Description
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connection and stream flow-control windows. An unauthenticated remote attacker can use concurrent multiplexed streams to exhaust process memory and cause a runtime panic or out-of-memory termination. Receive-buffer compaction is enabled by default and can be controlled temporarily with GRPC_GO_EXPERIMENTAL_ENABLE_RECEIVE_BUFFER_COMPACTION. This issue is fixed in version 1.83.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| grpc | grpc-go | < 1.83.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-google-grpc | No fix yet | — |
| Debian 13 | golang-google-grpc | No fix yet | — |
| Debian 12 | golang-google-grpc | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | golang-google-grpc +1 | No fix yet | — |
| Ubuntu 26.04 LTS | golang-google-grpc +1 | No fix yet | — |
| Ubuntu 24.04 LTS | google-guest-agent | No fix yet | — |
| Ubuntu 22.04 LTS | golang-google-grpc +1 | No fix yet | — |
| Ubuntu 20.04 LTS | golang-google-grpc | No fix yet | — |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | golang-google-grpc | No fix yet | — |
| Ubuntu 16.04 LTS | golang-google-grpc | No fix yet | — |
| Ubuntu Pro 24.04 LTS | golang-google-grpc | No fix yet | — |
| Ubuntu Pro 20.04 LTS | google-guest-agent | No fix yet | — |
| Ubuntu Pro 18.04 LTS | google-guest-agent | No fix yet | — |
| Ubuntu Pro 16.04 LTS | google-guest-agent | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | alloy | 1.20.1-150700.15.34.1 | SUSE-SU-2026:5203-1 |
| SLES 15 SP7 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP7 | apptainer | 1.5.3-150600.4.43.1 | SUSE-SU-2026:4308-1 |
| SLES 15 SP7 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP7 | cosign | 3.1.3-150400.3.57.1 | SUSE-SU-2026:4392-1 |
| SLES 15 SP7 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP7 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP7 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP7 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP7 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP7 | kubevirt | 1.7.4-150700.3.42.1 | SUSE-SU-2026:5167-1 |
| SLES 15 SP6 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP6 | apptainer | 1.5.3-150600.4.43.1 | SUSE-SU-2026:4308-1 |
| SLES 15 SP6 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP6 | cosign | 3.1.3-150400.3.57.1 | SUSE-SU-2026:4392-1 |
| SLES 15 SP6 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP6 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP6 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP6 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP6 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP5 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP5 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP5 | cosign | 3.1.3-150400.3.57.1 | SUSE-SU-2026:4392-1 |
| SLES 15 SP5 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP5 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP5 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP5 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP5 | terraform-provider-aws | 3.11.0-150200.6.29.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-azurerm | 2.32.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-external | 2.0.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-google | 3.43.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-helm | 2.9.0-150200.6.34.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-kubernetes | 1.13.2-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-local | 2.0.0-150200.6.30.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-null | 3.0.0-150200.6.27.1 | SUSE-SU-2026:4628-1, SUSE-SU-2026:4062-1 |
| SLES 15 SP5 | terraform-provider-random | 3.0.0-150200.6.26.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-susepubliccloud | 0.0.1-150100.3.23.1 | SUSE-SU-2026:4444-1, SUSE-SU-2026:4389-1 |
| SLES 15 SP5 | terraform-provider-tls | 3.0.0-150200.5.26.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP4 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP4 | cosign | 3.1.3-150400.3.57.1 | SUSE-SU-2026:4392-1 |
| SLES 15 SP4 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP4 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP4 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP4 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP4 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP4 | terraform-provider-aws | 3.11.0-150200.6.29.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-azurerm | 2.32.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-external | 2.0.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-google | 3.43.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-helm | 2.9.0-150200.6.34.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-kubernetes | 1.13.2-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-local | 2.0.0-150200.6.30.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-null | 3.0.0-150200.6.27.1 | SUSE-SU-2026:4628-1, SUSE-SU-2026:4062-1 |
| SLES 15 SP4 | terraform-provider-random | 3.0.0-150200.6.26.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-susepubliccloud | 0.0.1-150100.3.23.1 | SUSE-SU-2026:4444-1, SUSE-SU-2026:4389-1 |
| SLES 15 SP4 | terraform-provider-tls | 3.0.0-150200.5.26.2 | SUSE-SU-2026:4628-1 |
| SLES 12 | google-cloud-sap-agent | 3.15-6.81.1 | SUSE-SU-2026:4178-1 |
| SLES 12 | google-guest-agent | 20260903.01-1.75.1 | SUSE-SU-2026:4272-1 |
| SLES 12 | google-osconfig-agent | 20260911.00-1.60.1 | SUSE-SU-2026:4292-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | amazon-ecs-init | 1.107.0-160000.1.1 | SUSE-SU-2026:24150-1 |
| SLES for SAP 16.0 | cosign | 3.1.3-160000.1.1 | SUSE-SU-2026:24213-1 |
| SLES for SAP 16.0 | distribution | 3.1.1-160000.3.1 | SUSE-SU-2026:23864-1, SUSE-SU-2026:23852-1 |
| SLES for SAP 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 | SUSE-SU-2026:23729-1, SUSE-SU-2026:23708-1 |
| SLES for SAP 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 | SUSE-SU-2026:23863-1, SUSE-SU-2026:23855-1 |
| SLES for SAP 16.0 | helm | 3.21.3-160000.2.1 | SUSE-SU-2026:23688-1 |
| SLES for SAP 15 SP6 | cosign | 3.1.3-150400.3.57.1 | SUSE-SU-2026:4392-1 |
| SLES for SAP 15 SP6 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES for SAP 15 SP6 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES for SAP 15 SP5 | cosign | 3.1.3-150400.3.57.1 | SUSE-SU-2026:4392-1 |
| SLES for SAP 15 SP5 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES for SAP 15 SP5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES for SAP 15 SP4 | cosign | 3.1.3-150400.3.57.1 | SUSE-SU-2026:4392-1 |
| SLES for SAP 15 SP4 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES for SAP 15 SP4 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 16.0 | amazon-ecs-init | 1.107.0-160000.1.1 | SUSE-SU-2026:24150-1 |
| SLES 16.0 | cosign | 3.1.3-160000.1.1 | SUSE-SU-2026:24213-1 |
| SLES 16.0 | distribution | 3.1.1-160000.3.1 | SUSE-SU-2026:23864-1, SUSE-SU-2026:23852-1 |
| SLES 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 | SUSE-SU-2026:23729-1, SUSE-SU-2026:23708-1 |
| SLES 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 | SUSE-SU-2026:23863-1, SUSE-SU-2026:23855-1 |
| SLES 16.0 | helm | 3.21.3-160000.2.1 | SUSE-SU-2026:23688-1 |
| SLE Micro 6.2 | elemental | 2.3.2-160000.1.1 | SUSE-SU-2026:24645-1 |
| SLE Micro 6.2 | elemental-register | 1.9.3-160000.1.1 | SUSE-SU-2026:24645-1 |
| SLE Micro 6.2 | elemental-system-agent | 0.15.2-160000.1.1 | SUSE-SU-2026:24645-1 |
| SLE Micro 6.2 | elemental-toolkit | 2.3.5-160000.1.1 | SUSE-SU-2026:24645-1 |
| SLE Micro 6.2 | helm | 3.21.3-160000.2.1 | SUSE-SU-2026:23506-1 |
| SLE Micro 6.1 | google-guest-agent | 20260903.01-slfo.1.1_1.1 | SUSE-SU-2026:23736-1 |
| SLE Micro 6.1 | google-osconfig-agent | 20260908.00-slfo.1.1_1.1 | SUSE-SU-2026:23739-1 |
| SLE Micro 6.1 | helm | 3.21.3-slfo.1.1_3.1 | SUSE-SU-2026:23730-1 |
| SLE Micro 6.0 | elemental-operator | 1.6.12-159998.1.1 | SUSE-SU-2026:24709-1 |
| SLE Micro 6.0 | elemental-system-agent | 0.15.2-159998.1.1 | SUSE-SU-2026:24709-1 |
| SLE Micro 6.0 | elemental-toolkit | 2.1.7-159998.1.1 | SUSE-SU-2026:24709-1 |
| SLE Micro 6.0 | google-guest-agent | 20260903.01-1.1 | SUSE-SU-2026:23831-1 |
| SLE Micro 6.0 | google-osconfig-agent | 20260908.00-1.1 | SUSE-SU-2026:23548-1 |
| SLE Micro 6.0 | helm | 3.21.3-3.1 | SUSE-SU-2026:23546-1 |
| SLE Micro 5.5 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLE Micro 5.5 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLE Micro 5.5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLE HPC 15 SP5 | cosign | 3.1.3-150400.3.57.1 | SUSE-SU-2026:4392-1 |
| SLE HPC 15 SP5 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLE HPC 15 SP5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLE HPC 15 SP4 | cosign | 3.1.3-150400.3.57.1 | SUSE-SU-2026:4392-1 |
| SLE HPC 15 SP4 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLE HPC 15 SP4 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | alloy | 1.20.1-1.1 | openSUSE-SU-2026:12114-1 |
| openSUSE Tumbleweed | amazon-cloudwatch-agent | 1.300072.0-1.1 | openSUSE-SU-2026:11828-1 |
| openSUSE Tumbleweed | amazon-ecs-init | 1.107.0-1.1 | openSUSE-SU-2026:11914-1 |
| openSUSE Tumbleweed | apptainer | 1.5.3-4.1 | openSUSE-SU-2026:11830-1 |
| openSUSE Tumbleweed | azure-storage-azcopy | 10.32.8-1.1 | openSUSE-SU-2026:11740-1 |
| openSUSE Tumbleweed | cadvisor | 0.60.5-3.1 | openSUSE-SU-2026:11695-1 |
| openSUSE Tumbleweed | containerd | 2.4.2-1.1 | openSUSE-SU-2026:12342-1 |
| openSUSE Tumbleweed | containerized-data-importer1.65 | 1.65.0-3.1 | openSUSE-SU-2026:11731-1 |
| openSUSE Tumbleweed | containerized-data-importer1.66 | 1.66.1-1.1 | openSUSE-SU-2026:11732-1 |
| openSUSE Tumbleweed | coredns | 1.14.7-3.1 | openSUSE-SU-2026:12149-1 |
| openSUSE Tumbleweed | cosign | 3.1.3-1.1 | openSUSE-SU-2026:11871-1 |
| openSUSE Tumbleweed | distribution | 3.1.1-6.1 | openSUSE-SU-2026:11697-1 |
| openSUSE Tumbleweed | gh | 2.102.0-1.1 | openSUSE-SU-2026:12163-1 |
| openSUSE Tumbleweed | google-guest-agent | 20260903.01-1.1 | openSUSE-SU-2026:11742-1 |
| openSUSE Tumbleweed | grafana | 12.4.11-1.1 | openSUSE-SU-2026:11920-1 |
| openSUSE Tumbleweed | hauler | 2.1.0-3.1 | openSUSE-SU-2026:11700-1 |
| openSUSE Tumbleweed | helm | 4.2.4-3.1 | openSUSE-SU-2026:11718-1 |
| openSUSE Tumbleweed | helm3 | 3.21.3-8.1 | openSUSE-SU-2026:11686-1 |
| openSUSE Tumbleweed | kubectl-cnpg | 1.30.1-1.1 | openSUSE-SU-2026:11881-1 |
| openSUSE Tumbleweed | kubevirt1.8 | 1.8.4-7.1 | openSUSE-SU-2026:12241-1 |
| openSUSE Tumbleweed | kubevirt1.9 | 1.9.0-3.1 | openSUSE-SU-2026:11752-1 |
| openSUSE Tumbleweed | mcphost | 0.34.0-11.1 | openSUSE-SU-2026:11837-1 |
| openSUSE Tumbleweed | prometheus-blackbox_exporter | 0.26.0-9.1 | openSUSE-SU-2026:11925-1 |
| openSUSE Tumbleweed | rqlite | 10.6.1-1.1 | openSUSE-SU-2026:12186-1 |
| openSUSE Tumbleweed | tekton-cli | 0.46.2-1.1 | openSUSE-SU-2026:12253-1 |
| openSUSE Tumbleweed | trivy | 0.74.0-4.1 | openSUSE-SU-2026:11713-1 |
| openSUSE Tumbleweed | wait4x | 3.7.2-1.1 | openSUSE-SU-2026:11911-1 |
| openSUSE Leap 16.0 | amazon-ecs-init | 1.107.0-160000.1.1 | openSUSE-SU-2026:22035-1 |
| openSUSE Leap 16.0 | apptainer | 1.5.3-bp160.4.1 | openSUSE-SU-2026:21927-1 |
| openSUSE Leap 16.0 | cadvisor | 0.60.5-bp160.2.1 | openSUSE-SU-2026:21843-1 |
| openSUSE Leap 16.0 | containerized-data-importer1.65 | 1.65.0-160000.3.1 | openSUSE-SU-2026:21824-1 |
| openSUSE Leap 16.0 | coredns | 1.14.7-bp160.2.1 | openSUSE-SU-2026:22135-1 |
| openSUSE Leap 16.0 | cosign | 3.1.3-160000.1.1 | openSUSE-SU-2026:22064-1 |
| openSUSE Leap 16.0 | distribution | 3.1.1-160000.3.1 | openSUSE-SU-2026:21898-1 |
| openSUSE Leap 16.0 | gh | 2.102.0-bp160.1.1 | openSUSE-SU-2026:22134-1 |
| openSUSE Leap 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 | openSUSE-SU-2026:21834-1 |
| openSUSE Leap 16.0 | google-guest-agent | 20260903.01-160000.1.1 | openSUSE-SU-2026:21879-1 |
| openSUSE Leap 16.0 | google-osconfig-agent | 20260911.00-160000.1.1 | openSUSE-SU-2026:21882-1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 | openSUSE-SU-2026:21897-1 |
| openSUSE Leap 16.0 | hauler | 2.1.0-bp160.3.1 | openSUSE-SU-2026:21841-1 |
| openSUSE Leap 16.0 | helm | 3.21.3-160000.2.1 | openSUSE-SU-2026:21809-1 |
| openSUSE Leap 16.0 | mcphost | 0.34.0-160000.5.1 | openSUSE-SU-2026:21886-1 |
| openSUSE Leap 16.0 | prometheus-blackbox_exporter | 0.26.0-bp160.1.1 | openSUSE-SU-2026:22026-1 |
| openSUSE Leap 16.0 | rqlite | 10.6.6-bp160.1.1 | openSUSE-SU-2026:22224-1 |
| openSUSE Leap 16.0 | trivy | 0.74.0-160000.2.1 | openSUSE-SU-2026:21801-1 |
| openSUSE Leap 16.0 | v2ray-core | 5.54.2-bp160.1.1 | openSUSE-SU-2026:21996-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | azcopy | 10.25.1-9 | — |
| Azure Linux 3 | azurelinux-image-tools | 1.6.0-3 | — |
| Azure Linux 3 | containerd2 | 2.3.7-1 | — |
| Azure Linux 3 | containerized-data-importer | 1.62.0-8 | — |
| Azure Linux 3 | coredns | 1.11.4-21 | — |
| Azure Linux 3 | cri-tools | 1.32.0-10 | — |
| Azure Linux 3 | docker-buildx | 0.14.0-19 | — |
| Azure Linux 3 | docker-compose | 2.27.0-15 | — |
| Azure Linux 3 | etcd | 3.5.34-1 | — |
| Azure Linux 3 | flannel | 0.24.2-33 | — |
| Azure Linux 3 | gh | 2.101.0-1 | — |
| Azure Linux 3 | kata-containers | 3.32.0.kata0-6 | — |
| Azure Linux 3 | kata-containers-cc | 3.15.0.aks0-21 | — |
| Azure Linux 3 | kubernetes | 1.30.10-32 | — |
| Azure Linux 3 | kubevirt | 1.8.4-4 | — |
| Azure Linux 3 | moby-containerd-cc | 1.7.7-19 | — |
| Azure Linux 3 | moby-engine | 25.0.18-1 | — |
| Azure Linux 3 | multus | 4.0.2-11 | — |
| Azure Linux 3 | opa +17 | No fix yet | — |
| Azure Linux 3 | packer | 1.9.5-22 | — |
| Azure Linux 3 | skopeo | 1.14.4-13 | — |
| Azure Linux 3 | sriov-network-device-plugin | 3.7.0-8 | — |
| Azure Linux 3 | telegraf | 1.31.0-33 | — |
| Azure Linux 3 | vitess | 19.0.4-14 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r74 | — |
| Wolfi rolling | amass | 5.1.1-r16 | — |
| Wolfi rolling | amazon-cloudwatch-agent | 1.300073.0-r0 | — |
| Wolfi rolling | amazon-cloudwatch-agent-operator | 3.7.0-r5 | — |
| Wolfi rolling | amazon-k8s-cni | 1.23.0-r4 | — |
| Wolfi rolling | amazon-k8s-cni-init-compat | 1.23.1-r0 | — |
| Wolfi rolling | apisix-ingress-controller | 2.2.0-r4 | — |
| Wolfi rolling | apko | 1.2.43-r2 | — |
| Wolfi rolling | argo-cd-3.2 +1 | 3.2.12-r17 | — |
| Wolfi rolling | argo-cd-3.3 +1 | 3.3.14-r7 | — |
| Wolfi rolling | argo-cd-3.4 +1 | 3.4.8-r1 | — |
| Wolfi rolling | argo-events | 1.9.11-r8 | — |
| Wolfi rolling | argo-rollouts +1 | 1.10.0-r1 | — |
| Wolfi rolling | argo-workflows-4.0 +2 | 4.0.10-r4 | — |
| Wolfi rolling | argo-workflows-ui-4.0 | 4.0.11-r0 | — |
| Wolfi rolling | argocd-image-updater | 1.3.0-r7 | — |
| Wolfi rolling | authservice | 1.1.8-r4 | — |
| Wolfi rolling | aws-efs-csi-driver | 3.4.2-r3 | — |
| Wolfi rolling | aws-network-policy-agent | 1.4.2-r0 | — |
| Wolfi rolling | aws-otel-collector | 0.50.0-r3 | — |
| Wolfi rolling | azure-service-operator | 2.21.0-r2 | — |
| Wolfi rolling | azuredisk-csi-1.34 | 1.34.5-r6 | — |
| Wolfi rolling | azurefile-csi-1.35 | 1.35.7-r5 | — |
| Wolfi rolling | bank-vaults +1 | 1.33.2-r2 | — |
| Wolfi rolling | bento | 1.21.1-r5 | — |
| Wolfi rolling | blob-csi-1.27 | 1.27.9-r5 | — |
| Wolfi rolling | boring-registry | 0.19.0-r6 | — |
| Wolfi rolling | buildah | 1.45.0-r6 | — |
| Wolfi rolling | caddy | 2.11.4-r11 | — |
| Wolfi rolling | cadvisor | 0.60.5-r7 | — |
| Wolfi rolling | cadvisor-compat | 0.60.5-r8 | — |
| Wolfi rolling | calico-goldmane-3.31 +2 | 3.31.7-r3 | — |
| Wolfi rolling | calico-key-cert-provisioner-3.32 | 3.32.2-r3 | — |
| Wolfi rolling | calicoctl-3.31 +9 | 3.31.7-r2 | — |
| Wolfi rolling | calicoctl-3.32 +10 | 3.32.2-r1 | — |
| Wolfi rolling | cerbos +1 | 0.55.0-r5 | — |
| Wolfi rolling | cert-manager-1.20 +2 | 1.20.3-r16 | — |
| Wolfi rolling | cert-manager-1.20-crds +1 | 1.20.3-r18 | — |
| Wolfi rolling | cert-manager-csi-driver | 0.16.0-r6 | — |
| Wolfi rolling | cert-manager-istio-csr | 0.17.0-r4 | — |
| Wolfi rolling | cert-manager-webhook-pdns | 2.5.5-r24 | — |
| Wolfi rolling | certificate-transparency | 1.3.3-r22 | — |
| Wolfi rolling | certificate-transparency-trillian-ctserver | 1.3.3-r21 | — |
| Wolfi rolling | chartmuseum | 0.16.6-r4 | — |
| Wolfi rolling | cilium-1.19 +5 | 1.19.7-r4 | — |
| Wolfi rolling | cilium-cli | 0.20.0-r2 | — |
| Wolfi rolling | cloud-provider-aws-1.35-cloud-controller-manager | 1.35.2-r15 | — |
| Wolfi rolling | cloud-provider-aws-1.36-cloud-controller-manager | 1.36.1-r7 | — |
| Wolfi rolling | cloud-provider-azure-cloud-controller-manager-1.36-compat | 1.36.6-r0 | — |
| Wolfi rolling | cloud-provider-azure-cloud-node-manager-1.36 +1 | 1.36.5-r5 | — |
| Wolfi rolling | cloud-provider-gcp-cloud-controller-manager | 35.0.5-r21 | — |
| Wolfi rolling | cloud-provider-vsphere | 1.37.0-r2 | — |
| Wolfi rolling | cloud-sql-proxy-2.16 | 2.16.0-r32 | — |
| Wolfi rolling | cloud-sql-proxy-2.21 | 2.21.3-r14 | — |
| Wolfi rolling | cloud-sql-proxy-2.22 | 2.22.1-r8 | — |
| Wolfi rolling | cloud-sql-proxy-2.23 | 2.23.0-r8 | — |
| Wolfi rolling | cloud-sql-proxy-2.24 | 2.24.1-r5 | — |
| Wolfi rolling | cloudflared | 2026.8.3-r2 | — |
| Wolfi rolling | cloudnative-pg +1 | 1.30.0-r8 | — |
| Wolfi rolling | cloudprober | 0.14.5-r2 | — |
| Wolfi rolling | cluster-api-1.12-clusterctl +1 | 1.12.11-r5 | — |
| Wolfi rolling | cluster-api-1.12-controller +3 | 1.12.11-r4 | — |
| Wolfi rolling | cluster-api-1.13-controller +3 | 1.13.5-r5 | — |
| Wolfi rolling | cluster-api-1.13-controller-compat | 1.13.6-r1 | — |
| Wolfi rolling | cluster-api-aws-controller | 2.13.0-r5 | — |
| Wolfi rolling | cluster-api-azure-controller | 1.26.0-r9 | — |
| Wolfi rolling | cluster-api-azure-controller-compat | 1.27.0-r1 | — |
| Wolfi rolling | cluster-api-gcp-controller | 1.13.1-r5 | — |
| Wolfi rolling | cluster-api-helm-controller | 0.6.4-r17 | — |
| Wolfi rolling | cluster-api-ipam-provider-in-cluster | 1.1.0-r15 | — |
| Wolfi rolling | cluster-api-provider-vsphere | 1.17.0-r1 | — |
| Wolfi rolling | cluster-autoscaler-1.35 | 1.35.2-r8 | — |
| Wolfi rolling | conftest | 0.69.0-r5 | — |
| Wolfi rolling | consul-k8s-1.9 +1 | 1.9.11-r6 | — |
| Wolfi rolling | container-object-storage-interface-sidecar | 0.2.2-r30 | — |
| Wolfi rolling | coredns-1.14 +1 | 1.14.7-r4 | — |
| Wolfi rolling | cortex | 1.21.1-r13 | — |
| Wolfi rolling | cosign-3 | 3.1.3-r5 | — |
| Wolfi rolling | crossplane-2.2 +1 | 2.2.5-r2 | — |
| Wolfi rolling | crossplane-provider-aws-ec2 +14 | 2.7.0-r5 | — |
| Wolfi rolling | crossplane-provider-aws-ec2-compat +3 | 2.7.0-r6 | — |
| Wolfi rolling | crossplane-provider-aws-kms | 2.7.0-r3 | — |
| Wolfi rolling | crossplane-provider-aws-s3 +5 | 2.7.0-r4 | — |
| Wolfi rolling | crossplane-provider-azure-authorization | 2.7.0-r2 | — |
| Wolfi rolling | crossplane-provider-keycloak | 3.0.1-r2 | — |
| Wolfi rolling | crossplane-provider-sql | 0.16.1-r5 | — |
| Wolfi rolling | ctr-1 +2 | 1.7.34-r13 | — |
| Wolfi rolling | ctr-2 +7 | 2.3.4-r9 | — |
| Wolfi rolling | dagdotdev | 0.0.20-r29 | — |
| Wolfi rolling | dagger | 0.20.8-r20 | — |
| Wolfi rolling | dapr-daprd-1.17 +5 | 1.17.13-r7 | — |
| Wolfi rolling | datadog-operator | 1.29.0-r6 | — |
| Wolfi rolling | dataplaneapi | 3.4.3-r1 | — |
| Wolfi rolling | db-operator | 2.42.0-r0 | — |
| Wolfi rolling | dbmate | 2.35.1-r3 | — |
| Wolfi rolling | descheduler | 0.36.0-r13 | — |
| Wolfi rolling | dex | 2.45.1-r25 | — |
| Wolfi rolling | dgraph | 25.4.1-r3 | — |
| Wolfi rolling | distribution +1 | 3.1.1-r14 | — |
| Wolfi rolling | dkron +6 | 4.1.3-r0 | — |
| Wolfi rolling | dkron-executor-grpc +2 | 4.1.2-r6 | — |
| Wolfi rolling | docker-cli-buildx | 0.37.0-r0 | — |
| Wolfi rolling | docker-compose | 5.5.0-r5 | — |
| Wolfi rolling | dockerd-28 | 28.5.2-r39 | — |
| Wolfi rolling | dockerd-29 | 29.7.2-r7 | — |
| Wolfi rolling | dogstatsd-7.77 +3 | 7.77.3-r25 | — |
| Wolfi rolling | dogstatsd-7.78 +3 | 7.78.4-r20 | — |
| Wolfi rolling | dogstatsd-7.79 +3 | 7.79.2-r18 | — |
| Wolfi rolling | dogstatsd-7.80 +7 | 7.80.4-r16 | — |
| Wolfi rolling | dogstatsd-7.81 +4 | 7.81.3-r5 | — |
| Wolfi rolling | dynamic-localpv-provisioner | 4.6.0-r3 | — |
| Wolfi rolling | eksctl | 0.230.0-r5 | — |
| Wolfi rolling | emissary | 4.1.0-r14 | — |
| Wolfi rolling | envoy-ratelimit | 0.0.0_git20260825-r1 | — |
| Wolfi rolling | etcd-3.6 | 3.6.14-r6 | — |
| Wolfi rolling | external-dns-0.21 | 0.21.0-r23 | — |
| Wolfi rolling | external-secrets-operator-2.3 | 2.3.0-r21 | — |
| Wolfi rolling | external-secrets-operator-2.4 | 2.4.1-r19 | — |
| Wolfi rolling | external-secrets-operator-2.5 | 2.5.0-r16 | — |
| Wolfi rolling | external-secrets-operator-2.6 | 2.6.0-r11 | — |
| Wolfi rolling | falco-exporter | 0.8.7-r31 | — |
| Wolfi rolling | falco-no-driver | 0.44.1-r8 | — |
| Wolfi rolling | falcoctl | 0.13.0-r25 | — |
| Wolfi rolling | falcosidekick | 2.35.0-r2 | — |
| Wolfi rolling | ferretdb | 2.7.0-r30 | — |
| Wolfi rolling | flannel | 0.28.9-r6 | — |
| Wolfi rolling | flannel-compat | 0.28.9-r7 | — |
| Wolfi rolling | fluent-bit-plugin-loki | 3.7.7-r3 | — |
| Wolfi rolling | fluent-operator | 3.10.0-r3 | — |
| Wolfi rolling | flux-2.7 | 2.7.5-r37 | — |
| Wolfi rolling | flux-2.8 | 2.8.8-r20 | — |
| Wolfi rolling | flux-2.9 | 2.9.5-r2 | — |
| Wolfi rolling | flux-helm-controller | 1.6.4-r1 | — |
| Wolfi rolling | flux-image-automation-controller | 1.2.5-r1 | — |
| Wolfi rolling | flux-image-reflector-controller | 1.2.5-r3 | — |
| Wolfi rolling | flux-kustomize-controller | 1.9.5-r1 | — |
| Wolfi rolling | flux-kustomize-controller-iamguarded-compat | 1.9.5-r2 | — |
| Wolfi rolling | flux-notification-controller | 1.9.4-r2 | — |
| Wolfi rolling | flux-source-controller | 1.9.5-r3 | — |
| Wolfi rolling | flyte | 1.16.9-r0 | — |
| Wolfi rolling | fulcio | 1.8.8-r5 | — |
| Wolfi rolling | fuse-overlayfs-snapshotter | 2.1.7-r26 | — |
| Wolfi rolling | gatekeeper-3.22 +1 | 3.22.2-r18 | — |
| Wolfi rolling | gatus | 5.36.0-r15 | — |
| Wolfi rolling | gcp-compute-persistent-disk-csi-driver-1.25 | 1.25.2-r17 | — |
| Wolfi rolling | gcp-compute-persistent-disk-csi-driver-1.25-compat | 1.25.2-r18 | — |
| Wolfi rolling | gcsfuse | 2.12.2-r35 | — |
| Wolfi rolling | gitaly-19.1 +1 | 19.1.7-r1 | — |
| Wolfi rolling | gitaly-compat-19.1 | 19.1.8-r0 | — |
| Wolfi rolling | gitea | 1.27.3-r3 | — |
| Wolfi rolling | gitlab-kas-19.1 +1 | 19.1.7-r3 | — |
| Wolfi rolling | gitlab-kas-19.2 +2 | 19.2.5-r2 | — |
| Wolfi rolling | gitlab-kas-19.3 +5 | 19.3.1-r2 | — |
| Wolfi rolling | gitlab-pages-19.1 | 19.1.7-r2 | — |
| Wolfi rolling | gitlab-runner-19.1 +2 | 19.1.2-r7 | — |
| Wolfi rolling | gitlab-runner-19.2 +2 | 19.2.3-r2 | — |
| Wolfi rolling | gitness | 3.3.0-r35 | — |
| Wolfi rolling | gitsign +1 | 0.17.1-r6 | — |
| Wolfi rolling | go-discover | 0_git20260826-r2 | — |
| Wolfi rolling | gomplate-5 | 5.2.0-r8 | — |
| Wolfi rolling | goreleaser | 2.18.0-r2 | — |
| Wolfi rolling | grafana-12.4 | 12.4.10-r2 | — |
| Wolfi rolling | grafana-13.0 | 13.0.8-r2 | — |
| Wolfi rolling | grafana-agent-operator | 0.44.8-r18 | — |
| Wolfi rolling | grafana-alloy | 1.19.2-r3 | — |
| Wolfi rolling | grafana-image-renderer | 5.12.2-r3 | — |
| Wolfi rolling | grafana-mimir-3.1 +1 | 3.1.5-r3 | — |
| Wolfi rolling | grafana-pyroscope-1.19 | 1.19.3-r15 | — |
| Wolfi rolling | grafana-pyroscope-2.0 | 2.0.6-r6 | — |
| Wolfi rolling | grafana-rollout-operator | 0.39.0-r4 | — |
| Wolfi rolling | grpc-health-probe | 0.4.56-r3 | — |
| Wolfi rolling | grype | 0.118.0-r1 | — |
| Wolfi rolling | guac +4 | 1.1.0-r31 | — |
| Wolfi rolling | harbor-2.14 +3 | 2.14.4-r12 | — |
| Wolfi rolling | headlamp | 0.45.0-r4 | — |
| Wolfi rolling | helm-3 | 3.22.0-r0 | — |
| Wolfi rolling | helm-mapkubeapis | 0.6.1-r30 | — |
| Wolfi rolling | helm-operator | 1.42.3-r14 | — |
| Wolfi rolling | helm-push | 0.11.1-r25 | — |
| Wolfi rolling | helm-set-status | 0.3.0-r30 | — |
| Wolfi rolling | hubble | 1.19.4-r17 | — |
| Wolfi rolling | hubble-ui-backend | 0.13.5-r19 | — |
| Wolfi rolling | hydra | 26.2.0-r25 | — |
| Wolfi rolling | ipfs-cluster | 1.1.6-r17 | — |
| Wolfi rolling | istioctl-1.29 +4 | 1.29.7-r2 | — |
| Wolfi rolling | jaeger-2 +1 | 2.21.0-r0 | — |
| Wolfi rolling | jaeger-2-jaeger +6 | 2.20.0-r10 | — |
| Wolfi rolling | jitsucom-bulker-bulker +2 | 2.15.0-r3 | — |
| Wolfi rolling | jitsucom-bulker-sidecar-compat | 2.15.0-r4 | — |
| Wolfi rolling | juicefs-1.3 | 1.3.3-r5 | — |
| Wolfi rolling | juicefs-csi-driver | 0.32.5-r3 | — |
| Wolfi rolling | k3d-proxy | 5.9.0-r12 | — |
| Wolfi rolling | k3s +2 | 1.36.4.1-r3 | — |
| Wolfi rolling | k3s-1.32 +20 | No fix yet | — |
| Wolfi rolling | k3s-1.34 +1 | 1.34.11.1-r2 | — |
| Wolfi rolling | k3s-1.35 +2 | 1.35.8.1-r4 | — |
| Wolfi rolling | k6 | 2.2.0-r5 | — |
| Wolfi rolling | k8s_gateway | 1.8.2-r9 | — |
| Wolfi rolling | k8sgpt | 0.4.38-r1 | — |
| Wolfi rolling | k8sgpt-operator | 0.2.29-r5 | — |
| Wolfi rolling | k8ssandra-client | 0.9.1-r2 | — |
| Wolfi rolling | k8ssandra-operator | 1.32.6-r5 | — |
| Wolfi rolling | k9s | 0.51.0-r16 | — |
| Wolfi rolling | kafka-proxy | 0.4.3-r30 | — |
| Wolfi rolling | kaniko +1 | 1.25.19-r2 | — |
| Wolfi rolling | kapp-controller | 0.60.6-r3 | — |
| Wolfi rolling | kargo-1.10 | 1.10.11-r2 | — |
| Wolfi rolling | katib-controller +3 | 0.19.0-r39 | — |
| Wolfi rolling | katib-suggestion-hyperopt +1 | 0.19.0-r40 | — |
| Wolfi rolling | keda-2.19 +1 | 2.19.0-r29 | — |
| Wolfi rolling | keda-2.20 +2 | 2.20.2-r6 | — |
| Wolfi rolling | kiali | 2.31.0-r1 | — |
| Wolfi rolling | knative-eventing-1.21-filter +7 | 1.21.4-r9 | — |
| Wolfi rolling | knative-eventing-1.22-filter +7 | 1.22.2-r7 | — |
| Wolfi rolling | knative-operator-1.21 +1 | 1.21.4-r7 | — |
| Wolfi rolling | knative-operator-1.22 +1 | 1.22.3-r7 | — |
| Wolfi rolling | knative-operator-1.22-compat | 1.22.3-r8 | — |
| Wolfi rolling | knative-serving-1.21-queue +5 | 1.21.3-r7 | — |
| Wolfi rolling | knative-serving-1.22-queue +8 | 1.22.1-r12 | — |
| Wolfi rolling | ko +1 | 0.19.1-r7 | — |
| Wolfi rolling | kots | 1.131.6-r2 | — |
| Wolfi rolling | kserve +6 | 0.20.0-r7 | — |
| Wolfi rolling | kserve-modelmesh-serving | 0.12.0-r42 | — |
| Wolfi rolling | kserve-rest-proxy +1 | 0.12.0-r36 | — |
| Wolfi rolling | ksops | 4.5.1-r16 | — |
| Wolfi rolling | kube-arangodb-1.4 | 1.4.5-r1 | — |
| Wolfi rolling | kube-metrics-adapter | 0.2.9-r20 | — |
| Wolfi rolling | kube-rbac-proxy | 0.22.1-r10 | — |
| Wolfi rolling | kube-state-metrics | 2.20.0-r3 | — |
| Wolfi rolling | kube-vip | 1.2.3-r5 | — |
| Wolfi rolling | kube-vip-cloud-provider | 0.0.12-r31 | — |
| Wolfi rolling | kubeadm-1.34 +6 | 1.34.11-r6 | — |
| Wolfi rolling | kubeadm-1.35 +8 | 1.35.8-r5 | — |
| Wolfi rolling | kubeadm-1.36 +6 | 1.36.4-r6 | — |
| Wolfi rolling | kubectl-bash-completion-1.35 +3 | 1.35.8-r6 | — |
| Wolfi rolling | kubeflow-pipelines-apiserver +3 | 2.17.1-r3 | — |
| Wolfi rolling | kubeflow-pipelines-metadata-writer-compat | 2.17.2-r4 | — |
| Wolfi rolling | kubeflow-profile-controller | 1.10.0-r35 | — |
| Wolfi rolling | kubernetes-csi-driver-hostpath | 1.18.0-r6 | — |
| Wolfi rolling | kubernetes-csi-driver-nfs | 4.13.4-r7 | — |
| Wolfi rolling | kubernetes-csi-external-attacher | 4.13.0-r0 | — |
| Wolfi rolling | kubernetes-csi-external-health-monitor | 0.18.0-r16 | — |
| Wolfi rolling | kubernetes-csi-external-provisioner | 6.3.0-r10 | — |
| Wolfi rolling | kubernetes-csi-external-resizer | 2.2.1-r11 | — |
| Wolfi rolling | kubernetes-csi-external-snapshotter-8.5 +1 | 8.5.0-r28 | — |
| Wolfi rolling | kubernetes-csi-external-snapshotter-8.6 +1 | 8.6.0-r13 | — |
| Wolfi rolling | kubernetes-csi-livenessprobe | 2.19.0-r10 | — |
| Wolfi rolling | kubernetes-csi-node-driver-registrar-2.16 | 2.16.0-r28 | — |
| Wolfi rolling | kubernetes-csi-node-driver-registrar-2.17 +1 | 2.17.0-r11 | — |
| Wolfi rolling | kubernetes-dns-node-cache | 1.26.8-r18 | — |
| Wolfi rolling | kubernetes-event-exporter | 1.7-r73 | — |
| Wolfi rolling | kubescape | 4.0.12-r11 | — |
| Wolfi rolling | kubescape-operator | 0.2.169-r1 | — |
| Wolfi rolling | kubevela-vela-cli +1 | 1.11.0-r12 | — |
| Wolfi rolling | kubo | 0.43.0-r5 | — |
| Wolfi rolling | kubo-compat | 0.43.1-r0 | — |
| Wolfi rolling | kuma-cp-2.12 +4 | 2.12.3-r26 | — |
| Wolfi rolling | kuma-cp-2.13 +4 | 2.13.10-r7 | — |
| Wolfi rolling | kwok | 0.8.0-r9 | — |
| Wolfi rolling | kyverno-1.17 | 1.17.2-r35 | — |
| Wolfi rolling | kyverno-1.18 +5 | 1.18.2-r13 | — |
| Wolfi rolling | kyverno-cli-1.17 +4 | 1.17.2-r33 | — |
| Wolfi rolling | kyverno-notation-aws | 1.1-r78 | — |
| Wolfi rolling | linkerd2-cli +4 | 26.8.4-r3 | — |
| Wolfi rolling | linkerd2-debug +1 | 26.9.2-r0 | — |
| Wolfi rolling | litestream | 0.5.17-r1 | — |
| Wolfi rolling | loki-3.6 +3 | 3.6.16-r4 | — |
| Wolfi rolling | loki-3.7 +2 | 3.7.7-r2 | — |
| Wolfi rolling | lvm-driver | 1.10.0-r3 | — |
| Wolfi rolling | manifest-tool | 2.2.2-r13 | — |
| Wolfi rolling | mattermost-11.5 | 11.5.7-r11 | — |
| Wolfi rolling | mattermost-11.6 | 11.6.6-r14 | — |
| Wolfi rolling | mattermost-11.6-compat | 11.6.6-r15 | — |
| Wolfi rolling | mattermost-11.7 | 11.7.10-r3 | — |
| Wolfi rolling | mc | 0.20250813.083541-r23 | — |
| Wolfi rolling | mcp-grafana | 1.6.2-r0 | — |
| Wolfi rolling | melange | 0.59.3-r2 | — |
| Wolfi rolling | mesosphere-vsphere-csi-driver +1 | 3.5.0-r30 | — |
| Wolfi rolling | metallb +4 | 0.16.1-r11 | — |
| Wolfi rolling | metrics-server | 0.9.0-r10 | — |
| Wolfi rolling | metrics-server-compat | 0.9.0-r11 | — |
| Wolfi rolling | migrate | 4.19.1-r28 | — |
| Wolfi rolling | minio | 0.20260717.120751-r12 | — |
| Wolfi rolling | minio-object-browser | 2.0.4-r27 | — |
| Wolfi rolling | mountpoint-s3-csi-driver-2.5 | 2.5.0-r17 | — |
| Wolfi rolling | mountpoint-s3-csi-driver-2.6 | 2.6.0-r9 | — |
| Wolfi rolling | mps-control-daemon | 0.20.0-r4 | — |
| Wolfi rolling | multus-cni | 4.3.0-r7 | — |
| Wolfi rolling | nerdctl | 2.3.5-r11 | — |
| Wolfi rolling | net-kourier-1.21 | 1.21.1-r15 | — |
| Wolfi rolling | net-kourier-1.22 | 1.22.1-r13 | — |
| Wolfi rolling | neuvector-scanner +1 | 4.268-r1 | — |
| Wolfi rolling | neuvector-sigstore-interface | 4.270-r0 | — |
| Wolfi rolling | newrelic-infrastructure-agent | 1.80.2-r1 | — |
| Wolfi rolling | node-feature-discovery-0.18 | 0.18.3-r28 | — |
| Wolfi rolling | node-problem-detector-1.35 | 1.35.3-r8 | — |
| Wolfi rolling | node-problem-detector-1.36 | 1.36.0-r9 | — |
| Wolfi rolling | nuclei | 3.11.1-r6 | — |
| Wolfi rolling | nvidia-container-toolkit-nvidia-container-runtime-cdi | 1.20.0-r7 | — |
| Wolfi rolling | nvidia-container-toolkit-nvidia-ctk-installer | 1.20.0-r6 | — |
| Wolfi rolling | oauth2-proxy | 7.15.4-r2 | — |
| Wolfi rolling | octo-sts-webhook | 0.8.0-r4 | — |
| Wolfi rolling | op-geth | 1.101702.3-r2 | — |
| Wolfi rolling | op-geth-compat | 1.101702.3-r3 | — |
| Wolfi rolling | opa | 1.20.1-r2 | — |
| Wolfi rolling | openbao | 2.6.2-r4 | — |
| Wolfi rolling | opencost | 1.121.1-r5 | — |
| Wolfi rolling | opentelemetry-collector | 0.159.0-r5 | — |
| Wolfi rolling | opentelemetry-operator +1 | 0.158.0-r4 | — |
| Wolfi rolling | opentofu-1.12 | 1.12.6-r3 | — |
| Wolfi rolling | opentofu-1.12-compat | 1.12.6-r6 | — |
| Wolfi rolling | opentofu-1.9 | 1.9.4-r28 | — |
| Wolfi rolling | osv-scanner | 2.5.1-r4 | — |
| Wolfi rolling | otel-cli | 0.4.5-r34 | — |
| Wolfi rolling | percona-server-mongodb-operator | 1.23.0-r7 | — |
| Wolfi rolling | pg_timetable | 7.1.0-r2 | — |
| Wolfi rolling | policy-controller +1 | 0.15.1-r26 | — |
| Wolfi rolling | prometheus-3.10 | 3.10.0-r22 | — |
| Wolfi rolling | prometheus-3.11 | 3.11.3-r16 | — |
| Wolfi rolling | prometheus-3.12 | 3.12.0-r12 | — |
| Wolfi rolling | prometheus-alertmanager | 0.34.0-r3 | — |
| Wolfi rolling | prometheus-operator | 0.93.1-r5 | — |
| Wolfi rolling | prometheus-operator-iamguarded-compat | 0.94.0-r0 | — |
| Wolfi rolling | promxy | 0.0.96-r9 | — |
| Wolfi rolling | pulumi-kubernetes-operator | 2.9.0-r6 | — |
| Wolfi rolling | rabbitmq-cluster-operator | 2.22.5-r2 | — |
| Wolfi rolling | rabbitmq-messaging-topology-operator | 1.20.2-r2 | — |
| Wolfi rolling | rabbitmq-messaging-topology-operator-iamguarded-compat | 1.20.3-r1 | — |
| Wolfi rolling | rancher-2.13 | 2.13.9-r4 | — |
| Wolfi rolling | rancher-2.14 +1 | 2.14.5-r3 | — |
| Wolfi rolling | rancher-agent-2.13 | 2.13.9-r1 | — |
| Wolfi rolling | rancher-helm-3 | 3.20.0-r25 | — |
| Wolfi rolling | rancher-machine | 0.15.0.145-r7 | — |
| Wolfi rolling | rancher-system-agent | 0.15.1-r2 | — |
| Wolfi rolling | ratify | 1.4.5-r3 | — |
| Wolfi rolling | ratify-licensechecker-compat | 1.4.5-r4 | — |
| Wolfi rolling | redis-operator | 0.26.0-r8 | — |
| Wolfi rolling | rekor-cli +1 | 1.5.4-r4 | — |
| Wolfi rolling | rke2-cloud-provider | 1.36.2-r5 | — |
| Wolfi rolling | ruby3.3-fluent-plugin-grafana-loki-3.7 | 3.7.7-r4 | — |
| Wolfi rolling | scorecard | 5.5.0-r19 | — |
| Wolfi rolling | secrets-store-csi-driver | 1.6.0-r12 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-azure | 1.8.2-r8 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-gcp | 1.17.0-r4 | — |
| Wolfi rolling | sftpgo | 2.7.5-r10 | — |
| Wolfi rolling | sftpgo-plugin-auth | 1.0.16-r8 | — |
| Wolfi rolling | sftpgo-plugin-eventsearch | 1.0.24-r7 | — |
| Wolfi rolling | sftpgo-plugin-eventstore | 1.0.25-r8 | — |
| Wolfi rolling | sftpgo-plugin-geoipfilter | 1.0.14-r8 | — |
| Wolfi rolling | sftpgo-plugin-kms | 1.0.19-r9 | — |
| Wolfi rolling | sftpgo-plugin-pubsub | 1.0.18-r7 | — |
| Wolfi rolling | sigstore-scaffolding-trillian-createdb +1 | 0.7.37-r7 | — |
| Wolfi rolling | sigstore-scaffolding-trillian-createtree +2 | 0.7.37-r6 | — |
| Wolfi rolling | skaffold | 2.24.0-r9 | — |
| Wolfi rolling | skopeo | 1.24.0-r5 | — |
| Wolfi rolling | slsa-verifier | 2.7.1-r32 | — |
| Wolfi rolling | smarter-device-manager | 1.20.11-r41 | — |
| Wolfi rolling | snyk-cli | 1.1307.0-r3 | — |
| Wolfi rolling | sops | 3.13.3-r5 | — |
| Wolfi rolling | spegel | 0.7.4-r9 | — |
| Wolfi rolling | spicedb | 1.56.1-r3 | — |
| Wolfi rolling | spicedb-operator | 1.26.0-r7 | — |
| Wolfi rolling | spiffe-helper | 0.11.0-r28 | — |
| Wolfi rolling | spire-agent +2 | 1.15.3-r4 | — |
| Wolfi rolling | spire-controller-manager | 0.7.0-r9 | — |
| Wolfi rolling | src | 7.6.0-r5 | — |
| Wolfi rolling | sriov-network-device-plugin | 3.11.0-r22 | — |
| Wolfi rolling | steampipe | 2.4.5-r5 | — |
| Wolfi rolling | step | 0.30.6-r10 | — |
| Wolfi rolling | step-ca | 0.30.2-r23 | — |
| Wolfi rolling | step-issuer | 0.12.0-r11 | — |
| Wolfi rolling | step-issuer-compat | 0.12.0-r12 | — |
| Wolfi rolling | step-kms-plugin | 0.17.0-r17 | — |
| Wolfi rolling | syft | 1.51.1-r1 | — |
| Wolfi rolling | task | 3.53.1-r3 | — |
| Wolfi rolling | tekton-chains | 0.29.3-r0 | — |
| Wolfi rolling | tekton-pipelines-events-1.11 +5 | 1.11.1-r19 | — |
| Wolfi rolling | tekton-pipelines-events-1.11-compat +1 | 1.11.1-r20 | — |
| Wolfi rolling | tekton-pipelines-events-1.12 +5 | 1.12.2-r11 | — |
| Wolfi rolling | tekton-pipelines-events-1.13 +5 | 1.13.1-r8 | — |
| Wolfi rolling | tekton-pipelines-nop-1.12-compat | 1.12.2-r12 | — |
| Wolfi rolling | tempo-2.10 +3 | 2.10.8-r4 | — |
| Wolfi rolling | tempo-3.0 +3 | 3.0.3-r5 | — |
| Wolfi rolling | temporal | 1.8.3-r2 | — |
| Wolfi rolling | temporal-ui-server | 2.53.3-r5 | — |
| Wolfi rolling | terraform | 1.5.7-r59 | — |
| Wolfi rolling | terraform-docs | 0.24.0-r10 | — |
| Wolfi rolling | terraform-mcp-server | 1.3.0-r2 | — |
| Wolfi rolling | terraform-provider-aws | 6.63.0-r0 | — |
| Wolfi rolling | terraform-provider-azapi | 2.12.0-r5 | — |
| Wolfi rolling | terraform-provider-azuread | 3.9.0-r8 | — |
| Wolfi rolling | terraform-provider-azurerm | 5.3.0-r2 | — |
| Wolfi rolling | terraform-provider-google | 8.1.0-r1 | — |
| Wolfi rolling | terraform-provider-grafana | 4.45.2-r1 | — |
| Wolfi rolling | terraform-provider-kubernetes | 3.2.1-r9 | — |
| Wolfi rolling | terraform-provider-pagerduty | 3.36.0-r2 | — |
| Wolfi rolling | terraform-provider-random | 3.9.0-r14 | — |
| Wolfi rolling | terraform-provider-sendgrid | 1.0.1-r29 | — |
| Wolfi rolling | terraform-provider-time | 0.14.1-r4 | — |
| Wolfi rolling | terraform-provider-tls | 4.4.0-r2 | — |
| Wolfi rolling | terragrunt | 1.1.4-r2 | — |
| Wolfi rolling | tetra +2 | 1.7.1-r1 | — |
| Wolfi rolling | tflint | 0.64.0-r6 | — |
| Wolfi rolling | tfsec | 1.28.14-r48 | — |
| Wolfi rolling | thanos | 0.42.4-r6 | — |
| Wolfi rolling | timestamp-authority-server | 2.1.3-r9 | — |
| Wolfi rolling | tkn | 0.46.0-r6 | — |
| Wolfi rolling | tofu-controller +1 | 0.16.5-r6 | — |
| Wolfi rolling | traefik-3.6 | 3.6.25-r6 | — |
| Wolfi rolling | traefik-3.7 | 3.7.12-r2 | — |
| Wolfi rolling | trillian-logserver +1 | 1.7.3-r18 | — |
| Wolfi rolling | trivy | 0.74.0-r4 | — |
| Wolfi rolling | trivy-operator | 0.34.0-r2 | — |
| Wolfi rolling | trufflehog | 3.97.4-r2 | — |
| Wolfi rolling | tw +3 | 0.0.50-r10 | — |
| Wolfi rolling | undock | 0.14.0-r10 | — |
| Wolfi rolling | vault-benchmark | 0.4.0-r27 | — |
| Wolfi rolling | vault-env | 1.23.0-r11 | — |
| Wolfi rolling | vault-secrets-webhook | 1.23.1-r10 | — |
| Wolfi rolling | vcluster +2 | 0.36.1-r7 | — |
| Wolfi rolling | velero | 1.18.2-r9 | — |
| Wolfi rolling | velero-plugin-for-aws +1 | 1.14.2-r10 | — |
| Wolfi rolling | velero-plugin-for-microsoft-azure | 1.14.2-r8 | — |
| Wolfi rolling | velero-restore-helper | 1.18.2-r10 | — |
| Wolfi rolling | verticadb-operator | 25.4.0.0-r28 | — |
| Wolfi rolling | vexctl | 0.4.4-r8 | — |
| Wolfi rolling | victoriametrics-operator | 0.74.1-r5 | — |
| Wolfi rolling | vitess-23 +1 | 23.0.6-r3 | — |
| Wolfi rolling | vitess-24 +1 | 24.0.3-r1 | — |
| Wolfi rolling | vitess-24-compat | 24.0.3-r7 | — |
| Wolfi rolling | volume-modifier-for-k8s | 0.9.6-r0 | — |
| Wolfi rolling | wal-g-pg +4 | 3.0.9-r3 | — |
| Wolfi rolling | weaviate | 1.39.2-r1 | — |
| Wolfi rolling | witness | 0.12.0-r9 | — |
| Wolfi rolling | wolfictl | 0.39.25-r5 | — |
| Wolfi rolling | xeol | 0.10.8-r58 | — |
| Wolfi rolling | yunikorn-k8shim | 1.9.0-r6 | — |
| Wolfi rolling | zarf | 0.84.0-r3 | — |
| Wolfi rolling | zot | 2.1.20-r6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | google.golang.org/grpc | < 1.83.1 | 1.83.1 | GHSA-vp52-pcj8-j9qc |
Advisories 50
- SUSE-SU-2026:24709-1 Security update for elemental-operator, elemental-system-agent, elemental-toolkit SUSE / openSUSE Security Updates · Nov 13, 2026
- SUSE-SU-2026:24645-1 Security update for elemental, elemental-register, elemental-system-agent, elemental-toolkit SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5202-1 Security update for distribution SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5203-1 Security update for alloy SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5167-1 Security update for kubevirt SUSE / openSUSE Security Updates · Nov 11, 2026
- openSUSE-SU-2026:22224-1 Security update for rqlite SUSE / openSUSE Security Updates · Nov 4, 2026
- openSUSE-SU-2026:12342-1 containerd-2.4.2-1.1 on GA media SUSE / openSUSE Security Updates · Oct 31, 2026
- openSUSE-SU-2026:12253-1 tekton-cli-0.46.2-1.1 on GA media SUSE / openSUSE Security Updates · Oct 24, 2026
- openSUSE-SU-2026:12241-1 kubevirt1.8-container-disk-1.8.4-7.1 on GA media SUSE / openSUSE Security Updates · Oct 24, 2026
- SUSE-SU-2026:24213-1 Security update for cosign SUSE / openSUSE Security Updates · Oct 21, 2026
- openSUSE-SU-2026:22134-1 Security update for gh SUSE / openSUSE Security Updates · Oct 20, 2026
- openSUSE-SU-2026:22135-1 Security update for coredns SUSE / openSUSE Security Updates · Oct 20, 2026
- openSUSE-SU-2026:22064-1 Security update for cosign SUSE / openSUSE Security Updates · Oct 19, 2026
- openSUSE-SU-2026:12186-1 rqlite-10.6.1-1.1 on GA media SUSE / openSUSE Security Updates · Oct 19, 2026
- openSUSE-SU-2026:12163-1 gh-2.102.0-1.1 on GA media SUSE / openSUSE Security Updates · Oct 18, 2026
- openSUSE-SU-2026:12149-1 coredns-1.14.7-3.1 on GA media SUSE / openSUSE Security Updates · Oct 17, 2026
- SUSE-SU-2026:24150-1 Security update for amazon-ecs-init SUSE / openSUSE Security Updates · Oct 16, 2026
- openSUSE-SU-2026:12114-1 alloy-1.20.1-1.1 on GA media SUSE / openSUSE Security Updates · Oct 14, 2026
- SUSE-SU-2026:4628-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls SUSE / openSUSE Security Updates · Oct 13, 2026
- openSUSE-SU-2026:22035-1 Security update for amazon-ecs-init SUSE / openSUSE Security Updates · Oct 9, 2026
- openSUSE-SU-2026:22026-1 Security update for prometheus-blackbox_exporter SUSE / openSUSE Security Updates · Oct 7, 2026
- SUSE-SU-2026:4444-1 Security update for terraform-provider-susepubliccloud SUSE / openSUSE Security Updates · Oct 5, 2026
- openSUSE-SU-2026:21996-1 Security update for v2ray-core SUSE / openSUSE Security Updates · Oct 1, 2026
- openSUSE-SU-2026:11920-1 grafana-12.4.11-1.1 on GA media SUSE / openSUSE Security Updates · Sep 30, 2026
- openSUSE-SU-2026:11925-1 prometheus-blackbox_exporter-0.26.0-9.1 on GA media SUSE / openSUSE Security Updates · Sep 30, 2026
- openSUSE-SU-2026:11914-1 amazon-ecs-init-1.107.0-1.1 on GA media SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:4388-1 Security update for amazon-cloudwatch-agent SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:4389-1 Security update for terraform-provider-susepubliccloud SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:4392-1 Security update for cosign SUSE / openSUSE Security Updates · Sep 30, 2026
- openSUSE-SU-2026:11911-1 wait4x-3.7.2-1.1 on GA media SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23730-1 Security update for helm SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23688-1 Security update for helm SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23546-1 Security update for helm SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23548-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23708-1 Security update for google-cloud-sap-agent SUSE / openSUSE Security Updates · Sep 28, 2026
- SUSE-SU-2026:23729-1 Security update for google-cloud-sap-agent SUSE / openSUSE Security Updates · Sep 28, 2026
- SUSE-SU-2026:23863-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23864-1 Security update for distribution SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23852-1 Security update for distribution SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23855-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23831-1 Security update for google-guest-agent SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23736-1 Security update for google-guest-agent SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23739-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Sep 27, 2026
- openSUSE-SU-2026:21927-1 Security update for apptainer SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:21886-1 Security update for mcphost SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:21897-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:21898-1 Security update for distribution SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:21879-1 Security update for google-guest-agent SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:21882-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:11881-1 kubectl-cnpg-1.30.1-1.1 on GA media SUSE / openSUSE Security Updates · Sep 25, 2026
References
- https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc
- https://github.com/grpc/grpc-go/pull/9331
- https://github.com/grpc/grpc-go/pull/9333
- https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176
- https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77
- https://github.com/grpc/grpc-go/releases/tag/v1.83.1