Skip to content
OpenAdvisories
High · 7.5 CVE-2026-42504 BIT-golang-2026-42504EUVD-2026-34039GHSA-h524-452v-82p9GO-2026-5038

Quadratic complexity in WordDecoder.DecodeHeader in mime

Published Jun 2, 2026 · Updated Nov 13, 2026 · Assigned by Go

Vendor: Go standard library Product: mime Package: aactl Package: actions-runner-controller Package: addon-resizer Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-operator Package: amazon-k8s-cni Package: apisix-ingress-controller Package: argo-cd-3.3-compat Package: argo-events Package: argo-rollouts Package: argocd-image-updater Package: authservice Package: aws-efs-csi-driver Package: aws-network-policy-agent Package: aws-node-termination-handler Package: azure-workload-identity-webhook Package: bank-vaults Package: bento Package: calico-goldmane-3.31 Package: calico-key-cert-provisioner-3.31 Package: cass-operator Package: cert-exporter Package: cert-manager-1.20 Package: cert-manager-cainjector-1.20 Package: cert-manager-controller-1.20 Package: cert-manager-startupapicheck-1.20 Package: cert-manager-webhook-pdns Package: cis-operator-1.4 Package: cloud-provider-aws-1.36-cloud-controller-manager Package: cloud-provider-azure-cloud-controller-manager-1.36 Package: cloud-provider-azure-cloud-node-manager-1.36 Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cluster-api-1.12-clusterctl Package: cluster-api-1.13-capd-manager Package: cluster-api-1.13-clusterctl Package: cluster-api-1.13-controller Package: cluster-api-1.13-kubeadm-bootstrap-controller Package: cluster-api-1.13-kubeadm-control-plane-controller Package: cluster-api-helm-controller Package: cluster-api-ipam-provider-in-cluster Package: cluster-autoscaler-1.35 Package: cluster-proportional-autoscaler Package: consul-k8s-1.9 Package: consul-k8s-1.9-cli Package: container-object-storage-interface-controller Package: container-object-storage-interface-sidecar Package: containerd-2 Package: containerd-2.3 Package: containerd-shim-runc-v2-2 Package: containerd-stress-2 Package: coredns-1.13 Package: coredns-1.14 Package: cortex Package: cri-tools Package: crossplane-2.2 Package: crossplane-2.2-crank Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-ec2-compat Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-route53-compat Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sqs Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-family-aws Package: crossplane-provider-family-azure Package: ctr-2 Package: ctr-2.3 Package: dapr-daprd-1.17 Package: dapr-injector-1.17 Package: dapr-operator-1.17 Package: dapr-scheduler-1.17 Package: dapr-sentry-1.17 Package: dask-gateway-server Package: datadog-agent-7.78 Package: datadog-agent-7.78-full Package: datadog-cluster-agent-7.78 Package: db-operator Package: descheduler Package: dgraph Package: docker-cli-buildx Package: docker-machine-driver-harvester Package: dogstatsd-7.78 Package: dynamic-localpv-provisioner Package: emissary Package: emissary-apiext Package: envoy-gateway Package: envoy-gateway-egctl Package: external-secrets-operator-2.4 Package: falco-no-driver Package: flannel Package: fluent-operator Package: flux-2.7 Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: flyte Package: frp Package: fuse-overlayfs-snapshotter Package: gatekeeper-3.22 Package: gatekeeper-3.22-gator Package: gitaly-18.11 Package: gitlab-docker-machine-18.9 Package: gitlab-runner-18.10 Package: gitlab-runner-18.11 Package: gitlab-runner-18.9 Package: gitlab-runner-19.0 Package: gitlab-runner-helper-18.9 Package: go Package: go-1.24 Package: go-1.24-asm Package: go-1.24-covdata Package: go-1.24-cover Package: go-1.24-nm Package: go-1.24-objdump Package: go-1.24-test2json Package: go-1.26 Package: golang Package: golang-1.19 Package: golang-1.24 Package: golang-1.24 Package: golang-1.25 Package: golang-1.26 Package: golang-1.26 Package: grafana-12.3 Package: grafana-13.0 Package: grafana-alloy Package: grafana-mimir-3.0 Package: grafana-operator Package: grafana-rollout-operator Package: guac Package: guacone Package: haproxy-ingress-0.16 Package: harbor-2.14 Package: helm-3 Package: helm-4 Package: helm-push Package: hubble Package: hubble-ui-backend Package: ingress-nginx-controller-1.15 Package: istio-install-cni-1.29 Package: istio-pilot-discovery-1.29 Package: istioctl-1.29 Package: jaeger-operator Package: jitsucom-bulker-syncctl Package: k3s-1.32 Package: k3s-multicall-1.32 Package: k3s-multicall-1.35 Package: k3s-static-1.32 Package: k3s-static-1.35 Package: k9s Package: kapp-controller Package: karpenter-1.11 Package: katib-controller Package: kiali Package: knative-eventing-1.21-jobsink Package: knative-eventing-1.21-webhook Package: knative-serving-1.21-activator Package: knative-serving-1.21-autoscaler Package: knative-serving-1.21-autoscaler-hpa Package: knative-serving-1.21-cleanup Package: knative-serving-1.21-controller Package: knative-serving-1.21-webhook Package: kots Package: kserve-agent Package: kserve-localmodel Package: kserve-manager Package: kserve-router Package: kube-apiserver-1.35 Package: kube-apiserver-1.36 Package: kube-bench Package: kube-controller-manager-1.35 Package: kube-controller-manager-1.36 Package: kube-fluentd-operator Package: kube-logging-operator Package: kube-proxy-1.35 Package: kube-proxy-1.35-default-compat Package: kube-proxy-1.36 Package: kube-scheduler-1.35 Package: kube-scheduler-1.35-default-compat Package: kube-scheduler-1.36 Package: kube-state-metrics Package: kube-vip Package: kube-webhook-certgen-1.15 Package: kubeadm-1.35 Package: kubeadm-1.36 Package: kubectl-1.32 Package: kubectl-1.33 Package: kubectl-1.35 Package: kubectl-1.36 Package: kubectl-argo-rollouts Package: kubectl-bash-completion-1.35 Package: kubeflow-admission-webhook Package: kubeflow-notebook-controller Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: kubeflow-profile-controller Package: kubeflow-pvcviewer-controller Package: kubeflow-tensorboard-controller Package: kubelet-1.35 Package: kubelet-1.36 Package: kuberay-operator Package: kubernetes-1.35 Package: kubernetes-1.36 Package: kubernetes-csi-external-provisioner Package: kubernetes-event-exporter Package: kubernetes-pause-compat-1.35 Package: kubernetes-replicator Package: kubescape Package: kubescape-operator Package: kubevela-vela-cli Package: kubevela-vela-core Package: kuma-cni-2.12 Package: kuma-cni-2.13 Package: kuma-coredns-1.13 Package: kuma-cp-2.12 Package: kuma-cp-2.13 Package: kumactl-2.12 Package: kumactl-2.13 Package: kyverno-1.17 Package: kyverno-background-controller-1.17 Package: kyverno-cleanup-controller-1.17 Package: kyverno-cli-1.17 Package: kyverno-init-container-1.17 Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-readiness-checker-1.17 Package: kyverno-reports-controller-1.17 Package: libnvidia-container Package: local-path-provisioner Package: mattermost-11.1 Package: mattermost-11.5 Package: metallb Package: metallb-controller Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metrics-server Package: mongo-tools Package: multus-cni Package: net-kourier-1.22 Package: neuvector-scanner Package: newrelic-infra-operator Package: newrelic-nri-kube-events Package: nfs-subdir-external-provisioner Package: node-problem-detector-1.35 Package: nova Package: nri-discovery-kubernetes Package: nri-kubernetes Package: nri-prometheus Package: opentofu-1.11 Package: opentofu-1.12 Package: osv-scanner Package: percona-server-mongodb-operator Package: pinact Package: polaris Package: policy-controller Package: policy-controller-tester Package: prometheus-3.11 Package: prometheus-3.12 Package: prometheus-3.8 Package: prometheus-adapter Package: promxy Package: pulumi-kubernetes-operator Package: rabbitmq-cluster-operator Package: rancher-2.14 Package: rancher-agent-2.13 Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-helm-3 Package: rancher-webhook-0.10 Package: redka Package: rook-1.19 Package: rook-1.19-oci-compat Package: rpk-26.1.9 Package: runc Package: sealed-secrets Package: sealed-secrets-kubeseal Package: secrets-store-csi-driver Package: sigstore-scaffolding-rekor-createsecret Package: sigstore-scaffolding-tsa-createcertchain Package: sigstore-scaffolding-tuf-server Package: snyk-cli Package: spark-operator Package: spicedb-operator Package: spire-agent Package: spire-oidc-discovery-provider Package: spire-server Package: spqr Package: stakater-reloader Package: stdlib Package: step-issuer Package: tekton-chains Package: tekton-pipelines-controller-1.12 Package: tekton-pipelines-controller-1.13 Package: tekton-pipelines-events-1.12 Package: tekton-pipelines-events-1.13 Package: tekton-pipelines-resolvers-1.11 Package: tekton-pipelines-resolvers-1.12 Package: tekton-pipelines-resolvers-1.13 Package: tekton-pipelines-webhook-1.11 Package: tekton-pipelines-webhook-1.12 Package: tekton-pipelines-webhook-1.13 Package: telegraf-1.38 Package: temporal Package: temporal-server Package: terraform-provider-grafana Package: tetragon Package: tetragon-operator Package: timoni Package: tofu-controller Package: tofu-controller-runner Package: traefik-3.7 Package: trino Package: vault-k8s Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: velero-plugin-for-aws Package: velero-plugin-for-aws-compat Package: velero-plugin-for-csi Package: velero-plugin-for-microsoft-azure Package: vertical-pod-autoscaler Package: vertical-pod-autoscaler-recommender Package: vertical-pod-autoscaler-updater Package: volume-modifier-for-k8s Package: zarf Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Affected products

VendorProductAffectedFixed
Go standard library mime < 1.25.11, 1.26.0-0 – < 1.26.4 1.25.11

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-1.26 1.26.4-1 —
Debian 13 golang-1.24 No fix yet —
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-1.26 No fix yet —
Ubuntu 26.04 LTS golang-1.24 +2 No fix yet —
Ubuntu 25.10 golang-1.24 +1 No fix yet —
Ubuntu 24.04 LTS golang-1.24 +2 No fix yet —
Ubuntu 22.04 LTS golang-1.24 +2 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 go-fdo-client 1.0.0-4.el10_2.7 RHSA-2026:62577
RHEL 10 golang +7 1.26.4-1.el10_2 RHSA-2026:29980
RHEL 10 grafana +1 10.2.6-28.el10_2.5 RHSA-2026:63022
RHEL 10 grafana-pcp 5.3.0-8.el10_2.1 RHSA-2026:63119
RHEL 10 image-builder 52.1-1.el10_2.2 RHSA-2026:65534
RHEL 10 ipp-usb 0.9.27-7.el10_2.3 RHSA-2026:62631
RHEL 10 opentelemetry-collector 0.152.1-2.el10_2 RHSA-2026:65116
RHEL 10 osbuild-composer +2 165.1-3.el10_2.2 RHSA-2026:65895
RHEL 10 rhc-worker-playbook 0.2.10-1.el10_2 RHSA-2026:42946
RHEL 10 yggdrasil +1 0.4.9.2-1.el10_2.3 RHSA-2026:69308
RHEL 9 golang +7 1.26.4-1.el9_8 RHSA-2026:29981
RHEL 9 grafana +1 10.2.6-23.el9_8.3 RHSA-2026:62406
RHEL 9 image-builder 52.1-1.el9_8.2 RHSA-2026:65886
RHEL 9 opentelemetry-collector 0.152.1-2.el9_8 RHSA-2026:65117
RHEL 9 osbuild-composer +2 165.1-4.el9_8.1 RHSA-2026:65153
RHEL 9 rhc +1 1:0.2.7-15.el9_9 RHSA-2026:97699
RHEL 8 delve 1.26.1-1.module+el8.10.0+24516+40554724 RHSA-2026:38995
RHEL 8 golang +7 1.26.5-1.module+el8.10.0+24506+6809f2d9 RHSA-2026:38995
RHEL 8 grafana +1 9.2.10-33.el8_10 RHSA-2026:62407
RHEL 8 grafana-pcp 5.1.1-18.el8_10 RHSA-2026:63124
RHEL 8 osbuild-composer +2 101.5-3.el8_10 RHSA-2026:67148
Show 21 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Satellite Utils 6 foreman +1 3.12.0.23-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite Utils 6 rubygem-hammer_cli 3.12.0-2.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite Utils 6 satellite +1 6.16.14-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite Capsule 6 foreman +2 3.12.0.23-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite Capsule 6 pulpcore-obsolete-packages 1.3.1-6.el9pc RHSA-2026:74504
Red Hat Satellite Capsule 6 python-dynaconf +1 3.2.13-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite Capsule 6 python-gitpython +1 3.1.62-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite Capsule 6 python-lxml +1 4.9.2-5.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite Capsule 6 python-pulpcore +1 3.49.39-4.el8pc RHSA-2026:74506
Red Hat Satellite Capsule 6 python-sqlparse +1 0.6.0-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite Capsule 6 python3.12-dynaconf 3.2.13-2.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite Capsule 6 python3.12-gitpython 3.1.62-1.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite Capsule 6 python3.12-sqlparse 0.6.0-1.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite Capsule 6 satellite +2 6.16.14-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite Capsule 6 satellite-obsolete-packages 6.17.12-1.el9sat RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 foreman +14 3.12.0.23-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 pulpcore-obsolete-packages 1.3.1-6.el9pc RHSA-2026:74504
Red Hat Satellite 6 python-dynaconf +1 3.2.13-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite 6 python-gitpython +1 3.1.62-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite 6 python-lxml +1 4.9.2-5.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite 6 python-pulpcore +1 3.49.39-4.el8pc RHSA-2026:74506
Red Hat Satellite 6 python-sqlparse +1 0.6.0-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite 6 python3.12-dynaconf 3.2.13-2.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite 6 python3.12-gitpython 3.1.62-1.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite 6 python3.12-sqlparse 0.6.0-1.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite 6 rubygem-foreman_remote_execution +1 13.2.8-2.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 rubygem-hammer_cli 3.12.0-2.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 rubygem-katello 4.14.0.23-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 rubygem-safemode 1.5.0-2.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 satellite +2 6.16.14-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 satellite-obsolete-packages 6.17.12-1.el9sat RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 yggdrasil-worker-forwarder 0.1.0-2.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
RHEL 10.0 EUS golang +7 1.26.7-1.el10_0 RHSA-2026:61882
RHEL 10.0 EUS grafana +1 10.2.6-26.el10_0 RHSA-2026:67517
RHEL 10.0 EUS grafana-pcp 5.3.0-1.el10_0 RHSA-2026:56143
RHEL 10.0 EUS ipp-usb +1 0.9.27-3.el10_0.5 RHSA-2026:98108
RHEL 10.0 EUS opentelemetry-collector 0.152.1-2.el10_0 RHSA-2026:67974
RHEL 10.0 EUS osbuild-composer +2 134.1-12.el10_0 RHSA-2026:66327
RHEL 9.6 EUS golang +7 1.26.5-1.el9_6 RHSA-2026:49712
RHEL 9.6 EUS grafana +1 10.2.6-23.el9_6 RHSA-2026:67518
RHEL 9.6 EUS grafana-pcp 5.1.1-15.el9_6 RHSA-2026:56223
RHEL 9.6 EUS opentelemetry-collector 0.152.1-2.el9_6 RHSA-2026:67975
RHEL 9.6 EUS osbuild-composer +2 132.2-13.el9_6 RHSA-2026:91587
RHEL 9.4 E4S git-lfs 3.4.1-4.el9_4.6 RHSA-2026:72276
RHEL 9.4 E4S golang +7 1.26.5-1.el9_4 RHSA-2026:57649
RHEL 9.4 E4S grafana +1 9.2.10-28.el9_4 RHSA-2026:76795
RHEL 9.4 E4S grafana-pcp 5.1.1-9.el9_4 RHSA-2026:67159
RHEL 9.4 E4S opentelemetry-collector 0.152.1-2.el9_4 RHSA-2026:68527
RHEL 9.4 E4S osbuild-composer +2 101.3-4.el9_4.7 RHSA-2026:91958
RHEL 9.2 E4S golang +7 1.26.5-1.el9_2 RHSA-2026:61253
RHEL 9.2 E4S grafana 9.0.9-13.el9_2 RHSA-2026:76809
RHEL 9.2 E4S grafana-pcp 5.1.1-5.el9_2.2 RHSA-2026:67160
RHEL 9.2 E4S osbuild-composer +3 76.1-10.el9_2 RHSA-2026:92372
RHEL 8.8 TUS delve 1.26.1-1.module+el8.8.0+24781+86ad105d RHSA-2026:87245
RHEL 8.8 TUS git-lfs 3.2.0-2.el8_8.8 RHSA-2026:72737
RHEL 8.8 TUS golang +7 1.26.10-4.module+el8.8.0+25113+a148ecc0 RHSA-2026:87245
RHEL 8.8 TUS grafana 7.5.15-12.el8_8 RHSA-2026:88340
RHEL 8.8 TUS grafana-pcp 3.2.0-6.el8_8.2 RHSA-2026:88395
RHEL 8.8 TUS osbuild-composer +3 75-10.el8_8 RHSA-2026:68504
RHEL 8.8 TUS rhc 1:0.2.2-1.el8_8.3 RHSA-2026:90726
RHEL 8.8 E4S delve 1.26.1-1.module+el8.8.0+24781+86ad105d RHSA-2026:87245
RHEL 8.8 E4S git-lfs 3.2.0-2.el8_8.8 RHSA-2026:72737
RHEL 8.8 E4S golang +7 1.26.10-4.module+el8.8.0+25113+a148ecc0 RHSA-2026:87245
RHEL 8.8 E4S grafana 7.5.15-12.el8_8 RHSA-2026:88340
RHEL 8.8 E4S grafana-pcp 3.2.0-6.el8_8.2 RHSA-2026:88395
RHEL 8.8 E4S osbuild-composer +3 75-10.el8_8 RHSA-2026:68504
RHEL 8.8 E4S rhc 1:0.2.2-1.el8_8.3 RHSA-2026:90726
RHEL 8.6 EUS Long Life delve 1.26.1-1.module+el8.6.0+24782+a062e766 RHSA-2026:87246
RHEL 8.6 EUS Long Life git-lfs 2.13.3-3.el8_6.8 RHSA-2026:72805
RHEL 8.6 EUS Long Life golang +7 1.26.10-4.module+el8.6.0+25114+90ecdb41 RHSA-2026:87246
RHEL 8.6 EUS Long Life grafana 7.5.11-12.el8_6 RHSA-2026:88339
RHEL 8.6 EUS Long Life grafana-pcp 3.2.0-4.el8_6.2 RHSA-2026:88394
RHEL 8.6 EUS Long Life osbuild-composer +3 46.3-8.el8_6 RHSA-2026:69235
RHEL 8.6 EUS Long Life rhc 1:0.2.1-14.el8_6.1 RHSA-2026:90725
RHEL 8.6 AUS delve 1.26.1-1.module+el8.6.0+24782+a062e766 RHSA-2026:87246
RHEL 8.6 AUS git-lfs 2.13.3-3.el8_6.8 RHSA-2026:72805
RHEL 8.6 AUS golang +7 1.26.10-4.module+el8.6.0+25114+90ecdb41 RHSA-2026:87246
RHEL 8.6 AUS grafana 7.5.11-12.el8_6 RHSA-2026:88339
RHEL 8.6 AUS grafana-pcp 3.2.0-4.el8_6.2 RHSA-2026:88394
RHEL 8.6 AUS osbuild-composer +3 46.3-8.el8_6 RHSA-2026:69235
RHEL 8.6 AUS rhc 1:0.2.1-14.el8_6.1 RHSA-2026:90725
RHEL 8.4 EUS Long Life delve 1.26.1-1.module+el8.4.0+25181+7ce5b91c RHSA-2026:90994
RHEL 8.4 EUS Long Life git-lfs 2.13.3-3.el8_4.6 RHSA-2026:95234
RHEL 8.4 EUS Long Life golang +7 1.26.10-2.module+el8.4.0+25201+9a419e96 RHSA-2026:90994
RHEL 8.4 EUS Long Life osbuild-composer +2 28.7-7.el8_4 RHSA-2026:96076
RHEL 8.4 EUS Long Life rhc 1:0.2.0-6.el8_4.2 RHSA-2026:92217
RHEL 8.4 AUS delve 1.26.1-1.module+el8.4.0+25181+7ce5b91c RHSA-2026:90994
RHEL 8.4 AUS git-lfs 2.13.3-3.el8_4.6 RHSA-2026:95234
RHEL 8.4 AUS golang +7 1.26.10-2.module+el8.4.0+25201+9a419e96 RHSA-2026:90994
RHEL 8.4 AUS osbuild-composer +2 28.7-7.el8_4 RHSA-2026:96076
RHEL 8.4 AUS rhc 1:0.2.0-6.el8_4.2 RHSA-2026:92217
RHEL 7 ELS rhc 1:0.2.4-5.el7_9.1 RHSA-2026:98794
Red Hat OpenStack 18 golang-github-openstack-k8s-operators-os-diff 0.1.1-18.0.20261021172337.a95ae05.el9ost RHSA-2026:90332
Red Hat OpenShift 4 butane +1 0.23.0-5.rhaos4.18.el8 RHSA-2026:57482
Red Hat OpenShift 4 cri-o 1.25.5-8.rhaos4.12.git6120b13.el9 RHSA-2026:77319, RHSA-2026:71443, RHSA-2026:70645
Red Hat OpenShift 4 cri-tools 1.25.0-7.el9 RHSA-2026:70645, RHSA-2026:70614, RHSA-2026:67934
Red Hat OpenShift 4 ignition +1 2.18.0-11.rhaos4.17.el9 RHSA-2026:60018, RHSA-2026:57482
Red Hat OpenShift 4 microshift +8 4.16.73-202610151747.p0.g44abd51.assembly.4.16.73.el9 RHSA-2026:91191, RHSA-2026:83631, RHSA-2026:80167
Red Hat OpenShift 4 microshift-cert-manager +1 4.20.41-202610012357.p0.gdad0307.assembly.4.20.41.el9 RHSA-2026:74797, RHSA-2026:74796
Red Hat OpenShift 4 microshift-gateway-api +2 4.18.57-202610092321.p0.g94a47d0.assembly.4.18.57.el9 RHSA-2026:91191, RHSA-2026:80167, RHSA-2026:74797
Red Hat OpenShift 4 microshift-observability +2 4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9 RHSA-2026:91191, RHSA-2026:74797, RHSA-2026:74796
Red Hat OpenShift 4 microshift-sriov +1 4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9 RHSA-2026:74796
Red Hat OpenShift 4 openshift +1 4.12.0-202609111749.p2.g0e18cfc.assembly.stream.el8 RHSA-2026:82810, RHSA-2026:71443, RHSA-2026:70645
Red Hat OpenShift 4 openshift-clients +1 4.12.0-202609111749.p2.gd691257.assembly.stream.el8 RHSA-2026:82810, RHSA-2026:70645, RHSA-2026:70614
Red Hat OpenShift 4 openshift-kubelet +3 4.16.0-202609101821.p2.g41c4e9b.assembly.stream.el8 RHSA-2026:71443, RHSA-2026:70614, RHSA-2026:68534
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.15.0-202610071830.p2.gfd77d92.assembly.stream.el8 RHSA-2026:82810, RHSA-2026:70614, RHSA-2026:68534
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.15.0-202610071830.p2.g5638728.assembly.stream.el8 RHSA-2026:82810, RHSA-2026:71443, RHSA-2026:70614
Red Hat OpenShift 4 ose-crio-credential-provider 4.21.0-202609021357.p2.g83d4961.assembly.stream.el8 RHSA-2026:66350, RHSA-2026:63091
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.15.0-202610071830.p2.gfc50272.assembly.stream.el8 RHSA-2026:82810, RHSA-2026:70614, RHSA-2026:68534
Red Hat Hardened Images 1 golang1.25 +5 1.25.11-2.hum1 RHSA-2026:23262
Red Hat Hardened Images 1 golang1.26 +5 1.26.4-2.hum1 RHSA-2026:23264
Red Hat Edge Manager 1 flightctl +2 1.1.4-1.el9em RHSA-2026:68334
Red Hat Ansible Automation Platform Inside 2 receptor +1 1.6.7-1.el8ap RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:50336
Red Hat Ansible Automation Platform Developer 2 automation-controller +1 4.7.15-2.el9ap RHSA-2026:71113, RHSA-2026:50336
Red Hat Ansible Automation Platform Developer 2 python-sqlparse +1 0.6.0-1.el10ap RHSA-2026:71113
Red Hat Ansible Automation Platform Developer 2 python3.12-sqlparse 0.6.0-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform Developer 2 receptor +1 1.6.7-1.el8ap RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:50336
Red Hat Ansible Automation Platform 2 automation-controller +3 4.7.15-2.el9ap RHSA-2026:71113, RHSA-2026:50336
Red Hat Ansible Automation Platform 2 automation-controller-venv-tower 4.6.31-1.el8ap RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:50336
Red Hat Ansible Automation Platform 2 automation-eda-controller +4 1.1.21-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 automation-gateway-proxy +1 2.5.10-7.el8ap RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:50336
Red Hat Ansible Automation Platform 2 automation-gateway-server 2.5.20260923-1.el8ap RHSA-2026:71114
Red Hat Ansible Automation Platform 2 automation-platform-ui 2.6.14-1.el9ap RHSA-2026:71113
Red Hat Ansible Automation Platform 2 python-sqlparse +1 0.6.0-1.el10ap RHSA-2026:71113
Red Hat Ansible Automation Platform 2 python3.12-aiohttp 3.14.1-2.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 python3.12-daphne 4.2.2-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 python3.12-gitpython 3.1.60-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 python3.12-pillow 12.3.0-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 python3.12-pyasn1 0.6.4-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 python3.12-sqlparse 0.6.0-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 receptor +1 1.6.7-1.el8ap RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:50336

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 go-fdo-client 1.0.0-4.el10_2.7 ALSA-2026:62577
AlmaLinux 10 golang +7 1.26.4-1.el10_2.alma.1 ALSA-2026:29980
AlmaLinux 10 grafana +1 10.2.6-28.el10_2.5 ALSA-2026:63022
AlmaLinux 10 grafana-pcp 5.3.0-8.el10_2.1 ALSA-2026:63119
AlmaLinux 10 ipp-usb 0.9.27-7.el10_2.3 ALSA-2026:62631
AlmaLinux 10 opentelemetry-collector 0.152.1-2.el10_2 ALSA-2026:65116
AlmaLinux 10 yggdrasil +1 0.4.9.2-1.el10_2.3 ALSA-2026:69308
AlmaLinux 9 golang +7 1.26.4-1.el9_8 ALSA-2026:29981
AlmaLinux 9 grafana +1 10.2.6-23.el9_8.3 ALSA-2026:62406
AlmaLinux 9 opentelemetry-collector 0.152.1-2.el9_8 ALSA-2026:65117
AlmaLinux 9 osbuild-composer +2 165.1-4.el9_8.1.alma.1 ALSA-2026:65153
AlmaLinux 8 delve 1.26.1-1.module_el8.10.0+4223+bd807c2e ALSA-2026:38995
AlmaLinux 8 golang +7 1.26.5-1.module_el8.10.0+4223+bd807c2e ALSA-2026:38995
AlmaLinux 8 grafana +1 9.2.10-33.el8_10 ALSA-2026:62407
AlmaLinux 8 grafana-pcp 5.1.1-18.el8_10 ALSA-2026:63124
AlmaLinux 8 osbuild-composer +2 101.5-3.el8_10.alma.1 ALSA-2026:67148

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 golang-github-openprinting-ipp-usb 0.9.27-7.el10_2.3 RLSA-2026:62631
Rocky Linux 10 grafana-pcp 5.3.0-8.el10_2.1 RLSA-2026:63119
Rocky Linux 10 image-builder 52.1-1.el10_2.2.rocky.0.1 RLSA-2026:65534
Rocky Linux 10 opentelemetry-collector 0.152.1-2.el10_2 RLSA-2026:65116
Rocky Linux 10 osbuild-composer 165.1-3.el10_2.2.rocky.0.1 RLSA-2026:65895
Rocky Linux 10 yggdrasil 0.4.9.2-1.el10_2.3 RLSA-2026:69308
Rocky Linux 9 image-builder 52.1-1.el9_8.2 RLSA-2026:65886
Rocky Linux 9 opentelemetry-collector 0.152.1-2.el9_8 RLSA-2026:65117
Rocky Linux 9 osbuild-composer 165.1-4.el9_8.1.rocky.0.1 RLSA-2026:65153
Rocky Linux 8 grafana-pcp 5.1.1-18.el8_10 RLSA-2026:63124
Rocky Linux 8 osbuild-composer 101.5-3.el8_10.rocky.0.6 RLSA-2026:67148

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 go1.25 1.25.11-150000.1.41.1 SUSE-SU-2026:2326-1
SLES 15 SP7 go1.25-openssl 1.25.12-150600.13.21.1 SUSE-SU-2026:3151-1
SLES 15 SP7 go1.26 1.26.4-150000.1.15.1 SUSE-SU-2026:2327-1
SLES 15 SP7 go1.26-openssl 1.26.5-150600.13.9.1 SUSE-SU-2026:3102-1
SLES 15 SP6 go1.25 1.25.11-150000.1.41.1 SUSE-SU-2026:2326-1
SLES 15 SP6 go1.25-openssl 1.25.12-150600.13.21.1 SUSE-SU-2026:3151-1
SLES 15 SP6 go1.26 1.26.4-150000.1.15.1 SUSE-SU-2026:2327-1
SLES 15 SP6 go1.26-openssl 1.26.5-150600.13.9.1 SUSE-SU-2026:3102-1
SLES 15 SP5 go1.25 1.25.11-150000.1.41.1 SUSE-SU-2026:2326-1
SLES 15 SP5 go1.25-openssl 1.25.12-150000.1.27.1 SUSE-SU-2026:3046-1
SLES 15 SP5 go1.26 1.26.4-150000.1.15.1 SUSE-SU-2026:2327-1
SLES 15 SP5 go1.26-openssl 1.26.5-150000.1.12.1 SUSE-SU-2026:3047-1
SLES 15 SP4 go1.25 1.25.11-150000.1.41.1 SUSE-SU-2026:2326-1
SLES 15 SP4 go1.25-openssl 1.25.12-150000.1.27.1 SUSE-SU-2026:3046-1
SLES 15 SP4 go1.26 1.26.4-150000.1.15.1 SUSE-SU-2026:2327-1
SLES 15 SP4 go1.26-openssl 1.26.5-150000.1.12.1 SUSE-SU-2026:3047-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 go1.25 1.25.11-160000.1.1 SUSE-SU-2026:22155-1
SLES for SAP 16.0 go1.25-openssl 1.25.12-160000.1.1 SUSE-SU-2026:22638-1
SLES for SAP 16.0 go1.26 +1 1.26.4-160000.1.1 SUSE-SU-2026:22572-1, SUSE-SU-2026:22154-1
SLES for SAP 15 SP6 go1.25 1.25.11-150000.1.41.1 SUSE-SU-2026:2326-1
SLES for SAP 15 SP6 go1.25-openssl 1.25.12-150600.13.21.1 SUSE-SU-2026:3151-1
SLES for SAP 15 SP6 go1.26 1.26.4-150000.1.15.1 SUSE-SU-2026:2327-1
SLES for SAP 15 SP6 go1.26-openssl 1.26.5-150600.13.9.1 SUSE-SU-2026:3102-1
SLES for SAP 15 SP5 go1.25 1.25.11-150000.1.41.1 SUSE-SU-2026:2326-1
SLES for SAP 15 SP5 go1.25-openssl 1.25.12-150000.1.27.1 SUSE-SU-2026:3046-1
SLES for SAP 15 SP5 go1.26 1.26.4-150000.1.15.1 SUSE-SU-2026:2327-1
SLES for SAP 15 SP5 go1.26-openssl 1.26.5-150000.1.12.1 SUSE-SU-2026:3047-1
SLES for SAP 15 SP4 go1.25 1.25.11-150000.1.41.1 SUSE-SU-2026:2326-1
SLES for SAP 15 SP4 go1.25-openssl 1.25.12-150000.1.27.1 SUSE-SU-2026:3046-1
SLES for SAP 15 SP4 go1.26 1.26.4-150000.1.15.1 SUSE-SU-2026:2327-1
SLES for SAP 15 SP4 go1.26-openssl 1.26.5-150000.1.12.1 SUSE-SU-2026:3047-1
SLES 16.0 go1.25 1.25.11-160000.1.1 SUSE-SU-2026:22155-1
SLES 16.0 go1.25-openssl 1.25.12-160000.1.1 SUSE-SU-2026:22638-1
SLES 16.0 go1.26 +1 1.26.4-160000.1.1 SUSE-SU-2026:22572-1, SUSE-SU-2026:22154-1
SLE HPC 15 SP5 go1.25 1.25.11-150000.1.41.1 SUSE-SU-2026:2326-1
SLE HPC 15 SP5 go1.25-openssl 1.25.12-150000.1.27.1 SUSE-SU-2026:3046-1
SLE HPC 15 SP5 go1.26 1.26.4-150000.1.15.1 SUSE-SU-2026:2327-1
SLE HPC 15 SP5 go1.26-openssl 1.26.5-150000.1.12.1 SUSE-SU-2026:3047-1
SLE HPC 15 SP4 go1.25 1.25.11-150000.1.41.1 SUSE-SU-2026:2326-1
SLE HPC 15 SP4 go1.25-openssl 1.25.12-150000.1.27.1 SUSE-SU-2026:3046-1
SLE HPC 15 SP4 go1.26 1.26.4-150000.1.15.1 SUSE-SU-2026:2327-1
SLE HPC 15 SP4 go1.26-openssl 1.26.5-150000.1.12.1 SUSE-SU-2026:3047-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed go1.25 1.25.11-1.1 openSUSE-SU-2026:10959-1
openSUSE Tumbleweed go1.26 1.26.4-1.1 openSUSE-SU-2026:10960-1
openSUSE Tumbleweed inspektor-gadget 0.53.2-1.1 openSUSE-SU-2026:11056-1
openSUSE Tumbleweed kured 1.23.0-1.1 openSUSE-SU-2026:12271-1
openSUSE Tumbleweed rclone 1.74.3-1.1 openSUSE-SU-2026:10975-1
openSUSE Leap 16.0 go1.25 1.25.11-160000.1.1 openSUSE-SU-2026:20977-1
openSUSE Leap 16.0 go1.25-openssl 1.25.12-160000.1.1 openSUSE-SU-2026:21319-1
openSUSE Leap 16.0 go1.26 +1 1.26.4-160000.1.1 openSUSE-SU-2026:21254-1, openSUSE-SU-2026:20976-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1
openSUSE Leap 16.0 rclone 1.74.4-bp160.1.1 openSUSE-SU-2026:21436-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.26.8-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300069.1-1.amzn2023 ALAS2023-2026-2025
Amazon Linux 2023 containerd +1 2.2.5-1.amzn2023.0.1 ALAS2023-2026-1909
Amazon Linux 2023 credentials-fetcher 2.0.3-1.amzn2023.0.1 ALAS2023-2026-1885
Amazon Linux 2023 docker 25.0.16-1.amzn2023.0.3 ALAS2023-2026-1901
Amazon Linux 2023 ecs-init 1.105.0-1.amzn2023 ALAS2023-2026-1902
Amazon Linux 2023 golang +6 1.25.11-1.amzn2023.0.1 ALAS2023-2026-1878
Amazon Linux 2023 golang-github-burntsushi-toml +1 1.5.0-1.amzn2023.0.2 ALAS2023-2026-1877
Amazon Linux 2023 golang-github-burntsushi-toml-test +1 0.2.0-8.amzn2023.0.4 ALAS2023-2026-1876
Amazon Linux 2023 golang-github-cpuguy83-md2man +2 2.0.2-24.amzn2023.0.8 ALAS2023-2026-1875
Amazon Linux 2023 golist 0.10.4-12.amzn2023.0.10 ALAS2023-2026-1874
Amazon Linux 2023 nerdctl 2.2.2-1.amzn2023.0.4 ALAS2023-2026-1908
Amazon Linux 2023 runc 1.3.6-1.amzn2023.0.1 ALAS2023-2026-2138
Amazon Linux 2023 runfinch-finch 1.17.1-1.amzn2023.0.3 ALAS2023-2026-1886
Amazon Linux 2023 soci-snapshotter 0.14.1-1.amzn2023.0.1 ALAS2023-2026-1884
Amazon Linux 2 amazon-cloudwatch-agent 1.300069.1-1.amzn2 ALAS2-2026-3844
Amazon Linux 2 golang +6 1.25.11-1.amzn2.0.1 ALAS2-2026-3383
Amazon Linux 2 golist 0.10.1-10.amzn2.0.14 ALAS2-2026-3382
Amazon Linux 2 nerdctl 2.2.2-1.amzn2.0.4 ALAS2-2026-3497

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang 1.25.11-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 yggdrasil +1 0.4.9.2-1.el10_2.3 ELSA-2026-69308

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r54 —
Wolfi rolling actions-runner-controller 0.14.2-r2 —
Wolfi rolling addon-resizer 1.8.23-r20 —
Wolfi rolling amazon-cloudwatch-agent 1.300069.0-r2 —
Wolfi rolling amazon-cloudwatch-agent-operator 3.5.0-r0 —
Wolfi rolling amazon-k8s-cni +1 1.22.1-r1 —
Wolfi rolling apisix-ingress-controller 2.1.0-r1 —
Wolfi rolling argo-cd-3.3-compat 3.3.14-r9 —
Wolfi rolling argo-events 1.9.10-r25 —
Wolfi rolling argo-rollouts +1 1.9.0-r15 —
Wolfi rolling argocd-image-updater 1.2.1-r2 —
Wolfi rolling authservice 1.1.5-r10 —
Wolfi rolling aws-efs-csi-driver 3.2.0-r2 —
Wolfi rolling aws-network-policy-agent 1.3.5-r2 —
Wolfi rolling aws-node-termination-handler 1.25.6-r10 —
Wolfi rolling azure-workload-identity-webhook 1.5.1-r21 —
Wolfi rolling bank-vaults 1.33.1-r2 —
Wolfi rolling bento 1.18.0-r2 —
Wolfi rolling calico-goldmane-3.31 +1 3.31.7-r3 —
Wolfi rolling cass-operator 1.31.0-r1 —
Wolfi rolling cert-exporter 2.18.0-r10 —
Wolfi rolling cert-manager-1.20 +3 1.20.2-r8 —
Wolfi rolling cert-manager-webhook-pdns 2.5.5-r11 —
Wolfi rolling cis-operator-1.4 1.4.8-r8 —
Wolfi rolling cloud-provider-aws-1.36-cloud-controller-manager 1.36.0-r3 —
Wolfi rolling cloudnative-pg +1 1.29.1-r4 —
Wolfi rolling cluster-api-1.12-clusterctl 1.12.11-r5 —
Wolfi rolling cluster-api-1.13-clusterctl +4 1.13.2-r3 —
Wolfi rolling cluster-api-helm-controller 0.6.4-r5 —
Wolfi rolling cluster-api-ipam-provider-in-cluster 1.1.0-r6 —
Wolfi rolling cluster-autoscaler-1.35 1.35.0-r8 —
Wolfi rolling cluster-proportional-autoscaler 1.10.3-r9 —
Wolfi rolling consul-k8s-1.9 +1 1.9.8-r3 —
Wolfi rolling container-object-storage-interface-sidecar +1 0.2.2-r18 —
Wolfi rolling coredns-1.13 +1 1.13.2-r5 —
Wolfi rolling coredns-1.14 1.14.3-r4 —
Wolfi rolling cortex 1.21.1-r0 —
Wolfi rolling cri-tools 1.36.0-r4 —
Wolfi rolling crossplane-2.2 +1 2.2.2-r1 —
Wolfi rolling crossplane-provider-aws-ec2-compat +2 2.7.0-r6 —
Wolfi rolling crossplane-provider-aws-kms +4 2.5.0-r11 —
Wolfi rolling crossplane-provider-aws-lambda +2 2.5.0-r9 —
Wolfi rolling crossplane-provider-aws-s3 +8 2.5.0-r10 —
Wolfi rolling crossplane-provider-azure-authorization 2.5.0-r14 —
Wolfi rolling crossplane-provider-azure-managedidentity 2.5.0-r13 —
Wolfi rolling crossplane-provider-azure-sql +1 2.5.0-r12 —
Wolfi rolling crossplane-provider-family-aws 2.5.0-r8 —
Wolfi rolling ctr-2 +5 2.3.1-r2 —
Wolfi rolling dapr-daprd-1.17 +4 1.17.9-r1 —
Wolfi rolling dask-gateway-server 2026.3.0-r7 —
Wolfi rolling db-operator 2.16.0-r14 —
Wolfi rolling descheduler 0.36.0-r3 —
Wolfi rolling dgraph 25.3.4-r1 —
Wolfi rolling docker-cli-buildx 0.34.1-r4 —
Wolfi rolling docker-machine-driver-harvester 1.0.6-r12 —
Wolfi rolling dogstatsd-7.78 +3 7.78.4-r4 —
Wolfi rolling dynamic-localpv-provisioner 4.5.0-r2 —
Wolfi rolling emissary +1 4.1.0-r2 —
Wolfi rolling envoy-gateway +1 1.8.0-r3 —
Wolfi rolling external-secrets-operator-2.4 2.4.1-r8 —
Wolfi rolling falco-no-driver 0.44.1-r5 —
Wolfi rolling flannel 0.28.4-r5 —
Wolfi rolling fluent-operator 3.8.0-r1 —
Wolfi rolling flux-2.7 2.7.5-r22 —
Wolfi rolling flux-image-reflector-controller 1.1.2-r3 —
Wolfi rolling flux-kustomize-controller 1.8.5-r5 —
Wolfi rolling flyte 1.16.7-r1 —
Wolfi rolling frp 0.69.1-r1 —
Wolfi rolling fuse-overlayfs-snapshotter 2.1.7-r16 —
Wolfi rolling gatekeeper-3.22 +1 3.22.2-r4 —
Wolfi rolling gitaly-18.11 18.11.4-r4 —
Wolfi rolling gitlab-runner-18.10 18.10.1-r12 —
Wolfi rolling gitlab-runner-18.11 18.11.3-r5 —
Wolfi rolling gitlab-runner-18.9 +2 18.9.0-r15 —
Wolfi rolling gitlab-runner-19.0 19.0.1-r1 —
Wolfi rolling go-1.24 +6 No fix yet —
Wolfi rolling go-1.26 1.26.4-r0 —
Wolfi rolling grafana-12.3 12.3.6.04-r2 —
Wolfi rolling grafana-13.0 13.0.2-r0 —
Wolfi rolling grafana-alloy 1.16.2-r1 —
Wolfi rolling grafana-mimir-3.0 3.0.9-r4 —
Wolfi rolling grafana-operator 5.22.2-r8 —
Wolfi rolling grafana-rollout-operator 0.37.0-r2 —
Wolfi rolling guac +1 1.1.0-r14 —
Wolfi rolling harbor-2.14 2.14.4-r1 —
Wolfi rolling helm-3 3.22.0-r0 —
Wolfi rolling helm-4 +1 4.2.0-r1 —
Wolfi rolling helm-push 0.11.1-r14 —
Wolfi rolling hubble 1.19.3-r7 —
Wolfi rolling hubble-ui-backend 0.13.5-r5 —
Wolfi rolling istioctl-1.29 +2 1.29.3-r3 —
Wolfi rolling jaeger-operator 1.65.0-r21 —
Wolfi rolling jitsucom-bulker-syncctl 2.11.913-r30 —
Wolfi rolling k3s-1.32 +2 1.32.13.1-r20 —
Wolfi rolling k3s-static-1.35 +1 1.35.3.1-r14 —
Wolfi rolling k9s 0.50.18-r29 —
Wolfi rolling kapp-controller 0.60.1-r1 —
Wolfi rolling karpenter-1.11 1.11.1-r5 —
Wolfi rolling katib-controller 0.19.0-r18 —
Wolfi rolling kiali 2.27.0-r1 —
Wolfi rolling knative-eventing-1.21-jobsink +1 1.21.4-r10 —
Wolfi rolling knative-serving-1.21-cleanup +5 1.21.2-r9 —
Wolfi rolling kots 1.130.4-r6 —
Wolfi rolling kserve-agent +3 0.18.0-r5 —
Wolfi rolling kube-bench 0.15.0-r12 —
Wolfi rolling kube-fluentd-operator 1.18.2-r66 —
Wolfi rolling kube-logging-operator 6.6.0-r1 —
Wolfi rolling kube-state-metrics 2.19.0-r3 —
Wolfi rolling kube-vip 1.2.0-r1 —
Wolfi rolling kube-webhook-certgen-1.15 +1 1.15.6-r1 —
Wolfi rolling kubeadm-1.35 +7 1.35.5-r2 —
Wolfi rolling kubeadm-1.36 +9 1.36.1-r2 —
Wolfi rolling kubectl-1.32 1.32.13-r1 —
Wolfi rolling kubectl-1.33 1.33.12-r2 —
Wolfi rolling kubectl-bash-completion-1.35 +3 1.35.8-r6 —
Wolfi rolling kubeflow-admission-webhook +4 1.10.0-r25 —
Wolfi rolling kubeflow-pipelines-apiserver +4 2.16.1-r5 —
Wolfi rolling kubeflow-pipelines-metadata-writer-compat 2.17.2-r4 —
Wolfi rolling kuberay-operator 1.6.1-r5 —
Wolfi rolling kubernetes-csi-external-provisioner 6.3.0-r0 —
Wolfi rolling kubernetes-event-exporter 1.7-r63 —
Wolfi rolling kubernetes-replicator 2.12.3-r8 —
Wolfi rolling kubescape 4.0.9-r1 —
Wolfi rolling kubescape-operator 0.2.148-r1 —
Wolfi rolling kubevela-vela-cli +1 1.10.8-r10 —
Wolfi rolling kuma-cp-2.12 +2 2.12.3-r16 —
Wolfi rolling kuma-cp-2.13 +2 2.13.7-r1 —
Wolfi rolling kyverno-1.17 1.17.2-r35 —
Wolfi rolling kyverno-cli-1.17 +5 1.17.2-r10 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin 1.6.4-r29 —
Wolfi rolling libnvidia-container 1.19.0-r3 —
Wolfi rolling local-path-provisioner 0.0.36-r2 —
Wolfi rolling mattermost-11.1 11.1.3-r3 —
Wolfi rolling mattermost-11.5 11.5.7-r1 —
Wolfi rolling metallb +5 0.16.1-r1 —
Wolfi rolling metrics-server 0.8.1-r10 —
Wolfi rolling mongo-tools 100.17.0-r4 —
Wolfi rolling multus-cni 4.2.4-r12 —
Wolfi rolling neuvector-scanner 4.185-r0 —
Wolfi rolling newrelic-infra-operator 0.27.2-r4 —
Wolfi rolling newrelic-nri-kube-events 2.19.3-r4 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r42 —
Wolfi rolling node-problem-detector-1.35 1.35.2-r15 —
Wolfi rolling nova 3.12.0-r3 —
Wolfi rolling nri-discovery-kubernetes 1.14.3-r2 —
Wolfi rolling nri-prometheus 2.29.1-r2 —
Wolfi rolling opentofu-1.11 1.11.8-r3 —
Wolfi rolling opentofu-1.12 1.12.1-r1 —
Wolfi rolling osv-scanner 2.3.8-r6 —
Wolfi rolling percona-server-mongodb-operator 1.22.0-r18 —
Wolfi rolling pinact 4.0.0-r2 —
Wolfi rolling polaris 10.2.0-r5 —
Wolfi rolling policy-controller +1 0.15.1-r9 —
Wolfi rolling prometheus-3.11 3.11.3-r6 —
Wolfi rolling prometheus-3.12 3.12.0-r1 —
Wolfi rolling prometheus-3.8 3.8.1-r4 —
Wolfi rolling prometheus-adapter 0.12.0-r28 —
Wolfi rolling promxy 0.0.93-r19 —
Wolfi rolling pulumi-kubernetes-operator 2.7.0-r9 —
Wolfi rolling rabbitmq-cluster-operator 2.21.0-r3 —
Wolfi rolling rancher-2.14 2.14.1-r4 —
Wolfi rolling rancher-agent-2.13 2.13.9-r4 —
Wolfi rolling rancher-fleet-cli +2 0.15.2-r2 —
Wolfi rolling rancher-helm-3 3.20.0-r14 —
Wolfi rolling rancher-webhook-0.10 0.10.5-r2 —
Wolfi rolling redka 1.0.1-r3 —
Wolfi rolling rook-1.19 +1 1.19.6-r1 —
Wolfi rolling rpk-26.1.9 26.1.9-r2 —
Wolfi rolling runc 1.4.2-r5 —
Wolfi rolling sealed-secrets +1 0.37.0-r4 —
Wolfi rolling secrets-store-csi-driver 1.6.0-r3 —
Wolfi rolling sigstore-scaffolding-tuf-server +2 0.7.31-r16 —
Wolfi rolling snyk-cli 1.1304.3-r6 —
Wolfi rolling spark-operator 2.5.0-r4 —
Wolfi rolling spicedb-operator 1.25.1-r2 —
Wolfi rolling spire-agent +2 1.15.1-r1 —
Wolfi rolling spqr 2.9.9-r2 —
Wolfi rolling stakater-reloader 1.4.17-r2 —
Wolfi rolling step-issuer 0.10.2-r16 —
Wolfi rolling tekton-chains 0.27.0-r1 —
Wolfi rolling tekton-pipelines-events-1.12 +3 1.12.0-r6 —
Wolfi rolling tekton-pipelines-events-1.13 +3 1.13.0-r1 —
Wolfi rolling tekton-pipelines-webhook-1.11 +1 1.11.1-r20 —
Wolfi rolling telegraf-1.38 1.38.4-r6 —
Wolfi rolling temporal 1.7.1-r1 —
Wolfi rolling temporal-server 1.31.0-r3 —
Wolfi rolling terraform-provider-grafana 4.37.0-r0 —
Wolfi rolling tetragon +1 1.7.0-r1 —
Wolfi rolling timoni 0.26.0-r13 —
Wolfi rolling tofu-controller +1 0.16.3-r3 —
Wolfi rolling traefik-3.7 3.7.1-r4 —
Wolfi rolling trino 481-r2 —
Wolfi rolling vault-k8s 1.7.4-r3 —
Wolfi rolling vcluster +2 0.34.2-r0 —
Wolfi rolling velero-plugin-for-aws +2 1.14.1-r2 —
Wolfi rolling velero-plugin-for-csi 0.7.1-r51 —
Wolfi rolling vertical-pod-autoscaler +2 1.6.0-r12 —
Wolfi rolling volume-modifier-for-k8s 0.9.5-r1 —
Wolfi rolling zarf 0.77.0-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.25.11 · >= 1.26.0-0, < 1.26.4 1.25.11, 1.26.4 GO-2026-5038

Advisories 50

References