Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-56860 BIT-golang-2026-56860EUVD-2026-58515GHSA-25mv-j2qr-v5jqGO-2026-6218

Avoid quadratic complexity in resolvePath in net/url

Published Aug 13, 2026 · Updated Aug 14, 2026 · Assigned by Go

Vendor: Go standard library Product: net/url Package: aactl Package: addon-resizer Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-operator Package: amazon-k8s-cni Package: amazon-k8s-cni-init Package: argo-cd-3.2 Package: argo-cd-3.2-compat Package: argo-cd-3.3-compat Package: argo-cd-3.4 Package: argo-cd-3.4-compat Package: argo-rollouts Package: argo-workflow-controller-4.0 Package: argo-workflow-executor-3.7 Package: argo-workflow-executor-4.0 Package: argo-workflows-3.7 Package: argo-workflows-4.0 Package: argo-workflows-ui-4.0 Package: argocd-image-updater Package: atlantis Package: authservice Package: aws-eks-pod-identity-agent Package: aws-flb-firehose Package: aws-load-balancer-controller Package: aws-nuke Package: aws-otel-collector Package: aws-otel-collector-healthcheck Package: aws-privateca-issuer Package: aws-signer-notation-plugin Package: aws-sigv4-proxy Package: azure-service-operator Package: azure-workload-identity-webhook Package: azurefile-csi-1.35 Package: bank-vaults Package: bank-vaults-template Package: bazelisk Package: bento Package: blob-csi-1.27 Package: buf Package: buildah Package: buildctl Package: buildkitd Package: cadvisor Package: cadvisor-compat Package: calico-felix-3.32 Package: calico-goldmane-3.31 Package: calico-goldmane-3.32 Package: calico-key-cert-provisioner-3.31 Package: calico-key-cert-provisioner-3.32 Package: calico-typhad-3.32 Package: cass-operator Package: cerbos Package: cert-exporter Package: cert-manager-1.20 Package: cert-manager-1.20-crds Package: cert-manager-acmesolver-1.20 Package: cert-manager-cainjector-1.20 Package: cert-manager-cmctl Package: cert-manager-controller-1.20 Package: cert-manager-csi-driver Package: cert-manager-istio-csr Package: cert-manager-startupapicheck-1.20 Package: cert-manager-webhook-1.20 Package: cert-manager-webhook-pdns Package: certificate-transparency Package: certificate-transparency-trillian-ctserver Package: cfssl Package: chart-testing Package: chisel Package: cilium-1.19 Package: cilium-1.19-clustermesh-apiserver Package: cilium-1.19-envoy Package: cilium-1.19-hubble-relay Package: cilium-1.19-operator-aws Package: cilium-1.19-operator-generic Package: cilium-certgen-0.4 Package: cilium-cli Package: cis-operator-1.4 Package: cloud-provider-aws-1.35-cloud-controller-manager Package: cloud-provider-aws-1.35-ecr-credential-provider Package: cloud-provider-aws-1.36-cloud-controller-manager Package: cloud-provider-aws-1.36-ecr-credential-provider Package: cloud-provider-azure-cloud-controller-manager-1.35 Package: cloud-provider-azure-cloud-controller-manager-1.36 Package: cloud-provider-azure-cloud-controller-manager-1.36-compat Package: cloud-provider-azure-cloud-node-manager-1.35 Package: cloud-provider-azure-cloud-node-manager-1.36 Package: cloud-provider-gcp-cloud-controller-manager Package: cloud-provider-vsphere Package: cloud-sql-proxy-2.16 Package: cloud-sql-proxy-2.21 Package: cloudflared Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cloudprober Package: cluster-api-1.12-clusterctl Package: cluster-api-1.13-capd-manager Package: cluster-api-1.13-clusterctl Package: cluster-api-1.13-controller Package: cluster-api-1.13-controller-compat Package: cluster-api-1.13-kubeadm-bootstrap-controller Package: cluster-api-1.13-kubeadm-control-plane-controller Package: cluster-api-azure-controller Package: cluster-api-azure-controller-compat Package: cluster-api-ipam-provider-in-cluster Package: cluster-proportional-autoscaler Package: cluster-proportional-autoscaler-compat Package: cni-plugins Package: cni-plugins-all Package: cni-plugins-aws-k8s-compat Package: cni-plugins-dhcp Package: cni-plugins-ipam Package: configmap-reload Package: confluent-cp-docker-utils Package: conftest Package: container-object-storage-interface-controller Package: container-object-storage-interface-sidecar Package: containerd-1 Package: containerd-2 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-stress-1 Package: containerd-stress-2 Package: controller-gen Package: coredns-1.14 Package: cortex Package: cosign-3 Package: crane Package: crane-cov Package: cri-tools Package: crictl Package: critest Package: croc Package: crossplane-2.2 Package: crossplane-2.2-crank Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-ec2-compat Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-route53-compat Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-sns Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-family-aws Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: ctop Package: ctr-1 Package: ctr-2 Package: cue Package: dagdotdev Package: dapr-daprd-1.17 Package: dapr-injector-1.17 Package: dapr-operator-1.17 Package: dapr-placement-1.17 Package: dapr-scheduler-1.17 Package: dapr-sentry-1.17 Package: datadog-agent-7.77 Package: datadog-agent-7.77-fakeintake Package: datadog-agent-7.77-full Package: datadog-agent-7.78 Package: datadog-agent-7.78-fakeintake Package: datadog-agent-7.78-full Package: datadog-agent-7.79 Package: datadog-agent-7.79-fakeintake Package: datadog-agent-7.79-full Package: datadog-agent-7.80 Package: datadog-agent-7.80-fakeintake Package: datadog-agent-7.80-full Package: datadog-agent-7.81 Package: datadog-agent-7.81-fakeintake Package: datadog-agent-7.81-full Package: datadog-cluster-agent-7.77 Package: datadog-cluster-agent-7.78 Package: datadog-cluster-agent-7.79 Package: datadog-cluster-agent-7.80 Package: datadog-cluster-agent-7.81 Package: dataplaneapi Package: dbmate Package: delve Package: descheduler Package: dex Package: dgraph Package: direnv Package: distribution Package: dive Package: docker-credential-acr-env Package: docker-credential-ecr-login Package: docker-machine-driver-harvester Package: docker-machine-driver-linode Package: dockerd-28 Package: dockerize Package: dogstatsd-7.77 Package: dogstatsd-7.78 Package: dogstatsd-7.79 Package: dogstatsd-7.80 Package: dogstatsd-7.81 Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: emissary Package: emissary-apiext Package: envconsul Package: esbuild Package: external-dns-0.21 Package: external-secrets-operator-2.3 Package: external-secrets-operator-2.4 Package: external-secrets-operator-2.5 Package: external-secrets-operator-2.6 Package: extism Package: falco-exporter Package: falco-no-driver Package: falcoctl Package: falcosidekick Package: ferretdb Package: flannel Package: fluent-operator Package: flux-2.8 Package: flux-2.9 Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: flux-kustomize-controller-iamguarded-compat Package: flux-notification-controller Package: flux-source-controller Package: flyte Package: frp Package: fscrypt Package: gatekeeper-3.22 Package: gatekeeper-3.22-gator Package: gcp-compute-persistent-disk-csi-driver-1.25 Package: gcp-compute-persistent-disk-csi-driver-1.25-compat Package: gh Package: ghaudit Package: git-credential-oauth Package: git-lfs Package: gitaly-19.0 Package: gitaly-backup-19.0 Package: github-mcp-server Package: gitlab-agent-19.0 Package: gitlab-agent-19.2 Package: gitlab-docker-machine-19.0 Package: gitlab-docker-machine-19.1 Package: gitlab-kas-19.0 Package: gitlab-kas-19.2 Package: gitlab-pages-19.0 Package: gitlab-pages-19.1 Package: gitlab-runner-19.0 Package: gitlab-runner-19.1 Package: gitlab-runner-helper-19.0 Package: gitlab-runner-helper-19.1 Package: gitleaks Package: gitness Package: gke-gcloud-auth-plugin Package: glab Package: go Package: go-discover Package: go-licenses Package: gobuster Package: gogatekeeper Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golang-1.23 Package: golang-1.24 Package: golang-1.24 Package: golang-1.25 Package: golang-1.26 Package: golang-1.27 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: golangci-lint Package: gostatsd Package: gpu-feature-discovery Package: grafana-12.4 Package: grafana-13.0 Package: grafana-agent-operator Package: grafana-alloy Package: grafana-image-renderer Package: grafana-mimir-3.0 Package: grafana-mimir-3.0-metaconvert-3.0 Package: grafana-mimir-3.0-mimirtool-3.0 Package: grafana-mimir-3.0-query-tee-3.0 Package: grafana-mimir-3.1 Package: grafana-mimir-3.1-metaconvert-3.1 Package: grafana-mimir-3.1-mimirtool-3.1 Package: grafana-mimir-3.1-query-tee-3.1 Package: grafana-operator Package: grafana-pyroscope-2.0 Package: grafana-rollout-operator Package: grpcurl Package: grype Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: haproxy-ingress-0.16 Package: harbor-2.14 Package: harbor-2.14-exporter Package: harbor-2.14-jobservice Package: harbor-2.14-registryctl Package: harbor-cli Package: harbor-registry Package: harbor-scanner-trivy Package: hcloud Package: helm-3 Package: helm-mapkubeapis Package: helm-operator Package: helm-set-status Package: hey Package: hubble Package: hubble-ui-backend Package: hydra Package: infinispan-operator Package: influx Package: ingress-nginx-controller-1.15 Package: ingress-nginx-custom-error-pages-1.15 Package: ip-masq-agent Package: ipfs-cluster Package: istio-cni-1.29 Package: istio-install-cni-1.29 Package: istio-pilot-agent-1.29 Package: istio-pilot-discovery-1.29 Package: istioctl-1.29 Package: jaeger-operator Package: juicefs-csi-driver Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s Package: k3s-1.32 Package: k3s-1.34 Package: k3s-multicall Package: k3s-multicall-1.32 Package: k3s-multicall-1.34 Package: k3s-static Package: k3s-static-1.32 Package: k3s-static-1.34 Package: k6 Package: k8s_gateway Package: k8sgpt Package: k8ssandra-client Package: k8ssandra-operator Package: k9s Package: kaf Package: kapp Package: kapp-controller Package: kargo-1.10 Package: karma Package: karpenter-1.11 Package: katib-controller Package: katib-db-manager Package: katib-file-metricscollector Package: katib-suggestion-goptuna Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperopt Package: kbld Package: keda-2.19 Package: keda-2.19-admission-webhooks Package: keda-2.19-metrics-apiserver Package: keda-2.20 Package: keda-2.20-admission-webhooks Package: keda-2.20-metrics-apiserver Package: kind Package: kine Package: kitty Package: knative-client Package: knative-eventing-1.21-jobsink Package: knative-eventing-1.21-webhook Package: knative-eventing-1.22-channel-controller Package: knative-eventing-1.22-channel-dispatcher Package: knative-eventing-1.22-controller Package: knative-eventing-1.22-filter Package: knative-eventing-1.22-ingress Package: knative-eventing-1.22-jobsink Package: knative-eventing-1.22-mtchannel-broker Package: knative-eventing-1.22-webhook Package: knative-operator-1.21 Package: knative-operator-1.21-webhook Package: knative-operator-1.22 Package: knative-operator-1.22-compat Package: knative-operator-1.22-webhook Package: knative-serving-1.21-activator Package: knative-serving-1.21-autoscaler Package: knative-serving-1.21-autoscaler-hpa Package: knative-serving-1.21-cleanup Package: knative-serving-1.21-controller Package: knative-serving-1.21-queue Package: knative-serving-1.21-webhook Package: knative-serving-1.22-activator Package: knative-serving-1.22-autoscaler Package: knative-serving-1.22-autoscaler-hpa Package: knative-serving-1.22-cleanup Package: knative-serving-1.22-controller Package: knative-serving-1.22-controller-compat Package: knative-serving-1.22-queue Package: knative-serving-1.22-webhook Package: knative-serving-1.22-webhook-compat Package: ko Package: krane Package: kratos Package: kserve Package: kserve-agent Package: kserve-localmodel Package: kserve-manager Package: kserve-modelmesh-serving Package: kserve-qpext Package: kserve-rest-proxy Package: kserve-router Package: kserve-storage-controller Package: kube-apiserver-1.35 Package: kube-apiserver-1.36 Package: kube-bench Package: kube-controller-manager-1.35 Package: kube-controller-manager-1.36 Package: kube-fluentd-operator Package: kube-metrics-adapter Package: kube-proxy-1.35 Package: kube-proxy-1.35-default-compat Package: kube-proxy-1.36 Package: kube-rbac-proxy Package: kube-scheduler-1.35 Package: kube-scheduler-1.35-default-compat Package: kube-scheduler-1.36 Package: kube-vip Package: kube-webhook-certgen-1.15 Package: kubeadm-1.35 Package: kubeadm-1.36 Package: kubebuilder Package: kubectl-1.33 Package: kubectl-1.35 Package: kubectl-1.36 Package: kubectl-argo-rollouts Package: kubectl-bash-completion-1.35 Package: kubeflow-access-management Package: kubeflow-admission-webhook Package: kubeflow-notebook-controller Package: kubeflow-pipelines-apiserver Package: kubeflow-profile-controller Package: kubeflow-pvcviewer-controller Package: kubeflow-tensorboard-controller Package: kubelet-1.35 Package: kubelet-1.36 Package: kubelet-csr-approver Package: kuberay-operator Package: kuberlr Package: kubernetes-1.35 Package: kubernetes-1.36 Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-external-health-monitor Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-external-snapshot-controller-8.6 Package: kubernetes-csi-external-snapshotter-8.6 Package: kubernetes-csi-node-driver-registrar-2.16 Package: kubernetes-csi-node-driver-registrar-2.17 Package: kubernetes-csi-node-driver-registrar-2.17-compat Package: kubernetes-dashboard-api Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-web Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubernetes-pause-compat-1.35 Package: kubernetes-replicator Package: kubescape Package: kubescape-operator Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubewatch Package: kubo Package: kubo-compat Package: kuma-cni-2.13 Package: kuma-coredns-1.14 Package: kuma-cp-2.13 Package: kuma-dp-2.13 Package: kuma-install-cni-2.13 Package: kumactl-2.13 Package: kustomize Package: kwok Package: kwokctl Package: kyverno-1.17 Package: kyverno-1.18 Package: kyverno-background-controller-1.17 Package: kyverno-background-controller-1.18 Package: kyverno-cleanup-controller-1.17 Package: kyverno-cleanup-controller-1.18 Package: kyverno-cli-1.17 Package: kyverno-cli-1.18 Package: kyverno-init-container-1.17 Package: kyverno-init-container-1.18 Package: kyverno-notation-aws Package: kyverno-policy-reporter Package: kyverno-readiness-checker-1.17 Package: kyverno-readiness-checker-1.18 Package: kyverno-reports-controller-1.17 Package: kyverno-reports-controller-1.18 Package: lazydocker Package: lazygit Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: local-volume-node-cleanup Package: local-volume-node-cleanup-compat Package: logstash-exporter Package: loki-3.6 Package: loki-3.6-logcli Package: loki-3.6-loki-canary Package: loki-3.6-promtail Package: lvm-driver Package: mailpit Package: malcontent Package: manifest-tool Package: mariadb-operator Package: maru Package: mattermost-11.1 Package: mattermost-11.7 Package: mcp-grafana Package: melange Package: mesosphere-vsphere-csi-driver Package: mesosphere-vsphere-csi-syncer Package: metallb Package: metallb-controller Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metrics-agent Package: metrics-server Package: metrics-server-compat Package: migrate Package: minio Package: minio-object-browser Package: mongo-tools Package: mongodb-kubernetes-operator Package: mongodb-kubernetes-operator-compat Package: mongodb-kubernetes-operator-readinessprobe Package: mongodb-kubernetes-operator-version-upgrade-post-start-hook Package: mongodb-kubernetes-operator-version-upgrade-post-start-hook-compat Package: mountpoint-s3-csi-driver-2.5 Package: mps-control-daemon Package: multus-cni Package: nats Package: nats-top Package: net-kourier-1.21 Package: neuvector-dbgen Package: newrelic-fluent-bit-output Package: newrelic-fluent-bit-output-compat Package: newrelic-infra-operator Package: newrelic-nri-statsd Package: nfpm Package: nfs-subdir-external-provisioner Package: nginx-prometheus-exporter Package: no-docs-check Package: node-feature-discovery-0.18 Package: nodetaint Package: nova Package: nri-apache Package: nri-consul Package: nri-couchbase Package: nri-elasticsearch Package: nri-f5 Package: nri-haproxy Package: nri-jmx Package: nri-jmx-jdk11 Package: nri-kubernetes Package: nri-mssql Package: nri-nginx Package: nri-prometheus Package: nri-rabbitmq Package: nsc Package: nuclei Package: nvidia-device-plugin Package: oauth2-proxy Package: octo-sts Package: octo-sts-webhook Package: ollama Package: op-geth Package: op-geth-abigen Package: op-geth-clef Package: op-geth-devp2p Package: op-geth-evm Package: opa Package: openbao Package: openbao-k8s Package: opencost Package: openfga Package: opensearch-k8s-operator Package: opentelemetry-collector Package: opentelemetry-collector-contrib Package: opentelemetry-collector-ocb Package: opentofu-1.11 Package: opentofu-1.12 Package: opentofu-1.9 Package: osv-scanner Package: otel-cli Package: pdfcpu Package: percona-server-mongodb-operator Package: percona-server-mongodb-operator-mongodb-healthcheck Package: pg_timetable Package: pg_user Package: pgpool2_exporter Package: php-fpm_exporter Package: pinact Package: pluto Package: podcli Package: podinfo Package: podman-6.0 Package: polaris Package: policy-controller Package: policy-controller-tester Package: portieris Package: postgres-operator Package: prometheus-3.10 Package: prometheus-3.11 Package: prometheus-3.9 Package: prometheus-admission-webhook Package: prometheus-alertmanager Package: prometheus-config-reloader Package: prometheus-operator Package: prometheus-operator-iamguarded-compat Package: pulumi-kubernetes-operator Package: pulumi-language-java Package: pulumi-language-yaml Package: pvc-autoresizer Package: q Package: rabbitmq-default-user-credential-updater Package: rabbitmq-messaging-topology-operator Package: rabbitmq-messaging-topology-operator-iamguarded-compat Package: rancher-2.14 Package: rancher-agent-2.13 Package: rancher-agent-2.14 Package: rancher-fleet Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-helm-3 Package: rancher-loglevel Package: rancher-machine Package: rancher-system-agent Package: rancher-system-upgrade-controller Package: rancher-telemetry Package: rancher-webhook-0.10 Package: ratify Package: ratify-licensechecker Package: ratify-licensechecker-compat Package: ratify-sbom Package: ratify-schemavalidator Package: ratify-vulnerabilityreport Package: rclone Package: redis-operator Package: regclient-regbot Package: regclient-regctl Package: regclient-regsync Package: rekor-backfill-index Package: rekor-cli Package: renovate Package: restic Package: rootlesskit Package: rqlite Package: runc Package: runc-1.4 Package: s5cmd Package: sbom-convert Package: sbomqs Package: scorecard Package: sealed-secrets Package: sealed-secrets-kubeseal Package: seaweedfs Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: sftpgo Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-geoipfilter Package: sftpgo-plugin-pubsub Package: sigstore-scaffolding-rekor-createsecret Package: skaffold Package: skopeo Package: slsa-verifier Package: smarter-device-manager Package: smokescreen Package: sonobuoy Package: spark-operator Package: speedtest-go Package: spegel Package: spicedb-operator Package: spiffe-helper Package: spire-agent Package: spire-controller-manager Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: splunk-otel-collector-compat Package: sql_exporter Package: src Package: sriov-network-device-plugin Package: stakater-reloader Package: stdlib Package: steampipe Package: step Package: step-issuer Package: step-issuer-compat Package: step-kms-plugin Package: stern Package: swagger Package: syft Package: tailscale Package: tailscale-k8s-operator Package: task Package: tekton-chains Package: tekton-pipelines-controller-1.12 Package: tekton-pipelines-entrypoint-1.12 Package: tekton-pipelines-events-1.12 Package: tekton-pipelines-resolvers-1.11 Package: tekton-pipelines-resolvers-1.12 Package: tekton-pipelines-sidecarlogresults-1.12 Package: tekton-pipelines-webhook-1.11 Package: tekton-pipelines-webhook-1.12 Package: tempo-3.0 Package: tempo-3.0-vulture Package: temporal Package: terraform Package: terraform-docs Package: terraform-mcp-server Package: terraform-provider-acme Package: terraform-provider-azapi Package: terraform-provider-azuread Package: terraform-provider-azurerm Package: terraform-provider-google Package: terraform-provider-grafana Package: terraform-provider-kubernetes Package: terraform-provider-sendgrid Package: terraform-provider-tls Package: terragrunt Package: tetra Package: tfsec Package: thanos-operator Package: timestamp-authority-cli Package: timestamp-authority-server Package: timoni Package: tkn Package: traefik-3.6 Package: traefik-3.7 Package: trillian-logsigner Package: trino Package: trino-plugin-bigquery Package: trino-plugin-opensearch Package: trino-plugin-oracle Package: trino-plugin-teradata-functions Package: trufflehog Package: tw Package: twt Package: vale Package: vault-env Package: vault-secrets-webhook Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: velero Package: velero-plugin-for-csi Package: velero-plugin-for-csi-compat Package: velero-plugin-for-microsoft-azure Package: vendir Package: verticadb-operator Package: vertical-pod-autoscaler Package: vertical-pod-autoscaler-recommender Package: vertical-pod-autoscaler-updater Package: vexctl Package: victoriametrics Package: victoriametrics-operator Package: victoriametrics-operator-config-reloader Package: victoriametrics-vmagent Package: victoriametrics-vmagent-cluster Package: victoriametrics-vmalert Package: victoriametrics-vmalert-cluster Package: victoriametrics-vmalert-cluster-compat Package: victoriametrics-vmauth Package: victoriametrics-vmauth-compat Package: victoriametrics-vminsert-cluster Package: victoriametrics-vmselect-cluster Package: victoriametrics-vmstorage-cluster Package: vitess-23 Package: vitess-23-binaries Package: volume-modifier-for-k8s Package: vt-cli Package: wave Package: weaviate Package: whereabouts Package: witness Package: xeol Package: zarf Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

Affected products

VendorProductAffectedFixed
Go standard library net/url < 1.25.13, 1.26.0-0 – < 1.26.6, 1.27.0-0 – < 1.27.0-rc.3 1.25.13

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-1.26 1.26.6-1 —
Debian 14 golang-1.27 1.27~rc3-1 —
Debian 13 golang-1.24 No fix yet —
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS golang-1.23 +2 No fix yet —
Ubuntu 24.04 LTS golang-1.21 +4 No fix yet —
Ubuntu 22.04 LTS golang-1.17 +7 No fix yet —
Ubuntu 20.04 LTS golang-1.13 +5 No fix yet —
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +2 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.13 +1 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 buildah +1 2:1.43.1-5.el10_2 RHSA-2026:98555, RHSA-2026:64777, RHSA-2026:63332
RHEL 10 git-lfs 3.7.1-5.el10_2.7 RHSA-2026:64788
RHEL 10 go-fdo-client 1.0.0-4.el10_2.7 RHSA-2026:62577
RHEL 10 go-fdo-server +3 1.0.1-2.el10_2.4 RHSA-2026:62578
RHEL 10 golang +7 1.26.7-1.el10_2 RHSA-2026:60306
RHEL 10 grafana +1 10.2.6-28.el10_2.5 RHSA-2026:98056, RHSA-2026:63022
RHEL 10 grafana-pcp 5.3.0-8.el10_2.1 RHSA-2026:98579, RHSA-2026:63119
RHEL 10 image-builder 52.1-1.el10_2.2 RHSA-2026:65534
RHEL 10 ipp-usb 0.9.27-7.el10_2.3 RHSA-2026:62631
RHEL 10 opentelemetry-collector 0.152.1-2.el10_2 RHSA-2026:65116
RHEL 10 osbuild-composer +2 165.1-3.el10_2.2 RHSA-2026:65895
RHEL 10 podman +3 7:5.8.2-9.el10_2 RHSA-2026:98554, RHSA-2026:70201
RHEL 10 rhc 1:0.3.8-7.el10_2 RHSA-2026:63127
RHEL 10 rhc-worker-playbook 0.2.10-2.el10_2 RHSA-2026:67464
RHEL 10 skopeo +1 2:1.22.2-5.el10_2 RHSA-2026:98556, RHSA-2026:64818
RHEL 10 yggdrasil +1 0.4.9.2-1.el10_2.3 RHSA-2026:98617, RHSA-2026:69308
RHEL 10 yggdrasil-worker-package-manager 0.2.3-7.el10_2.8 RHSA-2026:69099
RHEL 9 buildah +1 2:1.43.2-4.el9_9 RHSA-2026:98450, RHSA-2026:70640
RHEL 9 containernetworking-plugins 1:1.9.0-4.el9_8 RHSA-2026:98449, RHSA-2026:70391
RHEL 9 git-lfs 3.7.1-4.el9_8.3 RHSA-2026:66364
RHEL 9 golang +7 1.26.7-1.el9_8 RHSA-2026:60304
RHEL 9 grafana +1 10.2.6-23.el9_8.3 RHSA-2026:98454, RHSA-2026:62406
RHEL 9 grafana-pcp 5.1.1-17.el9_8.1 RHSA-2026:98479, RHSA-2026:63136
RHEL 9 image-builder 52.1-1.el9_8.2 RHSA-2026:65886
RHEL 9 opentelemetry-collector 0.152.1-2.el9_8 RHSA-2026:65117
RHEL 9 osbuild-composer +2 165.1-4.el9_8.1 RHSA-2026:65153
RHEL 9 podman +4 6:5.8.2-7.el9_8 RHSA-2026:98447, RHSA-2026:69961
RHEL 9 rhc +1 1:0.2.7-11.el9_8 RHSA-2026:63130
RHEL 9 runc 4:1.4.2-3.el9_8 RHSA-2026:98451, RHSA-2026:70191
RHEL 9 skopeo +1 2:1.22.2-8.el9_8 RHSA-2026:98448, RHSA-2026:70641
RHEL 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 buildah +1 2:1.33.14-6.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 cockpit-podman 84.1-1.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 conmon 3:2.1.10-1.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 container-selinux 2:2.229.0-3.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 containernetworking-plugins 1:1.4.0-10.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 containers-common 2:1-82.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 crit +4 3.18-5.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 crun 1.14.3-4.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 delve 1.26.1-1.module+el8.10.0+24516+40554724 RHSA-2026:60305
RHEL 8 fuse-overlayfs 1.13-1.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 git-lfs 3.4.1-13.el8_10 RHSA-2026:67161
RHEL 8 golang +7 1.26.7-1.module+el8.10.0+24751+b3673b3e RHSA-2026:60305
RHEL 8 grafana +1 9.2.10-33.el8_10 RHSA-2026:62407
RHEL 8 grafana-pcp 5.1.1-18.el8_10 RHSA-2026:63124
RHEL 8 libslirp +1 4.4.0-2.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 netavark 2:1.10.3-1.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 oci-seccomp-bpf-hook 1.2.10-3.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 osbuild-composer +2 101.5-2.el8_10 RHSA-2026:66016
RHEL 8 podman +6 4:4.9.4-37.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 python-podman +1 4.9.0-3.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 rhc 1:0.2.5-10.el8_10 RHSA-2026:64786
RHEL 8 runc 4:1.2.9-6.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 skopeo +1 2:1.14.6-4.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 slirp4netns 1.2.3-1.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 toolbox +1 0.0.99.5.1-1.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
RHEL 8 udica 0.2.6-21.module+el8.10.0+24790+ef71b018 RHSA-2026:63163
Show 24 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Satellite Utils 6 foreman +1 3.12.0.23-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite Utils 6 rubygem-hammer_cli 3.12.0-2.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite Utils 6 satellite +1 6.16.14-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite Capsule 6 foreman +2 3.12.0.23-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite Capsule 6 pulpcore-obsolete-packages 1.3.1-6.el9pc RHSA-2026:74504
Red Hat Satellite Capsule 6 python-dynaconf +1 3.2.13-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite Capsule 6 python-gitpython +1 3.1.62-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite Capsule 6 python-lxml +1 4.9.2-5.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite Capsule 6 python-pulpcore +1 3.49.39-4.el8pc RHSA-2026:74506
Red Hat Satellite Capsule 6 python-sqlparse +1 0.6.0-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite Capsule 6 python3.12-dynaconf 3.2.13-2.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite Capsule 6 python3.12-gitpython 3.1.62-1.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite Capsule 6 python3.12-sqlparse 0.6.0-1.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite Capsule 6 satellite +2 6.16.14-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite Capsule 6 satellite-obsolete-packages 6.17.12-1.el9sat RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 foreman +14 3.12.0.23-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 pulpcore-obsolete-packages 1.3.1-6.el9pc RHSA-2026:74504
Red Hat Satellite 6 python-dynaconf +1 3.2.13-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite 6 python-gitpython +1 3.1.62-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite 6 python-lxml +1 4.9.2-5.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite 6 python-pulpcore +1 3.49.39-4.el8pc RHSA-2026:74506
Red Hat Satellite 6 python-sqlparse +1 0.6.0-1.el8pc RHSA-2026:74506, RHSA-2026:74505
Red Hat Satellite 6 python3.12-dynaconf 3.2.13-2.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite 6 python3.12-gitpython 3.1.62-1.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite 6 python3.12-sqlparse 0.6.0-1.el9pc RHSA-2026:74504, RHSA-2026:74503
Red Hat Satellite 6 rubygem-foreman_remote_execution +1 13.2.8-2.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 rubygem-hammer_cli 3.12.0-2.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 rubygem-katello 4.14.0.23-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 rubygem-safemode 1.5.0-2.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 satellite +2 6.16.14-1.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 satellite-obsolete-packages 6.17.12-1.el9sat RHSA-2026:74505, RHSA-2026:74504
Red Hat Satellite 6 yggdrasil-worker-forwarder 0.1.0-2.el8sat RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504
Red Hat Rhel Satellite Client 6 foreman_ygg_worker 0.3.3-3.el8sat RHSA-2026:94063
Red Hat Rhel Satellite Client 6 yggdrasil 0.2.3-5.el8sat RHSA-2026:94063
RHEL 10.0 EUS delve 1.26.1-2.el10_0 RHSA-2026:65918
RHEL 10.0 EUS git-lfs 3.6.1-2.el10_0.7 RHSA-2026:67149
RHEL 10.0 EUS golang +7 1.26.7-1.el10_0 RHSA-2026:61882
RHEL 10.0 EUS grafana +1 10.2.6-26.el10_0 RHSA-2026:67517
RHEL 10.0 EUS grafana-pcp 5.3.0-1.el10_0.1 RHSA-2026:66459
RHEL 10.0 EUS ignition +2 2.21.0-3.el10_0.4 RHSA-2026:65335
RHEL 10.0 EUS ipp-usb +1 0.9.27-3.el10_0.5 RHSA-2026:98108
RHEL 10.0 EUS opentelemetry-collector 0.152.1-2.el10_0 RHSA-2026:67974
RHEL 10.0 EUS osbuild-composer +2 134.1-12.el10_0 RHSA-2026:66327
RHEL 10.0 EUS rhc 1:0.3.2-6.el10_0.1 RHSA-2026:69103
RHEL 10.0 EUS rhc-worker-playbook +1 0.2.3-6.el10_0.1 RHSA-2026:71420, RHSA-2026:70103
RHEL 9.6 EUS delve 1.26.1-1.el9_6.1 RHSA-2026:67128
RHEL 9.6 EUS git-lfs 3.6.1-2.el9_6.7 RHSA-2026:67287
RHEL 9.6 EUS golang +7 1.26.7-1.el9_6 RHSA-2026:62404
RHEL 9.6 EUS grafana +1 10.2.6-23.el9_6 RHSA-2026:67518
RHEL 9.6 EUS grafana-pcp 5.1.1-15.el9_6.1 RHSA-2026:67132
RHEL 9.6 EUS ignition +3 2.21.0-7.el9_6.1 RHSA-2026:65336
RHEL 9.6 EUS opentelemetry-collector 0.152.1-2.el9_6 RHSA-2026:67975
RHEL 9.6 EUS osbuild-composer +2 132.2-12.el9_6 RHSA-2026:62803
RHEL 9.6 EUS rhc +1 1:0.2.7-1.el9_6.6 RHSA-2026:69107
RHEL 9.4 E4S delve 1.26.1-1.el9_4.1 RHSA-2026:67153
RHEL 9.4 E4S git-lfs 3.4.1-4.el9_4.6 RHSA-2026:72276
RHEL 9.4 E4S golang +7 1.26.7-1.el9_4 RHSA-2026:62405
RHEL 9.4 E4S grafana +1 9.2.10-28.el9_4 RHSA-2026:76795
RHEL 9.4 E4S grafana-pcp 5.1.1-9.el9_4 RHSA-2026:67159
RHEL 9.4 E4S ignition +2 2.17.0-2.el9_4.2 RHSA-2026:65880
RHEL 9.4 E4S opentelemetry-collector 0.152.1-2.el9_4 RHSA-2026:68527
RHEL 9.4 E4S osbuild-composer +2 101.3-4.el9_4.6 RHSA-2026:62753
RHEL 9.4 E4S rhc 1:0.2.4-9.el9_4.1 RHSA-2026:69105
RHEL 9.2 E4S delve 1.26.1-1.el9_2.1 RHSA-2026:67313
RHEL 9.2 E4S git-lfs 3.2.0-2.el9_2.10 RHSA-2026:67319
RHEL 9.2 E4S golang +7 1.26.7-1.el9_2 RHSA-2026:62602
RHEL 9.2 E4S grafana 9.0.9-13.el9_2 RHSA-2026:76809
RHEL 9.2 E4S grafana-pcp 5.1.1-5.el9_2.2 RHSA-2026:67160
RHEL 9.2 E4S ignition +2 2.15.0-2.el9_2.1 RHSA-2026:65359
RHEL 9.2 E4S osbuild-composer +3 76.1-9.el9_2 RHSA-2026:62754
RHEL 9.2 E4S rhc 1:0.2.2-1.el9_2.5 RHSA-2026:69104
RHEL 8.8 TUS delve 1.26.1-1.module+el8.8.0+24781+86ad105d RHSA-2026:87245
RHEL 8.8 TUS git-lfs 3.2.0-2.el8_8.8 RHSA-2026:72737
RHEL 8.8 TUS golang +7 1.26.10-4.module+el8.8.0+25113+a148ecc0 RHSA-2026:87245
RHEL 8.8 TUS grafana 7.5.15-12.el8_8 RHSA-2026:88340
RHEL 8.8 TUS grafana-pcp 3.2.0-6.el8_8.2 RHSA-2026:88395
RHEL 8.8 TUS osbuild-composer +3 75-10.el8_8 RHSA-2026:68504
RHEL 8.8 TUS rhc 1:0.2.2-1.el8_8.3 RHSA-2026:90726
RHEL 8.8 E4S delve 1.26.1-1.module+el8.8.0+24781+86ad105d RHSA-2026:87245
RHEL 8.8 E4S git-lfs 3.2.0-2.el8_8.8 RHSA-2026:72737
RHEL 8.8 E4S golang +7 1.26.10-4.module+el8.8.0+25113+a148ecc0 RHSA-2026:87245
RHEL 8.8 E4S grafana 7.5.15-12.el8_8 RHSA-2026:88340
RHEL 8.8 E4S grafana-pcp 3.2.0-6.el8_8.2 RHSA-2026:88395
RHEL 8.8 E4S osbuild-composer +3 75-10.el8_8 RHSA-2026:68504
RHEL 8.8 E4S rhc 1:0.2.2-1.el8_8.3 RHSA-2026:90726
RHEL 8.6 EUS Long Life delve 1.26.1-1.module+el8.6.0+24782+a062e766 RHSA-2026:87246
RHEL 8.6 EUS Long Life git-lfs 2.13.3-3.el8_6.8 RHSA-2026:72805
RHEL 8.6 EUS Long Life golang +7 1.26.10-4.module+el8.6.0+25114+90ecdb41 RHSA-2026:87246
RHEL 8.6 EUS Long Life grafana 7.5.11-12.el8_6 RHSA-2026:88339
RHEL 8.6 EUS Long Life grafana-pcp 3.2.0-4.el8_6.2 RHSA-2026:88394
RHEL 8.6 EUS Long Life osbuild-composer +3 46.3-8.el8_6 RHSA-2026:69235
RHEL 8.6 EUS Long Life rhc 1:0.2.1-14.el8_6.1 RHSA-2026:90725
RHEL 8.6 AUS delve 1.26.1-1.module+el8.6.0+24782+a062e766 RHSA-2026:87246
RHEL 8.6 AUS git-lfs 2.13.3-3.el8_6.8 RHSA-2026:72805
RHEL 8.6 AUS golang +7 1.26.10-4.module+el8.6.0+25114+90ecdb41 RHSA-2026:87246
RHEL 8.6 AUS grafana 7.5.11-12.el8_6 RHSA-2026:88339
RHEL 8.6 AUS grafana-pcp 3.2.0-4.el8_6.2 RHSA-2026:88394
RHEL 8.6 AUS osbuild-composer +3 46.3-8.el8_6 RHSA-2026:69235
RHEL 8.6 AUS rhc 1:0.2.1-14.el8_6.1 RHSA-2026:90725
RHEL 8.4 EUS Long Life delve 1.26.1-1.module+el8.4.0+25181+7ce5b91c RHSA-2026:90994
RHEL 8.4 EUS Long Life git-lfs 2.13.3-3.el8_4.6 RHSA-2026:95234
RHEL 8.4 EUS Long Life golang +7 1.26.10-2.module+el8.4.0+25201+9a419e96 RHSA-2026:90994
RHEL 8.4 EUS Long Life osbuild-composer +2 28.7-7.el8_4 RHSA-2026:96076
RHEL 8.4 EUS Long Life rhc 1:0.2.0-6.el8_4.2 RHSA-2026:92217
RHEL 8.4 AUS delve 1.26.1-1.module+el8.4.0+25181+7ce5b91c RHSA-2026:90994
RHEL 8.4 AUS git-lfs 2.13.3-3.el8_4.6 RHSA-2026:95234
RHEL 8.4 AUS golang +7 1.26.10-2.module+el8.4.0+25201+9a419e96 RHSA-2026:90994
RHEL 8.4 AUS osbuild-composer +2 28.7-7.el8_4 RHSA-2026:96076
RHEL 8.4 AUS rhc 1:0.2.0-6.el8_4.2 RHSA-2026:92217
RHEL 7 ELS host-metering +1 1.4.0-9.el7_9 RHSA-2026:71619
RHEL 7 ELS rhc 1:0.2.4-5.el7_9.1 RHSA-2026:98794
Red Hat OpenStack 18 golang-github-openstack-k8s-operators-os-diff 0.1.1-18.0.20261021172337.a95ae05.el9ost RHSA-2026:90332
Red Hat OpenStack 17 collectd-libpod-stats 1.0.6-9.el9ost RHSA-2026:90329
Red Hat OpenStack 17 collectd-sensubility 0.2.1-8.el9ost RHSA-2026:90329
Red Hat OpenStack 17 etcd 3.4.26-9.10.el9ost RHSA-2026:90329
Red Hat OpenStack 16 collectd-libpod-stats 1.0.4-6.2.el8ost RHSA-2026:90330
Red Hat OpenStack 16 collectd-sensubility 0.2.1-1.3.el8ost RHSA-2026:90330
Red Hat OpenStack 16 etcd 3.3.23-25.el8ost RHSA-2026:90330
Red Hat OpenShift 4 cri-o 1.25.5-8.rhaos4.12.git6120b13.el9 RHSA-2026:71445, RHSA-2026:71443, RHSA-2026:70645
Red Hat OpenShift 4 cri-tools 1.25.0-7.el9 RHSA-2026:70645, RHSA-2026:70614, RHSA-2026:70585
Red Hat OpenShift 4 microshift +8 4.16.73-202610151747.p0.g44abd51.assembly.4.16.73.el9 RHSA-2026:91191, RHSA-2026:83631, RHSA-2026:80167
Red Hat OpenShift 4 microshift-cert-manager +1 4.20.41-202610012357.p0.gdad0307.assembly.4.20.41.el9 RHSA-2026:74797, RHSA-2026:74796, RHSA-2026:71672
Red Hat OpenShift 4 microshift-gateway-api +2 4.18.57-202610092321.p0.g94a47d0.assembly.4.18.57.el9 RHSA-2026:91191, RHSA-2026:80167, RHSA-2026:74797
Red Hat OpenShift 4 microshift-observability +2 4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9 RHSA-2026:91191, RHSA-2026:74797, RHSA-2026:74796
Red Hat OpenShift 4 microshift-sriov +1 4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9 RHSA-2026:74796, RHSA-2026:71672
Red Hat OpenShift 4 openshift +1 4.12.0-202609111749.p2.g0e18cfc.assembly.stream.el8 RHSA-2026:82810, RHSA-2026:71445, RHSA-2026:71443
Red Hat OpenShift 4 openshift-clients +1 4.12.0-202609111749.p2.gd691257.assembly.stream.el8 RHSA-2026:82810, RHSA-2026:71445, RHSA-2026:70645
Red Hat OpenShift 4 openshift-kubelet +3 4.16.0-202609101821.p2.g41c4e9b.assembly.stream.el8 RHSA-2026:71445, RHSA-2026:71443, RHSA-2026:70614
Red Hat OpenShift 4 openshift-kuryr +4 4.14.0-202609251136.p2.g8926a29.assembly.stream.el8 RHSA-2026:73864
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.15.0-202610071830.p2.gfd77d92.assembly.stream.el8 RHSA-2026:82810, RHSA-2026:70614, RHSA-2026:70585
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.15.0-202610071830.p2.g5638728.assembly.stream.el8 RHSA-2026:82810, RHSA-2026:71443, RHSA-2026:70614
Red Hat OpenShift 4 ose-crio-credential-provider 4.21.0-202609021357.p2.g83d4961.assembly.stream.el8 RHSA-2026:66350
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.15.0-202610071830.p2.gfc50272.assembly.stream.el8 RHSA-2026:82810, RHSA-2026:70614, RHSA-2026:70585
Red Hat Hardened Images 1 golang1.25 +5 1.25.13-0.1.hum1 RHSA-2026:54836
Red Hat Hardened Images 1 golang1.26 +5 1.26.6-0.1.hum1 RHSA-2026:54835
Red Hat Edge Manager 1 flightctl +2 1.1.4-1.el9em RHSA-2026:68335, RHSA-2026:68334
Red Hat Ansible Automation Platform Inside 2 receptor 1.6.8-1.el8ap RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:71112
Red Hat Ansible Automation Platform Developer 2 automation-controller +1 4.7.17-1.el9ap RHSA-2026:71113
Red Hat Ansible Automation Platform Developer 2 python-sqlparse +1 0.6.0-1.el10ap RHSA-2026:71113, RHSA-2026:71112
Red Hat Ansible Automation Platform Developer 2 python3.12-sqlparse 0.6.0-1.el8ap RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:71112
Red Hat Ansible Automation Platform Developer 2 receptor 1.6.8-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 automation-controller +3 4.7.17-1.el9ap RHSA-2026:71113
Red Hat Ansible Automation Platform 2 automation-controller-venv-tower 4.6.33-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 automation-gateway-proxy-server 2.5.10-8.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 automation-gateway-server 2.5.20260923-1.el8ap RHSA-2026:71114
Red Hat Ansible Automation Platform 2 automation-platform-ui 2.6.14-1.el9ap RHSA-2026:71113
Red Hat Ansible Automation Platform 2 python-sqlparse +1 0.6.0-1.el10ap RHSA-2026:71113, RHSA-2026:71112
Red Hat Ansible Automation Platform 2 python3.12-gitpython 3.1.60-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 python3.12-sqlparse 0.6.0-1.el8ap RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:71112
Red Hat Ansible Automation Platform 2 receptor 1.6.8-1.el8ap RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:71112

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 buildah +1 2:1.43.1-5.el10_2 ALSA-2026:64777, ALSA-2026:63332
AlmaLinux 10 git-lfs 3.7.1-5.el10_2.7 ALSA-2026:64788
AlmaLinux 10 go-fdo-client 1.0.0-4.el10_2.7 ALSA-2026:62577
AlmaLinux 10 go-fdo-server +3 1.0.1-2.el10_2.4 ALSA-2026:62578
AlmaLinux 10 golang +7 1.26.7-1.el10_2.alma.1 ALSA-2026:60306
AlmaLinux 10 grafana +1 10.2.6-28.el10_2.5 ALSA-2026:63022
AlmaLinux 10 grafana-pcp 5.3.0-8.el10_2.1 ALSA-2026:63119
AlmaLinux 10 ipp-usb 0.9.27-7.el10_2.3 ALSA-2026:62631
AlmaLinux 10 opentelemetry-collector 0.152.1-2.el10_2 ALSA-2026:65116
AlmaLinux 10 podman +3 7:5.8.2-9.el10_2.alma.1 ALSA-2026:70201
AlmaLinux 10 skopeo +1 2:1.22.2-5.el10_2 ALSA-2026:64818
AlmaLinux 10 yggdrasil +1 0.4.9.2-1.el10_2.3 ALSA-2026:69308
AlmaLinux 10 yggdrasil-worker-package-manager 0.2.3-7.el10_2.8 ALSA-2026:69099
AlmaLinux 9 buildah +1 2:1.43.3-2.el9_8 ALSA-2026:70640
AlmaLinux 9 containernetworking-plugins 1:1.9.0-4.el9_8 ALSA-2026:70391
AlmaLinux 9 git-lfs 3.7.1-4.el9_8.3 ALSA-2026:66364
AlmaLinux 9 golang +7 1.26.7-1.el9_8 ALSA-2026:60304
AlmaLinux 9 grafana +1 10.2.6-23.el9_8.3 ALSA-2026:62406
AlmaLinux 9 grafana-pcp 5.1.1-17.el9_8.1 ALSA-2026:63136
AlmaLinux 9 opentelemetry-collector 0.152.1-2.el9_8 ALSA-2026:65117
AlmaLinux 9 osbuild-composer +2 165.1-4.el9_8.1.alma.1 ALSA-2026:65153
AlmaLinux 9 podman +4 6:5.8.2-7.el9_8 ALSA-2026:69961
AlmaLinux 9 runc 4:1.4.2-3.el9_8 ALSA-2026:70191
AlmaLinux 9 skopeo +1 2:1.22.2-8.el9_8 ALSA-2026:70641
AlmaLinux 8 aardvark-dns 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 ALSA-2026:63163
AlmaLinux 8 buildah +1 2:1.33.14-6.module_el8.10.0+4269+94686149 ALSA-2026:63163
AlmaLinux 8 cockpit-podman 84.1-1.module_el8.10.0+4102+6c76e544 ALSA-2026:63163
AlmaLinux 8 conmon 3:2.1.10-1.module_el8.10.0+3845+87b84552 ALSA-2026:63163
AlmaLinux 8 container-selinux 2:2.229.0-3.module_el8.10.0+4213+0493256b ALSA-2026:63163
AlmaLinux 8 containernetworking-plugins 1:1.4.0-10.module_el8.10.0+4269+94686149 ALSA-2026:63163
AlmaLinux 8 containers-common 2:1-82.module_el8.10.0+4016+efd18bf8 ALSA-2026:63163
AlmaLinux 8 crit +1 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2026:63163
AlmaLinux 8 criu-devel 3.18-5.module_el8.10.0+4016+efd18bf8 ALSA-2026:63163
AlmaLinux 8 criu-libs 3.18-5.module_el8.10.0+3909+6e1c1eb7 ALSA-2026:63163
AlmaLinux 8 crun 1.14.3-4.module_el8.10.0+4269+94686149 ALSA-2026:63163
AlmaLinux 8 delve 1.26.1-1.module_el8.10.0+4223+bd807c2e ALSA-2026:60305
AlmaLinux 8 fuse-overlayfs 1.13-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2026:63163
AlmaLinux 8 git-lfs 3.4.1-13.el8_10 ALSA-2026:67161
AlmaLinux 8 golang +7 1.26.7-1.module_el8.10.0+4264+117c8fc2 ALSA-2026:60305
AlmaLinux 8 grafana +1 9.2.10-33.el8_10 ALSA-2026:62407
AlmaLinux 8 grafana-pcp 5.1.1-18.el8_10 ALSA-2026:63124
AlmaLinux 8 libslirp 4.4.0-2.module_el8.10.0+4016+efd18bf8 ALSA-2026:63163
AlmaLinux 8 libslirp-devel 4.4.0-2.module_el8.10.0+3970+8445edf6 ALSA-2026:63163
AlmaLinux 8 netavark 2:1.10.3-1.module_el8.10.0+3926+f12484f5 ALSA-2026:63163
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.10-3.module_el8.10.0+4269+94686149 ALSA-2026:63163
AlmaLinux 8 osbuild-composer +2 101.5-2.el8_10.alma.1 ALSA-2026:66016
AlmaLinux 8 podman +6 4:4.9.4-37.module_el8.10.0+4269+94686149 ALSA-2026:63163
AlmaLinux 8 python3-criu 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2026:63163
AlmaLinux 8 python3-podman 4.9.0-3.module_el8.10.0+4016+efd18bf8 ALSA-2026:63163
AlmaLinux 8 runc 4:1.2.9-6.module_el8.10.0+4269+94686149 ALSA-2026:63163
AlmaLinux 8 skopeo +1 2:1.14.6-4.module_el8.10.0+4269+94686149 ALSA-2026:63163
AlmaLinux 8 slirp4netns 1.2.3-1.module_el8.10.0+3901+4b80ecd7 ALSA-2026:63163
AlmaLinux 8 toolbox +1 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 ALSA-2026:63163
AlmaLinux 8 udica 0.2.6-21.module_el8.10.0+4068+0e21408f ALSA-2026:63163

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 buildah 2:1.43.1-5.el10_2 RLSA-2026:98555, RLSA-2026:64777, RLSA-2026:63332
Rocky Linux 10 buildah-tests 2:1.45.0-2.el10 RLSA-2026:98555
Rocky Linux 10 git-lfs 3.7.1-5.el10_2.7 RLSA-2026:64788
Rocky Linux 10 go-fdo-client 1.0.0-4.el10_2.7 RLSA-2026:62577
Rocky Linux 10 go-fdo-server 1.0.1-2.el10_2.4 RLSA-2026:62578
Rocky Linux 10 golang 1.26.7-1.el10_2 RLSA-2026:60306
Rocky Linux 10 golang-github-openprinting-ipp-usb 0.9.27-7.el10_2.3 RLSA-2026:62631
Rocky Linux 10 grafana 10.2.6-28.el10_2.5 RLSA-2026:98056, RLSA-2026:63022
Rocky Linux 10 grafana-pcp 5.3.0-8.el10_2.1 RLSA-2026:63119
Rocky Linux 10 grafana-selinux 12.4.3-3.el10_3.2 RLSA-2026:98056
Rocky Linux 10 image-builder 52.1-1.el10_2.2.rocky.0.1 RLSA-2026:65534
Rocky Linux 10 opentelemetry-collector 0.152.1-2.el10_2 RLSA-2026:65116
Rocky Linux 10 osbuild-composer 165.1-3.el10_2.2.rocky.0.1 RLSA-2026:65895
Rocky Linux 10 podman 7:5.8.2-9.el10_2 RLSA-2026:70201
Rocky Linux 10 skopeo 2:1.22.2-5.el10_2 RLSA-2026:64818
Rocky Linux 10 yggdrasil 0.4.9.2-1.el10_2.3 RLSA-2026:98617, RLSA-2026:69308
Rocky Linux 10 yggdrasil-devel 0.4.10-1.el10_3.4 RLSA-2026:98617
Rocky Linux 10 yggdrasil-worker-package-manager 0.2.3-7.el10_2.8 RLSA-2026:69099
Rocky Linux 9 buildah 2:1.43.3-2.el9_8 RLSA-2026:70640
Rocky Linux 9 containernetworking-plugins 1:1.9.0-4.el9_8 RLSA-2026:98449, RLSA-2026:70391
Rocky Linux 9 git-lfs 3.7.1-4.el9_8.3 RLSA-2026:66364
Rocky Linux 9 golang 1.26.7-1.el9_8 RLSA-2026:60304
Rocky Linux 9 grafana 10.2.6-23.el9_8.3 RLSA-2026:62406
Rocky Linux 9 grafana-pcp 5.1.1-17.el9_8.1 RLSA-2026:98479, RLSA-2026:63136
Rocky Linux 9 image-builder 52.1-1.el9_8.2 RLSA-2026:65886
Rocky Linux 9 opentelemetry-collector 0.152.1-2.el9_8 RLSA-2026:65117
Rocky Linux 9 osbuild-composer 165.1-4.el9_8.1.rocky.0.1 RLSA-2026:65153
Rocky Linux 9 podman 6:5.8.2-7.el9_8 RLSA-2026:98447, RLSA-2026:69961
Rocky Linux 9 podman-tests +3 6:5.8.5-3.el9_9 RLSA-2026:98447
Rocky Linux 9 runc 4:1.4.2-3.el9_8 RLSA-2026:98451, RLSA-2026:70191
Rocky Linux 9 skopeo 2:1.22.2-8.el9_8 RLSA-2026:98448, RLSA-2026:70641
Rocky Linux 9 skopeo-tests 3:1.22.2-5.el9_9 RLSA-2026:98448
Rocky Linux 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+1874+ce489889 RLSA-2026:63163
Rocky Linux 8 cockpit-podman 84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2026:63163
Rocky Linux 8 conmon 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2026:63163
Rocky Linux 8 container-selinux 2:2.229.0-3.module+el8.10.0+40223+e940a224 RLSA-2026:63163
Rocky Linux 8 containers-common 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2026:63163
Rocky Linux 8 criu 3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2026:63163
Rocky Linux 8 delve 1.26.1-1.module+el8.10.0+40244+e7cb3ff8 RLSA-2026:60305
Rocky Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2026:63163
Rocky Linux 8 git-lfs 3.4.1-13.el8_10 RLSA-2026:67161
Rocky Linux 8 grafana 9.2.10-33.el8_10 RLSA-2026:62407
Rocky Linux 8 grafana-pcp 5.1.1-18.el8_10 RLSA-2026:63124
Rocky Linux 8 libslirp 4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2026:63163
Rocky Linux 8 netavark 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2026:63163
Rocky Linux 8 osbuild-composer 101.5-2.el8_10.rocky.0.6 RLSA-2026:66016
Rocky Linux 8 python-podman 4.9.0-3.module+el8.10.0+1896+b18fa106 RLSA-2026:63163
Rocky Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2026:63163
Rocky Linux 8 toolbox 0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2 RLSA-2026:63163
Rocky Linux 8 udica 0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2026:63163

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 go1.25 1.25.13-150000.1.50.1 SUSE-SU-2026:3640-1
SLES 15 SP7 go1.25-openssl 1.25.14-150600.13.27.1 SUSE-SU-2026:3815-1
SLES 15 SP7 go1.26 1.26.6-150000.1.24.1 SUSE-SU-2026:3641-1
SLES 15 SP7 go1.26-openssl 1.26.7-150600.13.15.1 SUSE-SU-2026:3816-1
SLES 15 SP7 go1.27 1.27.0-150000.1.6.1 SUSE-SU-2026:3830-1
SLES 15 SP6 go1.25 1.25.13-150000.1.50.1 SUSE-SU-2026:3640-1
SLES 15 SP6 go1.25-openssl 1.25.14-150600.13.27.1 SUSE-SU-2026:3815-1
SLES 15 SP6 go1.26 1.26.6-150000.1.24.1 SUSE-SU-2026:3641-1
SLES 15 SP6 go1.26-openssl 1.26.7-150600.13.15.1 SUSE-SU-2026:3816-1
SLES 15 SP6 go1.27 1.27.0-150000.1.6.1 SUSE-SU-2026:3830-1
SLES 15 SP5 go1.25 1.25.13-150000.1.50.1 SUSE-SU-2026:3640-1
SLES 15 SP5 go1.25-openssl 1.25.14-150000.1.33.1 SUSE-SU-2026:3800-1
SLES 15 SP5 go1.26 1.26.6-150000.1.24.1 SUSE-SU-2026:3641-1
SLES 15 SP5 go1.26-openssl 1.26.7-150000.1.18.1 SUSE-SU-2026:3799-1
SLES 15 SP5 go1.27 1.27.0-150000.1.6.1 SUSE-SU-2026:3830-1
SLES 15 SP4 go1.25 1.25.13-150000.1.50.1 SUSE-SU-2026:3640-1
SLES 15 SP4 go1.25-openssl 1.25.14-150000.1.33.1 SUSE-SU-2026:3800-1
SLES 15 SP4 go1.26 1.26.6-150000.1.24.1 SUSE-SU-2026:3641-1
SLES 15 SP4 go1.26-openssl 1.26.7-150000.1.18.1 SUSE-SU-2026:3799-1
SLES 15 SP4 go1.27 1.27.0-150000.1.6.1 SUSE-SU-2026:3830-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 go1.25 1.25.13-160000.1.1 SUSE-SU-2026:23300-1
SLES for SAP 16.0 go1.25-openssl 1.25.14-160000.1.1 SUSE-SU-2026:23573-1
SLES for SAP 16.0 go1.26 1.26.6-160000.1.1 SUSE-SU-2026:23301-1
SLES for SAP 16.0 go1.26-openssl 1.26.7-160000.1.1 SUSE-SU-2026:23576-1
SLES for SAP 16.0 govulncheck-vulndb 0.0.20260827T195228-160000.1.1 SUSE-SU-2026:23625-1
SLES for SAP 15 SP6 go1.25 1.25.13-150000.1.50.1 SUSE-SU-2026:3640-1
SLES for SAP 15 SP6 go1.25-openssl 1.25.14-150600.13.27.1 SUSE-SU-2026:3815-1
SLES for SAP 15 SP6 go1.26 1.26.6-150000.1.24.1 SUSE-SU-2026:3641-1
SLES for SAP 15 SP6 go1.26-openssl 1.26.7-150600.13.15.1 SUSE-SU-2026:3816-1
SLES for SAP 15 SP6 go1.27 1.27.0-150000.1.6.1 SUSE-SU-2026:3830-1
SLES for SAP 15 SP5 go1.25 1.25.13-150000.1.50.1 SUSE-SU-2026:3640-1
SLES for SAP 15 SP5 go1.25-openssl 1.25.14-150000.1.33.1 SUSE-SU-2026:3800-1
SLES for SAP 15 SP5 go1.26 1.26.6-150000.1.24.1 SUSE-SU-2026:3641-1
SLES for SAP 15 SP5 go1.26-openssl 1.26.7-150000.1.18.1 SUSE-SU-2026:3799-1
SLES for SAP 15 SP5 go1.27 1.27.0-150000.1.6.1 SUSE-SU-2026:3830-1
SLES for SAP 15 SP4 go1.25 1.25.13-150000.1.50.1 SUSE-SU-2026:3640-1
SLES for SAP 15 SP4 go1.25-openssl 1.25.14-150000.1.33.1 SUSE-SU-2026:3800-1
SLES for SAP 15 SP4 go1.26 1.26.6-150000.1.24.1 SUSE-SU-2026:3641-1
SLES for SAP 15 SP4 go1.26-openssl 1.26.7-150000.1.18.1 SUSE-SU-2026:3799-1
SLES for SAP 15 SP4 go1.27 1.27.0-150000.1.6.1 SUSE-SU-2026:3830-1
SLES 16.0 go1.25 1.25.13-160000.1.1 SUSE-SU-2026:23300-1
SLES 16.0 go1.25-openssl 1.25.14-160000.1.1 SUSE-SU-2026:23573-1
SLES 16.0 go1.26 1.26.6-160000.1.1 SUSE-SU-2026:23301-1
SLES 16.0 go1.26-openssl 1.26.7-160000.1.1 SUSE-SU-2026:23576-1
SLES 16.0 govulncheck-vulndb 0.0.20260827T195228-160000.1.1 SUSE-SU-2026:23625-1
SLE HPC 15 SP5 go1.25 1.25.13-150000.1.50.1 SUSE-SU-2026:3640-1
SLE HPC 15 SP5 go1.25-openssl 1.25.14-150000.1.33.1 SUSE-SU-2026:3800-1
SLE HPC 15 SP5 go1.26 1.26.6-150000.1.24.1 SUSE-SU-2026:3641-1
SLE HPC 15 SP5 go1.26-openssl 1.26.7-150000.1.18.1 SUSE-SU-2026:3799-1
SLE HPC 15 SP5 go1.27 1.27.0-150000.1.6.1 SUSE-SU-2026:3830-1
SLE HPC 15 SP4 go1.25 1.25.13-150000.1.50.1 SUSE-SU-2026:3640-1
SLE HPC 15 SP4 go1.25-openssl 1.25.14-150000.1.33.1 SUSE-SU-2026:3800-1
SLE HPC 15 SP4 go1.26 1.26.6-150000.1.24.1 SUSE-SU-2026:3641-1
SLE HPC 15 SP4 go1.26-openssl 1.26.7-150000.1.18.1 SUSE-SU-2026:3799-1
SLE HPC 15 SP4 go1.27 1.27.0-150000.1.6.1 SUSE-SU-2026:3830-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed go1.25 1.25.13-1.1 openSUSE-SU-2026:11516-1
openSUSE Tumbleweed go1.26 1.26.6-1.1 openSUSE-SU-2026:11517-1
openSUSE Tumbleweed go1.27 1.27rc3-1.1 openSUSE-SU-2026:11536-1
openSUSE Tumbleweed rclone 1.75.1-1.1 openSUSE-SU-2026:11727-1
openSUSE Leap 16.0 go1.25 1.25.13-160000.1.1 openSUSE-SU-2026:21592-1
openSUSE Leap 16.0 go1.25-openssl 1.25.14-160000.1.1 openSUSE-SU-2026:21696-1
openSUSE Leap 16.0 go1.26 1.26.6-160000.1.1 openSUSE-SU-2026:21593-1
openSUSE Leap 16.0 go1.26-openssl 1.26.7-160000.1.1 openSUSE-SU-2026:21705-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260827T195228-160000.1.1 openSUSE-SU-2026:21761-1
openSUSE Leap 16.0 rclone 1.75.1-bp160.1.1 openSUSE-SU-2026:21999-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.26.8-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 golang +6 1.26.7-1.amzn2023.0.1 ALAS2023-2026-2114
Amazon Linux 2 golang +6 1.26.7-1.amzn2.0.1 ALAS2-2026-3893

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 podman +3 7:5.8.2-9.0.1.el10_2 ELSA-2026-70201
Oracle Linux 10 yggdrasil +1 0.4.9.2-1.el10_2.3 ELSA-2026-69308
Oracle Linux 10 yggdrasil-worker-package-manager 0.2.3-7.el10_2.8 ELSA-2026-69099
Oracle Linux 9 buildah +1 2:1.43.3-2.0.1.el9_8 ELSA-2026-70640
Oracle Linux 9 containernetworking-plugins 1:1.9.0-4.el9_8 ELSA-2026-70391
Oracle Linux 9 podman +4 6:5.8.2-7.0.1.el9_8 ELSA-2026-69961
Oracle Linux 9 runc 4:1.4.2-3.el9_8 ELSA-2026-70191
Oracle Linux 9 skopeo +1 2:1.22.2-8.el9_8 ELSA-2026-70641
Oracle Linux 7 host-metering +1 1.2.0-4.0.5.el7_9 ELSA-2026-71619

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r68 —
Wolfi rolling addon-resizer 1.8.24-r1 —
Wolfi rolling amass 5.1.1-r12 —
Wolfi rolling amazon-cloudwatch-agent 1.300072.0-r1 —
Wolfi rolling amazon-cloudwatch-agent-operator 3.7.0-r1 —
Wolfi rolling amazon-k8s-cni +2 1.23.0-r1 —
Wolfi rolling argo-cd-3.2 +1 3.2.12-r13 —
Wolfi rolling argo-cd-3.3-compat 3.3.14-r9 —
Wolfi rolling argo-cd-3.4 +1 3.4.7-r2 —
Wolfi rolling argo-workflows-3.7 +1 3.7.18-r0 —
Wolfi rolling argo-workflows-4.0 +2 4.0.9-r0 —
Wolfi rolling argo-workflows-ui-4.0 4.0.11-r0 —
Wolfi rolling argocd-image-updater 1.3.0-r1 —
Wolfi rolling authservice 1.1.8-r1 —
Wolfi rolling aws-eks-pod-identity-agent 0.2.1-r5 —
Wolfi rolling aws-flb-firehose 1.7.3-r7 —
Wolfi rolling aws-nuke 3.66.0-r1 —
Wolfi rolling aws-otel-collector +1 0.49.0-r3 —
Wolfi rolling aws-privateca-issuer 1.9.1-r1 —
Wolfi rolling aws-signer-notation-plugin 1.0.2292-r22 —
Wolfi rolling aws-sigv4-proxy 1.12-r3 —
Wolfi rolling azure-service-operator 2.20.0-r6 —
Wolfi rolling azure-workload-identity-webhook 1.6.1-r1 —
Wolfi rolling azurefile-csi-1.35 1.35.7-r1 —
Wolfi rolling bank-vaults +1 1.33.1-r8 —
Wolfi rolling bazelisk 1.29.0-r5 —
Wolfi rolling bento 1.20.0-r1 —
Wolfi rolling blob-csi-1.27 1.27.9-r1 —
Wolfi rolling buf 1.72.0-r2 —
Wolfi rolling buildah 1.45.0-r1 —
Wolfi rolling buildctl +2 0.32.2-r1 —
Wolfi rolling cadvisor 0.60.5-r2 —
Wolfi rolling cadvisor-compat 0.60.5-r8 —
Wolfi rolling calico-felix-3.32 +3 3.32.2-r3 —
Wolfi rolling calico-goldmane-3.31 +1 3.31.7-r3 —
Wolfi rolling cass-operator 1.31.0-r7 —
Wolfi rolling cerbos 0.55.0-r7 —
Wolfi rolling cert-exporter 2.19.0-r1 —
Wolfi rolling cert-manager-1.20 +5 1.20.3-r10 —
Wolfi rolling cert-manager-1.20-crds 1.20.3-r18 —
Wolfi rolling cert-manager-cmctl +1 2.5.0-r14 —
Wolfi rolling cert-manager-csi-driver 0.16.0-r1 —
Wolfi rolling cert-manager-istio-csr 0.17.0-r0 —
Wolfi rolling cert-manager-webhook-pdns 2.5.5-r20 —
Wolfi rolling certificate-transparency 1.3.3-r22 —
Wolfi rolling certificate-transparency-trillian-ctserver 1.3.3-r17 —
Wolfi rolling cfssl 1.6.5-r45 —
Wolfi rolling chart-testing 3.14.0-r23 —
Wolfi rolling chisel 1.11.8-r4 —
Wolfi rolling cilium-1.19 +5 1.19.6-r6 —
Wolfi rolling cilium-certgen-0.4 0.4.9-r1 —
Wolfi rolling cilium-cli 0.19.7-r2 —
Wolfi rolling cis-operator-1.4 1.4.9-r2 —
Wolfi rolling cloud-provider-aws-1.35-ecr-credential-provider +1 1.35.2-r11 —
Wolfi rolling cloud-provider-aws-1.36-ecr-credential-provider +1 1.36.1-r3 —
Wolfi rolling cloud-provider-azure-cloud-controller-manager-1.36-compat 1.36.6-r0 —
Wolfi rolling cloud-provider-azure-cloud-node-manager-1.35 +1 1.35.8-r1 —
Wolfi rolling cloud-provider-azure-cloud-node-manager-1.36 +1 1.36.5-r1 —
Wolfi rolling cloud-provider-gcp-cloud-controller-manager 35.0.5-r17 —
Wolfi rolling cloud-provider-vsphere 1.36.0-r14 —
Wolfi rolling cloud-sql-proxy-2.16 2.16.0-r28 —
Wolfi rolling cloud-sql-proxy-2.21 2.21.3-r10 —
Wolfi rolling cloudflared 2026.8.2-r0 —
Wolfi rolling cloudnative-pg +1 1.30.0-r4 —
Wolfi rolling cloudprober 0.14.4-r2 —
Wolfi rolling cluster-api-1.12-clusterctl 1.12.11-r5 —
Wolfi rolling cluster-api-1.13-clusterctl +4 1.13.5-r1 —
Wolfi rolling cluster-api-1.13-controller-compat 1.13.6-r1 —
Wolfi rolling cluster-api-azure-controller 1.26.0-r5 —
Wolfi rolling cluster-api-azure-controller-compat 1.27.0-r1 —
Wolfi rolling cluster-api-ipam-provider-in-cluster 1.1.0-r11 —
Wolfi rolling cluster-proportional-autoscaler 1.10.3-r13 —
Wolfi rolling cluster-proportional-autoscaler-compat 1.11.0-r1 —
Wolfi rolling cni-plugins +4 1.9.1-r10 —
Wolfi rolling configmap-reload 0.15.0-r19 —
Wolfi rolling confluent-cp-docker-utils 1.0.17-r2 —
Wolfi rolling conftest 0.69.0-r1 —
Wolfi rolling container-object-storage-interface-sidecar +1 0.2.2-r26 —
Wolfi rolling controller-gen 0.21.0-r6 —
Wolfi rolling coredns-1.14 +1 1.14.6-r3 —
Wolfi rolling cortex 1.21.1-r8 —
Wolfi rolling cosign-3 3.1.3-r1 —
Wolfi rolling crane +2 0.21.9-r1 —
Wolfi rolling crictl +2 1.36.0-r10 —
Wolfi rolling croc 11.3.2-r0 —
Wolfi rolling crossplane-2.2 +1 2.2.4-r4 —
Wolfi rolling crossplane-provider-aws-ec2-compat +2 2.7.0-r6 —
Wolfi rolling crossplane-provider-aws-kms 2.6.0-r8 —
Wolfi rolling crossplane-provider-aws-s3 +12 2.7.0-r1 —
Wolfi rolling crossplane-provider-azure-authorization 2.6.0-r13 —
Wolfi rolling crossplane-provider-keycloak 2.24.1-r1 —
Wolfi rolling crossplane-provider-sql 0.16.1-r1 —
Wolfi rolling ctop 0.7.7-r40 —
Wolfi rolling ctr-1 +3 1.7.34-r5 —
Wolfi rolling ctr-2 +3 2.3.4-r1 —
Wolfi rolling cue 0.17.1-r2 —
Wolfi rolling dagdotdev 0.0.20-r25 —
Wolfi rolling dapr-daprd-1.17 +3 1.17.12-r1 —
Wolfi rolling dapr-sentry-1.17 +1 1.17.13-r0 —
Wolfi rolling dataplaneapi 3.4.1-r1 —
Wolfi rolling dbmate 2.35.0-r1 —
Wolfi rolling delve 1.27.1-r1 —
Wolfi rolling descheduler 0.36.0-r10 —
Wolfi rolling dex 2.45.1-r21 —
Wolfi rolling dgraph 25.4.0-r1 —
Wolfi rolling direnv 2.37.1-r14 —
Wolfi rolling distribution +1 3.1.1-r10 —
Wolfi rolling dive 0.13.1-r22 —
Wolfi rolling docker-credential-acr-env 0.7.0-r36 —
Wolfi rolling docker-credential-ecr-login 0.12.0-r11 —
Wolfi rolling docker-machine-driver-harvester 1.0.8-r1 —
Wolfi rolling docker-machine-driver-linode 0.1.16-r9 —
Wolfi rolling dockerd-28 28.5.2-r31 —
Wolfi rolling dockerize +1 0.14.0-r2 —
Wolfi rolling dogstatsd-7.77 +4 7.77.3-r25 —
Wolfi rolling dogstatsd-7.78 +4 7.78.4-r20 —
Wolfi rolling dogstatsd-7.79 +4 7.79.2-r18 —
Wolfi rolling dogstatsd-7.80 +4 7.80.4-r12 —
Wolfi rolling dogstatsd-7.81 +4 7.81.3-r1 —
Wolfi rolling doppler-kubernetes-operator 1.7.1-r20 —
Wolfi rolling dynamic-localpv-provisioner 4.5.1-r3 —
Wolfi rolling eksctl 0.230.0-r0 —
Wolfi rolling emissary +1 4.1.0-r10 —
Wolfi rolling esbuild 0.28.2-r1 —
Wolfi rolling external-dns-0.21 0.21.0-r18 —
Wolfi rolling external-secrets-operator-2.3 2.3.0-r19 —
Wolfi rolling external-secrets-operator-2.4 2.4.1-r17 —
Wolfi rolling external-secrets-operator-2.6 2.6.0-r10 —
Wolfi rolling extism 1.6.3-r21 —
Wolfi rolling falco-exporter 0.8.7-r31 —
Wolfi rolling falco-no-driver 0.44.1-r5 —
Wolfi rolling falcoctl 0.13.0-r18 —
Wolfi rolling falcosidekick 2.34.1-r7 —
Wolfi rolling ferretdb 2.7.0-r26 —
Wolfi rolling flannel 0.28.9-r1 —
Wolfi rolling fluent-operator 3.9.0-r5 —
Wolfi rolling flux-2.8 2.8.8-r16 —
Wolfi rolling flux-2.9 2.9.4-r2 —
Wolfi rolling flux-image-automation-controller 1.2.4-r2 —
Wolfi rolling flux-image-reflector-controller 1.2.4-r1 —
Wolfi rolling flux-kustomize-controller 1.9.4-r2 —
Wolfi rolling flux-kustomize-controller-iamguarded-compat 1.9.5-r2 —
Wolfi rolling flux-notification-controller 1.9.3-r2 —
Wolfi rolling flux-source-controller 1.9.4-r1 —
Wolfi rolling flyte 1.16.8-r4 —
Wolfi rolling frp 0.70.1-r1 —
Wolfi rolling fscrypt 0.3.6-r12 —
Wolfi rolling gatekeeper-3.22 +1 3.22.2-r13 —
Wolfi rolling gcp-compute-persistent-disk-csi-driver-1.25 1.25.2-r13 —
Wolfi rolling gcp-compute-persistent-disk-csi-driver-1.25-compat 1.25.2-r18 —
Wolfi rolling gh 2.97.0-r1 —
Wolfi rolling ghaudit 0.4.0-r30 —
Wolfi rolling git-credential-oauth 0.17.2-r10 —
Wolfi rolling git-lfs 3.7.1-r19 —
Wolfi rolling gitaly-19.0 +3 19.0.6-r1 —
Wolfi rolling github-mcp-server 1.9.0-r1 —
Wolfi rolling gitlab-kas-19.2 +1 19.2.2-r1 —
Wolfi rolling gitlab-pages-19.0 19.0.5-r1 —
Wolfi rolling gitlab-pages-19.1 19.1.8-r0 —
Wolfi rolling gitlab-runner-19.0 +2 19.0.3-r2 —
Wolfi rolling gitlab-runner-19.1 +2 19.1.2-r3 —
Wolfi rolling gitleaks 8.30.1-r21 —
Wolfi rolling gitness 3.3.0-r30 —
Wolfi rolling gke-gcloud-auth-plugin 36.3.2-r1 —
Wolfi rolling glab 1.113.0-r1 —
Wolfi rolling go-discover 0_git20260806-r1 —
Wolfi rolling go-licenses 2.0.1-r13 —
Wolfi rolling gobuster 3.8.2-r18 —
Wolfi rolling gogatekeeper 4.11.0-r1 —
Wolfi rolling golangci-lint 2.12.2-r6 —
Wolfi rolling gostatsd 28.3.0-r35 —
Wolfi rolling grafana-12.4 12.4.8-r1 —
Wolfi rolling grafana-13.0 13.0.6-r1 —
Wolfi rolling grafana-agent-operator 0.44.8-r14 —
Wolfi rolling grafana-alloy 1.18.1-r1 —
Wolfi rolling grafana-image-renderer 5.12.1-r1 —
Wolfi rolling grafana-mimir-3.0 +3 3.0.8-r3 —
Wolfi rolling grafana-mimir-3.1 +3 3.1.4-r3 —
Wolfi rolling grafana-operator 5.24.0-r4 —
Wolfi rolling grafana-pyroscope-2.0 2.0.6-r3 —
Wolfi rolling grafana-rollout-operator 0.38.1-r3 —
Wolfi rolling grpcurl 1.9.3-r28 —
Wolfi rolling grype 0.117.0-r1 —
Wolfi rolling guac +4 1.1.0-r26 —
Wolfi rolling haproxy-ingress-0.16 0.16.1-r8 —
Wolfi rolling harbor-2.14 +3 2.14.4-r6 —
Wolfi rolling harbor-cli 0.0.25-r1 —
Wolfi rolling harbor-scanner-trivy 0.38.0-r4 —
Wolfi rolling hcloud 1.67.0-r1 —
Wolfi rolling helm-3 3.21.4-r0 —
Wolfi rolling helm-mapkubeapis 0.6.1-r25 —
Wolfi rolling helm-operator 1.42.3-r8 —
Wolfi rolling helm-set-status 0.3.0-r25 —
Wolfi rolling hey 0.1.5-r10 —
Wolfi rolling hubble 1.19.4-r11 —
Wolfi rolling hubble-ui-backend 0.13.5-r15 —
Wolfi rolling hydra 26.2.0-r26 —
Wolfi rolling infinispan-operator 2.5.14-r1 —
Wolfi rolling influx 2.8.0-r6 —
Wolfi rolling ip-masq-agent 2.12.0-r32 —
Wolfi rolling ipfs-cluster 1.1.6-r18 —
Wolfi rolling istioctl-1.29 +4 1.29.6-r2 —
Wolfi rolling jaeger-operator 1.65.0-r27 —
Wolfi rolling k3d +2 5.9.0-r7 —
Wolfi rolling k3s +2 1.36.3.1-r1 —
Wolfi rolling k3s-1.32 +2 1.32.13.1-r26 —
Wolfi rolling k3s-1.34 +2 1.34.10.1-r1 —
Wolfi rolling k6 2.2.0-r1 —
Wolfi rolling k8s_gateway 1.8.2-r5 —
Wolfi rolling k8sgpt 0.4.36-r4 —
Wolfi rolling k8ssandra-client 0.9.0-r1 —
Wolfi rolling k8ssandra-operator 1.32.6-r1 —
Wolfi rolling k9s 0.51.0-r10 —
Wolfi rolling kaf 0.2.14-r11 —
Wolfi rolling kapp 0.65.3-r6 —
Wolfi rolling kapp-controller 0.60.4-r4 —
Wolfi rolling kargo-1.10 1.10.9-r4 —
Wolfi rolling karma 0.132-r1 —
Wolfi rolling karpenter-1.11 1.11.3-r1 —
Wolfi rolling katib-controller +3 0.19.0-r34 —
Wolfi rolling katib-suggestion-hyperopt +1 0.19.0-r40 —
Wolfi rolling kbld 0.49.1-r4 —
Wolfi rolling keda-2.19 +2 2.19.0-r24 —
Wolfi rolling keda-2.20 +2 2.20.2-r1 —
Wolfi rolling kind 0.32.0-r4 —
Wolfi rolling kine 0.16.4-r0 —
Wolfi rolling kitty 0.48.2-r1 —
Wolfi rolling knative-eventing-1.21-jobsink +1 1.21.4-r10 —
Wolfi rolling knative-eventing-1.22-filter +7 1.22.2-r4 —
Wolfi rolling knative-operator-1.21 +1 1.21.4-r3 —
Wolfi rolling knative-operator-1.22 +1 1.22.3-r3 —
Wolfi rolling knative-operator-1.22-compat 1.22.3-r8 —
Wolfi rolling knative-serving-1.21-queue +6 1.21.3-r3 —
Wolfi rolling knative-serving-1.22-queue +6 1.22.1-r8 —
Wolfi rolling knative-serving-1.22-webhook-compat +1 1.22.1-r12 —
Wolfi rolling ko +1 0.19.1-r3 —
Wolfi rolling kratos 3.0.0-r4 —
Wolfi rolling kserve +1 0.20.0-r7 —
Wolfi rolling kserve-agent +4 0.20.0-r1 —
Wolfi rolling kserve-modelmesh-serving 0.12.0-r38 —
Wolfi rolling kserve-rest-proxy 0.12.0-r32 —
Wolfi rolling kube-bench 0.15.0-r17 —
Wolfi rolling kube-fluentd-operator 1.18.2-r77 —
Wolfi rolling kube-metrics-adapter 0.2.9-r15 —
Wolfi rolling kube-rbac-proxy 0.22.1-r5 —
Wolfi rolling kube-vip 1.2.3-r1 —
Wolfi rolling kube-webhook-certgen-1.15 +2 1.15.10-r1 —
Wolfi rolling kubeadm-1.35 +7 1.35.7-r5 —
Wolfi rolling kubeadm-1.36 +7 1.36.3-r3 —
Wolfi rolling kubebuilder 4.15.0-r4 —
Wolfi rolling kubectl-1.33 1.33.13-r3 —
Wolfi rolling kubectl-bash-completion-1.35 +3 1.35.8-r6 —
Wolfi rolling kubeflow-access-management +5 1.10.0-r31 —
Wolfi rolling kubeflow-pipelines-apiserver 2.17.2-r4 —
Wolfi rolling kubelet-csr-approver 1.2.14-r7 —
Wolfi rolling kuberay-operator 1.6.2-r4 —
Wolfi rolling kuberlr +1 0.7.0-r4 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.18.0-r2 —
Wolfi rolling kubernetes-csi-external-health-monitor 0.18.0-r13 —
Wolfi rolling kubernetes-csi-external-provisioner 6.3.0-r6 —
Wolfi rolling kubernetes-csi-external-resizer 2.2.1-r6 —
Wolfi rolling kubernetes-csi-external-snapshotter-8.6 +1 8.6.0-r9 —
Wolfi rolling kubernetes-csi-node-driver-registrar-2.16 2.16.0-r24 —
Wolfi rolling kubernetes-csi-node-driver-registrar-2.17 2.17.0-r8 —
Wolfi rolling kubernetes-csi-node-driver-registrar-2.17-compat 2.17.0-r11 —
Wolfi rolling kubernetes-dashboard-api 1.14.0-r17 —
Wolfi rolling kubernetes-dashboard-metrics-scraper 1.2.2-r31 —
Wolfi rolling kubernetes-dashboard-web 1.7.0-r30 —
Wolfi rolling kubernetes-dns-node-cache 1.26.8-r14 —
Wolfi rolling kubernetes-event-exporter 1.7-r69 —
Wolfi rolling kubernetes-replicator 2.12.4-r3 —
Wolfi rolling kubescape 4.0.12-r1 —
Wolfi rolling kubescape-operator 0.2.162-r1 —
Wolfi rolling kubevela-vela-cli +1 1.11.0-r5 —
Wolfi rolling kubewatch +1 2.15.0-r3 —
Wolfi rolling kubo 0.43.0-r1 —
Wolfi rolling kubo-compat 0.43.1-r0 —
Wolfi rolling kuma-cp-2.13 +4 2.13.10-r1 —
Wolfi rolling kustomize 5.8.1-r11 —
Wolfi rolling kwok +1 0.8.0-r4 —
Wolfi rolling kyverno-1.17 1.17.2-r35 —
Wolfi rolling kyverno-1.18 +6 1.18.2-r7 —
Wolfi rolling kyverno-cli-1.17 +5 1.17.2-r28 —
Wolfi rolling kyverno-notation-aws 1.1-r73 —
Wolfi rolling kyverno-policy-reporter 3.9.1-r1 —
Wolfi rolling lazydocker 0.25.2-r8 —
Wolfi rolling lazygit 0.64.1-r1 —
Wolfi rolling litestream 0.5.17-r3 —
Wolfi rolling local-path-provisioner 0.0.37-r1 —
Wolfi rolling local-static-provisioner +1 2.9.0-r1 —
Wolfi rolling local-volume-node-cleanup-compat 2.9.0-r4 —
Wolfi rolling logstash-exporter 1.9.1-r16 —
Wolfi rolling loki-3.6 +3 3.6.14-r1 —
Wolfi rolling lvm-driver +2 1.9.1-r3 —
Wolfi rolling mailpit 1.30.7-r1 —
Wolfi rolling malcontent 1.25.9-r1 —
Wolfi rolling manifest-tool 2.2.2-r9 —
Wolfi rolling mariadb-operator 26.6.0-r8 —
Wolfi rolling maru 0.6.0-r21 —
Wolfi rolling mattermost-11.1 11.10.0-r1 —
Wolfi rolling mattermost-11.7 11.7.9-r1 —
Wolfi rolling mcp-grafana 1.1.0-r1 —
Wolfi rolling melange 0.59.0-r0 —
Wolfi rolling mesosphere-vsphere-csi-driver +1 3.5.0-r26 —
Wolfi rolling metallb +4 0.16.1-r7 —
Wolfi rolling metrics-agent 2.14.14-r5 —
Wolfi rolling metrics-server 0.9.0-r4 —
Wolfi rolling metrics-server-compat 0.9.0-r11 —
Wolfi rolling migrate 4.19.1-r24 —
Wolfi rolling minio 0.20260717.120751-r6 —
Wolfi rolling minio-object-browser 2.0.4-r22 —
Wolfi rolling mongo-tools 100.18.0-r2 —
Wolfi rolling mongodb-kubernetes-operator +2 0.13.0-r21 —
Wolfi rolling mongodb-kubernetes-operator-compat 0.13.0-r26 —
Wolfi rolling mongodb-kubernetes-operator-version-upgrade-post-start-hook-compat 1.0.10-r27 —
Wolfi rolling mountpoint-s3-csi-driver-2.5 2.5.0-r13 —
Wolfi rolling mps-control-daemon +2 0.19.3-r6 —
Wolfi rolling multus-cni 4.3.0-r3 —
Wolfi rolling nats 0.4.0-r5 —
Wolfi rolling nats-top 0.6.4-r12 —
Wolfi rolling net-kourier-1.21 1.21.1-r11 —
Wolfi rolling neuvector-dbgen 0_git20260718-r1 —
Wolfi rolling newrelic-fluent-bit-output 3.8.0-r1 —
Wolfi rolling newrelic-fluent-bit-output-compat 3.8.0-r5 —
Wolfi rolling newrelic-infra-operator 1.1.1-r1 —
Wolfi rolling nfpm 2.47.0-r5 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r45 —
Wolfi rolling nginx-prometheus-exporter 1.5.3-r0 —
Wolfi rolling node-feature-discovery-0.18 0.18.3-r24 —
Wolfi rolling nodetaint 0.0.5-r12 —
Wolfi rolling nova 3.12.0-r10 —
Wolfi rolling nri-apache 1.17.3-r1 —
Wolfi rolling nri-consul 2.11.4-r1 —
Wolfi rolling nri-couchbase 2.11.2-r1 —
Wolfi rolling nri-elasticsearch 6.3.2-r1 —
Wolfi rolling nri-f5 2.11.3-r1 —
Wolfi rolling nri-haproxy +1 3.5.0-r1 —
Wolfi rolling nri-jmx +1 3.16.0-r1 —
Wolfi rolling nri-kubernetes 4.6.0-r1 —
Wolfi rolling nri-mssql 2.36.0-r1 —
Wolfi rolling nri-nginx 3.8.3-r2 —
Wolfi rolling nri-prometheus 2.30.2-r1 —
Wolfi rolling nri-rabbitmq 2.17.3-r2 —
Wolfi rolling nsc 2.15.0-r5 —
Wolfi rolling nuclei 3.11.1-r2 —
Wolfi rolling oauth2-proxy 7.15.3-r6 —
Wolfi rolling octo-sts +1 0.8.0-r1 —
Wolfi rolling ollama 0.32.14-r0 —
Wolfi rolling op-geth +4 1.101702.2-r8 —
Wolfi rolling opa 1.19.0-r1 —
Wolfi rolling openbao 2.6.1-r2 —
Wolfi rolling openbao-k8s 1.4.0-r56 —
Wolfi rolling opencost 1.121.1-r1 —
Wolfi rolling openfga 1.18.3-r1 —
Wolfi rolling opensearch-k8s-operator 2.8.0-r22 —
Wolfi rolling opentofu-1.11 1.11.14-r6 —
Wolfi rolling opentofu-1.12 1.12.6-r6 —
Wolfi rolling opentofu-1.9 1.9.4-r24 —
Wolfi rolling osv-scanner 2.5.0-r1 —
Wolfi rolling otel-cli 0.4.5-r29 —
Wolfi rolling pdfcpu 0.15.0-r1 —
Wolfi rolling percona-server-mongodb-operator +1 1.23.0-r3 —
Wolfi rolling pg_timetable 7.0.0-r3 —
Wolfi rolling pg_user 1.1.1-r18 —
Wolfi rolling pgpool2_exporter 1.2.2-r27 —
Wolfi rolling php-fpm_exporter 2.2.0-r34 —
Wolfi rolling pinact 4.1.1-r1 —
Wolfi rolling pluto 5.24.3-r1 —
Wolfi rolling podcli +1 6.14.1-r2 —
Wolfi rolling podman-6.0 6.0.2-r2 —
Wolfi rolling polaris 10.2.2-r1 —
Wolfi rolling policy-controller +1 0.15.1-r22 —
Wolfi rolling portieris 0.14.2-r4 —
Wolfi rolling postgres-operator 2.0.1-r2 —
Wolfi rolling prometheus-3.10 3.10.0-r18 —
Wolfi rolling prometheus-3.11 3.11.3-r13 —
Wolfi rolling prometheus-3.9 3.9.1-r11 —
Wolfi rolling prometheus-alertmanager 0.33.1-r5 —
Wolfi rolling prometheus-operator +2 0.93.1-r1 —
Wolfi rolling prometheus-operator-iamguarded-compat 0.94.0-r0 —
Wolfi rolling pulumi-kubernetes-operator 2.9.0-r2 —
Wolfi rolling pulumi-language-java 1.36.0-r1 —
Wolfi rolling pulumi-language-yaml 1.38.2-r1 —
Wolfi rolling pvc-autoresizer 0.21.0-r13 —
Wolfi rolling q 0.19.12-r14 —
Wolfi rolling rabbitmq-default-user-credential-updater 1.0.16-r1 —
Wolfi rolling rabbitmq-messaging-topology-operator 1.20.1-r1 —
Wolfi rolling rabbitmq-messaging-topology-operator-iamguarded-compat 1.20.3-r1 —
Wolfi rolling rancher-2.14 +1 2.14.4-r1 —
Wolfi rolling rancher-agent-2.13 2.13.8-r1 —
Wolfi rolling rancher-fleet 0.16.1-r3 —
Wolfi rolling rancher-fleet-cli +2 0.16.0-r2 —
Wolfi rolling rancher-helm-3 3.20.0-r20 —
Wolfi rolling rancher-loglevel 0.1.6-r23 —
Wolfi rolling rancher-machine 0.15.0.145-r4 —
Wolfi rolling rancher-system-agent 0.15.0-r3 —
Wolfi rolling rancher-system-upgrade-controller 0.20.1-r2 —
Wolfi rolling rancher-telemetry 0.6.2-r25 —
Wolfi rolling rancher-webhook-0.10 0.10.9-r2 —
Wolfi rolling ratify +4 1.4.4-r1 —
Wolfi rolling ratify-licensechecker-compat 1.4.5-r4 —
Wolfi rolling rclone 1.75.0-r1 —
Wolfi rolling redis-operator 0.26.0-r3 —
Wolfi rolling regclient-regbot +2 0.11.5-r6 —
Wolfi rolling rekor-cli +1 1.5.3-r4 —
Wolfi rolling renovate 44.115.4-r0 —
Wolfi rolling rootlesskit 3.1.0-r1 —
Wolfi rolling rqlite 10.2.7-r3 —
Wolfi rolling runc 1.5.1-r2 —
Wolfi rolling runc-1.4 1.4.3-r1 —
Wolfi rolling s5cmd 2.3.0-r22 —
Wolfi rolling sbom-convert 0.0.7-r20 —
Wolfi rolling sbomqs 2.0.12-r0 —
Wolfi rolling scorecard 5.5.0-r15 —
Wolfi rolling sealed-secrets +1 0.38.4-r2 —
Wolfi rolling seaweedfs 4.41-r1 —
Wolfi rolling secrets-store-csi-driver 1.6.0-r9 —
Wolfi rolling secrets-store-csi-driver-provider-aws 3.1.2-r2 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.8.2-r4 —
Wolfi rolling sftpgo 2.7.5-r4 —
Wolfi rolling sftpgo-plugin-auth 1.0.16-r4 —
Wolfi rolling sftpgo-plugin-eventsearch 1.0.24-r4 —
Wolfi rolling sftpgo-plugin-geoipfilter 1.0.14-r3 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.18-r3 —
Wolfi rolling sigstore-scaffolding-rekor-createsecret 0.7.37-r7 —
Wolfi rolling skaffold 2.24.0-r3 —
Wolfi rolling skopeo 1.24.0-r1 —
Wolfi rolling slsa-verifier 2.7.1-r28 —
Wolfi rolling smarter-device-manager 1.20.11-r37 —
Wolfi rolling smokescreen 0_git20260803-r1 —
Wolfi rolling sonobuoy 0.57.5-r3 —
Wolfi rolling spark-operator 2.5.2-r1 —
Wolfi rolling speedtest-go 1.7.11-r1 —
Wolfi rolling spegel 0.7.4-r5 —
Wolfi rolling spicedb-operator 1.26.0-r3 —
Wolfi rolling spiffe-helper 0.11.0-r24 —
Wolfi rolling spire-agent +2 1.15.2-r5 —
Wolfi rolling splunk-otel-collector +3 0.158.0-r1 —
Wolfi rolling splunk-otel-collector-compat 0.160.0-r0 —
Wolfi rolling sql_exporter 0.24.5-r1 —
Wolfi rolling src 7.6.0-r1 —
Wolfi rolling sriov-network-device-plugin 3.11.0-r19 —
Wolfi rolling stakater-reloader 1.4.21-r1 —
Wolfi rolling steampipe 2.4.5-r1 —
Wolfi rolling step 0.30.6-r6 —
Wolfi rolling step-issuer 0.12.0-r6 —
Wolfi rolling step-issuer-compat 0.12.0-r12 —
Wolfi rolling step-kms-plugin 0.17.0-r12 —
Wolfi rolling stern 1.34.0-r7 —
Wolfi rolling swagger 0.36.3-r0 —
Wolfi rolling syft 1.51.0-r1 —
Wolfi rolling tailscale +1 1.102.2-r1 —
Wolfi rolling task 3.52.0-r4 —
Wolfi rolling tekton-chains 0.29.1-r1 —
Wolfi rolling tekton-pipelines-events-1.12 +5 1.12.2-r7 —
Wolfi rolling tekton-pipelines-webhook-1.11 +1 1.11.1-r20 —
Wolfi rolling tempo-3.0 +1 3.0.3-r6 —
Wolfi rolling temporal 1.8.2-r1 —
Wolfi rolling terraform 1.5.7-r55 —
Wolfi rolling terraform-docs 0.24.0-r7 —
Wolfi rolling terraform-mcp-server 1.2.0-r2 —
Wolfi rolling terraform-provider-acme 2.48.3-r3 —
Wolfi rolling terraform-provider-azapi 2.12.0-r1 —
Wolfi rolling terraform-provider-azuread 3.9.0-r4 —
Wolfi rolling terraform-provider-azurerm 5.1.0-r1 —
Wolfi rolling terraform-provider-google 7.44.0-r1 —
Wolfi rolling terraform-provider-grafana 4.45.1-r1 —
Wolfi rolling terraform-provider-kubernetes 3.2.1-r4 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r25 —
Wolfi rolling terraform-provider-tls 4.3.0-r11 —
Wolfi rolling terragrunt 1.1.3-r1 —
Wolfi rolling tetra 1.7.0-r7 —
Wolfi rolling tfsec 1.28.14-r44 —
Wolfi rolling thanos-operator 0.3.7-r51 —
Wolfi rolling timestamp-authority-cli +1 2.1.3-r5 —
Wolfi rolling timoni 0.31.0-r1 —
Wolfi rolling tkn 0.46.0-r1 —
Wolfi rolling traefik-3.6 3.6.25-r2 —
Wolfi rolling traefik-3.7 3.7.10-r2 —
Wolfi rolling trillian-logsigner 1.7.3-r19 —
Wolfi rolling trino 483-r2 —
Wolfi rolling trino-plugin-oracle +3 483-r7 —
Wolfi rolling trufflehog 3.96.0-r2 —
Wolfi rolling tw +2 0.0.50-r5 —
Wolfi rolling vale 3.17.1-r1 —
Wolfi rolling vault-env 1.23.0-r7 —
Wolfi rolling vault-secrets-webhook 1.23.1-r6 —
Wolfi rolling vcluster +2 0.36.1-r2 —
Wolfi rolling velero 1.18.2-r5 —
Wolfi rolling velero-plugin-for-csi +1 0.7.1-r55 —
Wolfi rolling velero-plugin-for-microsoft-azure 1.14.2-r3 —
Wolfi rolling vendir +1 0.46.0-r3 —
Wolfi rolling verticadb-operator 25.4.0.0-r23 —
Wolfi rolling vertical-pod-autoscaler +2 1.7.1-r4 —
Wolfi rolling vexctl 0.4.4-r4 —
Wolfi rolling victoriametrics +3 1.149.0-r1 —
Wolfi rolling victoriametrics-operator +1 0.73.1-r4 —
Wolfi rolling victoriametrics-vmagent-cluster +4 1.149.0-r2 —
Wolfi rolling victoriametrics-vmauth-compat +1 1.152.0-r0 —
Wolfi rolling vitess-23 +1 23.0.5-r8 —
Wolfi rolling volume-modifier-for-k8s 0.9.5-r5 —
Wolfi rolling vt-cli 1.3.1-r7 —
Wolfi rolling wave 0.11.0-r18 —
Wolfi rolling weaviate 1.39.0-r1 —
Wolfi rolling whereabouts 0.9.4-r6 —
Wolfi rolling witness 0.12.0-r4 —
Wolfi rolling xeol 0.10.8-r52 —
Wolfi rolling zarf 0.83.0-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.25.13 · >= 1.26.0-0, < 1.26.6 · >= 1.27.0-0, < 1.27.0-rc.3 1.25.13, 1.26.6, 1.27.0-rc.3 GO-2026-6218

Advisories 50

References