Skip to content
OpenAdvisories
High · 7.5 Public exploit CVE-2026-56852 EUVD-2026-46384GHSA-jpjm-c3r5-q96rGO-2026-5970

Infinite loop on invalid input in golang.org/x/text

Published Jul 21, 2026 · Updated Aug 10, 2026 · Assigned by Go

Vendor: golang.org/x/text Product: golang.org/x/text/unicode/norm Package: aactl Package: act Package: actions-runner-controller Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-operator Package: amazon-k8s-cni Package: apisix-ingress-controller Package: application-gateway-kubernetes-ingress Package: argo-cd-3.2 Package: argo-cd-3.2-compat Package: argo-cd-3.3 Package: argo-cd-3.3-compat Package: argo-cd-3.4 Package: argo-cd-3.4-compat Package: argo-workflow-controller-4.0 Package: argo-workflow-executor-3.7 Package: argo-workflow-executor-4.0 Package: argo-workflows-3.7 Package: argo-workflows-ui-4.0 Package: argocd-image-updater Package: atlantis Package: aws-network-policy-agent Package: aws-otel-collector Package: azcopy Package: azl-otel-collector Package: azure-service-operator Package: azuredisk-csi-1.34 Package: azurefile-csi-1.35 Package: azurelinux-image-tools Package: bento Package: blob-csi-1.27 Package: boring-registry Package: buildah Package: buildkitd Package: caddy Package: calico-apiserver-3.32 Package: calico-kube-controllers-3.31 Package: calico-kube-controllers-3.32 Package: calicoctl-3.31 Package: calicoctl-3.32 Package: cargobump Package: cerbos Package: cert-manager Package: cert-manager-1.20 Package: cert-manager-1.20-crds Package: cert-manager-acmesolver-1.20 Package: cert-manager-cainjector-1.20 Package: cert-manager-cmctl Package: cert-manager-controller-1.20 Package: cert-manager-startupapicheck-1.20 Package: cert-manager-webhook-1.20 Package: certificate-transparency Package: certificate-transparency-trillian-ctserver Package: cf-cli Package: cfssl Package: cfssl-multirootca Package: cfssl-newkey Package: chisel Package: cilium-1.19 Package: cilium-1.19-clustermesh-apiserver Package: cilium-1.19-hubble-relay Package: cilium-1.19-operator-aws Package: cilium-1.19-operator-generic Package: cilium-certgen-0.4 Package: cilium-cli Package: cis-operator-1.4 Package: cloud-provider-aws-1.35-cloud-controller-manager Package: cloud-provider-azure-cloud-controller-manager-1.35 Package: cloud-provider-azure-cloud-controller-manager-1.36 Package: cloud-provider-azure-cloud-controller-manager-1.36-compat Package: cloud-provider-azure-cloud-node-manager-1.35 Package: cloud-provider-azure-cloud-node-manager-1.36 Package: cloud-provider-kubevirt Package: cloud-provider-vsphere Package: cloudflared Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cloudprober Package: cluster-api-1.12-capd-manager Package: cluster-api-1.12-controller Package: cluster-api-1.12-kubeadm-bootstrap-controller Package: cluster-api-1.12-kubeadm-control-plane-controller Package: cluster-api-1.13-capd-manager Package: cluster-api-1.13-controller Package: cluster-api-1.13-kubeadm-bootstrap-controller Package: cluster-api-1.13-kubeadm-control-plane-controller Package: cluster-api-aws-controller Package: cluster-api-azure-controller Package: cluster-api-azure-controller-compat Package: cluster-api-gcp-controller Package: cluster-api-provider-vsphere Package: cluster-autoscaler-1.35 Package: conftest Package: conjur-cli Package: consul-k8s-1.9 Package: consul-k8s-1.9-cli Package: containerd-1 Package: containerd-2 Package: containerd-2.3 Package: containerd-shim-runc-v2-1 Package: containerd-stress-1 Package: containerd-stress-2 Package: containerd-stress-2.3 Package: containerd2 Package: containerized-data-importer Package: controller-gen Package: coredns Package: cortex Package: cosign Package: cosign-3 Package: cri-o Package: cri-tools Package: cri-tools Package: crictl Package: crossplane-2.2 Package: crossplane-2.2-crank Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-ec2-compat Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-route53-compat Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sqs Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-family-aws Package: crossplane-provider-family-azure Package: crossplane-provider-keycloak Package: ctr-1 Package: ctr-2 Package: ctr-2.3 Package: cue Package: dagger Package: dapr-daprd-1.17 Package: datadog-agent-7.72 Package: datadog-agent-7.72-fakeintake Package: datadog-agent-7.72-full Package: datadog-agent-7.73 Package: datadog-agent-7.73-fakeintake Package: datadog-agent-7.73-full Package: datadog-agent-7.77 Package: datadog-agent-7.77-fakeintake Package: datadog-agent-7.77-full Package: datadog-agent-7.78 Package: datadog-agent-7.78-fakeintake Package: datadog-agent-7.78-full Package: datadog-agent-7.79 Package: datadog-agent-7.79-fakeintake Package: datadog-agent-7.79-full Package: datadog-agent-7.80 Package: datadog-agent-7.80-fakeintake Package: datadog-agent-7.80-full Package: datadog-cluster-agent-7.72 Package: datadog-cluster-agent-7.73 Package: datadog-cluster-agent-7.77 Package: datadog-cluster-agent-7.78 Package: datadog-cluster-agent-7.79 Package: datadog-cluster-agent-7.80 Package: datadog-operator Package: dataplaneapi Package: dbmate Package: dcos-cli Package: descheduler Package: dex Package: dgraph Package: distribution Package: dkron Package: dkron-executor-kafka Package: docker-buildx Package: docker-cli Package: docker-cli-buildx Package: docker-compose Package: docker-compose Package: docker-config-mirror-gcr-28 Package: docker-dind-compat-28 Package: docker-machine-driver-harvester Package: docker-machine-driver-linode Package: dockerd-28 Package: dockerd-29 Package: dogstatsd-7.72 Package: dogstatsd-7.73 Package: dogstatsd-7.77 Package: dogstatsd-7.78 Package: dogstatsd-7.79 Package: dogstatsd-7.80 Package: envconsul Package: etcd Package: external-dns-0.21 Package: external-secrets-operator-2.3 Package: external-secrets-operator-2.4 Package: external-secrets-operator-2.5 Package: external-secrets-operator-2.6 Package: falco-no-driver Package: falcoctl Package: falcosidekick Package: ferretdb Package: filebrowser Package: flannel Package: fluent-bit-plugin-loki Package: flux-2.7 Package: flux-2.8 Package: flux-2.9 Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-notification-controller Package: flux-source-controller Package: flyte Package: frp Package: fuse-overlayfs-snapshotter Package: gh Package: gh Package: git-lfs Package: git-lfs Package: gitaly-19.0 Package: gitaly-19.1 Package: gitaly-backup-19.0 Package: gitaly-backup-19.1 Package: gitea Package: gitlab-agent-19.0 Package: gitlab-agent-19.1 Package: gitlab-agent-19.2 Package: gitlab-docker-machine-18.11 Package: gitlab-kas-19.0 Package: gitlab-kas-19.1 Package: gitlab-kas-19.2 Package: gitlab-pages-19.0 Package: gitlab-pages-19.1 Package: gitlab-pages-19.2 Package: gitlab-runner-18.11 Package: gitlab-runner-19.0 Package: gitlab-runner-19.1 Package: gitlab-runner-helper-18.11 Package: gitlab-runner-helper-19.0 Package: gitlab-runner-helper-19.1 Package: gitness Package: gitsign Package: glow Package: go-discover Package: go-licenses Package: golang-golang-x-text Package: golang-golang-x-text Package: golang.org/x/text Package: goreleaser Package: gotestsum Package: gptscript Package: gpu-feature-discovery Package: grafana-12.3 Package: grafana-12.4 Package: grafana-13.0 Package: grafana-alloy Package: grafana-mimir-3.0 Package: grafana-mimir-3.0-metaconvert-3.0 Package: grafana-mimir-3.0-mimirtool-3.0 Package: grafana-mimir-3.1 Package: grafana-mimir-3.1-metaconvert-3.1 Package: grafana-mimir-3.1-mimirtool-3.1 Package: grafana-mimir-3.1-query-tee-3.1 Package: grafana-operator Package: grafana-pyroscope-1.19 Package: grafana-pyroscope-2.0 Package: guac Package: guacgql Package: guacingest Package: guacone Package: harbor-2.14 Package: harbor-2.14-exporter Package: harbor-2.14-jobservice Package: harbor-2.14-registryctl Package: harbor-cli Package: harbor-registry Package: harbor-scanner-trivy Package: hcloud Package: helm-3 Package: helm-operator Package: hubble Package: hubble-ui-backend Package: hugo Package: hugo-extended Package: hydra Package: ignition-flatcar Package: influxdb Package: ipfs-cluster Package: istioctl-1.29 Package: jitsucom-bulker-bulker Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-syncctl Package: juicefs-1.3 Package: jx Package: k3d Package: k3s Package: k3s-1.32 Package: k3s-1.34 Package: k3s-1.35 Package: k3s-multicall Package: k3s-multicall-1.32 Package: k3s-multicall-1.34 Package: k3s-multicall-1.35 Package: k3s-static Package: k3s-static-1.32 Package: k3s-static-1.34 Package: k3s-static-1.35 Package: k6 Package: k8s_gateway Package: k8sgpt Package: k8ssandra-client Package: k9s Package: kaf Package: kafka_exporter Package: kafka-proxy Package: kapp-controller Package: karpenter-1.11 Package: karpenter-1.12 Package: kata-containers Package: kata-containers-cc Package: kata-containers-preview Package: keda Package: keda-2.19 Package: keda-2.19-metrics-apiserver Package: keda-2.20 Package: keda-2.20-metrics-apiserver Package: kiali Package: kine Package: ko Package: kots Package: kratos Package: kratos-protoc-gen Package: kube-apiserver-1.34 Package: kube-apiserver-1.35 Package: kube-apiserver-1.36 Package: kube-arangodb-1.4 Package: kube-bench Package: kube-controller-manager-1.34 Package: kube-controller-manager-1.35 Package: kube-controller-manager-1.36 Package: kube-fluentd-operator Package: kube-metrics-adapter Package: kube-proxy-1.34 Package: kube-proxy-1.35 Package: kube-proxy-1.35-default-compat Package: kube-proxy-1.36 Package: kube-rbac-proxy Package: kube-scheduler-1.34 Package: kube-scheduler-1.35 Package: kube-scheduler-1.35-default-compat Package: kube-scheduler-1.36 Package: kube-vip-cloud-provider Package: kubeadm-1.34 Package: kubeadm-1.35 Package: kubeadm-1.36 Package: kubebuilder Package: kubectl-1.32 Package: kubectl-1.33 Package: kubectl-1.34 Package: kubectl-1.35 Package: kubectl-1.36 Package: kubectl-bash-completion-1.35 Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubelet-1.34 Package: kubelet-1.35 Package: kubelet-1.36 Package: kubernetes Package: kubernetes-1.34 Package: kubernetes-1.35 Package: kubernetes-1.36 Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-health-monitor Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-external-snapshot-controller-8.5 Package: kubernetes-csi-external-snapshot-controller-8.6 Package: kubernetes-csi-external-snapshotter-8.5 Package: kubernetes-csi-external-snapshotter-8.6 Package: kubernetes-dashboard Package: kubernetes-dashboard-api Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-web Package: kubernetes-pause-compat-1.35 Package: kubescape Package: kubescape-operator Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubevirt Package: kubevirt-openvmm Package: kubo Package: kubo-compat Package: kuma-cp-2.12 Package: kuma-cp-2.13 Package: kuma-dp-2.12 Package: kuma-dp-2.13 Package: kumactl-2.12 Package: kumactl-2.13 Package: kured Package: kustomize Package: kyverno-1.17 Package: kyverno-1.18 Package: kyverno-background-controller-1.17 Package: kyverno-background-controller-1.18 Package: kyverno-cleanup-controller-1.17 Package: kyverno-cleanup-controller-1.18 Package: kyverno-cli-1.17 Package: kyverno-cli-1.18 Package: kyverno-init-container-1.17 Package: kyverno-init-container-1.18 Package: kyverno-notation-aws Package: kyverno-readiness-checker-1.17 Package: kyverno-readiness-checker-1.18 Package: kyverno-reports-controller-1.17 Package: kyverno-reports-controller-1.18 Package: lazygit Package: loki-3.6 Package: loki-3.6-logcli Package: loki-3.6-loki-canary Package: loki-3.6-promtail Package: loki-3.7 Package: loki-3.7-logcli Package: loki-3.7-loki-canary Package: maru Package: mattermost-11.1 Package: mattermost-11.5 Package: mattermost-11.6 Package: mattermost-11.6-compat Package: mattermost-11.7 Package: mc Package: mcp-grafana Package: metrics-server Package: metrics-server-compat Package: migrate Package: minio Package: minio-object-browser Package: moby-containerd-cc Package: moby-engine Package: mods Package: mongo-tools Package: mongodb-kubernetes-operator Package: mps-control-daemon Package: multus Package: nats Package: nerdctl Package: neuvector-sigstore-interface Package: newrelic-nri-kube-events Package: nfpm Package: nova Package: nri-kafka Package: nri-kafka-jdk11 Package: nri-mysql Package: nsc Package: nuclei Package: nvidia-device-plugin Package: omnibump Package: op-geth Package: op-geth-abigen Package: op-geth-clef Package: op-geth-compat Package: op-geth-devp2p Package: op-geth-evm Package: opa Package: opa Package: opa-envoy Package: openbao Package: opencost Package: openfga Package: opentelemetry-collector Package: opentelemetry-operator-otel-allocator Package: opentofu-1.11 Package: opentofu-1.12 Package: opentofu-1.12-compat Package: opentofu-1.9 Package: osv-scanner Package: otel-cli Package: packer Package: pdfcpu Package: percona-server-mongodb-operator Package: percona-server-mongodb-operator-mongodb-healthcheck Package: pg_timetable Package: podman Package: polaris Package: policy-controller Package: policy-controller-tester Package: portieris Package: prometheus-3.10 Package: prometheus-3.11 Package: prometheus-3.12 Package: prometheus-3.9 Package: prometheus-adapter Package: prometheus-admission-webhook Package: prometheus-alertmanager Package: prometheus-config-reloader Package: prometheus-node-exporter Package: prometheus-operator Package: prometheus-operator-iamguarded-compat Package: prometheus-process-exporter Package: promxy Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-java Package: pulumi-language-yaml Package: q Package: rancher-2.13 Package: rancher-2.14 Package: rancher-agent-2.13 Package: rancher-agent-2.14 Package: rancher-helm-3 Package: rancher-machine Package: rancher-system-agent Package: rancher-system-upgrade-controller Package: rancher-telemetry Package: ratify Package: rclone Package: redis-operator Package: rekor-backfill-index Package: rekor-cli Package: rekor-server Package: rke2-cloud-provider Package: rook-1.19 Package: rook-1.19-oci-compat Package: ruby3.3-fluent-plugin-grafana-loki-3.7 Package: sbomqs Package: scorecard Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: skaffold Package: skopeo Package: slsa-verifier Package: smokescreen Package: snyk-cli Package: sonobuoy Package: spicedb Package: spicedb-operator Package: spire-agent Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: splunk-otel-collector-compat Package: spqr Package: sql_exporter Package: src Package: sriov-network-device-plugin Package: steampipe Package: step Package: step-ca Package: step-issuer Package: step-issuer-compat Package: stern Package: tailscale Package: tailscale-k8s-operator Package: tekton-chains Package: telegraf Package: telegraf-1.38 Package: teleport-18.6 Package: teleport-18.6-kube-agent-updater Package: teleport-18.6-operator Package: tempo-2.10 Package: tempo-2.10-cli Package: tempo-2.10-vulture Package: tempo-3.0 Package: tempo-3.0-cli Package: tempo-3.0-vulture Package: temporal Package: temporal-ui-server Package: terraform Package: terraform-docs Package: terraform-mcp-server Package: terraform-provider-acme Package: terraform-provider-azuread Package: terraform-provider-google Package: terraform-provider-grafana Package: terraform-provider-kubernetes Package: terraform-provider-pagerduty Package: terraform-provider-random Package: terraform-provider-sendgrid Package: terraform-provider-time Package: terraform-provider-tls Package: tfsec Package: thanos Package: tigera-operator-1.42 Package: timescaledb-parallel-copy Package: timestamp-authority-cli Package: timestamp-authority-server Package: timoni Package: tkn Package: tofu-controller Package: tofu-controller-runner Package: traefik-3.6 Package: traefik-3.7 Package: trillian-logserver Package: trillian-logsigner Package: trino Package: trino-plugin-bigquery Package: trino-plugin-opensearch Package: trino-plugin-oracle Package: trino-plugin-teradata-functions Package: trivy Package: trivy-operator Package: trufflehog Package: tw Package: twt Package: vault-benchmark Package: vault-env Package: vault-secrets-webhook Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: velero Package: velero-restore-helper Package: verticadb-operator Package: vexctl Package: victoriametrics-operator Package: vitess Package: wal-g-pg Package: weaviate Package: wgcf Package: witness Package: wolfictl Package: yq Package: yq Package: zarf Package: zot Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Affected products

VendorProductAffectedFixed
golang.org/x/text golang.org/x/text/unicode/norm < 0.39.0 0.39.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-golang-x-text 0.40.0-1 —
Debian 13 golang-golang-x-text No fix yet —
Debian 12 golang-golang-x-text No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-golang-x-text No fix yet —
Ubuntu 26.04 LTS golang-golang-x-text No fix yet —
Ubuntu 24.04 LTS golang-golang-x-text No fix yet —
Ubuntu 22.04 LTS golang-golang-x-text No fix yet —
Ubuntu 20.04 LTS golang-golang-x-text No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 podman +3 7:5.8.2-9.el10_2 RHSA-2026:70201
RHEL 8 rhc 1:0.2.5-11.el8_10 RHSA-2026:69258
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Satellite Capsule 6 openvox-agent 8.31.1-1.el8sat RHSA-2026:92860, RHSA-2026:92859, RHSA-2026:92858
Red Hat Satellite Capsule 6 openvox-server 8.17.0-1.el8sat RHSA-2026:92860, RHSA-2026:92859, RHSA-2026:92858
Red Hat Satellite 6 openvox-agent 8.31.1-1.el8sat RHSA-2026:92860, RHSA-2026:92859, RHSA-2026:92858
Red Hat Satellite 6 openvox-server 8.17.0-1.el8sat RHSA-2026:92860, RHSA-2026:92859, RHSA-2026:92858
Red Hat Satellite 6 yggdrasil-worker-forwarder 0.1.1-1.el8sat RHSA-2026:92860, RHSA-2026:92859, RHSA-2026:92858
RHEL 8.8 TUS rhc 1:0.2.2-1.el8_8.4 RHSA-2026:99824
RHEL 8.8 E4S rhc 1:0.2.2-1.el8_8.4 RHSA-2026:99824
RHEL 8.6 EUS Long Life rhc 1:0.2.1-14.el8_6.2 RHSA-2026:99827
RHEL 8.6 AUS rhc 1:0.2.1-14.el8_6.2 RHSA-2026:99827
RHEL 7 ELS rhc 1:0.2.4-5.el7_9.2 RHSA-2026:99826
Red Hat OpenStack 16 collectd-libpod-stats 1.0.4-6.2.el8ost RHSA-2026:90330
Red Hat OpenStack 16 collectd-sensubility 0.2.1-1.3.el8ost RHSA-2026:90330
Red Hat OpenStack 16 etcd 3.3.23-25.el8ost RHSA-2026:90330
Red Hat Hardened Images 1 buildah 2:1.44.0-3.3.hum1 RHSA-2026:51065, RHSA-2026:49360
Red Hat Hardened Images 1 caddy 2.11.4-0.3.hum1 RHSA-2026:44151
Red Hat Hardened Images 1 cosign 3.1.2-0.2.hum1 RHSA-2026:54364, RHSA-2026:44451
Red Hat Hardened Images 1 etcd 3.7.0-0.3.hum1 RHSA-2026:44430
Red Hat Hardened Images 1 go-fdo-client 1.0.0-2.1.hum1 RHSA-2026:46953
Red Hat Hardened Images 1 go-fdo-server +3 1.0.1-0.5.hum1 RHSA-2026:48306
Red Hat Hardened Images 1 golang1.25 +5 1.25.12-1.1.hum1 RHSA-2026:40964
Red Hat Hardened Images 1 golang1.26 +5 1.26.5-0.1.1.hum1 RHSA-2026:41020
Red Hat Hardened Images 1 grype 0.116.0-0.1.hum1 RHSA-2026:42083
Red Hat Hardened Images 1 helm3 3.21.3-0.1.2.hum1 RHSA-2026:42241
Red Hat Hardened Images 1 helm4 4.2.3-0.1.2.hum1 RHSA-2026:42230
Red Hat Hardened Images 1 hugo 0.164.0-0.1.2.hum1 RHSA-2026:54549, RHSA-2026:43873
Red Hat Hardened Images 1 jaeger 2.20.0-0.2.hum1 RHSA-2026:43801
Red Hat Hardened Images 1 kubernetes1.35 +3 1.35.6-2.1.hum1 RHSA-2026:43852
Red Hat Hardened Images 1 kubernetes1.36 +3 1.36.2-6.1.hum1 RHSA-2026:43906
Red Hat Hardened Images 1 oauth2-proxy 7.15.3-0.3.hum1 RHSA-2026:43797
Red Hat Hardened Images 1 opentelemetry-collector +1 0.157.0-0.1.hum1 RHSA-2026:43799, RHSA-2026:43581
Red Hat Hardened Images 1 opentofu1.10 1.10.10-0.3.hum1 RHSA-2026:43803
Red Hat Hardened Images 1 opentofu1.11 1.11.13-0.2.hum1 RHSA-2026:43554
Red Hat Hardened Images 1 opentofu1.12 1.12.5-0.2.hum1 RHSA-2026:46960
Red Hat Hardened Images 1 podman +5 5:6.0.2-2.1.hum1 RHSA-2026:44152
Red Hat Hardened Images 1 prometheus3.13 3.13.1-0.3.hum1 RHSA-2026:49317, RHSA-2026:43866
Red Hat Hardened Images 1 prometheus3.5 3.5.5-0.3.hum1 RHSA-2026:44479
Red Hat Hardened Images 1 skopeo +1 1:1.23.0-3.1.hum1 RHSA-2026:52912, RHSA-2026:43119
Red Hat Hardened Images 1 spire1.14 +3 1.14.7-0.2.hum1 RHSA-2026:43311
Red Hat Hardened Images 1 spire1.15 +3 1.15.2-0.3.hum1 RHSA-2026:44162
Red Hat Hardened Images 1 syft 1.49.0-0.1.hum1 RHSA-2026:43015
Red Hat Hardened Images 1 trivy 0.72.0-0.1.2.hum1 RHSA-2026:46988
Red Hat Hardened Images 1 yq 4.53.3-2.1.hum1 RHSA-2026:43716
Red Hat Edge Manager 1 flightctl +2 1.1.4-1.el9em RHSA-2026:68335, RHSA-2026:68334

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 podman +3 7:5.8.2-9.el10_2.alma.1 ALSA-2026:70201

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 podman 7:5.8.2-9.el10_2 RLSA-2026:70201

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 alloy 1.19.2-150700.15.29.1 SUSE-SU-2026:4408-1
SLES 15 SP7 apptainer 1.5.3-150600.4.34.2 SUSE-SU-2026:3417-1
SLES 15 SP7 aws-iam-authenticator 0.7.22-150000.1.23.1 SUSE-SU-2026:4891-1
SLES 15 SP7 azure-storage-azcopy 10.32.6-150400.9.16.2 SUSE-SU-2026:3528-1
SLES 15 SP7 containerized-data-importer 1.64.0-150700.9.14.1 SUSE-SU-2026:4209-1
SLES 15 SP7 cosign 3.1.3-150400.3.57.1 SUSE-SU-2026:4392-1
SLES 15 SP7 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP7 golang-github-prometheus-prometheus 3.13.2-150100.4.40.2 SUSE-SU-2026:4606-1
SLES 15 SP7 google-cloud-sap-agent 3.15-150100.3.87.1 SUSE-SU-2026:4206-1
SLES 15 SP7 google-guest-agent 20260529.00-150000.1.76.1 SUSE-SU-2026:4270-1, SUSE-SU-2026:3497-1
SLES 15 SP7 google-osconfig-agent 20260615.01-150000.1.60.1 SUSE-SU-2026:4293-1, SUSE-SU-2026:3432-1
SLES 15 SP7 grafana 12.4.10-150200.3.94.3 SUSE-SU-2026:4600-1
SLES 15 SP7 helm 3.21.3-150000.1.85.1 SUSE-SU-2026:3342-1
SLES 15 SP7 ignition 2.14.0-150400.9.21.1 SUSE-SU-2026:3300-1
SLES 15 SP7 kubevirt 1.7.4-150700.3.33.1 SUSE-SU-2026:3480-1
SLES 15 SP7 kubevirt-1.6 1.6.6-150700.15.17.1 SUSE-SU-2026:3630-1
SLES 15 SP7 system-user-grafana 1.0.0-150200.5.8.1 SUSE-SU-2026:4600-1
SLES 15 SP7 yq 4.53.3-150500.3.12.1 SUSE-SU-2026:3327-1
SLES 15 SP6 apptainer 1.5.3-150600.4.34.2 SUSE-SU-2026:3417-1
SLES 15 SP6 aws-iam-authenticator 0.7.22-150000.1.23.1 SUSE-SU-2026:4891-1
SLES 15 SP6 azure-storage-azcopy 10.32.6-150400.9.16.2 SUSE-SU-2026:3528-1
SLES 15 SP6 cosign 3.1.3-150400.3.57.1 SUSE-SU-2026:4392-1
SLES 15 SP6 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP6 google-cloud-sap-agent 3.15-150100.3.87.1 SUSE-SU-2026:4206-1
SLES 15 SP6 google-guest-agent 20260529.00-150000.1.76.1 SUSE-SU-2026:4270-1, SUSE-SU-2026:3497-1
SLES 15 SP6 google-osconfig-agent 20260615.01-150000.1.60.1 SUSE-SU-2026:4293-1, SUSE-SU-2026:3432-1
SLES 15 SP6 helm 3.21.3-150000.1.85.1 SUSE-SU-2026:3342-1
SLES 15 SP6 ignition 2.14.0-150400.9.21.1 SUSE-SU-2026:3300-1
SLES 15 SP5 aws-iam-authenticator 0.7.22-150000.1.23.1 SUSE-SU-2026:4891-1
SLES 15 SP5 azure-storage-azcopy 10.32.6-150400.9.16.2 SUSE-SU-2026:3528-1
SLES 15 SP5 cosign 3.1.3-150400.3.57.1 SUSE-SU-2026:4392-1
SLES 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP5 google-cloud-sap-agent 3.15-150100.3.87.1 SUSE-SU-2026:4206-1
SLES 15 SP5 google-guest-agent 20260529.00-150000.1.76.1 SUSE-SU-2026:4270-1, SUSE-SU-2026:3497-1
SLES 15 SP5 google-osconfig-agent 20260615.01-150000.1.60.1 SUSE-SU-2026:4293-1, SUSE-SU-2026:3432-1
SLES 15 SP5 helm 3.21.3-150000.1.85.1 SUSE-SU-2026:3342-1
SLES 15 SP5 terraform-provider-aws 3.11.0-150200.6.24.2 SUSE-SU-2026:3916-1
SLES 15 SP5 terraform-provider-azurerm 2.32.0-150200.6.18.2 SUSE-SU-2026:3916-1
SLES 15 SP5 terraform-provider-external 2.0.0-150200.6.18.2 SUSE-SU-2026:3916-1
SLES 15 SP5 terraform-provider-google 3.43.0-150200.6.18.2 SUSE-SU-2026:3916-1
SLES 15 SP5 terraform-provider-helm 2.9.0-150200.6.29.2 SUSE-SU-2026:3916-1
SLES 15 SP5 terraform-provider-kubernetes 1.13.2-150200.6.18.2 SUSE-SU-2026:3916-1
SLES 15 SP5 terraform-provider-local 2.0.0-150200.6.25.1 SUSE-SU-2026:3916-1
SLES 15 SP5 terraform-provider-null 3.0.0-150200.6.24.2 SUSE-SU-2026:3916-1
SLES 15 SP5 terraform-provider-random 3.0.0-150200.6.21.2 SUSE-SU-2026:3916-1
SLES 15 SP5 terraform-provider-susepubliccloud 0.0.1-150100.3.20.1 SUSE-SU-2026:3962-1
SLES 15 SP5 terraform-provider-tls 3.0.0-150200.5.21.2 SUSE-SU-2026:3916-1
SLES 15 SP4 aws-iam-authenticator 0.7.22-150000.1.23.1 SUSE-SU-2026:4891-1
SLES 15 SP4 azure-storage-azcopy 10.32.6-150400.9.16.2 SUSE-SU-2026:3528-1
SLES 15 SP4 cosign 3.1.3-150400.3.57.1 SUSE-SU-2026:4392-1
SLES 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP4 google-cloud-sap-agent 3.15-150100.3.87.1 SUSE-SU-2026:4206-1
SLES 15 SP4 google-guest-agent 20260529.00-150000.1.76.1 SUSE-SU-2026:4270-1, SUSE-SU-2026:3497-1
SLES 15 SP4 google-osconfig-agent 20260615.01-150000.1.60.1 SUSE-SU-2026:4293-1, SUSE-SU-2026:3432-1
SLES 15 SP4 helm 3.21.3-150000.1.85.1 SUSE-SU-2026:3342-1
SLES 15 SP4 terraform-provider-aws 3.11.0-150200.6.24.2 SUSE-SU-2026:3916-1
SLES 15 SP4 terraform-provider-azurerm 2.32.0-150200.6.18.2 SUSE-SU-2026:3916-1
SLES 15 SP4 terraform-provider-external 2.0.0-150200.6.18.2 SUSE-SU-2026:3916-1
SLES 15 SP4 terraform-provider-google 3.43.0-150200.6.18.2 SUSE-SU-2026:3916-1
SLES 15 SP4 terraform-provider-helm 2.9.0-150200.6.29.2 SUSE-SU-2026:3916-1
SLES 15 SP4 terraform-provider-kubernetes 1.13.2-150200.6.18.2 SUSE-SU-2026:3916-1
SLES 15 SP4 terraform-provider-local 2.0.0-150200.6.25.1 SUSE-SU-2026:3916-1
SLES 15 SP4 terraform-provider-null 3.0.0-150200.6.24.2 SUSE-SU-2026:3916-1
SLES 15 SP4 terraform-provider-random 3.0.0-150200.6.21.2 SUSE-SU-2026:3916-1
SLES 15 SP4 terraform-provider-susepubliccloud 0.0.1-150100.3.20.1 SUSE-SU-2026:3962-1
SLES 15 SP4 terraform-provider-tls 3.0.0-150200.5.21.2 SUSE-SU-2026:3916-1
SLES 12 google-cloud-sap-agent 3.15-6.81.1 SUSE-SU-2026:4178-1
SLES 12 google-guest-agent 20260529.00-1.66.2 SUSE-SU-2026:4272-1, SUSE-SU-2026:3439-1
SLES 12 google-osconfig-agent 20260615.01-1.53.2 SUSE-SU-2026:4292-1, SUSE-SU-2026:3496-1
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 alloy 1.19.2-160000.1.1 SUSE-SU-2026:24148-1
SLES for SAP 16.0 cosign 3.1.3-160000.1.1 SUSE-SU-2026:24213-1
SLES for SAP 16.0 distribution 3.1.1-160000.2.1 SUSE-SU-2026:22952-1, SUSE-SU-2026:22945-1
SLES for SAP 16.0 google-cloud-sap-agent 3.15-160000.4.1 SUSE-SU-2026:23729-1, SUSE-SU-2026:23708-1
SLES for SAP 16.0 govulncheck-vulndb 0.0.20260827T195228-160000.1.1 SUSE-SU-2026:23625-1
SLES for SAP 16.0 helm 3.21.3-160000.1.1 SUSE-SU-2026:23984-1, SUSE-SU-2026:22855-1
SLES for SAP 15 SP6 cosign 3.1.3-150400.3.57.1 SUSE-SU-2026:4392-1
SLES for SAP 15 SP6 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP6 helm 3.21.3-150000.1.85.1 SUSE-SU-2026:3342-1
SLES for SAP 15 SP5 cosign 3.1.3-150400.3.57.1 SUSE-SU-2026:4392-1
SLES for SAP 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP5 helm 3.21.3-150000.1.85.1 SUSE-SU-2026:3342-1
SLES for SAP 15 SP4 cosign 3.1.3-150400.3.57.1 SUSE-SU-2026:4392-1
SLES for SAP 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP4 helm 3.21.3-150000.1.85.1 SUSE-SU-2026:3342-1
SLES 16.0 alloy 1.19.2-160000.1.1 SUSE-SU-2026:24148-1
SLES 16.0 cosign 3.1.3-160000.1.1 SUSE-SU-2026:24213-1
SLES 16.0 distribution 3.1.1-160000.2.1 SUSE-SU-2026:22952-1, SUSE-SU-2026:22945-1
SLES 16.0 google-cloud-sap-agent 3.15-160000.4.1 SUSE-SU-2026:23729-1, SUSE-SU-2026:23708-1
SLES 16.0 govulncheck-vulndb 0.0.20260827T195228-160000.1.1 SUSE-SU-2026:23625-1
SLES 16.0 helm 3.21.3-160000.1.1 SUSE-SU-2026:23984-1, SUSE-SU-2026:22855-1
SLE Micro 6.2 elemental 2.3.2-160000.1.1 SUSE-SU-2026:24645-1
SLE Micro 6.2 elemental-register 1.9.3-160000.1.1 SUSE-SU-2026:24645-1
SLE Micro 6.2 elemental-system-agent 0.15.2-160000.1.1 SUSE-SU-2026:24645-1
SLE Micro 6.2 elemental-toolkit 2.3.5-160000.1.1 SUSE-SU-2026:24645-1
SLE Micro 6.2 helm 3.21.3-160000.1.1 SUSE-SU-2026:23973-1, SUSE-SU-2026:22934-1
SLE Micro 6.2 ignition 2.21.0-160000.5.1 SUSE-SU-2026:22996-1
SLE Micro 6.2 mcphost 0.34.0-160000.3.1 SUSE-SU-2026:22994-1
SLE Micro 6.1 google-guest-agent 20260529.00-slfo.1.1_2.1 SUSE-SU-2026:23736-1, SUSE-SU-2026:23077-1
SLE Micro 6.1 google-osconfig-agent 20260615.01-slfo.1.1_2.1 SUSE-SU-2026:23739-1, SUSE-SU-2026:23073-1
SLE Micro 6.1 helm 3.21.3-slfo.1.1_1.1 SUSE-SU-2026:24282-1, SUSE-SU-2026:23162-1
SLE Micro 6.1 ignition 2.19.0-slfo.1.1_5.1 SUSE-SU-2026:23170-1
SLE Micro 6.0 elemental-operator 1.6.12-159998.1.1 SUSE-SU-2026:24709-1
SLE Micro 6.0 elemental-system-agent 0.15.2-159998.1.1 SUSE-SU-2026:24709-1
SLE Micro 6.0 elemental-toolkit 2.1.7-159998.1.1 SUSE-SU-2026:24709-1
SLE Micro 6.0 google-guest-agent 20260529.00-2.1 SUSE-SU-2026:23831-1, SUSE-SU-2026:23051-1
SLE Micro 6.0 google-osconfig-agent 20260615.01-2.1 SUSE-SU-2026:23548-1, SUSE-SU-2026:23041-1
SLE Micro 6.0 helm 3.21.3-1.1 SUSE-SU-2026:23052-1
SLE Micro 6.0 ignition 2.19.0-5.1 SUSE-SU-2026:23057-1
SLE Micro 5.5 google-guest-agent 20260529.00-150000.1.76.1 SUSE-SU-2026:4270-1, SUSE-SU-2026:3497-1
SLE Micro 5.5 google-osconfig-agent 20260615.01-150000.1.60.1 SUSE-SU-2026:4293-1, SUSE-SU-2026:3432-1
SLE Micro 5.5 helm 3.21.3-150000.1.85.1 SUSE-SU-2026:3342-1
SLE Micro 5.5 ignition 2.17.0-150500.3.21.1 SUSE-SU-2026:3265-1
SLE Micro 5.4 ignition 2.15.0-150400.4.20.1 SUSE-SU-2026:3266-1
SLE Micro 5.3 ignition 2.14.0-150400.4.21.1 SUSE-SU-2026:3267-1
SLE HPC 15 SP5 cosign 3.1.3-150400.3.57.1 SUSE-SU-2026:4392-1
SLE HPC 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLE HPC 15 SP5 helm 3.21.3-150000.1.85.1 SUSE-SU-2026:3342-1
SLE HPC 15 SP4 cosign 3.1.3-150400.3.57.1 SUSE-SU-2026:4392-1
SLE HPC 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLE HPC 15 SP4 helm 3.21.3-150000.1.85.1 SUSE-SU-2026:3342-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-Micro-5 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.13.2-150002.3.19.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 grafana 12.4.10-150002.4.27.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 mgr-push 5.2.5-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.2.10-150002.3.15.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools 5.2.7-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed alloy 1.19.2-1.1 openSUSE-SU-2026:11803-1
openSUSE Tumbleweed amazon-ecs-init 1.105.0-2.1 openSUSE-SU-2026:11345-1
openSUSE Tumbleweed apptainer 1.5.3-1.1 openSUSE-SU-2026:11374-1
openSUSE Tumbleweed azure-storage-azcopy 10.32.6-1.1 openSUSE-SU-2026:11444-1
openSUSE Tumbleweed containerized-data-importer1.65 1.65.0-3.1 openSUSE-SU-2026:11731-1
openSUSE Tumbleweed containerized-data-importer1.66 1.66.0-1.1 openSUSE-SU-2026:11514-1
openSUSE Tumbleweed cosign 3.1.3-1.1 openSUSE-SU-2026:11871-1
openSUSE Tumbleweed distribution 3.1.1-4.1 openSUSE-SU-2026:11328-1
openSUSE Tumbleweed flannel 0.28.10-1.1 openSUSE-SU-2026:12270-1
openSUSE Tumbleweed golang-github-prometheus-prometheus 3.13.2-1.1 openSUSE-SU-2026:11436-1
openSUSE Tumbleweed google-guest-agent 20260529.00-4.1 openSUSE-SU-2026:11348-1
openSUSE Tumbleweed google-osconfig-agent 20260708.00-3.1 openSUSE-SU-2026:11349-1
openSUSE Tumbleweed grafana 12.4.10-1.1 openSUSE-SU-2026:11684-1
openSUSE Tumbleweed helm 4.2.3-3.1 openSUSE-SU-2026:11333-1
openSUSE Tumbleweed helm3 3.21.3-3.1 openSUSE-SU-2026:11334-1
openSUSE Tumbleweed ignition 2.26.0-5.1 openSUSE-SU-2026:11376-1
openSUSE Tumbleweed kubevirt1.8 1.8.4-3.1 openSUSE-SU-2026:11392-1
openSUSE Tumbleweed kubevirt1.9 1.9.0-1.1 openSUSE-SU-2026:11520-1
openSUSE Tumbleweed mcphost 0.34.0-9.1 openSUSE-SU-2026:11366-1
openSUSE Tumbleweed trivy 0.72.0-2.1 openSUSE-SU-2026:11302-1
openSUSE Tumbleweed velociraptor 0.76.7.0.git145.b60ef1146-1.1 openSUSE-SU-2026:12070-1
openSUSE Tumbleweed warewulf4 4.7.0-4.1 openSUSE-SU-2026:11404-1
openSUSE Tumbleweed yq 4.53.3-1.2 openSUSE-SU-2026:11382-1
openSUSE Leap 16.0 alloy 1.19.2-160000.1.1 openSUSE-SU-2026:22032-1
openSUSE Leap 16.0 amazon-ecs-init 1.103.2-160000.2.1 openSUSE-SU-2026:21455-1
openSUSE Leap 16.0 apptainer 1.5.3-bp160.1.1 openSUSE-SU-2026:21499-1
openSUSE Leap 16.0 containerized-data-importer1.65 1.65.0-160000.3.1 openSUSE-SU-2026:21824-1
openSUSE Leap 16.0 cosign 3.1.3-160000.1.1 openSUSE-SU-2026:22064-1
openSUSE Leap 16.0 distribution 3.1.1-160000.2.1 openSUSE-SU-2026:21441-1
openSUSE Leap 16.0 google-cloud-sap-agent 3.15-160000.4.1 openSUSE-SU-2026:21834-1
openSUSE Leap 16.0 google-guest-agent 20260529.00-160000.2.1 openSUSE-SU-2026:21879-1, openSUSE-SU-2026:21476-1
openSUSE Leap 16.0 google-osconfig-agent 20260615.01-160000.2.1 openSUSE-SU-2026:21882-1, openSUSE-SU-2026:21456-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21761-1, openSUSE-SU-2026:21483-1
openSUSE Leap 16.0 grafana 12.4.10-bp160.1.1 openSUSE-SU-2026:22125-1
openSUSE Leap 16.0 helm 3.21.3-160000.1.1 openSUSE-SU-2026:21983-1, openSUSE-SU-2026:21422-1
openSUSE Leap 16.0 ignition 2.21.0-160000.5.1 openSUSE-SU-2026:21482-1
openSUSE Leap 16.0 kubevirt1.8 1.8.4-160000.1.1 openSUSE-SU-2026:21590-1
openSUSE Leap 16.0 mcphost 0.34.0-160000.3.1 openSUSE-SU-2026:21480-1
openSUSE Leap 16.0 trivy 0.72.0-160000.2.1 openSUSE-SU-2026:21395-1
openSUSE Leap 16.0 warewulf4 4.7.0-bp160.3.1 openSUSE-SU-2026:21509-1
openSUSE Leap 16.0 yq 4.53.3-bp160.1.1 openSUSE-SU-2026:21500-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 containerd +1 2.2.5-1.amzn2023.0.2 ALAS2023-2026-2063
Amazon Linux 2023 docker 25.0.16-1.amzn2023.0.4 ALAS2023-2026-2062

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 application-gateway-kubernetes-ingress 1.7.7-6 —
Azure Linux 3 azcopy 10.25.1-7 —
Azure Linux 3 azurelinux-image-tools 1.5.0-2 —
Azure Linux 3 cert-manager 1.12.15-11 —
Azure Linux 3 cf-cli 8.7.11-8 —
Azure Linux 3 cloud-provider-kubevirt 0.5.1-6 —
Azure Linux 3 containerd2 2.2.4-6 —
Azure Linux 3 containerized-data-importer 1.62.0-7 —
Azure Linux 3 coredns 1.11.4-20 —
Azure Linux 3 cri-tools 1.32.0-7 —
Azure Linux 3 dcos-cli 1.2.0-22 —
Azure Linux 3 docker-buildx 0.14.0-16 —
Azure Linux 3 docker-cli 25.0.7-4 —
Azure Linux 3 docker-compose 2.27.0-13 —
Azure Linux 3 etcd 3.5.33-1 —
Azure Linux 3 flannel 0.24.2-29 —
Azure Linux 3 gh 2.62.0-20 —
Azure Linux 3 git-lfs 3.6.1-5 —
Azure Linux 3 ignition-flatcar 2.22.0-6 —
Azure Linux 3 influxdb 2.7.5-19 —
Azure Linux 3 jx 3.10.182-5 —
Azure Linux 3 kata-containers 3.32.0.kata0-1 —
Azure Linux 3 kata-containers-cc 3.15.0.aks0-16 —
Azure Linux 3 keda 2.14.1-16 —
Azure Linux 3 kube-vip-cloud-provider 0.0.10-7 —
Azure Linux 3 kubernetes 1.30.10-27 —
Azure Linux 3 kubevirt 1.7.1-8 —
Azure Linux 3 kured 1.15.0-6 —
Azure Linux 3 moby-containerd-cc 1.7.7-16 —
Azure Linux 3 moby-engine 25.0.3-19 —
Azure Linux 3 multus 4.0.2-10 —
Azure Linux 3 opa 0.63.0-5 —
Azure Linux 3 packer 1.9.5-18 —
Azure Linux 3 prometheus-adapter 0.12.0-7 —
Azure Linux 3 prometheus-node-exporter 1.7.0-5 —
Azure Linux 3 prometheus-process-exporter 0.8.2-5 —
Azure Linux 3 skopeo 1.14.4-12 —
Azure Linux 3 sriov-network-device-plugin 3.7.0-7 —
Azure Linux 3 telegraf 1.31.0-27 —
Azure Linux 3 vitess 19.0.4-11 —
Azure Linux 3 yq +6 No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 podman +3 7:5.8.2-9.0.1.el10_2 ELSA-2026-70201

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r65 —
Wolfi rolling act 0.2.89-r4 —
Wolfi rolling actions-runner-controller 0.14.2-r6 —
Wolfi rolling amass 5.1.1-r11 —
Wolfi rolling amazon-cloudwatch-agent 1.300071.0-r2 —
Wolfi rolling amazon-cloudwatch-agent-operator 3.6.0-r2 —
Wolfi rolling amazon-k8s-cni 1.22.4-r2 —
Wolfi rolling apisix-ingress-controller 2.1.0-r9 —
Wolfi rolling argo-cd-3.2 +1 3.2.12-r10 —
Wolfi rolling argo-cd-3.3 +1 3.3.12-r8 —
Wolfi rolling argo-cd-3.4 +1 3.4.5-r3 —
Wolfi rolling argo-workflow-executor-4.0 +1 4.0.8-r0 —
Wolfi rolling argo-workflows-3.7 +1 3.7.17-r0 —
Wolfi rolling argo-workflows-ui-4.0 4.0.11-r0 —
Wolfi rolling argocd-image-updater 1.2.2-r5 —
Wolfi rolling atlantis 0.46.0-r2 —
Wolfi rolling aws-network-policy-agent 1.4.0-r2 —
Wolfi rolling aws-otel-collector 0.49.0-r2 —
Wolfi rolling azure-service-operator 2.20.0-r4 —
Wolfi rolling azuredisk-csi-1.34 1.34.4-r9 —
Wolfi rolling azurefile-csi-1.35 1.35.6-r0 —
Wolfi rolling bento 1.19.0-r3 —
Wolfi rolling blob-csi-1.27 1.27.7-r5 —
Wolfi rolling boring-registry 0.18.0-r7 —
Wolfi rolling buildkitd 0.31.2-r2 —
Wolfi rolling caddy 2.11.4-r5 —
Wolfi rolling calicoctl-3.31 +1 3.31.6-r8 —
Wolfi rolling calicoctl-3.32 +2 3.32.1-r6 —
Wolfi rolling cargobump 0.1.1-r14 —
Wolfi rolling cerbos 0.55.0-r7 —
Wolfi rolling cert-manager-1.20 +5 1.20.3-r8 —
Wolfi rolling cert-manager-1.20-crds 1.20.3-r18 —
Wolfi rolling cert-manager-cmctl 2.5.0-r13 —
Wolfi rolling certificate-transparency 1.3.3-r22 —
Wolfi rolling certificate-transparency-trillian-ctserver 1.3.3-r16 —
Wolfi rolling cfssl +2 1.6.5-r40 —
Wolfi rolling chisel 1.11.8-r2 —
Wolfi rolling cilium-1.19 +4 1.19.6-r3 —
Wolfi rolling cilium-certgen-0.4 0.4.8-r1 —
Wolfi rolling cilium-cli 0.19.6-r2 —
Wolfi rolling cis-operator-1.4 1.4.9-r1 —
Wolfi rolling cloud-provider-aws-1.35-cloud-controller-manager 1.35.2-r9 —
Wolfi rolling cloud-provider-azure-cloud-controller-manager-1.36-compat 1.36.6-r0 —
Wolfi rolling cloud-provider-azure-cloud-node-manager-1.36 +1 1.36.3-r3 —
Wolfi rolling cloud-provider-vsphere 1.36.0-r12 —
Wolfi rolling cloudflared 2026.7.3-r0 —
Wolfi rolling cloudnative-pg +1 1.30.0-r3 —
Wolfi rolling cloudprober 0.14.3-r10 —
Wolfi rolling cluster-api-1.12-controller +3 1.12.10-r4 —
Wolfi rolling cluster-api-1.13-controller +3 1.13.4-r2 —
Wolfi rolling cluster-api-aws-controller 2.12.1-r2 —
Wolfi rolling cluster-api-azure-controller 1.26.0-r3 —
Wolfi rolling cluster-api-azure-controller-compat 1.27.0-r1 —
Wolfi rolling cluster-api-gcp-controller 1.12.0-r7 —
Wolfi rolling cluster-api-provider-vsphere 1.16.1-r8 —
Wolfi rolling cluster-autoscaler-1.35 1.35.2-r2 —
Wolfi rolling conftest 0.68.2-r8 —
Wolfi rolling conjur-cli 9.2.4-r1 —
Wolfi rolling consul-k8s-1.9 +1 1.9.10-r1 —
Wolfi rolling controller-gen 0.21.0-r5 —
Wolfi rolling cortex 1.21.1-r6 —
Wolfi rolling cosign 3.1.2-r2 —
Wolfi rolling cosign-3 3.1.2-r3 —
Wolfi rolling crictl +1 1.36.0-r9 —
Wolfi rolling crossplane-2.2 +1 2.2.4-r0 —
Wolfi rolling crossplane-provider-aws-ec2 +2 2.6.0-r4 —
Wolfi rolling crossplane-provider-aws-ec2-compat +2 2.7.0-r6 —
Wolfi rolling crossplane-provider-aws-eks +6 2.6.0-r5 —
Wolfi rolling crossplane-provider-aws-s3 +8 2.6.0-r6 —
Wolfi rolling crossplane-provider-azure-authorization 2.6.0-r10 —
Wolfi rolling crossplane-provider-azure-sql +1 2.6.0-r8 —
Wolfi rolling crossplane-provider-keycloak 2.24.0-r2 —
Wolfi rolling ctr-1 +3 1.7.34-r3 —
Wolfi rolling ctr-2 +5 2.3.3-r3 —
Wolfi rolling cue 0.17.1-r1 —
Wolfi rolling dagger 0.20.8-r13 —
Wolfi rolling dapr-daprd-1.17 1.17.11-r1 —
Wolfi rolling datadog-operator 1.28.0-r4 —
Wolfi rolling dataplaneapi 3.4.0-r6 —
Wolfi rolling dbmate 2.34.1-r2 —
Wolfi rolling descheduler 0.36.0-r8 —
Wolfi rolling dex 2.45.1-r19 —
Wolfi rolling dgraph 25.3.8-r2 —
Wolfi rolling distribution +1 3.1.1-r9 —
Wolfi rolling dkron +1 4.1.2-r0 —
Wolfi rolling docker-cli-buildx 0.35.0-r5 —
Wolfi rolling docker-compose 5.3.1-r3 —
Wolfi rolling docker-dind-compat-28 +1 28.5.2-r38 —
Wolfi rolling docker-machine-driver-harvester 1.0.6-r17 —
Wolfi rolling docker-machine-driver-linode 0.1.16-r8 —
Wolfi rolling dockerd-28 28.5.2-r37 —
Wolfi rolling dockerd-29 29.6.2-r2 —
Wolfi rolling dogstatsd-7.73 +4 7.73.3-r23 —
Wolfi rolling dogstatsd-7.77 +4 7.77.3-r23 —
Wolfi rolling dogstatsd-7.78 +4 7.78.4-r16 —
Wolfi rolling dogstatsd-7.79 +4 7.79.2-r17 —
Wolfi rolling dogstatsd-7.80 +4 7.80.4-r10 —
Wolfi rolling envconsul 0.14.0-r1 —
Wolfi rolling external-dns-0.21 0.21.0-r17 —
Wolfi rolling external-secrets-operator-2.3 2.3.0-r17 —
Wolfi rolling external-secrets-operator-2.4 2.4.1-r15 —
Wolfi rolling external-secrets-operator-2.5 2.5.0-r11 —
Wolfi rolling external-secrets-operator-2.6 +2 2.6.0-r7 —
Wolfi rolling falco-no-driver 0.44.1-r6 —
Wolfi rolling falcoctl 0.13.0-r16 —
Wolfi rolling falcosidekick 2.34.1-r6 —
Wolfi rolling ferretdb 2.7.0-r25 —
Wolfi rolling filebrowser 2.63.18-r2 —
Wolfi rolling flux-2.7 2.7.5-r29 —
Wolfi rolling flux-2.8 2.8.8-r13 —
Wolfi rolling flux-2.9 2.9.3-r1 —
Wolfi rolling flux-helm-controller 1.6.3-r0 —
Wolfi rolling flux-image-automation-controller 1.2.3-r2 —
Wolfi rolling flux-notification-controller 1.9.2-r2 —
Wolfi rolling flux-source-controller 1.9.3-r2 —
Wolfi rolling flyte 1.16.8-r3 —
Wolfi rolling frp 0.70.0-r1 —
Wolfi rolling fuse-overlayfs-snapshotter 2.1.7-r21 —
Wolfi rolling gh 2.96.0-r3 —
Wolfi rolling git-lfs 3.7.1-r18 —
Wolfi rolling gitaly-19.0 +4 19.0.4-r2 —
Wolfi rolling gitaly-19.1 +1 19.1.3-r1 —
Wolfi rolling gitea 1.27.0-r3 —
Wolfi rolling gitlab-kas-19.1 +1 19.1.2-r3 —
Wolfi rolling gitlab-kas-19.2 +2 19.2.0-r2 —
Wolfi rolling gitlab-pages-19.1 19.1.2-r4 —
Wolfi rolling gitlab-runner-19.0 +1 19.0.2-r3 —
Wolfi rolling gitlab-runner-19.1 +1 19.1.1-r4 —
Wolfi rolling gitness 3.3.0-r28 —
Wolfi rolling gitsign 0.16.1-r7 —
Wolfi rolling glow 2.1.2-r6 —
Wolfi rolling go-discover 0_git20260720-r2 —
Wolfi rolling go-licenses 2.0.1-r12 —
Wolfi rolling goreleaser +4 2.17.0-r3 —
Wolfi rolling gotestsum 1.13.0-r12 —
Wolfi rolling gptscript 0.9.9-r440 —
Wolfi rolling grafana-12.3 12.3.9-r2 —
Wolfi rolling grafana-12.4 12.4.6-r2 —
Wolfi rolling grafana-13.0 13.0.4-r2 —
Wolfi rolling grafana-alloy 1.18.0-r2 —
Wolfi rolling grafana-mimir-3.0 +2 3.0.8-r2 —
Wolfi rolling grafana-mimir-3.1 +3 3.1.4-r2 —
Wolfi rolling grafana-operator 5.24.0-r2 —
Wolfi rolling grafana-pyroscope-1.19 1.19.3-r11 —
Wolfi rolling grafana-pyroscope-2.0 2.0.6-r2 —
Wolfi rolling guac +3 1.1.0-r24 —
Wolfi rolling harbor-2.14 +3 2.14.4-r5 —
Wolfi rolling harbor-cli 0.0.24-r2 —
Wolfi rolling harbor-scanner-trivy 0.38.0-r3 —
Wolfi rolling hcloud 1.66.0-r2 —
Wolfi rolling helm-3 3.21.3-r2 —
Wolfi rolling helm-operator 1.42.3-r5 —
Wolfi rolling hubble 1.19.4-r9 —
Wolfi rolling hubble-ui-backend 0.13.5-r13 —
Wolfi rolling hugo 0.164.0-r3 —
Wolfi rolling hugo-extended 0.164.0-r2 —
Wolfi rolling hydra 26.2.0-r18 —
Wolfi rolling ipfs-cluster 1.1.6-r10 —
Wolfi rolling istioctl-1.29 1.29.7-r3 —
Wolfi rolling jitsucom-bulker-bulker +2 2.11.913-r39 —
Wolfi rolling juicefs-1.3 1.3.1-r25 —
Wolfi rolling k3d 5.9.0-r5 —
Wolfi rolling k3s +2 1.36.2.1-r6 —
Wolfi rolling k3s-1.32 +12 No fix yet —
Wolfi rolling k3s-1.34 +2 1.34.9.1-r5 —
Wolfi rolling k3s-1.35 +2 1.35.6.1-r6 —
Wolfi rolling k6 2.1.0-r3 —
Wolfi rolling k8s_gateway 1.8.2-r4 —
Wolfi rolling k8sgpt 0.4.36-r3 —
Wolfi rolling k8ssandra-client 0.8.14-r4 —
Wolfi rolling k9s 0.51.0-r8 —
Wolfi rolling kaf 0.2.14-r9 —
Wolfi rolling kafka-proxy 0.4.3-r26 —
Wolfi rolling kafka_exporter 1.9.0-r58 —
Wolfi rolling kapp-controller 0.60.4-r2 —
Wolfi rolling karpenter-1.11 1.11.3-r5 —
Wolfi rolling karpenter-1.12 1.12.2-r1 —
Wolfi rolling keda-2.19 +1 2.19.0-r22 —
Wolfi rolling keda-2.20 +1 2.20.1-r5 —
Wolfi rolling kiali 2.29.0-r2 —
Wolfi rolling kine 0.16.3-r5 —
Wolfi rolling ko 0.19.1-r2 —
Wolfi rolling kots 1.130.9-r1 —
Wolfi rolling kube-arangodb-1.4 1.4.4-r2 —
Wolfi rolling kube-bench 0.15.0-r16 —
Wolfi rolling kube-fluentd-operator 1.18.2-r76 —
Wolfi rolling kube-metrics-adapter 0.2.9-r12 —
Wolfi rolling kube-rbac-proxy 0.22.1-r3 —
Wolfi rolling kubeadm-1.34 +7 1.34.10-r3 —
Wolfi rolling kubeadm-1.35 +9 1.35.7-r3 —
Wolfi rolling kubeadm-1.36 +7 1.36.3-r2 —
Wolfi rolling kubebuilder 4.15.0-r3 —
Wolfi rolling kubectl-1.33 1.33.13-r9 —
Wolfi rolling kubectl-bash-completion-1.35 +3 1.35.8-r6 —
Wolfi rolling kubernetes-csi-external-attacher 4.12.0-r9 —
Wolfi rolling kubernetes-csi-external-health-monitor 0.18.0-r9 —
Wolfi rolling kubernetes-csi-external-provisioner 6.3.0-r4 —
Wolfi rolling kubernetes-csi-external-resizer 2.2.1-r12 —
Wolfi rolling kubernetes-csi-external-snapshotter-8.5 +1 8.5.0-r22 —
Wolfi rolling kubernetes-csi-external-snapshotter-8.6 +1 8.6.0-r7 —
Wolfi rolling kubernetes-dashboard 7.14.0-r13 —
Wolfi rolling kubernetes-dashboard-api 1.14.0-r16 —
Wolfi rolling kubernetes-dashboard-auth 1.4.0-r19 —
Wolfi rolling kubernetes-dashboard-web 1.7.0-r28 —
Wolfi rolling kubescape 4.0.11-r2 —
Wolfi rolling kubescape-operator 0.2.159-r2 —
Wolfi rolling kubevela-vela-cli +1 1.11.0-r2 —
Wolfi rolling kubo 0.42.0-r6 —
Wolfi rolling kubo-compat 0.43.1-r0 —
Wolfi rolling kuma-cp-2.12 +2 2.12.3-r19 —
Wolfi rolling kuma-cp-2.13 +2 2.13.9-r2 —
Wolfi rolling kustomize 5.8.1-r10 —
Wolfi rolling kyverno-1.17 1.17.2-r35 —
Wolfi rolling kyverno-1.18 +6 1.18.2-r2 —
Wolfi rolling kyverno-cli-1.17 +5 1.17.2-r23 —
Wolfi rolling kyverno-notation-aws 1.1-r70 —
Wolfi rolling lazygit 0.63.1-r1 —
Wolfi rolling loki-3.6 +3 3.6.13-r0 —
Wolfi rolling loki-3.7 +3 3.7.4-r1 —
Wolfi rolling maru 0.6.0-r20 —
Wolfi rolling mattermost-11.1 11.10.0-r0 —
Wolfi rolling mattermost-11.5 11.5.7-r7 —
Wolfi rolling mattermost-11.6 11.6.6-r9 —
Wolfi rolling mattermost-11.6-compat 11.6.6-r15 —
Wolfi rolling mattermost-11.7 11.7.7-r2 —
Wolfi rolling mc 0.20250813.083541-r18 —
Wolfi rolling mcp-grafana 0.17.2-r2 —
Wolfi rolling metrics-server 0.9.0-r2 —
Wolfi rolling metrics-server-compat 0.9.0-r11 —
Wolfi rolling migrate 4.19.1-r23 —
Wolfi rolling minio 0.20260717.120751-r3 —
Wolfi rolling minio-object-browser 2.0.4-r21 —
Wolfi rolling mods 1.8.1-r17 —
Wolfi rolling mongo-tools 100.17.0-r7 —
Wolfi rolling mongodb-kubernetes-operator 0.13.0-r20 —
Wolfi rolling mps-control-daemon +2 0.19.3-r5 —
Wolfi rolling nats 0.4.0-r4 —
Wolfi rolling nerdctl 2.3.5-r2 —
Wolfi rolling neuvector-sigstore-interface 0_git20260617-r7 —
Wolfi rolling newrelic-nri-kube-events 2.21.1-r1 —
Wolfi rolling nfpm 2.47.0-r3 —
Wolfi rolling nova 3.12.0-r9 —
Wolfi rolling nri-kafka +1 3.21.0-r1 —
Wolfi rolling nri-mysql 1.23.2-r1 —
Wolfi rolling nsc 2.15.0-r4 —
Wolfi rolling nuclei 3.11.0-r3 —
Wolfi rolling omnibump 0.23.0-r1 —
Wolfi rolling op-geth +4 1.101702.2-r6 —
Wolfi rolling op-geth-compat 1.101702.3-r3 —
Wolfi rolling opa +1 1.18.2-r4 —
Wolfi rolling openbao 2.6.1-r0 —
Wolfi rolling opencost 1.121.0-r2 —
Wolfi rolling openfga +1 1.18.1-r4 —
Wolfi rolling opentelemetry-operator-otel-allocator 0.156.0-r2 —
Wolfi rolling opentofu-1.11 1.11.13-r2 —
Wolfi rolling opentofu-1.12 1.12.5-r2 —
Wolfi rolling opentofu-1.12-compat 1.12.6-r6 —
Wolfi rolling opentofu-1.9 1.9.4-r29 —
Wolfi rolling osv-scanner 2.4.0-r4 —
Wolfi rolling otel-cli 0.4.5-r28 —
Wolfi rolling pdfcpu 0.13.0-r4 —
Wolfi rolling percona-server-mongodb-operator +1 1.23.0-r1 —
Wolfi rolling pg_timetable 7.0.0-r2 —
Wolfi rolling polaris 10.2.1-r1 —
Wolfi rolling policy-controller +1 0.15.1-r20 —
Wolfi rolling portieris 0.14.2-r3 —
Wolfi rolling prometheus-3.10 3.10.0-r23 —
Wolfi rolling prometheus-3.11 3.11.3-r17 —
Wolfi rolling prometheus-3.12 3.12.0-r13 —
Wolfi rolling prometheus-alertmanager 0.33.1-r4 —
Wolfi rolling prometheus-operator +2 0.92.1-r4 —
Wolfi rolling prometheus-operator-iamguarded-compat 0.94.0-r0 —
Wolfi rolling promxy 0.0.96-r4 —
Wolfi rolling pulumi-kubernetes-operator 2.8.0-r2 —
Wolfi rolling pulumi-language-dotnet 3.107.3-r3 —
Wolfi rolling pulumi-language-java 1.33.0-r0 —
Wolfi rolling pulumi-language-yaml 1.37.0-r3 —
Wolfi rolling q 0.19.12-r13 —
Wolfi rolling rancher-2.13 2.13.7-r4 —
Wolfi rolling rancher-2.14 +1 2.14.3-r5 —
Wolfi rolling rancher-agent-2.13 2.13.7-r5 —
Wolfi rolling rancher-helm-3 3.20.0-r19 —
Wolfi rolling rancher-machine 0.15.0.145-r3 —
Wolfi rolling rancher-system-agent 0.15.0-r1 —
Wolfi rolling rancher-system-upgrade-controller 0.20.1-r1 —
Wolfi rolling rancher-telemetry 0.6.2-r23 —
Wolfi rolling ratify 1.4.3-r3 —
Wolfi rolling rclone 1.74.4-r2 —
Wolfi rolling redis-operator 0.26.0-r2 —
Wolfi rolling rekor-cli +2 1.5.3-r3 —
Wolfi rolling rke2-cloud-provider 1.36.1-r3 —
Wolfi rolling rook-1.19 +1 1.19.7-r4 —
Wolfi rolling ruby3.3-fluent-plugin-grafana-loki-3.7 3.7.7-r4 —
Wolfi rolling sbomqs 2.0.11-r1 —
Wolfi rolling scorecard 5.5.0-r13 —
Wolfi rolling sftpgo-plugin-eventsearch 1.0.24-r3 —
Wolfi rolling sftpgo-plugin-eventstore 1.0.25-r3 —
Wolfi rolling skaffold 2.24.0-r0 —
Wolfi rolling slsa-verifier 2.7.1-r27 —
Wolfi rolling smokescreen 0_git20260706-r2 —
Wolfi rolling snyk-cli 1.1306.2-r2 —
Wolfi rolling sonobuoy 0.57.5-r2 —
Wolfi rolling spicedb 1.56.0-r0 —
Wolfi rolling spicedb-operator 1.27.0-r0 —
Wolfi rolling spire-agent +2 1.15.2-r2 —
Wolfi rolling splunk-otel-collector +1 0.157.0-r0 —
Wolfi rolling splunk-otel-collector-compat 0.160.0-r0 —
Wolfi rolling spqr +2 3.0.0-r3 —
Wolfi rolling sql_exporter 0.24.3-r2 —
Wolfi rolling src 7.6.0-r0 —
Wolfi rolling steampipe 2.4.4-r11 —
Wolfi rolling step 0.30.6-r4 —
Wolfi rolling step-ca 0.30.2-r17 —
Wolfi rolling step-issuer 0.12.0-r5 —
Wolfi rolling step-issuer-compat 0.12.0-r12 —
Wolfi rolling stern 1.34.0-r6 —
Wolfi rolling tailscale +1 1.98.9-r2 —
Wolfi rolling tekton-chains 0.28.1-r2 —
Wolfi rolling telegraf-1.38 1.38.4-r13 —
Wolfi rolling teleport-18.6 +2 18.6.8-r35 —
Wolfi rolling tempo-2.10 +2 2.10.7-r5 —
Wolfi rolling tempo-3.0 +2 3.0.2-r5 —
Wolfi rolling temporal 1.8.1-r2 —
Wolfi rolling temporal-ui-server 2.52.1-r3 —
Wolfi rolling terraform 1.5.7-r54 —
Wolfi rolling terraform-docs 0.24.0-r6 —
Wolfi rolling terraform-mcp-server 1.1.0-r2 —
Wolfi rolling terraform-provider-acme 2.48.3-r2 —
Wolfi rolling terraform-provider-azuread 3.9.0-r2 —
Wolfi rolling terraform-provider-google 7.41.0-r2 —
Wolfi rolling terraform-provider-grafana 4.41.0-r2 —
Wolfi rolling terraform-provider-kubernetes 3.2.1-r3 —
Wolfi rolling terraform-provider-pagerduty 3.34.0-r3 —
Wolfi rolling terraform-provider-random 3.9.0-r8 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r24 —
Wolfi rolling terraform-provider-time 0.14.0-r6 —
Wolfi rolling terraform-provider-tls 4.3.0-r10 —
Wolfi rolling tfsec 1.28.14-r42 —
Wolfi rolling thanos 0.42.2-r2 —
Wolfi rolling tigera-operator-1.42 1.42.4-r4 —
Wolfi rolling timescaledb-parallel-copy 0.13.0-r6 —
Wolfi rolling timestamp-authority-cli +1 2.1.3-r4 —
Wolfi rolling timoni 0.27.1-r0 —
Wolfi rolling tkn 0.45.0-r12 —
Wolfi rolling tofu-controller +1 0.16.4-r7 —
Wolfi rolling traefik-3.6 3.6.25-r0 —
Wolfi rolling traefik-3.7 3.7.9-r0 —
Wolfi rolling trillian-logserver +1 1.7.3-r13 —
Wolfi rolling trino 483-r1 —
Wolfi rolling trino-plugin-oracle +3 483-r7 —
Wolfi rolling trivy 0.72.0-r6 —
Wolfi rolling trivy-operator 0.30.1-r28 —
Wolfi rolling trufflehog 3.96.0-r0 —
Wolfi rolling tw +1 0.0.50-r4 —
Wolfi rolling vault-benchmark 0.4.0-r22 —
Wolfi rolling vault-env 1.23.0-r6 —
Wolfi rolling vault-secrets-webhook 1.23.1-r5 —
Wolfi rolling vcluster +2 0.36.0-r2 —
Wolfi rolling velero-restore-helper 1.18.2-r10 —
Wolfi rolling verticadb-operator 25.4.0.0-r22 —
Wolfi rolling vexctl 0.4.4-r3 —
Wolfi rolling victoriametrics-operator 0.73.1-r3 —
Wolfi rolling wal-g-pg 3.0.8-r21 —
Wolfi rolling weaviate 1.38.6-r2 —
Wolfi rolling wgcf 2.2.31-r5 —
Wolfi rolling witness 0.12.0-r2 —
Wolfi rolling wolfictl 0.39.22-r2 —
Wolfi rolling yq 4.53.3-r3 —
Wolfi rolling zarf 0.82.0-r1 —
Wolfi rolling zot 2.1.18-r4 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/text < 0.39.0 0.39.0 GO-2026-5970

Advisories 50

References