 Package: harbor-2.14-exporter Package: harbor-2.14-jobservice Package: harbor-2.14-registryctl Package: harbor-registry Package: headlamp Package: helm-3 Package: helm-mapkubeapis Package: helm-operator Package: helm-push Package: helm-set-status Package: hubble Package: hubble-ui-backend Package: hydra Package: ipfs-cluster Package: istio-cni-1.29 Package: istio-install-cni-1.29 Package: istio-pilot-agent-1.25 Package: istio-pilot-agent-1.29 Package: istio-pilot-discovery-1.29 Package: istioctl-1.29 Package: jaeger-2-anonymizer Package: jaeger-2-es-rollover Package: jaeger-2-esmapping-generator Package: jaeger-2-jaeger Package: jaeger-2-remote-storage Package: jaeger-2-tracegen Package: jitsucom-bulker-bulker Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-sidecar Package: juicefs-1.3 Package: juicefs-csi-driver Package: k3d-proxy Package: k3s Package: k3s-1.32 Package: k3s-1.34 Package: k3s-1.35 Package: k3s-static Package: k3s-static-1.32 Package: k3s-static-1.34 Package: k3s-static-1.35 Package: k6 Package: k8s_gateway Package: k8sgpt Package: k8sgpt-operator Package: k8ssandra-client Package: k8ssandra-operator Package: k9s Package: kafka-proxy Package: kapp-controller Package: kargo Package: katib-controller Package: katib-db-manager Package: katib-file-metricscollector Package: katib-suggestion-goptuna Package: keda-2.19 Package: keda-2.19-metrics-apiserver Package: kiali Package: kine Package: knative-eventing-1.21-channel-controller Package: knative-eventing-1.21-channel-dispatcher Package: knative-eventing-1.21-controller Package: knative-eventing-1.21-filter Package: knative-eventing-1.21-ingress Package: knative-eventing-1.21-jobsink Package: knative-eventing-1.21-mtchannel-broker Package: knative-eventing-1.21-webhook Package: knative-operator-1.21 Package: knative-operator-1.21-webhook Package: knative-serving-1.21-activator Package: knative-serving-1.21-autoscaler Package: knative-serving-1.21-autoscaler-hpa Package: knative-serving-1.21-controller Package: knative-serving-1.21-queue Package: knative-serving-1.21-webhook Package: ko Package: kots Package: kserve-agent Package: kserve-localmodel Package: kserve-manager Package: kserve-modelmesh-serving Package: kserve-qpext Package: kserve-rest-proxy Package: kserve-router Package: ksops Package: kube-apiserver-1.34 Package: kube-apiserver-1.35 Package: kube-arangodb-1.4 Package: kube-controller-manager-1.34 Package: kube-controller-manager-1.35 Package: kube-logging-operator Package: kube-metrics-adapter Package: kube-proxy-1.34 Package: kube-proxy-1.35 Package: kube-rbac-proxy Package: kube-scheduler-1.34 Package: kube-scheduler-1.35 Package: kube-state-metrics Package: kube-vip Package: kube-vip-cloud-provider Package: kubeadm-1.34 Package: kubeadm-1.35 Package: kubectl-argo-rollouts Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-profile-controller Package: kubelet-1.34 Package: kubelet-1.35 Package: kubernetes-1.34 Package: kubernetes-1.35 Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-health-monitor Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-external-snapshot-controller-8.5 Package: kubernetes-csi-external-snapshotter-8.5 Package: kubernetes-csi-livenessprobe Package: kubernetes-csi-node-driver-registrar-2.16 Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubescape Package: kubescape-operator Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubo Package: kuma-cni-2.12 Package: kuma-cni-2.13 Package: kuma-coredns-1.13 Package: kuma-coredns-1.14 Package: kuma-cp-2.12 Package: kuma-dp-2.12 Package: kuma-dp-2.13 Package: kuma-install-cni-2.12 Package: kuma-install-cni-2.13 Package: kumactl-2.12 Package: kumactl-2.13 Package: kwok Package: kwokctl Package: kyverno-1.17 Package: kyverno-background-controller-1.17 Package: kyverno-cleanup-controller-1.17 Package: kyverno-cli-1.17 Package: kyverno-init-container-1.17 Package: kyverno-notation-aws Package: kyverno-policy-reporter Package: kyverno-reports-controller-1.17 Package: linkerd2-controller Package: linkerd2-metrics-api Package: linkerd2-tap Package: linkerd2-web Package: litestream Package: loki-3.6-logcli Package: lvm-driver Package: mattermost-11.1 Package: mattermost-11.5 Package: mc Package: mcp-grafana Package: melange Package: mesosphere-vsphere-csi-driver Package: mesosphere-vsphere-csi-syncer Package: metallb Package: metallb-controller Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metrics-server Package: migrate Package: minio Package: minio-object-browser Package: mps-control-daemon Package: multus-cni Package: nerdctl Package: net-kourier-1.21 Package: neuvector-scanner Package: neuvector-scanner-task Package: neuvector-sigstore-interface Package: newrelic-infrastructure-agent Package: no-docs-check Package: node-feature-discovery-0.18 Package: node-problem-detector-1.35 Package: nvidia-container-toolkit-nvidia-ctk-installer Package: oauth2-proxy Package: octo-sts Package: octo-sts-webhook Package: op-geth Package: opa Package: opa-envoy Package: openbao Package: opencost Package: openfga Package: opentelemetry-collector Package: opentelemetry-collector-contrib Package: opentelemetry-operator Package: opentelemetry-operator-otel-allocator Package: opentofu-1.11 Package: opentofu-1.9 Package: osv-scanner Package: otel-cli Package: percona-server-mongodb-operator Package: podcli Package: podinfo Package: podman Package: policy-controller Package: policy-controller-tester Package: prometheus-3.10 Package: prometheus-3.8 Package: prometheus-3.9 Package: prometheus-adapter Package: prometheus-alertmanager Package: promxy Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-go Package: pulumi-language-java Package: pulumi-language-nodejs Package: pulumi-language-python Package: pulumi-language-yaml Package: rabbitmq-messaging-topology-operator Package: rancher-2.13 Package: rancher-agent-2.13 Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-helm-3 Package: rancher-machine Package: rancher-system-agent Package: ratify Package: rclone Package: rclone Package: rekor-cli Package: rekor-server Package: restic Package: rke2-cloud-provider Package: rqlite Package: scorecard Package: seaweedfs Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: sftpgo Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-geoipfilter Package: sftpgo-plugin-kms Package: sftpgo-plugin-pubsub Package: sigstore-scaffolding-trillian-createtree Package: sigstore-scaffolding-trillian-updatetree Package: skaffold Package: skopeo Package: slsa-verifier Package: smarter-device-manager Package: snyk-cli Package: sops Package: spegel Package: spicedb Package: spicedb-operator Package: spiffe-helper Package: spire-agent Package: spire-controller-manager Package: spire-server Package: splunk-otel-collector Package: spqr Package: sql_exporter Package: src Package: sriov-network-device-plugin Package: steampipe Package: step-ca Package: step-issuer Package: step-kms-plugin Package: syft Package: symlink-check Package: task Package: tdbg Package: tekton-chains Package: telegraf-1.38 Package: teleport-18.6 Package: teleport-18.6-kube-agent-updater Package: teleport-18.6-operator Package: tempo-2.10 Package: tempo-2.10-cli Package: tempo-2.10-query Package: tempo-2.10-vulture Package: temporal Package: temporal-cassandra-tool Package: temporal-server Package: temporal-sql-tool Package: temporal-ui-server Package: terraform Package: terraform-docs Package: terraform-provider-acme Package: terraform-provider-aws Package: terraform-provider-azapi Package: terraform-provider-azuread Package: terraform-provider-azurerm Package: terraform-provider-google Package: terraform-provider-grafana Package: terraform-provider-kubernetes Package: terraform-provider-pagerduty Package: terraform-provider-random Package: terraform-provider-sendgrid Package: terraform-provider-time Package: terraform-provider-tls Package: terragrunt Package: tflint Package: tfsec Package: timestamp-authority-server Package: tkn Package: tofu-controller Package: tofu-controller-runner Package: traefik-3.6 Package: trillian-logserver Package: trillian-logsigner Package: trivy Package: trivy-operator Package: trufflehog Package: tw Package: twt Package: undock Package: vault-benchmark Package: vault-env Package: vault-secrets-webhook Package: vcluster-cli Package: velero Package: velero-plugin-for-aws Package: velero-plugin-for-aws-compat Package: velero-plugin-for-csi Package: velero-plugin-for-csi-compat Package: velero-plugin-for-microsoft-azure Package: verticadb-operator Package: vexctl Package: vitess-23 Package: vitess-23-binaries Package: volume-modifier-for-k8s Package: wal-g-pg Package: weaviate Package: witness Package: wolfictl Package: xeol Package: yunikorn-k8shim Package: zarf Package: zot Ecosystem: Alpine Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.

Affected products

VendorProductAffectedFixed
grpc grpc-go < 1.79.3 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-google-grpc 1.79.3-1 —
Debian 13 golang-google-grpc No fix yet —
Debian 12 golang-google-grpc No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-google-grpc +1 No fix yet —
Ubuntu 26.04 LTS golang-google-grpc +1 No fix yet —
Ubuntu 25.10 golang-google-grpc +1 No fix yet —
Ubuntu 24.04 LTS google-guest-agent No fix yet —
Ubuntu 22.04 LTS golang-google-grpc +1 No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS golang-google-grpc No fix yet —
Ubuntu 18.04 LTS golang-google-grpc No fix yet —
Ubuntu 16.04 LTS golang-google-grpc No fix yet —
Ubuntu Pro 24.04 LTS golang-google-grpc No fix yet —
Ubuntu Pro 20.04 LTS google-guest-agent No fix yet —
Ubuntu Pro 18.04 LTS google-guest-agent No fix yet —
Ubuntu Pro 16.04 LTS google-guest-agent No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 image-builder 52.1-1.el10_2 RHSA-2026:22937
RHEL 10 opentelemetry-collector 0.144.0-2.el10_2 RHSA-2026:19135
RHEL 10 osbuild-composer +2 165.1-2.el10_2 RHSA-2026:22450
RHEL 9 image-builder 52.1-1.el9_8 RHSA-2026:23228
RHEL 9 opentelemetry-collector 0.144.0-2.el9_8 RHSA-2026:19353
RHEL 9 osbuild-composer +2 165.1-2.el9_8 RHSA-2026:22714
RHEL 9 rhc +1 1:0.2.7-4.el9_7 RHSA-2026:19207, RHSA-2026:10706
RHEL 8 osbuild-composer +2 101.5-1.el8_10 RHSA-2026:48790
RHEL 8 rhc 1:0.2.5-6.el8_10 RHSA-2026:10107
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Satellite Capsule 6 dynflow-utils 1.6.3-1.1.el8sat RHSA-2026:27076
Red Hat Satellite Capsule 6 python-pillow +1 12.2.0-1.el8pc RHSA-2026:27076
Red Hat Satellite Capsule 6 python-pulpcore +1 3.63.21-2.el9pc RHSA-2026:42150
Red Hat Satellite Capsule 6 python3.12-pulpcore 3.73.30-2.el9pc RHSA-2026:42240, RHSA-2026:42151
Red Hat Satellite 6 dynflow-utils 1.6.3-1.1.el8sat RHSA-2026:27076
Red Hat Satellite 6 python-pillow +1 12.2.0-1.el8pc RHSA-2026:27076
Red Hat Satellite 6 python-pulpcore +1 3.63.21-2.el9pc RHSA-2026:42150
Red Hat Satellite 6 python3.12-pulpcore 3.73.30-2.el9pc RHSA-2026:42240, RHSA-2026:42151
Red Hat Satellite 6 yggdrasil-worker-forwarder 0.0.3-5.el8sat RHSA-2026:42240, RHSA-2026:42151, RHSA-2026:42150
RHEL 10.0 EUS opentelemetry-collector 0.144.0-2.el10_0 RHSA-2026:19719
RHEL 10.0 EUS osbuild-composer +2 134.1-9.el10_0 RHSA-2026:27856
RHEL 9.6 EUS opentelemetry-collector 0.144.0-2.el9_6 RHSA-2026:19720
RHEL 9.6 EUS osbuild-composer +2 132.2-9.el9_6 RHSA-2026:27712
RHEL 9.6 EUS rhc +1 1:0.2.7-1.el9_6.3 RHSA-2026:10705
RHEL 9.4 EUS opentelemetry-collector 0.144.0-2.el9_4 RHSA-2026:19721
RHEL 9.4 E4S osbuild-composer +2 101.3-4.el9_4.4 RHSA-2026:56959
RHEL 9.2 E4S osbuild-composer +3 76.1-7.el9_2 RHSA-2026:61245
RHEL 7 ELS rhc-worker-script 0.11-1.el7_9 RHSA-2026:54191
Red Hat OpenStack 17 etcd 3.4.26-9.5.el9ost RHSA-2026:28047
Red Hat OpenStack 16 collectd-sensubility 0.2.1-1.1.el8ost RHSA-2026:54757
Red Hat OpenStack 16 erlang +20 23.3.4.18-2.el8ost RHSA-2026:54757
Red Hat OpenStack 16 etcd 3.3.23-22.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python-oslo-messaging +1 10.2.4-2.20260710155333.82281a0.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python-pyasn1 +2 0.4.6-4.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-glance +1 1:19.0.5-2.20260512165254.eb6ad61.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-keystone +1 1:16.0.3-2.20260616134936.9d699a7.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-nova +11 1:20.6.2-2.20260317135026.8a24acd.el8ost RHSA-2026:54757
Red Hat OpenShift 4 containernetworking-plugins 1:1.4.0-9.rhaos4.17.el8 RHSA-2026:34097
Red Hat OpenShift 4 microshift +8 4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9 RHSA-2026:20436, RHSA-2026:20322, RHSA-2026:18068
Red Hat OpenShift 4 microshift-gateway-api +2 4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9 RHSA-2026:20322, RHSA-2026:18068
Red Hat OpenShift 4 microshift-observability +2 4.19.32-202605212036.p0.g27d51c3.assembly.4.19.32.el9 RHSA-2026:20322
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.17.0-202606022046.p2.g144bace.assembly.stream.el8 RHSA-2026:34097
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.15.0-202606231944.p2.g5638728.assembly.stream.el8 RHSA-2026:43225, RHSA-2026:34097, RHSA-2026:29079
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.17.0-202606022046.p2.g8ce997d.assembly.stream.el8 RHSA-2026:34097
Red Hat OpenShift 4 podman +6 5:5.2.2-19.rhaos4.17.el8 RHSA-2026:34097
Red Hat OpenShift 4 runc 4:1.2.9-5.rhaos4.17.el8 RHSA-2026:34097
Red Hat OpenShift 4 skopeo +1 2:1.16.1-6.rhaos4.17.el8 RHSA-2026:34097
Red Hat Edge Manager 1 flightctl +3 1.0.3-1.el9em RHSA-2026:41019, RHSA-2026:36796

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 opentelemetry-collector 0.144.0-2.el10_2 ALSA-2026:19135
AlmaLinux 9 opentelemetry-collector 0.144.0-2.el9_8 ALSA-2026:19353
AlmaLinux 8 osbuild-composer +2 101.5-1.el8_10.alma.1 ALSA-2026:48790

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 image-builder 52.1-1.el10_2.rocky.0.1 RLSA-2026:22937
Rocky Linux 10 opentelemetry-collector 0.144.0-2.el10_2 RLSA-2026:19135
Rocky Linux 10 osbuild-composer 165.1-2.el10_2.rocky.0.1 RLSA-2026:22450
Rocky Linux 9 image-builder 52.1-1.el9_8 RLSA-2026:23228
Rocky Linux 9 opentelemetry-collector 0.144.0-2.el9_8 RLSA-2026:19353
Rocky Linux 9 osbuild-composer 165.1-2.el9_8.rocky.0.1 RLSA-2026:22714
Rocky Linux 8 osbuild-composer 101.5-1.el8_10.rocky.0.6 RLSA-2026:48790

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 alloy 1.16.1-150700.15.20.1 SUSE-SU-2026:2438-1
SLES 15 SP7 apptainer 1.5.1-150600.4.24.1 SUSE-SU-2026:2609-1
SLES 15 SP7 azure-storage-azcopy 10.29.1-150400.9.6.1 SUSE-SU-2026:2466-1, SUSE-SU-2026:1395-1
SLES 15 SP7 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES 15 SP7 containerized-data-importer 1.64.0-150700.9.11.1 SUSE-SU-2026:2493-1
SLES 15 SP7 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP7 docker-stable 24.0.9_ce-150000.1.48.1 SUSE-SU-2026:4535-1
SLES 15 SP7 google-cloud-sap-agent 3.12-150100.3.63.1 SUSE-SU-2026:1194-1
SLES 15 SP7 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:4270-1, SUSE-SU-2026:2612-1
SLES 15 SP7 google-osconfig-agent 20260615.01-150000.1.55.1 SUSE-SU-2026:2611-1
SLES 15 SP7 ignition 2.14.0-150400.9.15.1 SUSE-SU-2026:1314-1
SLES 15 SP7 kubevirt 1.7.4-150700.3.24.2 SUSE-SU-2026:2400-1
SLES 15 SP7 kubevirt-1.6 1.6.6-150700.15.7.1 SUSE-SU-2026:2401-1
SLES 15 SP6 apptainer 1.5.1-150600.4.24.1 SUSE-SU-2026:2609-1
SLES 15 SP6 azure-storage-azcopy 10.29.1-150400.9.6.1 SUSE-SU-2026:2466-1, SUSE-SU-2026:1395-1
SLES 15 SP6 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES 15 SP6 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP6 docker-stable 24.0.9_ce-150000.1.48.1 SUSE-SU-2026:4535-1
SLES 15 SP6 google-cloud-sap-agent 3.12-150100.3.63.1 SUSE-SU-2026:1194-1
SLES 15 SP6 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:4270-1, SUSE-SU-2026:2612-1
SLES 15 SP6 google-osconfig-agent 20260615.01-150000.1.55.1 SUSE-SU-2026:2611-1
SLES 15 SP6 ignition 2.14.0-150400.9.15.1 SUSE-SU-2026:1314-1
SLES 15 SP5 azure-storage-azcopy 10.29.1-150400.9.6.1 SUSE-SU-2026:2466-1, SUSE-SU-2026:1395-1
SLES 15 SP5 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP5 docker-stable 24.0.9_ce-150000.1.48.1 SUSE-SU-2026:4535-1
SLES 15 SP5 google-cloud-sap-agent 3.12-150100.3.63.1 SUSE-SU-2026:1194-1
SLES 15 SP5 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:4270-1, SUSE-SU-2026:2612-1
SLES 15 SP5 google-osconfig-agent 20260615.01-150000.1.55.1 SUSE-SU-2026:2611-1
SLES 15 SP5 terraform-provider-aws 3.11.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-azurerm 2.32.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-external 2.0.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-google 3.43.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-helm 2.9.0-150200.6.23.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-kubernetes 1.13.2-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-local 2.0.0-150200.6.8.1 SUSE-SU-2026:3056-1, SUSE-SU-2026:1411-1
SLES 15 SP5 terraform-provider-null 3.0.0-150200.6.12.1 SUSE-SU-2026:3056-1, SUSE-SU-2026:1411-1
SLES 15 SP5 terraform-provider-random 3.0.0-150200.6.6.2 SUSE-SU-2026:3056-1, SUSE-SU-2026:1411-1
SLES 15 SP5 terraform-provider-susepubliccloud 0.0.1-150100.3.14.1 SUSE-SU-2026:3057-1
SLES 15 SP5 terraform-provider-tls 3.0.0-150200.5.6.2 SUSE-SU-2026:3056-1, SUSE-SU-2026:1411-1
SLES 15 SP4 azure-storage-azcopy 10.29.1-150400.9.6.1 SUSE-SU-2026:2466-1, SUSE-SU-2026:1395-1
SLES 15 SP4 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP4 docker-stable 24.0.9_ce-150000.1.48.1 SUSE-SU-2026:4535-1
SLES 15 SP4 google-cloud-sap-agent 3.12-150100.3.63.1 SUSE-SU-2026:1194-1
SLES 15 SP4 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:4270-1, SUSE-SU-2026:2612-1
SLES 15 SP4 google-osconfig-agent 20260615.01-150000.1.55.1 SUSE-SU-2026:2611-1
SLES 15 SP4 terraform-provider-aws 3.11.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-azurerm 2.32.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-external 2.0.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-google 3.43.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-helm 2.9.0-150200.6.23.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-kubernetes 1.13.2-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-local 2.0.0-150200.6.8.1 SUSE-SU-2026:3056-1, SUSE-SU-2026:1411-1
SLES 15 SP4 terraform-provider-null 3.0.0-150200.6.12.1 SUSE-SU-2026:3056-1, SUSE-SU-2026:1411-1
SLES 15 SP4 terraform-provider-random 3.0.0-150200.6.6.2 SUSE-SU-2026:3056-1, SUSE-SU-2026:1411-1
SLES 15 SP4 terraform-provider-susepubliccloud 0.0.1-150100.3.14.1 SUSE-SU-2026:3057-1
SLES 15 SP4 terraform-provider-tls 3.0.0-150200.5.6.2 SUSE-SU-2026:3056-1, SUSE-SU-2026:1411-1
SLES 12 SP5 containerd 1.7.29-16.110.1 SUSE-SU-2026:2640-1
SLES 12 SP5 docker-stable 24.0.9_ce-1.40.1 SUSE-SU-2026:4533-1
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 google-cloud-sap-agent 3.12-6.60.1 SUSE-SU-2026:1195-1
SLES 12 google-guest-agent 20260529.00-1.61.1 SUSE-SU-2026:4272-1, SUSE-SU-2026:2581-1
SLES 12 google-osconfig-agent 20250416.02-1.44.1 SUSE-SU-2026:2665-1, SUSE-SU-2026:2347-1
SLES for SAP 16.0 google-cloud-sap-agent 3.12-160000.1.1 SUSE-SU-2026:22328-1, SUSE-SU-2026:21210-1
SLES for SAP 16.0 google-guest-agent 20260430.00-160000.1.1 SUSE-SU-2026:22376-1, SUSE-SU-2026:22128-1
SLES for SAP 16.0 google-osconfig-agent 20260615.01-160000.1.2 SUSE-SU-2026:22558-1
SLES for SAP 15 SP6 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES for SAP 15 SP6 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP6 docker-stable 24.0.9_ce-150000.1.48.1 SUSE-SU-2026:4535-1
SLES for SAP 15 SP5 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES for SAP 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP5 docker-stable 24.0.9_ce-150000.1.48.1 SUSE-SU-2026:4535-1
SLES for SAP 15 SP4 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES for SAP 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP4 docker-stable 24.0.9_ce-150000.1.48.1 SUSE-SU-2026:4535-1
SLES 16.0 google-cloud-sap-agent 3.12-160000.1.1 SUSE-SU-2026:22328-1, SUSE-SU-2026:21210-1
SLES 16.0 google-guest-agent 20260430.00-160000.1.1 SUSE-SU-2026:22376-1, SUSE-SU-2026:22128-1
SLES 16.0 google-osconfig-agent 20260615.01-160000.1.2 SUSE-SU-2026:22558-1
SLE Micro 6.2 elemental-register 1.9.2-160000.1.1 SUSE-SU-2026:22050-1
SLE Micro 6.2 elemental-system-agent 0.3.16-160000.1.1 SUSE-SU-2026:22053-1
SLE Micro 6.2 elemental-toolkit 2.3.4-160000.1.1 SUSE-SU-2026:22051-1
SLE Micro 6.2 ignition 2.21.0-160000.3.1 SUSE-SU-2026:21272-1
SLE Micro 6.1 elemental-operator 1.7.5-slfo.1.1_1.1 SUSE-SU-2026:22075-1
SLE Micro 6.1 elemental-system-agent 0.3.16-slfo.1.1_1.1 SUSE-SU-2026:22141-1
SLE Micro 6.1 elemental-toolkit 2.2.9-slfo.1.1_1.1 SUSE-SU-2026:22074-1
SLE Micro 6.1 google-guest-agent 20260430.00-slfo.1.1_1.1 SUSE-SU-2026:23745-1, SUSE-SU-2026:22442-1, SUSE-SU-2026:22133-1
SLE Micro 6.1 google-osconfig-agent 20260615.01-slfo.1.1_1.1 SUSE-SU-2026:22249-1
SLE Micro 6.1 ignition 2.19.0-slfo.1.1_3.1 SUSE-SU-2026:21115-1
SLE Micro 6.0 containerd 1.7.29-159998.1.1 SUSE-SU-2026:24136-1
SLE Micro 6.0 elemental-operator 1.6.11-1.1 SUSE-SU-2026:22066-1
SLE Micro 6.0 elemental-system-agent 0.3.16-1.1 SUSE-SU-2026:22101-1
SLE Micro 6.0 elemental-toolkit 2.1.6-1.1 SUSE-SU-2026:22065-1
SLE Micro 6.0 google-guest-agent 20260529.00-1.1 SUSE-SU-2026:23874-1, SUSE-SU-2026:22423-1
SLE Micro 6.0 google-osconfig-agent 20260615.01-1.1 SUSE-SU-2026:22242-1
SLE Micro 6.0 ignition 2.19.0-3.1 SUSE-SU-2026:21128-1
SLE Micro 5.5 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLE Micro 5.5 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:4270-1, SUSE-SU-2026:2612-1
SLE Micro 5.5 google-osconfig-agent 20260615.01-150000.1.55.1 SUSE-SU-2026:2611-1
SLE Micro 5.5 ignition 2.17.0-150500.3.15.1 SUSE-SU-2026:1200-1
SLE Micro 5.4 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLE Micro 5.4 ignition 2.15.0-150400.4.14.1 SUSE-SU-2026:1208-1
SLE Micro 5.3 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLE Micro 5.3 ignition 2.14.0-150400.4.15.1 SUSE-SU-2026:1197-1
SLE Micro 5.2 ignition 2.14.0-150300.6.19.1 SUSE-SU-2026:1198-1
SLE HPC 15 SP5 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLE HPC 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLE HPC 15 SP5 docker-stable 24.0.9_ce-150000.1.48.1 SUSE-SU-2026:4535-1
SLE HPC 15 SP4 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLE HPC 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLE HPC 15 SP4 docker-stable 24.0.9_ce-150000.1.48.1 SUSE-SU-2026:4535-1
SUSE Multi Linux Manager Tools SLE-Micro-5 prometheus-blackbox_exporter 0.26.0-150002.3.6.1 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.1.26-150002.3.12.1 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-lusitaniae-apache_exporter 1.0.10-150002.3.6.1 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.5.0-150002.3.8.1 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-15 grafana 11.6.14+security01-150002.4.14.1 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-15 prometheus-blackbox_exporter 0.26.0-150002.3.6.1 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.1.13-150002.3.9.3 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.1.26-150002.3.12.1 SUSE-SU-2026:1524-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed alloy 1.15.1-1.1 openSUSE-SU-2026:10618-1
openSUSE Tumbleweed amazon-cloudwatch-agent 1.300064.0-2.1 openSUSE-SU-2026:10420-1
openSUSE Tumbleweed apptainer 1.4.5-4.1 openSUSE-SU-2026:10700-1
openSUSE Tumbleweed azure-storage-azcopy 10.32.2-1.1 openSUSE-SU-2026:10407-1
openSUSE Tumbleweed cadvisor 0.60.3-1.1 openSUSE-SU-2026:11153-1
openSUSE Tumbleweed cf-cli 8.18.4+git.0.3fcd823a1-1.1 openSUSE-SU-2026:11410-1
openSUSE Tumbleweed clusterctl 1.12.5-1.1 openSUSE-SU-2026:10523-1
openSUSE Tumbleweed containerd 1.7.33-1.1 openSUSE-SU-2026:11107-1
openSUSE Tumbleweed containerized-data-importer1.65 1.65.0-2.1 openSUSE-SU-2026:11305-1
openSUSE Tumbleweed cri-tools 1.36.0-1.1 openSUSE-SU-2026:10690-1
openSUSE Tumbleweed distribution 3.1.0-1.1 openSUSE-SU-2026:10631-1
openSUSE Tumbleweed docker-stable 24.0.9_ce-18.1 openSUSE-SU-2026:11075-1
openSUSE Tumbleweed fortio 1.76.0-1.1 openSUSE-SU-2026:12321-1
openSUSE Tumbleweed golang-github-prometheus-alertmanager 0.31.1-3.1 openSUSE-SU-2026:10612-1
openSUSE Tumbleweed google-guest-agent 20260529.00-1.1 openSUSE-SU-2026:10921-1
openSUSE Tumbleweed google-osconfig-agent 20260511.00-1.1 openSUSE-SU-2026:10771-1
openSUSE Tumbleweed grafana 11.6.14+security01-1.1 openSUSE-SU-2026:10601-1
openSUSE Tumbleweed ignition 2.26.0-3.1 openSUSE-SU-2026:10474-1
openSUSE Tumbleweed k6 1.7.1-1.1 openSUSE-SU-2026:10484-1
openSUSE Tumbleweed kubectl-retina 1.3.1-1.1 openSUSE-SU-2026:12297-1
openSUSE Tumbleweed kubevirt +2 1.8.3-1.1 openSUSE-SU-2026:11091-1, openSUSE-SU-2026:11057-1, openSUSE-SU-2026:11015-1
openSUSE Tumbleweed kumactl 3.0.0-1.1 openSUSE-SU-2026:12300-1
openSUSE Tumbleweed kyverno 1.17.2-1.1 openSUSE-SU-2026:10613-1
openSUSE Tumbleweed mcphost 0.34.0-1.1 openSUSE-SU-2026:10731-1
openSUSE Tumbleweed pvetui 1.4.3-1.1 openSUSE-SU-2026:11970-1
openSUSE Tumbleweed rclone 1.73.3-1.1 openSUSE-SU-2026:10419-1
openSUSE Tumbleweed shadowsocks-v2ray-plugin 5.49.0-1.1 openSUSE-SU-2026:10902-1
openSUSE Tumbleweed skopeo 1.23.0-1.1 openSUSE-SU-2026:11150-1
openSUSE Tumbleweed timoni 0.36.0-1.1 openSUSE-SU-2026:12309-1
openSUSE Tumbleweed traefik 3.7.9-1.1 openSUSE-SU-2026:11402-1
openSUSE Tumbleweed traefik2 2.11.53-1.1 openSUSE-SU-2026:11403-1
openSUSE Tumbleweed trivy 0.70.0-1.1 openSUSE-SU-2026:10651-1
openSUSE Tumbleweed v2ray-core 5.47.0-1.1 openSUSE-SU-2026:10432-1
openSUSE Tumbleweed velociraptor 0.7.0.4.git185.a5708584-2.1 openSUSE-SU-2026:11126-1
openSUSE Leap 16.0 cadvisor 0.60.3-bp160.1.1 openSUSE-SU-2026:21265-1
openSUSE Leap 16.0 containerd 1.7.33-160000.1.1 openSUSE-SU-2026:21213-1
openSUSE Leap 16.0 containerized-data-importer1.65 1.65.0-160000.3.1 openSUSE-SU-2026:21824-1
openSUSE Leap 16.0 dnscrypt-proxy 2.1.16-bp160.1.1 openSUSE-RU-2026:21160-1
openSUSE Leap 16.0 docker-stable 24.0.9_ce-160000.6.1 openSUSE-SU-2026:21205-1
openSUSE Leap 16.0 elemental-register 1.9.2-160000.1.1 openSUSE-SU-2026:20920-1
openSUSE Leap 16.0 elemental-system-agent 0.3.16-160000.1.1 openSUSE-SU-2026:20924-1
openSUSE Leap 16.0 elemental-toolkit 2.3.4-160000.1.1 openSUSE-SU-2026:20921-1
openSUSE Leap 16.0 google-cloud-sap-agent 3.12-160000.1.1 openSUSE-SU-2026:21010-1, openSUSE-SU-2026:20555-1
openSUSE Leap 16.0 google-guest-agent 20260430.00-160000.1.1 openSUSE-SU-2026:21069-1, openSUSE-SU-2026:20969-1
openSUSE Leap 16.0 google-osconfig-agent 20260615.01-160000.1.2 openSUSE-SU-2026:21210-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1
openSUSE Leap 16.0 grafana 11.6.14+security04-bp160.1.1 openSUSE-SU-2026:20940-1
openSUSE Leap 16.0 ignition 2.21.0-160000.3.1 openSUSE-SU-2026:20603-1
openSUSE Leap 16.0 v2ray-core 5.47.0-bp160.1.1 openSUSE-SU-2026:20584-1
openSUSE Leap 15.6 google-cloud-sap-agent 3.12-150100.3.63.1 SUSE-SU-2026:1194-1
openSUSE Leap 15.6 govulncheck-vulndb 0.0.20260402T184258-150000.1.158.1 SUSE-SU-2026:1205-1
openSUSE Leap 15.6 ignition 2.14.0-150400.9.15.1 SUSE-SU-2026:1314-1
openSUSE Leap 15.6 terraform-provider-local 2.0.0-150200.6.8.1 SUSE-SU-2026:1411-1
openSUSE Leap 15.6 terraform-provider-null 3.0.0-150200.6.12.1 SUSE-SU-2026:1411-1
openSUSE Leap 15.6 terraform-provider-random 3.0.0-150200.6.6.2 SUSE-SU-2026:1411-1
openSUSE Leap 15.6 terraform-provider-tls 3.0.0-150200.5.6.2 SUSE-SU-2026:1411-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 rclone 1.73.5-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300064.2-1.amzn2023 ALAS2023-2026-1572
Amazon Linux 2023 containerd +1 2.2.1-1.amzn2023.0.2 ALAS2023-2026-1534
Amazon Linux 2023 credentials-fetcher 2.0.1-1.amzn2023.0.2 ALAS2023-2026-1551
Amazon Linux 2023 ecs-init 1.102.2-1.amzn2023 ALAS2023-2026-1552
Amazon Linux 2023 nerdctl 2.2.1-1.amzn2023.0.3 ALAS2023-2026-1535
Amazon Linux 2023 rclone 1.73.4-74.amzn2023 ALAS2023-2026-1607
Amazon Linux 2023 runfinch-finch 1.15.1-1.amzn2023.0.2 ALAS2023-2026-1548
Amazon Linux 2023 soci-snapshotter 0.13.0-1.amzn2023.0.1 ALAS2023-2026-1573
Amazon Linux 2 amazon-cloudwatch-agent 1.300064.2-1.amzn2 ALAS2-2026-3248
Amazon Linux 2 cri-tools 1.32.0-1.amzn2.0.5 ALAS2-2026-3236
Amazon Linux 2 nerdctl 2.2.1-1.amzn2.0.3 ALAS2-2026-3229
Amazon Linux 2 rclone 1.55.1-1.amzn2.0.4 ALAS2-2026-3264

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 image-builder 58-1.0.1.el10 ELSA-2026-22937
Oracle Linux 10 osbuild-composer +2 176-1.0.1.el10_2 ELSA-2026-22450
Oracle Linux 9 image-builder 72.0.0-1.0.1.el9 ELSA-2026-23228
Oracle Linux 9 osbuild-composer +2 175-1.0.1.el9_8 ELSA-2026-22714
Oracle Linux 8 osbuild-composer +2 101.5-1.0.1.el8_10 ELSA-2026-48790

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r47 —
Wolfi rolling amazon-cloudwatch-agent 1.300065.0-r1 —
Wolfi rolling amazon-cloudwatch-agent-operator 3.3.2-r2 —
Wolfi rolling amazon-k8s-cni +3 1.21.1-r5 —
Wolfi rolling apisix-ingress-controller 2.0.1-r7 —
Wolfi rolling apko 1.1.15-r4 —
Wolfi rolling argo-cd-3.2-compat 3.2.7-r3 —
Wolfi rolling argo-cd-3.3 +1 3.3.4-r5 —
Wolfi rolling argo-events 1.9.10-r13 —
Wolfi rolling argo-rollouts +1 1.8.4-r5 —
Wolfi rolling argo-workflows-3.7 +1 3.7.11-r1 —
Wolfi rolling argocd-image-updater 1.1.1-r4 —
Wolfi rolling authservice 1.1.5-r5 —
Wolfi rolling aws-efs-csi-driver 2.3.1-r1 —
Wolfi rolling aws-network-policy-agent 1.3.1-r4 —
Wolfi rolling aws-otel-collector 0.47.0-r8 —
Wolfi rolling azcopy 10.32.2-r2 —
Wolfi rolling azure-service-operator 2.18.0-r5 —
Wolfi rolling azuredisk-csi-1.34 1.34.2-r4 —
Wolfi rolling azurefile-csi-1.35 1.35.1-r6 —
Wolfi rolling bank-vaults +1 1.32.1-r15 —
Wolfi rolling bento 1.16.0-r3 —
Wolfi rolling blob-csi-1.27 1.27.3-r3 —
Wolfi rolling boring-registry 0.16.6-r14 —
Wolfi rolling buildah 1.43.0-r5 —
Wolfi rolling buildctl +1 0.28.0-r2 —
Wolfi rolling caddy 2.11.2-r6 —
Wolfi rolling calicoctl-3.31 +10 3.31.4-r3 —
Wolfi rolling cass-operator 1.29.1-r1 —
Wolfi rolling cerbos +1 0.51.0-r8 —
Wolfi rolling cert-manager-1.20 +1 1.20.0-r2 —
Wolfi rolling cert-manager-csi-driver 0.13.0-r1 —
Wolfi rolling cert-manager-webhook-pdns 2.5.5-r2 —
Wolfi rolling certificate-transparency-trillian-ctserver 1.3.3-r2 —
Wolfi rolling chartmuseum 0.16.4-r4 —
Wolfi rolling cilium-1.19 +4 1.19.1-r2 —
Wolfi rolling cilium-cli 0.19.2-r4 —
Wolfi rolling cloud-provider-aws-1.31-cloud-controller-manager 1.31.9-r7 —
Wolfi rolling cloud-provider-aws-1.35-cloud-controller-manager 1.35.1-r2 —
Wolfi rolling cloud-provider-azure-cloud-node-manager-1.35 +1 1.35.1-r5 —
Wolfi rolling cloud-provider-gcp-cloud-controller-manager 35.0.5-r4 —
Wolfi rolling cloud-provider-vsphere 1.35.0-r7 —
Wolfi rolling cloud-sql-proxy-2.16 2.16.0-r16 —
Wolfi rolling cloudflared 2026.3.0-r3 —
Wolfi rolling cloudnative-pg +1 1.28.1-r4 —
Wolfi rolling cloudprober 0.14.2-r3 —
Wolfi rolling cluster-api-1.12-controller +1 1.12.4-r1 —
Wolfi rolling cluster-api-aws-controller 2.10.2-r4 —
Wolfi rolling cluster-api-azure-controller 1.22.1-r3 —
Wolfi rolling cluster-api-gcp-controller 1.11.1-r2 —
Wolfi rolling cluster-api-helm-controller 0.6.1-r2 —
Wolfi rolling cluster-api-ipam-provider-in-cluster 1.1.0-r2 —
Wolfi rolling cluster-api-provider-vsphere 1.15.2-r7 —
Wolfi rolling cluster-autoscaler-1.35 1.35.0-r2 —
Wolfi rolling conftest 0.67.1-r1 —
Wolfi rolling consul-k8s-1.9 +1 1.9.5-r2 —
Wolfi rolling container-object-storage-interface-sidecar 0.2.2-r5 —
Wolfi rolling coredns-1.14 +1 1.14.2-r1 —
Wolfi rolling cortex 1.21.1-r7 —
Wolfi rolling cosign 3.0.5-r3 —
Wolfi rolling crictl +1 1.35.0-r6 —
Wolfi rolling crossplane-2.2 +1 2.2.0-r3 —
Wolfi rolling crossplane-provider-aws-s3 +23 2.5.0-r2 —
Wolfi rolling crossplane-provider-keycloak 2.17.0-r2 —
Wolfi rolling crossplane-provider-sql 0.14.0-r3 —
Wolfi rolling ctr-1 +3 1.7.30-r5 —
Wolfi rolling ctr-2 +3 2.2.2-r5 —
Wolfi rolling dagdotdev 0.0.20-r10 —
Wolfi rolling dagger 0.20.2-r0 —
Wolfi rolling dapr-daprd-1.17 +5 1.17.2-r1 —
Wolfi rolling datadog-operator 1.24.0-r1 —
Wolfi rolling dataplaneapi 3.3.2-r1 —
Wolfi rolling db-operator +5 2.16.0-r8 —
Wolfi rolling dbmate 2.31.0-r4 —
Wolfi rolling descheduler 0.35.1-r2 —
Wolfi rolling dex +1 2.45.1-r3 —
Wolfi rolling dgraph 25.3.0-r2 —
Wolfi rolling distribution +1 3.1.0-r0 —
Wolfi rolling dkron-executor-kafka 4.0.9-r6 —
Wolfi rolling docker-cli-buildx 0.32.1-r2 —
Wolfi rolling docker-compose 5.1.0-r4 —
Wolfi rolling dockerd-28 28.5.2-r17 —
Wolfi rolling dockerd-29 29.3.0-r2 —
Wolfi rolling dogstatsd-7.72 +2 7.72.4-r15 —
Wolfi rolling dogstatsd-7.73 +2 7.73.3-r7 —
Wolfi rolling eksctl 0.224.0-r6 —
Wolfi rolling emissary 3.10.0-r23 —
Wolfi rolling envoy-gateway +1 1.7.1-r1 —
Wolfi rolling envoy-ratelimit 0.0.0_git20260322-r1 —
Wolfi rolling etcd-3.6 3.6.8-r3 —
Wolfi rolling falco-exporter 0.8.7-r15 —
Wolfi rolling falco-no-driver 0.43.0-r7 —
Wolfi rolling falcoctl 0.12.2-r4 —
Wolfi rolling falcosidekick 2.33.0-r1 —
Wolfi rolling ferretdb 2.7.0-r9 —
Wolfi rolling flannel 0.28.1-r2 —
Wolfi rolling fluent-bit-plugin-loki 3.6.8-r0 —
Wolfi rolling fluent-operator 3.7.0-r3 —
Wolfi rolling flux-2.7 2.7.5-r10 —
Wolfi rolling flux-2.8 2.8.3-r1 —
Wolfi rolling flux-helm-controller 1.5.3-r2 —
Wolfi rolling flux-image-automation-controller 1.1.1-r8 —
Wolfi rolling flux-image-reflector-controller 1.1.1-r2 —
Wolfi rolling flux-kustomize-controller 1.8.2-r1 —
Wolfi rolling flux-notification-controller 1.8.2-r2 —
Wolfi rolling flux-source-controller 1.8.1-r2 —
Wolfi rolling flyte 1.16.4-r3 —
Wolfi rolling fulcio 1.8.5-r7 —
Wolfi rolling fuse-overlayfs-snapshotter 2.1.7-r4 —
Wolfi rolling gatekeeper-3.22 +1 3.22.0-r1 —
Wolfi rolling gatus 5.35.0-r3 —
Wolfi rolling gcsfuse 2.12.2-r17 —
Wolfi rolling gh 2.88.1-r3 —
Wolfi rolling gitaly-18.8 +1 18.8.6-r1 —
Wolfi rolling gitaly-18.9 +1 18.9.2-r1 —
Wolfi rolling gitea 1.25.5-r1 —
Wolfi rolling gitlab-kas-18.6 +1 18.6.6-r5 —
Wolfi rolling gitlab-kas-18.8 +2 18.8.7-r1 —
Wolfi rolling gitlab-kas-18.9 +2 18.9.3-r1 —
Wolfi rolling gitlab-runner-18.7 +2 18.7.2-r10 —
Wolfi rolling gitlab-runner-18.8 +2 18.8.0-r5 —
Wolfi rolling gitlab-runner-18.9 +2 18.9.0-r4 —
Wolfi rolling gitness 3.3.0-r11 —
Wolfi rolling gitsign 0.14.0-r11 —
Wolfi rolling go-discover 0_git20260316-r3 —
Wolfi rolling gomplate-5 5.0.0-r11 —
Wolfi rolling goreleaser 2.14.3-r2 —
Wolfi rolling grafana-12.3 12.3.5-r1 —
Wolfi rolling grafana-12.4 12.4.1-r1 —
Wolfi rolling grafana-agent-operator 0.44.8-r2 —
Wolfi rolling grafana-alloy 1.14.1-r1 —
Wolfi rolling grafana-image-renderer 5.7.1-r2 —
Wolfi rolling grafana-mimir-3.0 +3 3.0.4-r1 —
Wolfi rolling grafana-pyroscope-1.19 1.19.0-r1 —
Wolfi rolling grafana-rollout-operator 0.35.0-r4 —
Wolfi rolling grpc-1.66 +19 No fix yet —
Wolfi rolling grpc-health-probe 0.4.46-r2 —
Wolfi rolling grpcurl 1.9.3-r13 —
Wolfi rolling grype 0.110.0-r0 —
Wolfi rolling guac +4 1.1.0-r1 —
Wolfi rolling harbor-2.14 +3 2.14.3-r3 —
Wolfi rolling headlamp 0.40.1-r3 —
Wolfi rolling helm-3 3.20.1-r1 —
Wolfi rolling helm-mapkubeapis 0.6.1-r11 —
Wolfi rolling helm-operator 1.42.1-r1 —
Wolfi rolling helm-push 0.11.1-r3 —
Wolfi rolling helm-set-status 0.3.0-r11 —
Wolfi rolling hubble 1.18.6-r2 —
Wolfi rolling hubble-ui-backend 0.13.4-r2 —
Wolfi rolling hydra 25.4.0-r9 —
Wolfi rolling ipfs-cluster 1.1.5-r7 —
Wolfi rolling istioctl-1.29 +4 1.29.1-r6 —
Wolfi rolling jaeger-2-jaeger +5 2.16.0-r1 —
Wolfi rolling jitsucom-bulker-bulker +1 2.11.913-r17 —
Wolfi rolling jitsucom-bulker-ingmgr 2.11.913-r16 —
Wolfi rolling juicefs-1.3 1.3.1-r10 —
Wolfi rolling juicefs-csi-driver 0.31.3-r3 —
Wolfi rolling k3d-proxy 5.8.3-r29 —
Wolfi rolling k3s +1 1.36.1.1-r0 —
Wolfi rolling k3s-1.32 +1 1.32.13.1-r3 —
Wolfi rolling k3s-1.34 +1 1.34.6.1-r6 —
Wolfi rolling k3s-1.35 +1 1.35.3.1-r5 —
Wolfi rolling k6 1.6.1-r3 —
Wolfi rolling k8s_gateway 1.7.0-r1 —
Wolfi rolling k8sgpt 0.4.30-r3 —
Wolfi rolling k8sgpt-operator 0.2.25-r3 —
Wolfi rolling k8ssandra-client 0.8.10-r5 —
Wolfi rolling k8ssandra-operator 1.30.2-r7 —
Wolfi rolling k9s 0.50.18-r10 —
Wolfi rolling kafka-proxy 0.4.3-r15 —
Wolfi rolling kapp-controller 0.59.3-r2 —
Wolfi rolling kargo 1.9.5-r5 —
Wolfi rolling katib-controller +3 0.19.0-r8 —
Wolfi rolling keda-2.19 +1 2.19.0-r6 —
Wolfi rolling kiali 2.23.0-r2 —
Wolfi rolling kine 0.14.14-r1 —
Wolfi rolling knative-eventing-1.21-filter +7 1.21.1-r3 —
Wolfi rolling knative-operator-1.21 +1 1.21.1-r6 —
Wolfi rolling knative-serving-1.21-queue +5 1.21.1-r4 —
Wolfi rolling ko 0.18.1-r8 —
Wolfi rolling kots 1.129.4-r4 —
Wolfi rolling kserve-agent +4 0.16.0-r23 —
Wolfi rolling kserve-modelmesh-serving 0.12.0-r24 —
Wolfi rolling kserve-rest-proxy 0.12.0-r20 —
Wolfi rolling ksops 4.4.0-r12 —
Wolfi rolling kube-arangodb-1.4 1.4.1-r12 —
Wolfi rolling kube-logging-operator 6.4.0-r8 —
Wolfi rolling kube-metrics-adapter 0.2.8-r6 —
Wolfi rolling kube-rbac-proxy 0.21.1-r3 —
Wolfi rolling kube-state-metrics 2.18.0-r8 —
Wolfi rolling kube-vip 1.1.0-r5 —
Wolfi rolling kube-vip-cloud-provider 0.0.12-r15 —
Wolfi rolling kubeadm-1.34 +6 1.34.6-r0 —
Wolfi rolling kubeadm-1.35 +6 1.35.3-r1 —
Wolfi rolling kubeflow-profile-controller 1.10.0-r18 —
Wolfi rolling kubernetes-csi-driver-nfs 4.13.1-r5 —
Wolfi rolling kubernetes-csi-external-attacher 4.11.0-r7 —
Wolfi rolling kubernetes-csi-external-health-monitor 0.17.0-r6 —
Wolfi rolling kubernetes-csi-external-provisioner 6.2.0-r4 —
Wolfi rolling kubernetes-csi-external-resizer 2.1.0-r6 —
Wolfi rolling kubernetes-csi-external-snapshotter-8.5 +1 8.5.0-r6 —
Wolfi rolling kubernetes-csi-livenessprobe 2.18.0-r4 —
Wolfi rolling kubernetes-dns-node-cache 1.26.7-r13 —
Wolfi rolling kubernetes-event-exporter 1.7-r55 —
Wolfi rolling kubescape +3 4.0.3-r1 —
Wolfi rolling kubescape-operator 0.2.131-r4 —
Wolfi rolling kubevela-vela-cli +1 1.10.7-r4 —
Wolfi rolling kubo 0.40.1-r5 —
Wolfi rolling kuma-cp-2.12 +4 2.12.3-r8 —
Wolfi rolling kuma-dp-2.13 +3 2.13.2-r4 —
Wolfi rolling kwok +1 0.7.0-r14 —
Wolfi rolling kyverno-1.17 +6 1.17.1-r6 —
Wolfi rolling kyverno-notation-aws 1.1-r44 —
Wolfi rolling kyverno-policy-reporter 3.7.3-r9 —
Wolfi rolling linkerd2-tap +3 26.3.2-r3 —
Wolfi rolling litestream 0.5.12-r0 —
Wolfi rolling loki-3.6-logcli 3.6.7-r3 —
Wolfi rolling lvm-driver 1.8.1-r8 —
Wolfi rolling mattermost-11.1 11.1.3-r10 —
Wolfi rolling mattermost-11.5 11.5.1-r1 —
Wolfi rolling mc 0.20250813.083541-r7 —
Wolfi rolling mcp-grafana 0.11.3-r4 —
Wolfi rolling melange 0.46.0-r0 —
Wolfi rolling mesosphere-vsphere-csi-driver +1 3.5.0-r13 —
Wolfi rolling metallb +5 0.16.0-r1 —
Wolfi rolling metrics-server 0.8.1-r4 —
Wolfi rolling migrate 4.19.1-r8 —
Wolfi rolling minio 0.20251015.172955-r8 —
Wolfi rolling minio-object-browser 2.0.4-r11 —
Wolfi rolling mps-control-daemon 0.19.0-r2 —
Wolfi rolling multus-cni 4.2.4-r5 —
Wolfi rolling nerdctl 2.2.1-r5 —
Wolfi rolling net-kourier-1.21 1.21.0-r3 —
Wolfi rolling neuvector-scanner +1 4.107-r1 —
Wolfi rolling neuvector-sigstore-interface 0_git20260405-r0 —
Wolfi rolling newrelic-infrastructure-agent 1.72.8-r2 —
Wolfi rolling node-feature-discovery-0.18 0.18.3-r10 —
Wolfi rolling node-problem-detector-1.35 1.35.2-r3 —
Wolfi rolling oauth2-proxy 7.15.0-r1 —
Wolfi rolling octo-sts +1 0.5.4-r7 —
Wolfi rolling op-geth 1.101701.0-r1 —
Wolfi rolling opa 1.14.1-r2 —
Wolfi rolling opa-envoy 1.14.1-r3 —
Wolfi rolling openbao 2.5.1-r4 —
Wolfi rolling opencost 1.119.2-r6 —
Wolfi rolling openfga 1.12.0-r2 —
Wolfi rolling opentelemetry-collector 0.148.0-r1 —
Wolfi rolling opentelemetry-collector-contrib 0.148.0-r2 —
Wolfi rolling opentelemetry-operator +1 0.147.0-r2 —
Wolfi rolling opentofu-1.11 1.11.5-r7 —
Wolfi rolling opentofu-1.9 1.9.4-r11 —
Wolfi rolling osv-scanner 2.3.3-r6 —
Wolfi rolling otel-cli 0.4.5-r17 —
Wolfi rolling percona-server-mongodb-operator 1.22.0-r11 —
Wolfi rolling podcli +1 6.11.1-r2 —
Wolfi rolling podman 5.8.1-r2 —
Wolfi rolling policy-controller +1 0.14.0-r5 —
Wolfi rolling prometheus-3.10 3.10.0-r2 —
Wolfi rolling prometheus-3.9 3.9.1-r7 —
Wolfi rolling prometheus-adapter 0.12.0-r23 —
Wolfi rolling prometheus-alertmanager 0.31.1-r3 —
Wolfi rolling promxy 0.0.93-r12 —
Wolfi rolling pulumi +3 3.227.0-r0 —
Wolfi rolling pulumi-kubernetes-operator 2.5.1-r3 —
Wolfi rolling pulumi-language-dotnet 3.102.0-r2 —
Wolfi rolling pulumi-language-java 1.21.3-r2 —
Wolfi rolling pulumi-language-yaml 1.30.1-r2 —
Wolfi rolling rabbitmq-messaging-topology-operator +1 1.19.0-r2 —
Wolfi rolling rancher-2.13 +1 2.13.3-r3 —
Wolfi rolling rancher-fleet-cli +2 0.14.3-r4 —
Wolfi rolling rancher-helm-3 3.20.0-r3 —
Wolfi rolling rancher-machine 0.15.0.142-r1 —
Wolfi rolling rancher-system-agent 0.3.15-r3 —
Wolfi rolling ratify 1.4.0-r23 —
Wolfi rolling rclone 1.73.2-r1 —
Wolfi rolling rekor-cli +1 1.5.1-r4 —
Wolfi rolling restic 0.18.1-r14 —
Wolfi rolling rke2-cloud-provider 1.36.2-r0 —
Wolfi rolling rqlite 9.4.5-r8 —
Wolfi rolling scorecard 5.4.0-r12 —
Wolfi rolling seaweedfs 4.17-r1 —
Wolfi rolling secrets-store-csi-driver 1.5.6-r9 —
Wolfi rolling secrets-store-csi-driver-provider-aws 2.1.1-r7 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.7.2-r6 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.11.0-r6 —
Wolfi rolling sftpgo 2.7.1-r4 —
Wolfi rolling sftpgo-plugin-auth 1.0.14-r3 —
Wolfi rolling sftpgo-plugin-eventsearch 1.0.22-r4 —
Wolfi rolling sftpgo-plugin-eventstore 1.0.23-r2 —
Wolfi rolling sftpgo-plugin-geoipfilter 1.0.12-r4 —
Wolfi rolling sftpgo-plugin-kms 1.0.17-r3 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.16-r4 —
Wolfi rolling sigstore-scaffolding-trillian-createtree +1 0.7.31-r7 —
Wolfi rolling skaffold 2.18.1-r1 —
Wolfi rolling skopeo 1.22.0-r2 —
Wolfi rolling slsa-verifier 2.7.1-r13 —
Wolfi rolling smarter-device-manager 1.20.11-r26 —
Wolfi rolling snyk-cli 1.1303.1-r3 —
Wolfi rolling sops 3.12.1-r5 —
Wolfi rolling spegel 0.6.0-r10 —
Wolfi rolling spicedb 1.49.2-r7 —
Wolfi rolling spicedb-operator 1.23.0-r1 —
Wolfi rolling spiffe-helper 0.11.0-r10 —
Wolfi rolling spire-agent +1 1.14.2-r3 —
Wolfi rolling spire-controller-manager 0.6.4-r1 —
Wolfi rolling splunk-otel-collector 0.147.1-r1 —
Wolfi rolling spqr 2.9.0-r4 —
Wolfi rolling sql_exporter 0.20.0-r2 —
Wolfi rolling src 7.0.0-r5 —
Wolfi rolling sriov-network-device-plugin 3.11.0-r7 —
Wolfi rolling steampipe 2.4.0-r3 —
Wolfi rolling step-ca 0.30.1-r1 —
Wolfi rolling step-issuer 0.9.11-r8 —
Wolfi rolling step-kms-plugin 0.16.1-r1 —
Wolfi rolling syft 1.42.3-r0 —
Wolfi rolling task 3.49.1-r2 —
Wolfi rolling tdbg +3 1.30.1-r6 —
Wolfi rolling tekton-chains 0.26.2-r5 —
Wolfi rolling telegraf-1.38 1.38.1-r0 —
Wolfi rolling teleport-18.6 +2 18.6.8-r5 —
Wolfi rolling tempo-2.10 +3 2.10.3-r5 —
Wolfi rolling temporal 1.6.1-r4 —
Wolfi rolling temporal-ui-server 2.47.3-r8 —
Wolfi rolling terraform 1.5.7-r43 —
Wolfi rolling terraform-docs 0.21.0-r4 —
Wolfi rolling terraform-provider-aws 6.37.0-r1 —
Wolfi rolling terraform-provider-azapi 2.8.0-r5 —
Wolfi rolling terraform-provider-azuread 3.8.0-r5 —
Wolfi rolling terraform-provider-azurerm 4.65.0-r0 —
Wolfi rolling terraform-provider-google 7.24.0-r1 —
Wolfi rolling terraform-provider-grafana 4.28.1-r2 —
Wolfi rolling terraform-provider-kubernetes 3.0.1-r6 —
Wolfi rolling terraform-provider-pagerduty 3.31.5-r0 —
Wolfi rolling terraform-provider-random 3.8.1-r6 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r16 —
Wolfi rolling terraform-provider-time 0.13.1-r12 —
Wolfi rolling terraform-provider-tls 4.2.1-r6 —
Wolfi rolling terragrunt 0.99.4-r3 —
Wolfi rolling tflint 0.61.0-r4 —
Wolfi rolling tfsec 1.28.14-r22 —
Wolfi rolling timestamp-authority-server 2.0.5-r4 —
Wolfi rolling tkn 0.44.0-r4 —
Wolfi rolling tofu-controller +1 0.16.1-r7 —
Wolfi rolling traefik-3.6 3.6.11-r1 —
Wolfi rolling trillian-logserver +1 1.7.2-r16 —
Wolfi rolling trivy 0.69.3-r5 —
Wolfi rolling trivy-operator 0.30.1-r2 —
Wolfi rolling trufflehog 3.93.8-r1 —
Wolfi rolling tw +3 0.0.44-r1 —
Wolfi rolling undock 0.11.0-r5 —
Wolfi rolling vault-benchmark 0.4.0-r11 —
Wolfi rolling vault-env 1.22.1-r7 —
Wolfi rolling vault-secrets-webhook 1.22.2-r8 —
Wolfi rolling vcluster-cli 0.32.1-r6 —
Wolfi rolling velero 1.18.0-r5 —
Wolfi rolling velero-plugin-for-aws +2 1.14.0-r2 —
Wolfi rolling velero-plugin-for-csi +1 0.7.1-r45 —
Wolfi rolling verticadb-operator 25.4.0.0-r7 —
Wolfi rolling vexctl 0.4.1-r13 —
Wolfi rolling vitess-23 +1 23.0.3-r8 —
Wolfi rolling volume-modifier-for-k8s 0.9.3-r3 —
Wolfi rolling wal-g-pg 3.0.8-r10 —
Wolfi rolling weaviate 1.36.5-r2 —
Wolfi rolling witness 0.10.2-r14 —
Wolfi rolling wolfictl 0.39.5-r2 —
Wolfi rolling xeol 0.10.8-r29 —
Wolfi rolling yunikorn-k8shim 1.8.0-r8 —
Wolfi rolling zarf 0.74.0-r0 —
Wolfi rolling zot 2.1.15-r2 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 2 repositories

  • JohannesLks/CVE-2026-33186 ★ 2 · Apr 6, 2026

    gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass)

  • basesixtythree/B63-POC-CVE-2026-33186 ★ 0 · Nov 2, 2026

    CVE-2026-33186 (grpc-go): authorization bypass via a slash-less HTTP/2 :path -- b63 showcase, lab-verified with patched and config-leg negatives

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Go google.golang.org/grpc < 1.79.3 1.79.3 GHSA-p77j-4mvh-x3m3

Advisories 50

References