{"id":"CVE-2025-21613","aliases":["ALSA-2025:0401","AZL-55060","AZL-55067","AZL-55088","AZL-55094","DEBIAN-CVE-2025-21613","EUVD-2025-0045","GHSA-v725-9546-7q7m","GO-2025-3368","RHSA-2025:0401","RHSA-2025:0662","RHSA-2025:3344","RLSA-2025:0401","SUSE-SU-2025:0060-1","SUSE-SU-2025:0191-1","SUSE-SU-2025:0277-1","SUSE-SU-2025:0601-1","SUSE-SU-2025:0622-1","SUSE-SU-2025:0623-1","SUSE-SU-2025:0624-1","UBUNTU-CVE-2025-21613","USN-8088-1","openSUSE-SU-2025:0056-1","openSUSE-SU-2025:14624-1","openSUSE-SU-2025:14654-1","openSUSE-SU-2025:14658-1","openSUSE-SU-2025:14713-1","openSUSE-SU-2025:14752-1","openSUSE-SU-2025:14902-1","openSUSE-SU-2025:15438-1","openSUSE-SU-2025:15487-1","openSUSE-SU-2025:20117-1","openSUSE-SU-2025:20177-1","openSUSE-SU-2026:20654-1","openSUSE-SU-2026:20798-1","openSUSE-SU-2026:21483-1"],"status":"published","title":"go-git has an Argument Injection via the URL field","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","severity":{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Clear","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01278,"percentile":0.70358,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-88"],"published":"2025-01-06T16:13:10Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Go","package":"github.com/go-git/go-git/v5","fixed_in":["5.13.0"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:3","package":"packer","fixed_in":["1.9.5-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cri-o","fixed_in":["1.22.3-12"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"packer","fixed_in":["1.9.5-7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"golang-github-go-git-go-git","fixed_in":["5.13.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"golang-github-go-git-go-git","fixed_in":["5.13.2-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"amazon-ssm-agent","fixed_in":["3.3.1611.0-4.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"amazon-ssm-agent","fixed_in":["3.3.1611.0-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"amazon-ssm-agent","fixed_in":["3.3.1611.0-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"amazon-ssm-agent","fixed_in":["3.3.1611.0-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"amazon-ssm-agent","fixed_in":["3.3.1611.0-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"amazon-ssm-agent","fixed_in":["3.3.1611.0-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-github-go-git-go-git","fixed_in":["5.4.2-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"golang-github-go-git-go-git","fixed_in":["5.4.2-4ubuntu0.24.04.3+esm2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"grafana","fixed_in":["11.3.0-5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"amazon-ssm-agent","fixed_in":["3.3.1611.0-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"brise","fixed_in":["20230603+git.5fdd2d6-5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rz-pm","fixed_in":["0.3.3+git~14~gcee0d0d-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"gopkg.in/src-d/go-git.v4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"last_affected":"4.13.1"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/go-git/go-git/v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13.0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.10-21.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.10-21.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"packer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.30.1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.3-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"packer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1","5.11.0-2","5.11.0-3","5.11.0-4","5.12.0-1","5.13.2-1","5.14.0-1","5.16.2-1","5.17.0-1","5.17.1-1","5.19.1-1","5.4.2-3","5.4.2-4"]},{"source":"osv","ecosystem":"Debian:13","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13.2-1"}]}]},{"source":"osv","ecosystem":"Go","package":"gopkg.in/src-d/go-git.v4","ranges":[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"last_affected":"4.13.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/go-git/go-git/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.13.0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/go-git/go-git/v4","ranges":[{"type":"SEMVER","events":[{"introduced":"4.0.0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/go-git/go-git/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.13.0"}]}]},{"source":"osv","ecosystem":"Go","package":"gopkg.in/src-d/go-git.v4","ranges":[{"type":"SEMVER","events":[{"introduced":"4.0.0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-21.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-21.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"grafana-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-21.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-21.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-21.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-21.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-21.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-21.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-9.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-9.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-9.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-9.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-21.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250108T191942-150000.1.26.1"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250108T191942-150000.1.26.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"amazon-ssm-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1611.0-4.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"amazon-ssm-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1611.0-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"amazon-ssm-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1611.0-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"amazon-ssm-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1611.0-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"amazon-ssm-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1611.0-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"amazon-ssm-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1611.0-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"brise","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230603+git.5fdd2d6-150600.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"brise","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230603+git.5fdd2d6-150600.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.15-1.71.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.15-150200.3.64.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.15-150200.3.64.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.15-150000.1.71.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-3ubuntu0.1~esm1"}]}],"versions":["5.4.2-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-4ubuntu0.24.04.3+esm2"}]}],"versions":["5.4.2-3build1","5.4.2-4","5.4.2-4ubuntu0.24.04.1","5.4.2-4ubuntu0.24.04.2","5.4.2-4ubuntu0.24.04.2+esm1","5.4.2-4ubuntu0.24.04.3","5.4.2-4ubuntu0.24.04.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-3ubuntu0.1~esm1"}]}],"versions":["5.4.2-3"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-4ubuntu0.24.04.3+esm2"}]}],"versions":["5.4.2-3build1","5.4.2-4","5.4.2-4ubuntu0.24.04.1","5.4.2-4ubuntu0.24.04.2","5.4.2-4ubuntu0.24.04.2+esm1","5.4.2-4ubuntu0.24.04.3","5.4.2-4ubuntu0.24.04.3+esm1"],"bundled":5},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"trivy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.58.2-bp156.2.6.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"trivy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.58.2-bp156.2.6.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250108T191942-1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.0-5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"amazon-ssm-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1611.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"trivy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.58.2-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"brise","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230603+git.5fdd2d6-5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rime-plum-go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rz-pm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.3+git~14~gcee0d0d-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cheat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cheat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-bp160.2.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20260723T184607-160000.1.1"}]}],"bundled":1734}],"products":[{"vendor":"go-git","product":"go-git"},{"vendor":"go-git_project","product":"go-git"}],"references":[{"url":"https://github.com/go-git/go-git/security/advisories/GHSA-v725-9546-7q7m","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21613","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-v725-9546-7q7m"},{"url":"https://access.redhat.com/errata/RHSA-2025:0401","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21613","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21614","tags":["report"]},{"url":"https://bugzilla.redhat.com/2335888","tags":["report"]},{"url":"https://bugzilla.redhat.com/2335901","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-0401.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21613.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-21613","tags":["advisory"]},{"url":"https://github.com/go-git/go-git","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2335888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2335901","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0401.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21613","tags":["advisory","report"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3368","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21614","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21614","tags":["advisory"]},{"url":"https://github.com/go-git/go-git/security/advisories/GHSA-r9px-m959-cxf4","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3367","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0662","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0662.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3344","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354195","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3344.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30204","tags":["advisory"]},{"url":"https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3","tags":["article"]},{"url":"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3553","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:0401","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250060-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-54148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22130","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250191-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1235575","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250277-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250601-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234597","tags":["report"]},{"url":"https://bugzilla.suse.com/1235573","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45337","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250622-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1235206","tags":["report"]},{"url":"https://bugzilla.suse.com/1235574","tags":["report"]},{"url":"https://bugzilla.suse.com/1236559","tags":["report"]},{"url":"https://bugzilla.suse.com/1236734","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45339","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250623-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250624-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-21613","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8088-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-49568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-49569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-25934","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DUNHR7ATZWEF5LQKUNEXKL22CUQAND3A/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227010","tags":["report"]},{"url":"https://bugzilla.suse.com/1234512","tags":["report"]},{"url":"https://bugzilla.suse.com/1235265","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-34155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-34156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-34158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3817","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UV63VQGB6Y3V7AIZHIKF3PMFVIHM32MI/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7QSEEGCXESHJEGKAU72IDMBWDF5OZ7OZ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HGZ4GQ4F4IPEEALT5FY24GUNPPFHNUUO/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZAWXH6WKGE2WACLTZWYMHTDCJMU3X6R/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LPGUMR2BGDOUL27DRQF2DU6LQTTNFUNA/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-48795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22870","tags":["web"]},{"url":"https://bugzilla.suse.com/1232948","tags":["report"]},{"url":"https://bugzilla.suse.com/1237618","tags":["report"]},{"url":"https://bugzilla.suse.com/1239225","tags":["report"]},{"url":"https://bugzilla.suse.com/1239385","tags":["report"]},{"url":"https://bugzilla.suse.com/1240466","tags":["report"]},{"url":"https://bugzilla.suse.com/1241724","tags":["report"]},{"url":"https://bugzilla.suse.com/1243633","tags":["report"]},{"url":"https://bugzilla.suse.com/1246151","tags":["report"]},{"url":"https://bugzilla.suse.com/1246730","tags":["report"]},{"url":"https://bugzilla.suse.com/1248897","tags":["report"]},{"url":"https://bugzilla.suse.com/1248937","tags":["report"]},{"url":"https://bugzilla.suse.com/1250625","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-51744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58058","tags":["web"]},{"url":"https://bugzilla.suse.com/1247629","tags":["report"]},{"url":"https://bugzilla.suse.com/1253593","tags":["report"]},{"url":"https://bugzilla.suse.com/1253922","tags":["report"]},{"url":"https://bugzilla.suse.com/1254051","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58181","tags":["web"]},{"url":"https://bugzilla.suse.com/1231844","tags":["report"]},{"url":"https://bugzilla.suse.com/1232975","tags":["report"]},{"url":"https://bugzilla.suse.com/1233343","tags":["report"]},{"url":"https://bugzilla.suse.com/1236510","tags":["report"]},{"url":"https://bugzilla.suse.com/1237671","tags":["report"]},{"url":"https://bugzilla.suse.com/1238703","tags":["report"]},{"url":"https://bugzilla.suse.com/1241683","tags":["report"]},{"url":"https://bugzilla.suse.com/1241687","tags":["report"]},{"url":"https://bugzilla.suse.com/1241809","tags":["report"]},{"url":"https://bugzilla.suse.com/1243672","tags":["report"]},{"url":"https://bugzilla.suse.com/1243714","tags":["report"]},{"url":"https://bugzilla.suse.com/1245302","tags":["report"]},{"url":"https://bugzilla.suse.com/1246735","tags":["report"]},{"url":"https://bugzilla.suse.com/1246736","tags":["report"]},{"url":"https://bugzilla.suse.com/1250616","tags":["report"]},{"url":"https://bugzilla.suse.com/1251454","tags":["report"]},{"url":"https://bugzilla.suse.com/1251657","tags":["report"]},{"url":"https://bugzilla.suse.com/1254113","tags":["report"]},{"url":"https://bugzilla.suse.com/1255340","tags":["report"]},{"url":"https://bugzilla.suse.com/1257337","tags":["report"]},{"url":"https://bugzilla.suse.com/1257349","tags":["report"]},{"url":"https://bugzilla.suse.com/1258136","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21722","tags":["web"]},{"url":"https://bugzilla.suse.com/1251363","tags":["report"]},{"url":"https://bugzilla.suse.com/1251547","tags":["report"]},{"url":"https://bugzilla.suse.com/1253512","tags":["report"]},{"url":"https://bugzilla.suse.com/1253786","tags":["report"]},{"url":"https://bugzilla.suse.com/1253977","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-26625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-34410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-34429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-34430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-44001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-44004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-44005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-51667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-56760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-56761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-63389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-63811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-70849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-70950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-70963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-36045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-37461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-38651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9804","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-21613","title":"go-git has an Argument Injection via the URL field","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","status":"published","published":"2025-01-06T16:13:10.611Z","modified":"2025-01-06T16:45:02.671Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Clear","level":"critical","assessor":"cna"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-88","CWE-88"],"updated_at":"2026-11-02T14:32:32.702673Z"}],"euvd":[{"id":"EUVD-2025-0045","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","status":"published","published":"2025-01-06T16:13:10Z","modified":"2025-01-06T16:45:02Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Clear","level":"critical"}],"updated_at":"2026-11-03T00:04:25.578405Z"}],"ghsa":[{"id":"GHSA-v725-9546-7q7m","title":"go-git has an Argument Injection via the URL field","description":"### Impact\nAn argument injection vulnerability was discovered in `go-git` versions prior to `v5.13`. \n\nSuccessful exploitation of this vulnerability could allow an attacker to set arbitrary values to [git-upload-pack flags](https://git-scm.com/docs/git-upload-pack). This only happens when the `file` transport protocol is being used, as that is the only protocol that shells out to `git` binaries.\n\n### Affected versions\nUsers running versions of `go-git` from `v4` and above are recommended to upgrade to `v5.13` in order to mitigate this vulnerability.\n\n### Workarounds\nIn cases where a bump to the latest version of `go-git` is not possible, we recommend users to enforce restrict validation rules for values passed in the URL field.\n\n## Credit\nThanks to @vin01 for responsibly disclosing this vulnerability to us.","status":"published","published":"2025-01-06T16:16:30Z","modified":"2025-01-06T18:43:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear","level":"critical"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:38:26.167657Z"}],"nvd":[{"id":"CVE-2025-21613","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","status":"published","published":"2025-01-06T17:15:47.043Z","modified":"2026-06-17T08:43:51.353Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:10:48.373347Z"}],"osv":[{"id":"CVE-2025-21613","title":"go-git has an Argument Injection via the URL field","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","status":"published","published":"2025-01-06T16:13:10.611Z","modified":"2026-10-28T02:30:48.738624032Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Clear","level":"critical"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T15:44:46.665428Z"},{"id":"DEBIAN-CVE-2025-21613","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","status":"published","published":"2025-01-06T17:15:47.043Z","modified":"2026-09-01T20:05:41.760829372Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear","level":"critical"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"GHSA-v725-9546-7q7m","title":"go-git has an Argument Injection via the URL field","description":"### Impact\nAn argument injection vulnerability was discovered in `go-git` versions prior to `v5.13`. \n\nSuccessful exploitation of this vulnerability could allow an attacker to set arbitrary values to [git-upload-pack flags](https://git-scm.com/docs/git-upload-pack). This only happens when the `file` transport protocol is being used, as that is the only protocol that shells out to `git` binaries.\n\n### Affected versions\nUsers running versions of `go-git` from `v4` and above are recommended to upgrade to `v5.13` in order to mitigate this vulnerability.\n\n### Workarounds\nIn cases where a bump to the latest version of `go-git` is not possible, we recommend users to enforce restrict validation rules for values passed in the URL field.\n\n## Credit\nThanks to @vin01 for responsibly disclosing this vulnerability to us.","status":"published","published":"2025-01-06T16:16:30Z","modified":"2026-09-10T03:50:22.222541182Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear","level":"critical"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T15:46:56.981655Z"},{"id":"RHSA-2025:0401","title":"Red Hat Security Advisory: grafana security update","status":"published","published":"2025-01-21T10:10:07Z","modified":"2026-10-17T10:04:33Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0662","title":"Red Hat Security Advisory: grafana security update","status":"published","published":"2025-01-24T10:02:22Z","modified":"2026-10-17T10:04:33Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:3344","title":"Red Hat Security Advisory: grafana security update","status":"published","published":"2025-03-28T10:04:21Z","modified":"2026-10-20T10:03:54Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"UBUNTU-CVE-2025-21613","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","status":"published","published":"2025-01-06T17:15:00Z","modified":"2026-03-14T09:04:08.167862Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Clear","level":"critical"}],"updated_at":"2026-11-02T16:55:22.579335Z"},{"id":"ALSA-2025:0401","title":"Important: grafana security update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB.   \n\nSecurity Fix(es):  \n\n  * go-git: argument injection via the URL field (CVE-2025-21613)\n  * go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies (CVE-2025-21614)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-01-20T00:00:00Z","modified":"2026-10-29T11:02:21.989051011Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-55060","title":"CVE-2025-21613 affecting package packer for versions less than 1.9.5-5","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","status":"published","published":"2025-01-06T17:15:47Z","modified":"2026-04-21T04:49:06.601747Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"AZL-55067","title":"CVE-2025-21613 affecting package cri-o 1.30.1-1","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","status":"published","published":"2025-01-06T17:15:47Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:20.996398Z"},{"id":"AZL-55088","title":"CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","status":"published","published":"2025-01-06T17:15:47Z","modified":"2026-04-21T04:29:37.921322Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"AZL-55094","title":"CVE-2025-21613 affecting package packer for versions less than 1.9.5-7","description":"go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.","status":"published","published":"2025-01-06T17:15:47Z","modified":"2026-04-21T04:29:37.570688Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"GO-2025-3368","title":"Argument Injection via the URL field in github.com/go-git/go-git","description":"Argument Injection via the URL field in github.com/go-git/go-git","status":"published","published":"2025-01-07T16:04:06Z","modified":"2026-07-08T10:44:27.247041938Z","updated_at":"2026-11-02T15:47:01.728182Z"},{"id":"openSUSE-SU-2025:0056-1","title":"Security update for trivy","description":"This update for trivy fixes the following issues:\n\nUpdate to version 0.58.2 (\n\n      boo#1234512, CVE-2024-45337,\n      boo#1235265, CVE-2024-45338):\n\n  * fix(misconf): allow null values only for tf variables [backport: release/v0.58] (#8238)\n  * fix(suse): SUSE - update OSType constants and references for compatility [backport: release/v0.58] (#8237)\n  * fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field [backport: release/v0.58] (#8215)\n  * fix(sbom): attach nested packages to Application [backport: release/v0.58] (#8168)\n  * fix(python): skip dev group's deps for poetry [backport: release/v0.58] (#8158)\n  * fix(sbom): use root package for `unknown` dependencies (if exists) [backport: release/v0.58] (#8156)\n  * chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` [backport: release/v0.58] (#8142)\n  * chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` [backport: release/v0.58] (#8136)\n  * fix(redhat): correct rewriting of recommendations for the same vulnerability [backport: release/v0.58] (#8135)\n  * fix(oracle): add architectures support for advisories [backport: release/v0.58] (#8125)\n  * fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type [backport: release/v0.58] (#8124)\n  * chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 [backport: release/v0.58] (#8122)\n  * fix: handle `BLOW_UNKNOWN` error to download DBs [backport: release/v0.58] (#8121)\n  * fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props [backport: release/v0.58] (#8119)\n  * release: v0.58.0 [main] (#7874)\n  * fix(misconf): wrap AWS EnvVar to iac types (#7407)\n  * chore(deps): Upgrade trivy-checks (#8018)\n  * refactor(misconf): Remove unused options (#7896)\n  * docs: add terminology page to explain Trivy concepts (#7996)\n  * feat: add `workspaceRelationship` (#7889)\n  * refactor(sbom): simplify relationship generation (#7985)\n  * docs: improve databases documentation (#7732)\n  * refactor: remove support for custom Terraform checks (#7901)\n  * docs: drop AWS account scanning (#7997)\n  * fix(aws): change CPU and Memory type of ContainerDefinition to a string (#7995)\n  * fix(cli): Handle empty ignore files more gracefully (#7962)\n  * fix(misconf): load full Terraform module (#7925)\n  * fix(misconf): properly resolve local Terraform cache (#7983)\n  * refactor(k8s): add v prefix for Go packages (#7839)\n  * test: replace Go checks with Rego (#7867)\n  * feat(misconf): log causes of HCL file parsing errors (#7634)\n  * chore(deps): bump the aws group across 1 directory with 7 updates (#7991)\n  * chore(deps): bump github.com/moby/buildkit from 0.17.0 to 0.17.2 in the docker group across 1 directory (#7990)\n  * chore(deps): update csaf module dependency from csaf-poc to gocsaf (#7992)\n  * chore: downgrade the failed block expand message to debug (#7964)\n  * fix(misconf): do not erase variable type for child modules (#7941)\n  * feat(go): construct dependencies of `go.mod` main module in the parser (#7977)\n  * feat(go): construct dependencies in the parser (#7973)\n  * feat: add cvss v4 score and vector in scan response (#7968)\n  * docs: add `overview` page for `others` (#7972)\n  * fix(sbom): Fixes for Programming Language Vulnerabilities and SBOM Package Maintainer Details (#7871)\n  * feat(suse): Align SUSE/OpenSUSE OS Identifiers (#7965)\n  * chore(deps): bump the common group with 4 updates (#7949)\n  * feat(oracle): add `flavors` support (#7858)\n  * fix(misconf): Update trivy-checks default repo to `mirror.gcr.io` (#7953)\n  * chore(deps): Bump up trivy-checks to v1.3.0 (#7959)\n  * fix(k8s): check all results for vulnerabilities (#7946)\n  * ci(helm): bump Trivy version to 0.57.1 for Trivy Helm Chart 0.9.0 (#7945)\n  * feat(secret): Add built-in secrets rules for Private Packagist (#7826)\n  * docs: Fix broken links (#7900)\n  * docs: fix mistakes/typos (#7942)\n  * feat: Update registry fallbacks (#7679)\n  * fix(alpine): add `UID` for removed packages (#7887)\n  * chore(deps): bump the aws group with 6 updates (#7902)\n  * chore(deps): bump the common group with 6 updates (#7904)\n  * fix(debian): infinite loop (#7928)\n  * fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files (#7912)\n  * docs: add note about temporary podman socket (#7921)\n  * docs: combine trivy.dev into trivy docs (#7884)\n  * test: change branch in spdx schema link to check in integration tests (#7935)\n  * docs: add Headlamp to the Trivy Ecosystem page (#7916)\n  * fix(report): handle `git@github.com` schema for misconfigs in `sarif` report (#7898)\n  * chore(k8s): enhance k8s scan log (#6997)\n  * fix(terraform): set null value as fallback for missing variables (#7669)\n  * fix(misconf): handle null properties in CloudFormation templates (#7813)\n  * fix(fs): add missing defered Cleanup() call to post analyzer fs (#7882)\n  * chore(deps): bump the common group across 1 directory with 20 updates (#7876)\n  * chore: bump containerd to v2.0.0 (#7875)\n  * fix: Improve version comparisons when build identifiers are present (#7873)\n  * feat(k8s): add default commands for unknown platform (#7863)\n  * chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#7868)\n  * refactor(secret): optimize performance by moving ToLower operation outside loop (#7862)\n  * test: save `containerd` image into archive and use in tests (#7816)\n  * chore(deps): bump the github-actions group across 1 directory with 2 updates (#7854)\n  * chore: bump golangci-lint to v1.61.0 (#7853)\n\n- Update to version 0.57.1:\n  * release: v0.57.1 [release/v0.57] (#7943)\n  * feat: Update registry fallbacks [backport: release/v0.57] (#7944)\n  * fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files [backport: release/v0.57] (#7939)\n  * test: change branch in spdx schema link to check in integration tests [backport: release/v0.57] (#7940)\n  * release: v0.57.0 [main] (#7710)\n  * chore: lint `errors.Join` (#7845)\n  * feat(db): append errors (#7843)\n  * docs(java): add info about supported scopes (#7842)\n  * docs: add example of creating whitelist of checks (#7821)\n  * chore(deps): Bump trivy-checks (#7819)\n  * fix(go): Do not trim v prefix from versions in Go Mod Analyzer (#7733)\n  * fix(k8s): skip resources without misconfigs (#7797)\n  * fix(sbom):  use `Annotation` instead of `AttributionTexts` for `SPDX` formats (#7811)\n  * fix(cli): add config name to skip-policy-update alias (#7820)\n  * fix(helm): properly handle multiple archived dependencies (#7782)\n  * refactor(misconf): Deprecate `EXCEPTIONS` for misconfiguration scanning (#7776)\n  * fix(k8s)!: support k8s multi container (#7444)\n  * fix(k8s): support kubernetes v1.31 (#7810)\n  * docs: add Windows install instructions (#7800)\n  * ci(helm): auto public Helm chart after PR merged (#7526)\n  * feat: add end of life date for Ubuntu 24.10 (#7787)\n  * feat(report): update gitlab template to populate operating_system value (#7735)\n  * feat(misconf): Show misconfig ID in output (#7762)\n  * feat(misconf): export unresolvable field of IaC types to Rego (#7765)\n  * refactor(k8s): scan config files as a folder (#7690)\n  * fix(license): fix license normalization for Universal Permissive License (#7766)\n  * fix: enable usestdlibvars linter (#7770)\n  * fix(misconf): properly expand dynamic blocks (#7612)\n  * feat(cyclonedx): add file checksums to `CycloneDX` reports (#7507)\n  * fix(misconf): fix for Azure Storage Account network acls adaptation (#7602)\n  * refactor(misconf): simplify k8s scanner (#7717)\n  * feat(parser): ignore white space in pom.xml files (#7747)\n  * test: use forked images (#7755)\n  * fix(java): correctly inherit `version` and `scope` from upper/root `depManagement` and `dependencies` into parents (#7541)\n  * fix(misconf): check if property is not nil before conversion (#7578)\n  * fix(misconf): change default ACL of digitalocean_spaces_bucket to private (#7577)\n  * feat(misconf): ssl_mode support for GCP SQL DB instance (#7564)\n  * test: define constants for test images (#7739)\n  * docs: add note about disabled DS016 check (#7724)\n  * feat(misconf): public network support for Azure Storage Account (#7601)\n  * feat(cli): rename `trivy auth` to `trivy registry` (#7727)\n  * docs: apt-transport-https is a transitional package (#7678)\n  * refactor(misconf): introduce generic scanner (#7515)\n  * fix(cli): `clean --all` deletes only relevant dirs (#7704)\n  * feat(cli): add `trivy auth` (#7664)\n  * fix(sbom): add options for DBs in private registries (#7660)\n  * docs(report): fix reporting doc format (#7671)\n  * fix(repo): `git clone` output to Stderr (#7561)\n  * fix(redhat): include arch in PURL qualifiers (#7654)\n  * fix(report): Fix invalid URI in SARIF report (#7645)\n  * docs(report): Improve SARIF reporting doc (#7655)\n  * fix(db): fix javadb downloading error handling (#7642)\n  * feat(cli): error out when ignore file cannot be found (#7624)\n\n- Update to version 0.56.2:\n  * release: v0.56.2 [release/v0.56] (#7694)\n  * fix(redhat): include arch in PURL qualifiers [backport: release/v0.56] (#7702)\n  * fix(sbom): add options for DBs in private registries [backport: release/v0.56] (#7691)\n\n- Update to version 0.56.1:\n  * release: v0.56.1 [release/v0.56] (#7648)\n  * fix(db): fix javadb downloading error handling [backport: release/v0.56] (#7646)\n  * release: v0.56.0 [main] (#7447)\n  * fix(misconf): not to warn about missing selectors of libraries (#7638)\n  * feat: support RPM archives (#7628)\n  * fix(secret): change grafana token regex to find them without unquoted (#7627)\n  * fix(misconf): Disable deprecated checks by default (#7632)\n  * chore: add prefixes to log messages (#7625)\n  * feat(misconf): Support `--skip-*` for all included modules  (#7579)\n  * feat: support multiple DB repositories for vulnerability and Java DB (#7605)\n  * ci: don't use cache for `setup-go` (#7622)\n  * test: use loaded image names (#7617)\n  * feat(java): add empty versions if `pom.xml` dependency versions can't be detected (#7520)\n  * feat(secret): enhance secret scanning for python binary files (#7223)\n  * refactor: fix auth error handling (#7615)\n  * ci: split `save` and `restore` cache actions (#7614)\n  * fix(misconf): disable DS016 check for image history analyzer (#7540)\n  * feat(suse): added SUSE Linux Enterprise Micro support (#7294)\n  * feat(misconf): add ability to disable checks by ID (#7536)\n  * fix(misconf): escape all special sequences (#7558)\n  * test: use a local registry for remote scanning (#7607)\n  * fix: allow access to '..' in mapfs (#7575)\n  * fix(db): check `DownloadedAt` for `trivy-java-db` (#7592)\n  * chore(deps): bump the common group across 1 directory with 20 updates (#7604)\n  * ci: add `workflow_dispatch` trigger for test workflow. (#7606)\n  * ci: cache test images for `integration`, `VM` and `module` tests (#7599)\n  * chore(deps): remove broken replaces for opa and discovery (#7600)\n  * docs(misconf): Add more info on how to use arbitrary JSON/YAML scan feat (#7458)\n  * fix(misconf): Fixed scope for China Cloud (#7560)\n  * perf(misconf): use port ranges instead of enumeration (#7549)\n  * fix(sbom): export bom-ref when converting a package to a component (#7340)\n  * refactor(misconf): pass options to Rego scanner as is (#7529)\n  * fix(sbom): parse type `framework` as `library` when unmarshalling `CycloneDX` files (#7527)\n  * chore(deps): bump go-ebs-file (#7513)\n  * fix(misconf): Fix logging typo (#7473)\n  * feat(misconf): Register checks only when needed (#7435)\n  * refactor: split `.egg` and `packaging` analyzers (#7514)\n  * fix(java): use `dependencyManagement` from root/child pom's for dependencies from parents (#7497)\n  * chore(vex): add `CVE-2024-34155`, `CVE-2024-34156` and `CVE-2024-34158` in `trivy.openvex.json` (#7510)\n  * chore(deps): bump alpine from 3.20.0 to 3.20.3 (#7508)\n  * chore(vex): suppress openssl vulnerabilities (#7500)\n  * revert(java): stop supporting of `test` scope for `pom.xml` files (#7488)\n  * docs(db): add a manifest example (#7485)\n  * feat(license): improve license normalization (#7131)\n  * docs(oci): Add a note About the expected Media Type for the Trivy-DB OCI Artifact (#7449)\n  * fix(report): fix error with unmarshal of `ExperimentalModifiedFindings` (#7463)\n  * fix(report): change a receiver of MarshalJSON (#7483)\n  * fix(oracle): Update EOL date for Oracle 7 (#7480)\n  * chore(deps): bump the aws group with 6 updates (#7468)\n  * chore(deps): bump the common group across 1 directory with 19 updates (#7436)\n  * chore(helm): bump up Trivy Helm chart (#7441)\n  * refactor(java): add error/statusCode for logs when we can't get pom.xml/maven-metadata.xml from remote repo (#7451)\n  * fix(license): stop spliting a long license text (#7336)\n  * release: v0.55.0 [main] (#7271)\n  * feat(go): use `toolchain` as `stdlib` version for `go.mod` files (#7163)\n  * fix(license): add license handling to JUnit template (#7409)\n  * feat(java): add `test` scope support for `pom.xml` files (#7414)\n  * chore(deps): Bump trivy-checks and pin OPA (#7427)\n  * fix(helm): explicitly define `kind` and `apiVersion` of `volumeClaimTemplate` element (#7362)\n  * feat(sbom): set User-Agent header on requests to Rekor (#7396)\n  * test: add integration plugin tests (#7299)\n  * fix(nodejs): check all `importers` to detect dev deps from pnpm-lock.yaml file (#7387)\n  * fix: logger initialization before flags parsing (#7372)\n  * fix(aws): handle ECR repositories in different regions (#6217)\n  * fix(misconf): fix infer type for null value (#7424)\n  * fix(secret): use `.eyJ` keyword for JWT secret (#7410)\n  * fix(misconf): do not recreate filesystem map (#7416)\n  * chore(deps): Bump trivy-checks (#7417)\n  * fix(misconf): do not register Rego libs in checks registry (#7420)\n  * fix(sbom): use `NOASSERTION` for licenses fields in SPDX formats (#7403)\n  * feat(report): export modified findings in JSON (#7383)\n  * feat(server): Make Trivy Server Multiplexer Exported (#7389)\n  * chore: update CODEOWNERS (#7398)\n  * fix(secret): use only line with secret for long secret lines (#7412)\n  * chore: fix allow rule of ignoring test files to make it case insensitive (#7415)\n  * feat(misconf): port and protocol support for EC2 networks (#7146)\n  * fix(misconf): do not filter Terraform plan JSON by name (#7406)\n  * feat(misconf): support for ignore by nested attributes (#7205)\n  * fix(misconf): use module to log when metadata retrieval fails (#7405)\n  * fix(report): escape `Message` field in `asff.tpl` template (#7401)\n  * feat(misconf): Add support for using spec from on-disk bundle (#7179)\n  * docs: add pkg flags to config file page (#7370)\n  * feat(python): use minimum version for pip packages (#7348)\n  * fix(misconf): support deprecating for Go checks (#7377)\n  * fix(misconf): init frameworks before updating them (#7376)\n  * feat(misconf): ignore duplicate checks (#7317)\n  * refactor(misconf): use slog (#7295)\n  * chore(deps): bump trivy-checks (#7350)\n  * feat(server): add internal `--path-prefix` flag for client/server mode (#7321)\n  * chore(deps): bump the aws group across 1 directory with 7 updates (#7358)\n  * fix: safely check if the directory exists (#7353)\n  * feat(misconf): variable support for Terraform Plan (#7228)\n  * feat(misconf): scanning support for YAML and JSON (#7311)\n  * fix(misconf): wrap Azure PortRange in iac types (#7357)\n  * refactor(misconf): highlight only affected rows (#7310)\n  * fix(misconf): change default TLS values for the Azure storage account (#7345)\n  * chore(deps): bump the common group with 9 updates (#7333)\n  * docs(misconf): Update callsites to use correct naming (#7335)\n  * docs: update air-gapped docs (#7160)\n  * refactor: replace ftypes.Gradle with packageurl.TypeGradle (#7323)\n  * perf(misconf): optimize work with context (#6968)\n  * docs: update links to packaging.python.org (#7318)\n  * docs: update client/server docs for misconf and license scanning (#7277)\n  * chore(deps): bump the common group across 1 directory with 7 updates (#7305)\n  * feat(misconf): iterator argument support for dynamic blocks (#7236)\n  * fix(misconf): do not set default value for default_cache_behavior (#7234)\n  * feat(misconf): support for policy and bucket grants (#7284)\n  * fix(misconf): load only submodule if it is specified in source (#7112)\n  * perf(misconf): use json.Valid to check validity of JSON (#7308)\n  * refactor(misconf): remove unused universal scanner (#7293)\n  * perf(misconf): do not convert contents of a YAML file to string (#7292)\n  * fix(terraform): add aws_region name to presets (#7184)\n  * docs: add auto-generated config (#7261)\n  * feat(vuln): Add `--detection-priority` flag for accuracy tuning (#7288)\n  * refactor(misconf): remove file filtering from parsers (#7289)\n  * fix(flag): incorrect behavior for deprected flag `--clear-cache` (#7281)\n  * fix(java): Return error when trying to find a remote pom to avoid segfault (#7275)\n  * fix(plugin): do not call GitHub content API for releases and tags (#7274)\n  * feat(vm): support the Ext2/Ext3 filesystems (#6983)\n  * feat(cli)!: delete deprecated SBOM flags (#7266)\n  * feat(vm): Support direct filesystem (#7058)\n\n- Update to version 0.51.1 (boo#1227010, CVE-2024-3817):","status":"published","published":"2025-02-07T11:01:31Z","modified":"2026-02-04T03:23:30.049073Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14624-1","title":"govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20250108T191942-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-09T00:00:00Z","modified":"2026-02-04T03:30:26.791709Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14654-1","title":"grafana-11.3.0-5.1 on GA media","description":"These are all security issues fixed in the grafana-11.3.0-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-16T00:00:00Z","modified":"2026-02-04T03:45:46.272506Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14658-1","title":"amazon-ssm-agent-3.3.1611.0-1.1 on GA media","description":"These are all security issues fixed in the amazon-ssm-agent-3.3.1611.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-17T00:00:00Z","modified":"2026-02-04T04:06:52.096498Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14713-1","title":"trivy-0.58.2-1.1 on GA media","description":"These are all security issues fixed in the trivy-0.58.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-29T00:00:00Z","modified":"2026-02-04T02:45:19.18553Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14752-1","title":"rime-schema-all-20230603+git.5fdd2d6-5.1 on GA media","description":"These are all security issues fixed in the rime-schema-all-20230603+git.5fdd2d6-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-09T00:00:00Z","modified":"2026-02-04T03:33:09.247877Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14902-1","title":"rime-plum-1.0.3-1.1 on GA media","description":"These are all security issues fixed in the rime-plum-1.0.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-17T00:00:00Z","modified":"2026-02-04T02:41:11.300533Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15438-1","title":"rz-pm-0.3.3+git~14~gcee0d0d-1.1 on GA media","description":"These are all security issues fixed in the rz-pm-0.3.3+git~14~gcee0d0d-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-13T00:00:00Z","modified":"2026-03-23T04:53:47.072555Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15487-1","title":"cheat-4.4.2-2.1 on GA media","description":"These are all security issues fixed in the cheat-4.4.2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-25T00:00:00Z","modified":"2026-03-23T04:53:50.558551Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:20117-1","title":"Security update for trivy","description":"This update for trivy fixes the following issues:\n\nChanges in trivy:\n\nUpdate to version 0.67.2 (bsc#1250625, CVE-2025-11065, bsc#1248897, CVE-2025-58058):\n\n  * fix: Use `fetch-level: 1` to check out trivy-repo in the release workflow [backport: release/v0.67] (#9638)\n  * fix: restore compatibility for google.protobuf.Value [backport: release/v0.67] (#9631)\n  * fix: using SrcVersion instead of Version for echo detector [backport: release/v0.67] (#9629)\n  * fix: add `buildInfo` for `BlobInfo` in `rpc` package [backport: release/v0.67] (#9615)\n  * fix(vex): don't use reused BOM [backport: release/v0.67] (#9612)\n  * fix(vex): don't  suppress vulns for packages with infinity loop (#9465)\n  * fix(aws): use `BuildableClient` insead of `xhttp.Client` (#9436)\n  * refactor(misconf): replace github.com/liamg/memoryfs with internal mapfs and testing/fstest (#9282)\n  * docs: clarify inline ignore limitations for resource-less checks (#9537)\n  * fix(k8s): disable parallel traversal with fs cache for k8s images (#9534)\n  * fix(misconf): handle tofu files in module detection (#9486)\n  * feat(seal): add seal support (#9370)\n  * docs: fix modules path and update code example (#9539)\n  * fix: close file descriptors and pipes on error paths (#9536)\n  * feat: add documentation URL for database lock errors (#9531)\n  * fix(db): Dowload database when missing but metadata still exists (#9393)\n  * feat(cloudformation): support default values and list results in Fn::FindInMap (#9515)\n  * fix(misconf): unmark cty values before access (#9495)\n  * feat(cli): change --list-all-pkgs default to true (#9510)\n  * fix(nodejs): parse workspaces as objects for package-lock.json files (#9518)\n  * refactor(fs): use underlyingPath to determine virtual files more reliably (#9302)\n  * refactor: remove google/wire dependency and implement manual DI (#9509)\n  * chore(deps): bump the aws group with 6 updates (#9481)\n  * chore(deps): bump the common group across 1 directory with 24 updates (#9507)\n  * fix(misconf): wrap legacy ENV values in quotes to preserve spaces (#9497)\n  * docs: move info about `detection priority` into coverage section (#9469)\n  * feat(sbom): added support for CoreOS (#9448)\n  * fix(misconf): strip build metadata suffixes from image history (#9498)\n  * feat(cyclonedx): preserve SBOM structure when scanning SBOM files with vulnerability updates (#9439)\n  * docs: Fix typo in terraform docs (#9492)\n  * feat(redhat): add os-release detection for RHEL-based images (#9458)\n  * ci(deps): add 3-day cooldown period for Dependabot updates (#9475)\n  * refactor: migrate from go-json-experiment to encoding/json/v2 (#9422)\n  * fix(vuln): compare `nuget` package names in lower case (#9456)\n  * chore: Update release flow to include chocolatey (#9460)\n  * docs: document eol supportability (#9434)\n  * docs(report): add nuanses about secret/license scanner in summary table (#9442)\n  * ci: use environment variables in GitHub Actions for improved security (#9433)\n  * chore: bump Go to 1.24.7 (#9435)\n  * fix(nodejs): use snapshot string as `Package.ID` for pnpm packages (#9330)\n  * ci(helm): bump Trivy version to 0.66.0 for Trivy Helm Chart 0.18.0 (#9425)\n\nUpdate to version 0.66.0 (bsc#1248937, CVE-2025-58058):\n\n  * chore(deps): bump the aws group with 7 updates (#9419)\n  * refactor(secret): clarify secret scanner messages (#9409)\n  * fix(cyclonedx): handle multiple license types (#9378)\n  * fix(repo): sanitize git repo URL before inserting into report metadata (#9391)\n  * test: add HTTP basic authentication to git test server (#9407)\n  * fix(sbom): add support for `file` component type of `CycloneDX` (#9372)\n  * fix(misconf): ensure module source is known (#9404)\n  * ci: migrate GitHub Actions from version tags to SHA pinning (#9405)\n  * fix: create temp file under composite fs dir (#9387)\n  * chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (#9403)\n  * refactor: switch to stable azcontainerregistry SDK package (#9319)\n  * chore(deps): bump the common group with 7 updates (#9382)\n  * refactor(misconf): migrate from custom Azure JSON parser (#9222)\n  * fix(repo): preserve RepoMetadata on FS cache hit (#9389)\n  * refactor(misconf): use atomic.Int32 (#9385)\n  * chore(deps): bump the aws group with 6 updates (#9383)\n  * docs: Fix broken link to \"Built-in Checks\" (#9375)\n  * fix(plugin): don't remove plugins when updating index.yaml file (#9358)\n  * fix: persistent flag option typo (#9374)\n  * chore(deps): bump the common group across 1 directory with 26 updates (#9347)\n  * fix(image): use standardized HTTP client for ECR authentication (#9322)\n  * refactor: export `systemFileFiltering` Post Handler (#9359)\n  * docs: update links to Semaphore pages (#9352)\n  * fix(conda): memory leak by adding closure method for `package.json` file (#9349)\n  * feat: add timeout handling for cache database operations (#9307)\n  * fix(misconf): use correct field log_bucket instead of target_bucket in gcp bucket (#9296)\n  * fix(misconf): ensure ignore rules respect subdirectory chart paths (#9324)\n  * chore(deps): bump alpine from 3.21.4 to 3.22.1 (#9301)\n  * feat(terraform): use .terraform cache for remote modules in plan scanning (#9277)\n  * chore: fix some function names in comment (#9314)\n  * chore(deps): bump the aws group with 7 updates (#9311)\n  * docs: add explanation for how to use non-system certificates (#9081)\n  * chore(deps): bump the github-actions group across 1 directory with 2 updates (#8962)\n  * fix(misconf): preserve original paths of remote submodules from .terraform (#9294)\n  * refactor(terraform): make Scan method of Terraform plan scanner private (#9272)\n  * fix: suppress debug log for context cancellation errors (#9298)\n  * feat(secret): implement streaming secret scanner with byte offset tracking (#9264)\n  * fix(python): impove package name normalization  (#9290)\n  * feat(misconf): added audit config attribute (#9249)\n  * refactor(misconf): decouple input fs and track extracted files with fs references (#9281)\n  * test(misconf): remove BenchmarkCalculate using outdated check metadata (#9291)\n  * refactor: simplify Detect function signature (#9280)\n  * ci(helm): bump Trivy version to 0.65.0 for Trivy Helm Chart 0.17.0 (#9288)\n  * fix(fs): avoid shadowing errors in file.glob (#9286)\n  * test(misconf): move terraform scan tests to integration tests (#9271)\n  * test(misconf): drop gcp iam test covered by another case (#9285)\n  * chore(deps): bump to alpine from `3.21.3` to `3.21.4` (#9283)\n\nUpdate to version 0.65.0:\n\n  * fix(cli): ensure correct command is picked by telemetry (#9260)\n  * feat(flag): add schema validation for `--server` flag (#9270)\n  * chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#9274)\n  * ci: skip undefined labels in discussion triage action (#9175)\n  * feat(repo): add git repository metadata to reports (#9252)\n  * fix(license): handle WITH operator for `LaxSplitLicenses` (#9232)\n  * chore: add modernize tool integration for code modernization (#9251)\n  * fix(secret): add UTF-8 validation in secret scanner to prevent protobuf marshalling errors (#9253)\n  * chore: implement process-safe temp file cleanup (#9241)\n  * fix: prevent graceful shutdown message on normal exit (#9244)\n  * fix(misconf): correctly parse empty port ranges in google_compute_firewall (#9237)\n  * feat: add graceful shutdown with signal handling (#9242)\n  * chore: update template URL for brew formula (#9221)\n  * test: add end-to-end testing framework with image scan and proxy tests (#9231)\n  * refactor(db): use `Getter` interface with `GetParams` for trivy-db sources (#9239)\n  * ci: specify repository for `gh cache delete` in canary worklfow (#9240)\n  * ci: remove invalid `--confirm` flag from `gh cache delete` command in canary builds (#9236)\n  * fix(misconf): fix log bucket in schema (#9235)\n  * chore(deps): bump the common group across 1 directory with 24 updates (#9228)\n  * ci: move runner.os context from job-level env to step-level in canary workflow (#9233)\n  * chore(deps): bump up Trivy-kubernetes to v0.9.1 (#9214)\n  * feat(misconf): added logging and versioning to the gcp storage bucket (#9226)\n  * fix(server): add HTTP transport setup to server mode (#9217)\n  * chore: update the rpm download Update (#9202)\n  * feat(alma): add AlmaLinux 10 support (#9207)\n  * fix(nodejs): don't use prerelease logic for compare npm constraints  (#9208)\n  * fix(rootio): fix severity selection (#9181)\n  * fix(sbom): merge in-graph and out-of-graph OS packages in scan results (#9194)\n  * fix(cli): panic: attempt to get os.Args[1] when len(os.Args) \u003c 2 (#9206)\n  * fix(misconf): correctly adapt azure storage account (#9138)\n  * feat(misconf): add private ip google access attribute to subnetwork (#9199)\n  * feat(report): add CVSS vectors in sarif report (#9157)\n  * fix(terraform): `for_each` on a map returns a resource for every key (#9156)\n  * fix: supporting .egg-info/METADATA in python.Packaging analyzer (#9151)\n  * chore: migrate protoc setup from Docker to buf CLI (#9184)\n  * ci: delete cache after artifacts upload in canary workflow (#9177)\n  * refactor: remove aws flag helper message (#9080)\n  * ci: use gh pr view to get PR number for forked repositories in auto-ready workflow (#9183)\n  * ci: add auto-ready-for-review workflow (#9179)\n  * feat(image): add Docker context resolution (#9166)\n  * ci: optimize golangci-lint performance with cache-based strategy (#9173)\n  * feat: add HTTP request/response tracing support (#9125)\n  * fix(aws): update amazon linux 2 EOL date (#9176)\n  * chore: Update release workflow to trigger version updates (#9162)\n  * chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 (#9164)\n  * fix: also check `filepath` when removing duplicate packages (#9142)\n  * chore: add debug log to show image source location (#9163)\n  * docs: add section on customizing default check data (#9114)\n  * chore(deps): bump the common group across 1 directory with 9 updates (#9153)\n  * docs: partners page content updates (#9149)\n  * chore(license): add missed spdx exceptions: (#9147)\n  * docs: trivy partners page updates (#9133)\n  * fix: migrate from `*.list` to `*.md5sums` files for `dpkg` (#9131)\n  * ci(helm): bump Trivy version to 0.64.1 for Trivy Helm Chart 0.16.1 (#9135)\n  * feat(sbom): add SHA-512 hash support for CycloneDX SBOM (#9126)\n  * fix(misconf): skip rewriting expr if attr is nil (#9113)\n  * fix(license): add missed `GFDL-NIV-1.1` and `GFDL-NIV-1.2` into Trivy mapping (#9116)\n  * fix(cli): Add more non-sensitive flags to telemetry (#9110)\n  * fix(alma): parse epochs from rpmqa file (#9101)\n  * fix(rootio): check full version to detect `root.io` packages (#9117)\n  * chore: drop FreeBSD 32-bit support (#9102)\n  * fix(sbom): use correct field for licenses in CycloneDX reports (#9057)\n  * fix(secret): fix line numbers for multiple-line secrets (#9104)\n  * feat(license): observe pkg types option in license scanner (#9091)\n  * ci(helm): bump Trivy version to 0.64.0 for Trivy Helm Chart 0.16.0 (#9107)\n- (CVE-2025-53547, bsc#1246151)\n\n- Update to version 0.64.1 (bsc#1243633, CVE-2025-47291,\n                           (bsc#1246730, CVE-2025-46569):\n\n  * fix(misconf): skip rewriting expr if attr is nil [backport: release/v0.64] (#9127)\n  * fix(cli): Add more non-sensitive flags to telemetry [backport: release/v0.64] (#9124)\n  * fix(rootio): check full version to detect `root.io` packages [backport: release/v0.64] (#9120)\n  * fix(alma): parse epochs from rpmqa file [backport: release/v0.64] (#9119)\n  * docs(python): fix type with METADATA file name (#9090)\n  * feat: reject unsupported artifact types in remote image retrieval (#9052)\n  * chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 (#9088)\n  * refactor(misconf): rewrite Rego module filtering using functional filters (#9061)\n  * feat(terraform): add partial evaluation for policy templates (#8967)\n  * feat(vuln): add Root.io support for container image scanning (#9073)\n  * feat(sbom): add manufacturer field to CycloneDX tools metadata (#9019)\n  * fix(cli): add some values to the telemetry call (#9056)\n  * feat(ubuntu): add end of life date for Ubuntu 25.04 (#9077)\n  * refactor: centralize HTTP transport configuration (#9058)\n  * test: include integration tests in linting and fix all issues (#9060)\n  * chore(deps): bump the common group across 1 directory with 26 updates (#9063)\n  * feat(java): dereference all maven settings.xml env placeholders (#9024)\n  * fix(misconf): reduce log noise on incompatible check (#9029)\n  * fix(misconf): .Config.User always takes precedence over USER in .History (#9050)\n  * chore(deps): update Docker to v28.2.2 and fix compatibility issues (#9037)\n  * docs(misconf): simplify misconfiguration docs (#9030)\n  * fix(misconf): move disabled checks filtering after analyzer scan (#9002)\n  * docs: add PR review policy for maintainers (#9032)\n  * fix(sbom): remove unnecessary OS detection check in SBOM decoding (#9034)\n  * test: improve and extend tests for iac/adapters/arm (#9028)\n  * chore: bump up Go version to 1.24.4 (#9031)\n  * feat(cli): add version constraints to annoucements (#9023)\n  * fix(misconf): correct Azure value-to-time conversion in AsTimeValue (#9015)\n  * feat(ubuntu): add eol date for 20.04-ESM (#8981)\n  * fix(report): don't panic when report contains vulns, but doesn't contain packages for `table` format (#8549)\n  * fix(nodejs): correctly parse `packages` array of `bun.lock` file (#8998)\n  * refactor: use strings.SplitSeq instead of strings.Split in for-loop (#8983)\n  * docs: change --disable-metrics to --disable-telemetry in example (#8999) (#9003)\n  * feat(misconf): add OpenTofu file extension support (#8747)\n  * refactor(misconf): set Trivy version by default in Rego scanner (#9001)\n  * docs: fix assets with versioning (#8996)\n  * docs: add partners page (#8988)\n  * chore(alpine): add EOL date for Alpine 3.22 (#8992)\n  * fix: don't show corrupted trivy-db warning for first run (#8991)\n  * Update installation.md (#8979)\n  * feat(misconf): normalize CreatedBy for buildah and legacy docker builder (#8953)\n  * chore(k8s): update comments with deprecated command format (#8964)\n  * chore: fix errors and typos in docs (#8963)\n  * fix: Add missing version check flags (#8951)\n  * feat(redhat): Add EOL date for RHEL 10. (#8910)\n  * fix: Correctly check for semver versions for trivy version check (#8948)\n  * refactor(server): change custom advisory and vulnerability data types fr… (#8923)\n  * ci(helm): bump Trivy version to 0.63.0 for Trivy Helm Chart 0.15.0 (#8946)\n  * fix(misconf): use argument value in WithIncludeDeprecatedChecks (#8942)\n  * chore(deps): Bump trivy-checks (#8934)\n  * fix(julia): add `Relationship` field support (#8939)\n  * feat(minimos): Add support for MinimOS (#8792)\n  * feat(alpine): add maintainer field extraction for APK packages (#8930)\n  * feat(echo): Add Echo Support (#8833)\n  * fix(redhat): Also try to find buildinfo in root layer (layer 0) (#8924)\n  * fix(wolfi): support new APK database location (#8937)\n  * feat(k8s): get components from namespaced resources (#8918)\n  * refactor(cloudformation): remove unused ScanFile method from Scanner (#8927)\n  * refactor(terraform): remove result sorting from scanner (#8928)\n  * feat(misconf): Add support for `Minimum Trivy Version` (#8880)\n  * docs: improve skipping files documentation (#8749)\n  * feat(cli): Add available version checking (#8553)\n  * feat(nodejs): add a bun.lock analyzer (#8897)\n  * feat: terraform parser option to set current working directory (#8909)\n  * perf(secret): only match secrets of meaningful length, allow example strings to not be matched (#8602)\n  * feat(misconf): export raw Terraform data to Rego (#8741)\n  * refactor(terraform): simplify AllReferences method signature in Attribute (#8906)\n  * fix: check post-analyzers for StaticPaths (#8904)\n  * feat: add Bottlerocket OS package analyzer (#8653)\n  * feat(license): improve work text licenses with custom classification (#8888)\n  * chore(deps): bump github.com/containerd/containerd/v2 from 2.1.0 to 2.1.1 (#8901)\n  * chore(deps): bump the common group across 1 directory with 9 updates (#8887)\n  * refactor(license): simplify compound license scanning (#8896)\n  * feat(license): Support compound licenses (licenses using SPDX operators) (#8816)\n  * fix(k8s): use in-memory cache backend during misconfig scanning (#8873)\n  * feat(nodejs): add bun.lock parser (#8851)\n  * feat(license): improve work with custom classification of licenses from config file (#8861)\n  * fix(cli): disable `--skip-dir` and `--skip-files` flags for `sbom` command (#8886)\n  * fix: julia parser panicing (#8883)\n  * refactor(db): change logic to detect wrong DB (#8864)\n  * fix(cli): don't use allow values for `--compliance` flag (#8881)\n  * docs(misconf): Reorganize misconfiguration scan pages (#8206)\n  * fix(server): add missed Relationship field for `rpc` (#8872)\n  * feat: add JSONC support for comments and trailing commas (#8862)\n  * fix(vex): use `lo.IsNil` to check `VEX` from OCI artifact (#8858)\n  * feat(go): support license scanning in both GOPATH and vendor (#8843)\n  * fix(redhat): save contentSets for OS packages in fs/vm modes (#8820)\n  * fix: filter all files when processing files installed from package managers (#8842)\n  * feat(misconf): add misconfiguration location to junit template (#8793)\n  * docs(vuln): remove OSV for Python from data sources (#8841)\n  * chore: add an issue template for maintainers (#8838)\n  * chore: enable staticcheck (#8815)\n  * ci(helm): bump Trivy version to 0.62.1 for Trivy Helm Chart 0.14.1 (#8836)\n  * feat(license): scan vendor directory for license for go.mod files (#8689)\n  * docs(java):  Update info about dev deps in gradle lock (#8830)\n  * chore(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 in the common group (#8822)\n  * fix(java): exclude dev dependencies in gradle lockfile (#8803)\n  * fix: octalLiteral from go-critic (#8811)\n  * fix(redhat): trim invalid suffix from content_sets in manifest parsing (#8818)\n  * chore(deps): bump the common group across 1 directory with 10 updates (#8817)\n  * fix: use-any from revive (#8810)\n  * fix: more revive rules (#8814)\n  * docs: change in java.md: fix the Trity -to-\u003e Trivy typo (#8813)\n  * fix(misconf): check if for-each is known when expanding dyn block (#8808)\n  * ci(helm): bump Trivy version to 0.62.0 for Trivy Helm Chart 0.14.0 (#8802)\n\n- Update to version 0.62.1 (bsc#1239225, CVE-2025-22868,\n                            bsc#1241724, CVE-2025-22872):\n\n  * chore(deps): bump the common group across 1 directory with 10 updates [backport: release/v0.62] (#8831)\n  * fix(misconf): check if for-each is known when expanding dyn block [backport: release/v0.62] (#8826)\n  * fix(redhat): trim invalid suffix from content_sets in manifest parsing [backport: release/v0.62] (#8824)\n  * feat(nodejs): add root and workspace for `yarn` packages (#8535)\n  * fix: unused-parameter rule from revive (#8794)\n  * chore(deps): Update trivy-checks (#8798)\n  * fix: early-return, indent-error-flow and superfluous-else rules from revive  (#8796)\n  * fix(k8s): remove using `last-applied-configuration` (#8791)\n  * refactor(misconf): remove unused methods from providers (#8781)\n  * refactor(misconf): remove unused methods from iac types (#8782)\n  * fix(misconf): filter null nodes when parsing json manifest (#8785)\n  * fix: testifylint last issues (#8768)\n  * fix(misconf): perform operations on attribute safely (#8774)\n  * refactor(ubuntu): update time handling for fixing time (#8780)\n  * chore(deps): bump golangci-lint to v2.1.2 (#8766)\n  * feat(image): save layers metadata into report (#8394)\n  * feat(misconf): convert AWS managed policy to document (#8757)\n  * chore(deps): bump the docker group across 1 directory with 3 updates (#8762)\n  * ci(helm): bump Trivy version to 0.61.1 for Trivy Helm Chart 0.13.1 (#8753)\n  * ci(helm): create a helm branch for patches from main (#8673)\n  * fix(terraform): hcl object expressions to return references (#8271)\n  * chore(terraform): option to pass in instanced logger  (#8738)\n  * ci: use `Skitionek/notify-microsoft-teams` instead of `aquasecurity` fork (#8740)\n  * chore(terraform): remove os.OpenPath call from terraform file functions (#8737)\n  * chore(deps): bump the common group across 1 directory with 23 updates (#8733)\n  * feat(rust): add root and workspace relationships/package for `cargo` lock files (#8676)\n  * refactor(misconf): remove module outputs from parser.EvaluateAll (#8587)\n  * fix(misconf): populate context correctly for module instances (#8656)\n  * fix(misconf): check if metadata is not nil (#8647)\n  * refactor(misconf): switch to x/json  (#8719)\n  * fix(report): clean buffer after flushing (#8725)\n  * ci: improve PR title validation workflow (#8720)\n  * refactor(flag): improve flag system architecture and extensibility (#8718)\n  * fix(terraform): `evaluateStep` to correctly set `EvalContext` for multiple instances of blocks (#8555)\n  * refactor: migrate from `github.com/aquasecurity/jfather` to `github.com/go-json-experiment/json` (#8591)\n  * feat(misconf): support auto_provisioning_defaults in google_container_cluster (#8705)\n  * ci: use `github.event.pull_request.user.login` for release PR check workflow (#8702)\n  * refactor: add hook interface for extended functionality (#8585)\n  * fix(misconf): add missing variable as unknown (#8683)\n  * docs: Update maintainer docs (#8674)\n  * ci(vuln): reduce github action script injection attack risk (#8610)\n  * fix(secret): ignore .dist-info directories during secret scanning (#8646)\n  * fix(server): fix redis key when trying to delete blob (#8649)\n  * chore(deps): bump the testcontainers group with 2 updates (#8650)\n  * test: use `aquasecurity` repository for test images (#8677)\n  * chore(deps): bump the aws group across 1 directory with 5 updates (#8652)\n  * fix(k8s): skip passed misconfigs for the summary report (#8684)\n  * fix(k8s): correct compare artifact versions (#8682)\n  * chore: update Docker lib (#8681)\n  * refactor(misconf): remove unused terraform attribute methods (#8657)\n  * feat(misconf): add option to pass Rego scanner to IaC scanner (#8369)\n  * chore: typo fix to replace `rego` with `repo` on the RepoFlagGroup options error output (#8643)\n  * docs: Add info about helm charts release (#8640)\n  * ci(helm): bump Trivy version to 0.61.0 for Trivy Helm Chart 0.13.0 (#8638)\n\nUpdate to version 0.61.1 (bsc#1239385, CVE-2025-22869, bsc#1240466, CVE-2025-30204):\n\n  * fix(k8s): skip passed misconfigs for the summary report [backport: release/v0.61] (#8748)\n  * fix(k8s): correct compare artifact versions [backport: release/v0.61] (#8699)\n  * test: use `aquasecurity` repository for test images [backport: release/v0.61] (#8698)\n  * fix(misconf): Improve logging for unsupported checks (#8634)\n  * feat(k8s): add support for controllers (#8614)\n  * fix(debian): don't include empty licenses for `dpkgs` (#8623)\n  * fix(misconf): Check values wholly prior to evalution (#8604)\n  * chore(deps): Bump trivy-checks (#8619)\n  * fix(k8s): show report for `--report all` (#8613)\n  * chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#8597)\n  * refactor: rename scanner to service (#8584)\n  * fix(misconf): do not skip loading documents from subdirectories (#8526)\n  * refactor(misconf): get a block or attribute without calling HasChild (#8586)\n  * fix(misconf): identify the chart file exactly by name (#8590)\n  * test: use table-driven tests in Helm scanner tests (#8592)\n  * refactor(misconf): Simplify misconfig checks bundle parsing (#8533)\n  * chore(deps): bump the common group across 1 directory with 10 updates (#8566)\n  * fix(misconf): do not use cty.NilVal for non-nil values (#8567)\n  * docs(cli): improve flag value display format (#8560)\n  * fix(misconf): set default values for AWS::EKS::Cluster.ResourcesVpcConfig (#8548)\n  * docs: remove slack (#8565)\n  * fix: use `--file-patterns` flag for all post analyzers (#7365)\n  * docs(python): Mention pip-compile (#8484)\n  * feat(misconf): adapt aws_opensearch_domain (#8550)\n  * feat(misconf): adapt AWS::EC2::VPC (#8534)\n  * docs: fix a broken link (#8546)\n  * fix(fs): check postAnalyzers for StaticPaths (#8543)\n  * refactor(misconf): remove unused methods for ec2.Instance (#8536)\n  * feat(misconf): adapt aws_default_security_group (#8538)\n  * feat(fs): optimize scanning performance by direct file access for known paths (#8525)\n  * feat(misconf): adapt AWS::DynamoDB::Table (#8529)\n  * style: Fix MD syntax in self-hosting.md (#8523)\n  * perf(misconf): retrieve check metadata from annotations once (#8478)\n  * feat(misconf): Add support for aws_ami (#8499)\n  * fix(misconf): skip Azure CreateUiDefinition (#8503)\n  * refactor(misconf): use OPA v1 (#8518)\n  * fix(misconf): add ephemeral block type to config schema (#8513)\n  * perf(misconf): parse input for Rego once (#8483)\n  * feat: replace TinyGo with standard Go for WebAssembly modules (#8496)\n  * chore: replace deprecated tenv linter with usetesting (#8504)\n  * fix(spdx): save text licenses into `otherLicenses` without normalize (#8502)\n  * chore(deps): bump the common group across 1 directory with 13 updates (#8491)\n  * chore: use go.mod for managing Go tools (#8493)\n  * ci(helm): bump Trivy version to 0.60.0 for Trivy Helm Chart 0.12.0 (#8494)\n  * fix(sbom): improve logic for binding direct dependency to parent component (#8489)\n  * chore(deps): remove missed replace of `trivy-db` (#8492)\n  * chore(deps): bump alpine from 3.21.0 to 3.21.3 in the docker group across 1 directory (#8490)\n  * chore(deps): update Go to 1.24 and switch to go-version-file (#8388)\n  * docs: add abbreviation list (#8453)\n  * chore(terraform): assign *terraform.Module 'parent' field (#8444)\n  * feat: add report summary table (#8177)\n  * chore(deps): bump the github-actions group with 3 updates (#8473)\n  * refactor(vex): improve SBOM reference handling with project standards (#8457)\n  * ci: update GitHub Actions cache to v4 (#8475)\n  * feat: add `--vuln-severity-source` flag (#8269)\n  * fix(os): add mapping OS aliases (#8466)\n  * chore(deps): bump the aws group across 1 directory with 7 updates (#8468)\n  * chore(deps): Bump trivy-checks to v1.7.1 (#8467)\n  * refactor(report): write tables after rendering all results (#8357)\n  * docs: update VEX documentation index page (#8458)\n  * fix(db): fix case when 2 trivy-db were copied at the same time (#8452)\n  * feat(misconf): render causes for Terraform (#8360)\n  * fix(misconf): fix incorrect k8s locations due to JSON to YAML conversion (#8073)\n  * feat(cyclonedx): Add initial support for loading external VEX files from SBOM references (#8254)\n  * chore(deps): update go-rustaudit location (#8450)\n  * fix: update all documentation links (#8045)\n  * chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#8443)\n  * chore(deps): bump the common group with 6 updates (#8411)\n  * fix(k8s): add missed option `PkgRelationships` (#8442)\n  * fix(sbom): add SBOM file's filePath as Application FilePath if we can't detect its path (#8346)\n  * feat(go): fix parsing main module version for go \u003e= 1.24 (#8433)\n  * refactor(misconf): make Rego scanner independent of config type (#7517)\n  * fix(image): disable AVD-DS-0007 for history scanning (#8366)\n  * fix(server): secrets inspectation for the config analyzer in client server mode (#8418)\n  * chore: remove mockery (#8417)\n  * test(server): replace mock driver with memory cache in server tests (#8416)\n  * test: replace mock with memory cache and fix non-deterministic tests (#8410)\n  * test: replace mock with memory cache in scanner tests (#8413)\n  * test: use memory cache (#8403)\n  * fix(spdx): init `pkgFilePaths` map for all formats (#8380)\n  * chore(deps): bump the common group across 1 directory with 11 updates (#8381)\n  * docs: correct Ruby documentation (#8402)\n  * chore: bump `mockery` to update v2.52.2 version and rebuild mock files (#8390)\n  * fix: don't use `scope` for `trivy registry login` command (#8393)\n  * fix(go): merge nested flags into string for ldflags for Go binaries (#8368)\n  * chore(terraform): export module path on terraform modules (#8374)\n  * fix(terraform): apply parser options to submodule parsing (#8377)\n  * docs: Fix typos in documentation (#8361)\n  * docs: fix navigate links (#8336)\n  * ci(helm): bump Trivy version to 0.59.1 for Trivy Helm Chart 0.11.1 (#8354)\n  * ci(spdx): add `aqua-installer` step to fix `mage` error (#8353)\n  * chore: remove debug prints (#8347)\n  * fix(misconf): do not log scanners when misconfig scanning is disabled (#8345)\n  * fix(report): remove html escaping for `shortDescription` and `fullDescription` fields for sarif reports (#8344)\n  * chore(deps): bump Go to `v1.23.5` (#8341)\n  * fix(python): add `poetry` v2 support (#8323)\n  * chore(deps): bump the github-actions group across 1 directory with 4 updates (#8331)\n  * fix(misconf): ecs include enhanced for container insights (#8326)\n  * fix(sbom): preserve OS packages from multiple SBOMs (#8325)\n  * ci(helm): bump Trivy version to 0.59.0 for Trivy Helm Chart 0.11.0 (#8311)\n  *  (bsc#1237618, CVE-2025-27144)\n\nUpdate to version 0.59.1:\n\n  * fix(misconf): do not log scanners when misconfig scanning is disabled [backport: release/v0.59] (#8349)\n  * chore(deps): bump Go to `v1.23.5` [backport: release/v0.59] (#8343)\n  * fix(python): add `poetry` v2 support [backport: release/v0.59] (#8335)\n  * fix(sbom): preserve OS packages from multiple SBOMs [backport: release/v0.59] (#8333)\n\nUpdate to version 0.59.0:\n\n  * feat(image): return error early if total size of layers exceeds limit (#8294)\n  * chore(deps): Bump trivy-checks (#8310)\n  * chore(terraform): add accessors to underlying raw hcl values (#8306)\n  * fix: improve conversion of image config to Dockerfile (#8308)\n  * docs: replace short codes with Unicode emojis (#8296)\n  * feat(k8s): improve artifact selections for specific namespaces (#8248)\n  * chore: update code owners (#8303)\n  * fix(misconf): handle heredocs in dockerfile instructions (#8284)\n  * fix: de-duplicate same `dpkg` packages with different filePaths from different layers (#8298)\n  * chore(deps): bump the aws group with 7 updates (#8299)\n  * chore(deps): bump the common group with 12 updates (#8301)\n  * chore: enable int-conversion from perfsprint (#8194)\n  * feat(fs): use git commit hash as cache key for clean repositories (#8278)\n  * fix(spdx): use the `hasExtractedLicensingInfos` field for licenses that are not listed in the SPDX (#8077)\n  * chore: use require.ErrorContains when possible (#8291)\n  * feat(image): prevent scanning oversized container images (#8178)\n  * chore(deps): use aqua forks for `github.com/liamg/jfather` and `github.com/liamg/iamgo` (#8289)\n  * fix(fs): fix cache key generation to use UUID (#8275)\n  * fix(misconf): correctly handle all YAML tags in K8S templates (#8259)\n  * feat: add support for registry mirrors (#8244)\n  * chore(deps): bump the common group across 1 directory with 29 updates (#8261)\n  * refactor(license): improve license expression normalization (#8257)\n  * feat(misconf): support for ignoring by inline comments for Dockerfile (#8115)\n  * feat: add a examples field to check metadata (#8068)\n  * chore(deps): bump alpine from 3.20.0 to 3.21.0 in the docker group across 1 directory (#8196)\n  * ci: add workflow to restrict direct PRs to release branches (#8240)\n  * fix(suse): SUSE - update OSType constants and references for compatility (#8236)\n  * ci: fix path to main dir for canary builds (#8231)\n  * chore(secret): add reported issues related to secrets in junit template (#8193)\n  * refactor: use trivy-checks/pkg/specs package (#8226)\n  * ci(helm): bump Trivy version to 0.58.1 for Trivy Helm Chart 0.10.0 (#8170)\n  * fix(misconf): allow null values only for tf variables (#8112)\n  * feat(misconf): support for ignoring by inline comments for Helm (#8138)\n  * fix(redhat): check `usr/share/buildinfo/` dir to detect content sets (#8222)\n  * chore(alpine): add EOL date for Alpine 3.21 (#8221)\n  * fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field (#8207)\n  * fix(misconf): disable git terminal prompt on tf module load (#8026)\n  * chore: remove aws iam related scripts (#8179)\n  * docs: Updated JSON schema version 2 in the trivy documentation (#8188)\n  * refactor(python): use once + debug for `License acquired from METADATA...` logs (#8175)\n  * refactor: use slices package instead of custom function (#8172)\n  * chore(deps): bump the common group with 6 updates (#8162)\n  * feat(python): add support for uv dev and optional dependencies (#8134)\n  * feat(python): add support for poetry dev dependencies (#8152)\n  * fix(sbom): attach nested packages to Application (#8144)\n  * docs(vex): use debian minor version in examples (#8166)\n  * refactor: add generic Set implementation (#8149)\n  * chore(deps): bump the aws group across 1 directory with 6 updates (#8163)\n  * fix(python): skip dev group's deps for poetry (#8106)\n  * fix(sbom): use root package for `unknown` dependencies (if exists) (#8104)\n  * chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` (#8140)\n  * chore(vex): suppress CVE-2024-45338 (#8137)\n  * feat(python): add support for uv (#8080)\n  * chore(deps): bump the docker group across 1 directory with 3 updates (#8127)\n  * chore(deps): bump the common group across 1 directory with 14 updates (#8126)\n  * chore: bump go to 1.23.4 (#8123)\n  * test: set dummy value for NUGET_PACKAGES (#8107)\n  * chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` (#8105)\n  * chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#8103)\n  * fix: wasm module test (#8099)\n  * fix: CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass (#8088)\n  * chore(vex): suppress CVE-2024-45337 (#8101)\n  * fix(license): always trim leading and trailing spaces for licenses (#8095)\n  * fix(sbom): scan results of SBOMs generated from container images are missing layers (#7635)\n  * fix(redhat): correct rewriting of recommendations for the same vulnerability (#8063)\n  * fix: enable err-error and errorf rules from perfsprint linter (#7859)\n  * chore(deps): bump the aws group across 1 directory with 6 updates (#8074)\n  * perf: avoid heap allocation in applier findPackage (#7883)\n  * fix: Updated twitter icon (#7772)\n  * docs(k8s): add a note about multi-container pods (#7815)\n  * feat: add `--distro` flag to manually specify OS distribution for vulnerability scanning (#8070)\n  * fix(oracle): add architectures support for advisories (#4809)\n  * fix: handle `BLOW_UNKNOWN` error to download DBs (#8060)\n  * feat(misconf): generate placeholders for random provider resources (#8051)\n  * fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type (#8052)\n  * fix(flag): skip hidden flags for `--generate-default-config` command (#8046)\n  * fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props (#8050)\n  * feat(nodejs): respect peer dependencies for dependency tree (#7989)\n  * ci(helm): bump Trivy version to 0.58.0 for Trivy Helm Chart 0.10.0 (#8038)\n  * fix: respect GITHUB_TOKEN to download artifacts from GHCR (#7580)\n  * chore(deps): bump github.com/moby/buildkit from 0.17.2 to 0.18.0 in the docker group (#8029)\n  * fix(misconf): use log instead of fmt for logging (#8033)\n  * docs: add commercial content (#8030)\n\n- Update to version 0.58.2 (\n      bsc#1234512, CVE-2024-45337,\n      bsc#1235265, CVE-2024-45338,\n      bsc#1232948, CVE-2024-51744):\n\n  * fix(misconf): allow null values only for tf variables [backport: release/v0.58] (#8238)\n  * fix(suse): SUSE - update OSType constants and references for compatility [backport: release/v0.58] (#8237)\n  * fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field [backport: release/v0.58] (#8215)\n  * fix(sbom): attach nested packages to Application [backport: release/v0.58] (#8168)\n  * fix(python): skip dev group's deps for poetry [backport: release/v0.58] (#8158)\n  * fix(sbom): use root package for `unknown` dependencies (if exists) [backport: release/v0.58] (#8156)\n  * chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` [backport: release/v0.58] (#8142)\n  * chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` [backport: release/v0.58] (#8136)\n  * fix(redhat): correct rewriting of recommendations for the same vulnerability [backport: release/v0.58] (#8135)\n  * fix(oracle): add architectures support for advisories [backport: release/v0.58] (#8125)\n  * fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type [backport: release/v0.58] (#8124)\n  * chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 [backport: release/v0.58] (#8122)\n  * fix: handle `BLOW_UNKNOWN` error to download DBs [backport: release/v0.58] (#8121)\n  * fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props [backport: release/v0.58] (#8119)\n  * fix(misconf): wrap AWS EnvVar to iac types (#7407)\n  * chore(deps): Upgrade trivy-checks (#8018)\n  * refactor(misconf): Remove unused options (#7896)\n  * docs: add terminology page to explain Trivy concepts (#7996)\n  * feat: add `workspaceRelationship` (#7889)\n  * refactor(sbom): simplify relationship generation (#7985)\n  * chore: remove Go checks (#7907)\n  * docs: improve databases documentation (#7732)\n  * refactor: remove support for custom Terraform checks (#7901)\n  * docs: fix dead links (#7998)\n  * docs: drop AWS account scanning (#7997)\n  * fix(aws): change CPU and Memory type of ContainerDefinition to a string (#7995)\n  * fix(cli): Handle empty ignore files more gracefully (#7962)\n  * fix(misconf): load full Terraform module (#7925)\n  * fix(misconf): properly resolve local Terraform cache (#7983)\n  * refactor(k8s): add v prefix for Go packages (#7839)\n  * test: replace Go checks with Rego (#7867)\n  * feat(misconf): log causes of HCL file parsing errors (#7634)\n  * chore(deps): bump the aws group across 1 directory with 7 updates (#7991)\n  * chore(deps): bump github.com/moby/buildkit from 0.17.0 to 0.17.2 in the docker group across 1 directory (#7990)\n  * chore(deps): update csaf module dependency from csaf-poc to gocsaf (#7992)\n  * chore: downgrade the failed block expand message to debug (#7964)\n  * fix(misconf): do not erase variable type for child modules (#7941)\n  * feat(go): construct dependencies of `go.mod` main module in the parser (#7977)\n  * feat(go): construct dependencies in the parser (#7973)\n  * feat: add cvss v4 score and vector in scan response (#7968)\n  * docs: add `overview` page for `others` (#7972)\n  * fix(sbom): Fixes for Programming Language Vulnerabilities and SBOM Package Maintainer Details (#7871)\n  * feat(suse): Align SUSE/OpenSUSE OS Identifiers (#7965)\n  * chore(deps): bump the common group with 4 updates (#7949)\n  * feat(oracle): add `flavors` support (#7858)\n  * fix(misconf): Update trivy-checks default repo to `mirror.gcr.io` (#7953)\n  * chore(deps): Bump up trivy-checks to v1.3.0 (#7959)\n  * fix(k8s): check all results for vulnerabilities (#7946)\n  * ci(helm): bump Trivy version to 0.57.1 for Trivy Helm Chart 0.9.0 (#7945)\n  * feat(secret): Add built-in secrets rules for Private Packagist (#7826)\n  * docs: Fix broken links (#7900)\n  * docs: fix mistakes/typos (#7942)\n  * feat: Update registry fallbacks (#7679)\n  * fix(alpine): add `UID` for removed packages (#7887)\n  * chore(deps): bump the aws group with 6 updates (#7902)\n  * chore(deps): bump the common group with 6 updates (#7904)\n  * fix(debian): infinite loop (#7928)\n  * fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files (#7912)\n  * docs: add note about temporary podman socket (#7921)\n  * docs: combine trivy.dev into trivy docs (#7884)\n  * test: change branch in spdx schema link to check in integration tests (#7935)\n  * docs: add Headlamp to the Trivy Ecosystem page (#7916)\n  * fix(report): handle `git@github.com` schema for misconfigs in `sarif` report (#7898)\n  * chore(k8s): enhance k8s scan log (#6997)\n  * fix(terraform): set null value as fallback for missing variables (#7669)\n  * fix(misconf): handle null properties in CloudFormation templates (#7813)\n  * fix(fs): add missing defered Cleanup() call to post analyzer fs (#7882)\n  * chore(deps): bump the common group across 1 directory with 20 updates (#7876)\n  * chore: bump containerd to v2.0.0 (#7875)\n  * fix: Improve version comparisons when build identifiers are present (#7873)\n  * feat(k8s): add default commands for unknown platform (#7863)\n  * chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#7868)\n  * refactor(secret): optimize performance by moving ToLower operation outside loop (#7862)\n  * test: save `containerd` image into archive and use in tests (#7816)\n  * chore(deps): bump the github-actions group across 1 directory with 2 updates (#7854)\n  * chore: bump golangci-lint to v1.61.0 (#7853)\n\nUpdate to version 0.57.1:\n\n  * feat: Update registry fallbacks [backport: release/v0.57] (#7944)\n  * fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files [backport: release/v0.57] (#7939)\n  * test: change branch in spdx schema link to check in integration tests [backport: release/v0.57] (#7940)\n  * release: v0.57.0 [main] (#7710)\n  * chore: lint `errors.Join` (#7845)\n  * feat(db): append errors (#7843)\n  * docs(java): add info about supported scopes (#7842)\n  * docs: add example of creating whitelist of checks (#7821)\n  * chore(deps): Bump trivy-checks (#7819)\n  * fix(go): Do not trim v prefix from versions in Go Mod Analyzer (#7733)\n  * fix(k8s): skip resources without misconfigs (#7797)\n  * fix(sbom):  use `Annotation` instead of `AttributionTexts` for `SPDX` formats (#7811)\n  * fix(cli): add config name to skip-policy-update alias (#7820)\n  * fix(helm): properly handle multiple archived dependencies (#7782)\n  * refactor(misconf): Deprecate `EXCEPTIONS` for misconfiguration scanning (#7776)\n  * fix(k8s)!: support k8s multi container (#7444)\n  * fix(k8s): support kubernetes v1.31 (#7810)\n  * docs: add Windows install instructions (#7800)\n  * ci(helm): auto public Helm chart after PR merged (#7526)\n  * feat: add end of life date for Ubuntu 24.10 (#7787)\n  * feat(report): update gitlab template to populate operating_system value (#7735)\n  * feat(misconf): Show misconfig ID in output (#7762)\n  * feat(misconf): export unresolvable field of IaC types to Rego (#7765)\n  * refactor(k8s): scan config files as a folder (#7690)\n  * fix(license): fix license normalization for Universal Permissive License (#7766)\n  * fix: enable usestdlibvars linter (#7770)\n  * fix(misconf): properly expand dynamic blocks (#7612)\n  * feat(cyclonedx): add file checksums to `CycloneDX` reports (#7507)\n  * fix(misconf): fix for Azure Storage Account network acls adaptation (#7602)\n  * refactor(misconf): simplify k8s scanner (#7717)\n  * feat(parser): ignore white space in pom.xml files (#7747)\n  * test: use forked images (#7755)\n  * fix(java): correctly inherit `version` and `scope` from upper/root `depManagement` and `dependencies` into parents (#7541)\n  * fix(misconf): check if property is not nil before conversion (#7578)\n  * fix(misconf): change default ACL of digitalocean_spaces_bucket to private (#7577)\n  * feat(misconf): ssl_mode support for GCP SQL DB instance (#7564)\n  * test: define constants for test images (#7739)\n  * docs: add note about disabled DS016 check (#7724)\n  * feat(misconf): public network support for Azure Storage Account (#7601)\n  * feat(cli): rename `trivy auth` to `trivy registry` (#7727)\n  * docs: apt-transport-https is a transitional package (#7678)\n  * refactor(misconf): introduce generic scanner (#7515)\n  * fix(cli): `clean --all` deletes only relevant dirs (#7704)\n  * feat(cli): add `trivy auth` (#7664)\n  * fix(sbom): add options for DBs in private registries (#7660)\n  * docs(report): fix reporting doc format (#7671)\n  * fix(repo): `git clone` output to Stderr (#7561)\n  * fix(redhat): include arch in PURL qualifiers (#7654)\n  * fix(report): Fix invalid URI in SARIF report (#7645)\n  * docs(report): Improve SARIF reporting doc (#7655)\n  * fix(db): fix javadb downloading error handling (#7642)\n  * feat(cli): error out when ignore file cannot be found (#7624)\n\nUpdate to version 0.56.2:\n\n  * fix(redhat): include arch in PURL qualifiers [backport: release/v0.56] (#7702)\n  * fix(sbom): add options for DBs in private registries [backport: release/v0.56] (#7691)\n\n- Update to version 0.51.1 (bsc#1227010, CVE-2024-3817):\n","status":"withdrawn","published":"2025-11-27T12:27:44Z","modified":"2026-06-24T14:04:22.238238822Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2025:20177-1","title":"Security update for cheat","description":"This update for cheat fixes the following issues:\n\n- Security:\n  * CVE-2025-47913: Fix client process termination (bsc#1253593)\n  * CVE-2025-58181: Fix potential unbounded memory consumption (bsc#1253922)\n  * CVE-2025-47914: Fix panic due to an out of bounds read (bsc#1254051)\n  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0\n  * Replace golang.org/x/net=golang.org/x/net@v0.47.0\n  * Replace golang.org/x/sys=golang.org/x/sys@v0.38.0\n\n- Packaging improvements:\n  * Drop Requires: golang-packaging. The recommended Go toolchain\n    dependency expression is BuildRequires: golang(API) \u003e= 1.x or\n    optionally the metapackage BuildRequires: go\n  * Use BuildRequires: golang(API) \u003e= 1.19 matching go.mod\n  * Build PIE with pattern that may become recommended procedure:\n    %%ifnarch ppc64 GOFLAGS=\"-buildmode=pie\" %%endif go build\n    A go toolchain buildmode default config would be preferable\n    but none exist at this time.\n  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable\n  * Remove go build -o output binary location and name. Default\n    binary has the same name as package of func main() and is\n    placed in the top level of the build directory.\n  * Add basic %check to execute binary --help\n\n- Packaging improvements:\n  * Service go_modules replace dependencies with CVEs\n  * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1\n    Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm\n  * Replace golang.org/x/net=golang.org/x/net@v0.36.0\n    Fixes GO-2025-3503 CVE-2025-22870\n  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0\n    Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8\n    Fixes GO-2025-3487 CVE-2025-22869\n  * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0\n    Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4\n    Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m\n  * Service tar_scm set mode manual from disabled\n  * Service tar_scm create archive from git so we can exclude\n    vendor directory upstream committed to git. Committed vendor\n    directory contents have build issues even after go mod tidy.\n  * Service tar_scm exclude dir vendor\n  * Service set_version set mode manual from disabled\n  * Service set_version remove param basename not needed\n","status":"published","published":"2025-12-18T00:17:52Z","modified":"2026-03-23T04:54:19.442051Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20654-1","title":"Security update for grafana","description":"This update for grafana fixes the following issues:\n\nChanges in grafana:\n\n- Update to version 11.6.11:\n  Features and enhancements:\n  * Alerting: Add limits for the size of expanded notification\n    templates\n  * Correlations: Remove support for org_id=0\n  Security:\n  * CVE-2026-21722: Public dashboards annotations: use dashboard\n    timerange if time selection disabled (bsc#1258136)\n\n- Update to version 11.6.10:\n  Features and enhancements:\n  * API: Add missing scope check on dashboards\n  * Avatar: Require sign-in, remove queue, respect timeout\n  Bug fixes:\n  * Alerting: Fix a race condition panic in ResetStateByRuleUID\n\n- Update to version 11.6.9:\n  Features and enhancements:\n  * Plugins: Add PluginContext to plugins when scenes is disabled\n  Bug fixes:\n  * Alerting: Fix contacts point issues\n\n- Update to version 11.6.8:\n  Bug fixes:\n  * Alerting: Fix unmarshalling of GettableStatus to include time\n    intervals\n\n- Update to version 11.6.7:\n  Bug fixes:\n  * Auth: Fix render user OAuth passthrough\n  * LDAP Authentication: Fix URL to propagate username context as\n    parameter\n  * Plugins: Dependencies do not inherit parent URL for preinstall\n  * URLParams: Stringify true values as key=true always (fixes\n    issues with variables with true value)\n\n- Update to version 11.6.6:\n  Bug fixes:\n  * Alerting: Fix copying of recording rule fields\n  * Fix redirection after login when Grafana is served from subpath\n\n- Update to version 11.6.5:\n  Features and enhancements:\n  * Alerting: Bump alerting package to include change to\n    NewTLSClient\n\n- Update to version 11.6.4:\n  Features and enhancements:\n  * StateTimeline: Add endTime to tooltip\n  * Unified storage: Respect GF_DATABASE_URL override\n  Bug fixes:\n  * Alerting: Fix group interval override when adding new rules\n  * Azure: Fix legend formatting\n  * Azure: Fix resource name determination in template variable\n    queries\n  * Graphite: Fix annotation queries\n  * Graphite: Fix date mutation\n  * Graphite: Fix nested variable interpolation for repeated rows\n\n- Update to version 11.6.3:\n  Security:\n  * Fixes CVE-2025-3415\n\n- Update to version 11.6.2:\n  Bug fixes:\n  * Dashboard: Fixes issue with row repeats and first row\n  * Graphite: Ensure template variables are interpolated correctly\n  * Graphite: Fix Graphite series interpolation\n  * Prometheus: Fix semver import path\n\n- Update to version 11.6.1:\n  Features and enhancements:\n  * DashboardScenePage: Correct slug in self referencing data links\n  * GrafanaUI: Use safePolygon close handler for interactive\n    tooltips instead of a delay\n  * Prometheus: Add support for cloud partners Prometheus data\n    sources\n  Bug fixes:\n  * Alertmanager: Add Role-Based Access Control via reqAction Field\n  * GrafanaUI: Remove blurred background from overlay backdrops to\n    improve performance\n  * InfluxDB: Fix nested variable interpolation\n  * LDAP test: Fix page crash\n  * Org redirection: Fix linking between orgs\n\n- Upgrade to version 11.6.0:\n  Features and enhancements:\n  * Visualisations: One click links and actions\n  * Annotations: Add cron syntax support\n  * WebGL-powered geomaps for better performance\n  * Alerting: Add alert rule version history\n  Security:\n  * API keys: Migrate API keys to service accounts at startup\n\n- CVE-2026-21721: Fix access control by the dashboard permissions API (bsc#1257337)\n- CVE-2026-21720: Fix unauthenticated DoS (bsc#1257349)\n- CVE-2025-68156: Fix potential DoS via unbounded recursion in builtin functions (bsc#1255340)\n- CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client (bsc#1254113)\n\n- Use forked wire from Grafana repository instead of external\n  package (jsc#PED-14178).\n\n- Update to version 11.5.10:\n  Security:\n  * CVE-2025-47911: Fix parsing HTML documents (bsc#1251454)\n  * CVE-2025-58190: Fix excessive memory consumption (bsc#1251657)\n  Features and enhancements:\n  * Update to Go 1.25\n  * Update to golang.org/x/net v0.45.0\n  Bug fixes:\n  * Auth: Fix render user OAuth passthrough.\n  * LDAP Authentication: Fix URL to propagate username context as\n                         parameter.\n  * Plugins: Dependencies do not inherit parent URL for preinstall.\n\n- Update to version 11.5.9:\n  * Security:\n    CVE-2025-11065: Fix sensitive information leak in logs\n                    (bsc#1250616)\n  * Features and enhancements:\n    Auditing: Document new options for recording datasource query\n              request/response body.\n  * Bug fixes:\n    Login: Fix redirection after login when Grafana is served from\n           subpath.\n\n- Update to version 11.5.8:\n  * No relevant changes\n\n- Update to version 11.5.7:\n  * Security:\n    CVE-2025-6023: Fix cross-site-scripting via scripted dashboards (bsc#1246735)\n    CVE-2025-6197: Fix open redirect in organization switching (bsc#1246736)\n  * Bug fixes:\n    Azure: Fix legend formatting.\n    Azure: Fix resource name determination in template variable\n           queries.\n\n- Update to version 11.5.6:\n  * Security:\n    CVE-2025-3415: Fix exposure of DingDing alerting integration\n                   URL to Viewer level users (bsc#1245302)\n\n- Update to version 11.5.5 (jsc#PED-12918):\n  * Security:\n    CVE-2025-4123: Fix cross-site scripting vulnerability (bsc#1243714).\n    CVE-2025-22872: Bump golang.org/x/net/html (bsc#1241809)\n    CVE-2025-3580: Prevent unauthorized server admin deletion (bsc#1243672).\n\n- Update to version 11.5.4:\n  * Security:\n    CVE-2025-29923: Bump github.com/redis/go-redis/v9 to 9.6.3.\n    CVE-2025-3454: Sanitize paths before evaluating access to route (bsc#1241683).\n    CVE-2025-2703: Fix built-in XY Chart plugin (bsc#1241687).\n  * Features and enhancements:\n    Azure Monitor: Filter namespaces by resource group.\n    Azure: Add support for custom namespace and custom metrics\n           variable queries.\n    Azure: Resource picker improvements.\n    Azure: Support more complex variable interpolation.\n    Azure: Variable editor and resource picker improvements.\n    DashboardScenePage: Correct slug in self referencing data\n                        links.\n    Prometheus: Add support for cloud partners Prometheus data\n                sources.\n  * Bug fixes:\n    InfluxDB: Fix nested variable interpolation.\n    LDAP test: Fix page crash.\n\n- Update to version 11.5.3:\n  * Security:\n    CVE-2025-22870: Bump golang.org/x/net (bsc#1238703).\n  * Bug fixes:\n    Alerting: Fix token-based Slack image upload to work with\n              channel names.\n    Auth: Fix AzureAD config UI's ClientAuthentication dropdown.\n    Dashboard: Fix the unintentional time range and variables\n               updates on saving.\n    Dashboards: Fix missing v/e/i keybindings to return back to\n                dashboard.\n    InfluxDB: Improve handling of template variables contained in\n              regular expressions (InfluxQL).\n    Org redirection: Fix linking between orgs.\n\n- Update to version 11.5.2:\n  * Bug fixes:\n    Alerting: Allow specifying uid for new rules added to groups.\n    Alerting: Call RLock() before reading sendAlertsTo map.\n    Auth: Fix redirect with JWT auth URL login.\n    AuthN: Refetch user on \"ErrUserAlreadyExists\".\n    Azure: Correctly set application insights resource values.\n    DashboardList: Throttle the re-renders.\n    Dashboards: Bring back scripted dashboards.\n    Plugin Metrics: Eliminate data race in plugin metrics\n                    middleware.\n    RBAC: Don't check folder access if annotationPermissionUpdate\n          FT is enabled.\n\n- Update to version 11.5.1:\n  * Bug fixes:\n    CodeEditor: Fix cursor alignment.\n    TransformationFilter: Include transformation outputs in\n                          transformation filtering options.\n\n- Upgrade to version 11.5.0:\n  * Breaking changes:\n    Loki: Default to /labels API with query param instead of\n          /series API.\n  * Features and enhancements:\n    Extended Cloud Migration Assistent support for plugins and\n      alerts.\n    Redesigned filters for dashboards.\n    New regular expression option for Extract fields\n      transformation.\n    Redesigned sharing experience in Dashboards.\n    Customizable shareable dashboard panel images.\n    RBAC for alerting notifications and notification policies.\n    Add support for Elasticsearch cross-cluster search.\n    Time series macro support in visual query builder for SQL data\n      sources.\n    OAuth and SAML session handling improvements.\n    Plugin Frontend Sandbox for additiona security.\n    Renamed Public dashboards to Shared dashboards.\n\n- Update to version 11.4.1:\n  * Bug fixes:\n    Alerting: AlertingQueryRunner should skip descendant nodes of\n              invalid queries.\n    Alerting: Fix alert rules unpausing after moving rule to\n              different folder.\n    Alerting: Fix label escaping in rule export.\n    Alerting: Fix slack image uploading to use new api.\n    Azure/GCM: Improve error display.\n    Dashboards: Fix issue where filtered panels would not react to\n                variable changes.\n    Dashboards: Fixes issue with panel header showing even when\n                hide time override was enabled.\n    Dashboards: Fixes week relative time ranges when weekStart was\n                changed.\n    Dashboards: Panel react for timeFrom and timeShift changes\n                using variables.\n    DateTimePicker: Fixes issue with date picker showing invalid\n                    date.\n    Fix: Add support for datasource variable queries.\n    InfluxDB: Adhoc filters can use template vars as values.\n    LibraryPanel: Fallback to panel title if library panel title is\n                  not set.\n\n- Upgrade to version 11.4.0:\n  * Features and enhancements:\n    Cloudwatch: OpenSearch PPL and SQL support in Logs Insights.\n\n- Update to version 11.3.1:\n  * Features and enhancements:\n    Alerting: Make context deadline on AlertNG service startup\n              configurable.\n    MigrationAssistant: Restrict dashboards, folders and\n                        datasources by the org id of the signed in\n                        user.\n    User: Check SignedInUser OrgID in RevokeInvite.\n  * Bug fixes:\n    Alerting: Fix escaping of silence matchers in utf8 mode.\n    Alerting: Fix overflow for long receiver names.\n    Alerting: Fix saving advanced mode toggle state in the alert\n              rule editor.\n    Alerting: Fix setting datasource uid, when datasource is string\n              in old version.\n    Alerting: Force refetch prom rules when refreshing panel.\n    Anonymous User: Adds validator service for anonymous users.\n    Azure Monitor: Support metric namespaces fallback.\n    Azure: Fix duplicated traces in multi-resource trace query.\n    Azure: Handle namespace request rejection.\n    CloudWatch: Interpolate region in log context query.\n    Dashboard datasource: Return annotations as series when query\n                          topic is \"annotations\".\n    Dashboard: Append orgId to URL.\n    Dashboards: Fixes performance issue expanding a row.\n    Flame Graph: Fix crash when it receives empty data.\n    Folders: Add admin permissions upon creation of a folder w. SA.\n    Folders: Don't show error pop-up if the user can't fetch the\n             root folder.\n    Migration: Remove table aliasing in delete statement to make it\n               work for mariadb.\n    ServerLock: Fix pg concurrency/locking issue.\n    Service Accounts: Run service account creation in transaction.\n    Table: Fix text wrapping applying to wrong field.\n    Unified Storage: Use ssl_mode instead of sslmode.\n\n- Update to version 11.3.0+security-01:\n  * Security:\n    CVE-2024-9476: Fix Migration Assistant issue (bsc#1233343)\n\n- Upgrade to version 11.3.0:\n  * Features and enhancements:\n    View mode and Edit mode are generally available.\n    Template variables and the time range picker remain visible\n      when scrolling.\n    Added timezone parameter in Grafana URL.\n    Kiosk mode displays dashboard controls.\n    Auto-formatted table cell values in Cell Inspect.\n    Allow adding actions to canvas elements.\n    Legend support in bar gauge visualizations.\n    Apply the same binary transformation to all the number fields\n      in a given table at once.\n    Add support for data links and actions in several\n      visualizations.\n    The Explore Logs plugin is installed by default.\n    Added correlations to external URLs in Explore.\n    Simplified query section for alert rule creation.\n    Introduced recording rules for Grafana-managed alerts.\n    GitHub App authentication for the GitHub data source.\n    Improved subfolder creation flow.\n    Redesigned plugin details page.\n    Added UI for LDAP configuration.\n    Added RBAC support in Plugins.\n\n- Update to version 11.2.2+security-01:\n  * Bug fix:\n    SQL Expressions: Fixes CVE-2024-9264 (bsc#1231844)\n\n- Update to version 11.2.2:\n  * Features and enhancements:\n    Data sources: Hide the datasource redirection banner for users\n                  who can't interact with data sources.\n  * Bug fixes:\n    Alerting: Fix preview of silences when label name contains\n              spaces.\n    Alerting: Make query wrapper match up datasource UIDs if\n              necessary.\n    AzureMonitor: Improve resource picker efficiency.\n    AzureMonitor: Remove Basic Logs retention warning.\n    CloudWatch: Fix segfault when migrating legacy queries.\n    DashboardScene: Fix broken error handling and error rendering.\n    Plugins: Avoid returning 404 for AutoEnabled apps.\n\n- Update to version 11.2.1:\n  * Features and enhancements:\n    Alerting: Support for optimistic concurrency in priovisioning\n              Tempate API.\n    Logs panel: Enable displayedFields in dashboards and apps.\n    State timeline: Add pagination support.\n  * Bug fixes:\n    Authn: No longer hash service account token twice during\n           authentication.\n    CloudMigrations: Fix snapshot creation on Windows systems.\n    DashGPT: Fixes issue with generation on Safari.\n    Dashboard: Fix Annotation runtime error when a data source does\n               not support annotations.\n    Grafana SQL: Fix broken import in NumberInput component.\n    Logs: Show older logs button when infinite scroll is enabled\n          and sort order is descending.\n    RBAC: Fix an issue with server admins not being able to manage\n          users in orgs that they don't belong to.\n    Templating: Fix searching non-latin template variables.\n\n- Upgrade to version 11.2.0:\n  * Features and enhancements:\n    Grafana Cloud Migration Assistant is in public preview.\n    Added navigation bookmarks.\n    Added template variables support in some transformations.\n    Introduced Transpose transformation.\n    Group to nested tables is now generally available.\n    Format string transformation is now generally available.\n    New cumulative and window calculations available in Add field\n      from calculation.\n    Canvas: Standardized tooltips.\n    Canvas: Allow adding data links without using an override.\n    Canvas: Allow opening data links with a single click.\n    Canvas: Add the ability to control the order in which data\n            links are displayed.\n    Added pagination support for state timeline.\n    Centralized alert history page.\n    Grafana Explore now allows for logs filtering and pinning in\n      content outline.\n    Added forward direction search for Loki.\n    Added Cloudwatch Metric Insights cross account observability\n      support.\n    Added Yugabyte data source.\n    Map org-specific user roles from your OAuth provider.\n    Better SAML integration for Azure AD.\n    API support for LDAP configuration (experimental).\n    OpenID Connect Discovery URL for Generic OAuth.\n\n- Update to version 11.1.5:\n  * Bug fixes:\n    Alerting: Fix permissions for prometheus rule endpoints.\n    Alerting: Fix persisting result fingerprint that is used by\n              recovery threshold.\n    RBAC: Fix an issue with server admins not being able to manage\n          users in orgs that they don't belong to.\n    Snapshots: Fix panic when snapshot_remove_expired is true.\n    VizTooltip: Fix positioning at bottom and right edges on\n                mobile.\n    Plugins: Fix QueryField typeahead missing background color.\n\n- Update to version 11.1.3:\n  * Bug fix:\n    RBAC: Allow plugins to use scoped actions.\n\n- Update to version 11.1.1:\n  * Bug fixes:\n    Alerting: Skip fetching alerts for unsaved dashboards.\n    Alerting: Support utf8_strict_mode: false in Mimir.\n    Scenes: Fixes issue with panel repeat height calculation.\n    Table Panel: Fix Image hover without datalinks.\n    Tempo: Fix grpc streaming support over pdc-agent.\n    RBAC: Allow plugins to use scoped actions.\n\n- Upgrade to version 11.1.0:\n  * Security:\n    CVE-2023-45288: Bump golang.org/x/net (bsc#1236510)\n  * Features and improvements:\n    Allow table cell text wrapping.\n    Added stat visualization percent change color mode options.\n    XA chart is generally available.\n    Redesigned settings page for Alerting.\n    Added alerting template selector.\n    Added OAuth2 to HTTP settings for vanilla Alertmanager / Mimir.\n    Improved paused alert visibility.\n    Rule-specific silences with permissions.\n    Support for AWS SNS integration in Grafana-managed alerts.\n    Added GeoMap and panel shortcut keyboard support.\n    Accessability headings improvements.\n    Added reduced motion support.\n\n- Update to version 11.0.1:\n  * Breaking changes:\n    If you had selected your language as \"Portugu�s Brasileiro\"\n    previously, this will be reset. You have to select it again in\n    your Preferences for the fix to be applied and the translations\n    will then be shown.\n  * Bug fixes:\n    Echo: Suppress errors from frontend-metrics API call failing.\n    Analytics: Fix ApplicationInsights integration.\n    DashboardScene: Fixes issue removing override rule.\n    BrowseDashboards: Prepend subpath to New Browse Dashboard\n                      actions.\n    Alerting: Fix rule storage to filter by group names using\n              case-sensitive comparison.\n    RBAC: List only the folders that the user has access to.\n    DashboardScene: Fixes lack of re-render when updating field\n                    override properties.\n    DashboardScene: Fixes inspect with transforms issue.\n    AzureMonitor: Fix bug detecting app insights queries.\n    Access Control: Clean up permissions for deprovisioned data\n                    sources.\n    Loki: Fix editor history in wrong order.\n    SSE: Fix threshold unmarshal to avoid panic.\n    LibraryPanels/RBAC: Ignore old folder permission check when\n                        deleting/patching lib panel.\n    Dashboards: Correctly display Admin access to dashboards in the\n                UI.\n    LogsTable: Fix default sort by time.\n    Alerting: Fix rules deleting when reordering whilst filtered.\n    Alerting: Fix typo in JSON response for rule export.\n    CloudMonitoring: Fix query type selection issue.\n    Alerting: Fix scheduler to sort rules before evaluation.\n    DashboardScene: Skip panel repeats when values are the same.\n    Alerting: Do not store series values from past evaluations in\n              state manager for no reason.\n    DashboardScene: Fixing major row repeat issues.\n    DashboardScene: Fixes checkbox orienation in save forms.\n\n- Upgrade to version 11.0.0:\n  * Breaking changes:\n    AngularJS support is turned off by default.\n    Legacy alerting is entirely removed.\n    Subfolders cause very rare issues with folders which have\n      slashes in their names.\n    The input data source is removed.\n    Data sources: Responses which are associated with hidden\n      queries will be removed (filtered) by Grafana.\n    The URL which is generated when viewing an individual repeated\n      panel has changed.\n    React Router is deprecated.\n    The grafana/e2e testing tool is deprecated.\n  * Features and enhancements:\n    Introduced Explore Metrics (public preview) and Explore Logs\n      (experimental).\n    Introduced edit mode to provide an easier way to discover and\n      interact with the dashboard edit exprerience.\n    Fixed positioning of template variables and time picker.\n    Introduced dashboard subfolders.\n    Use AI to generate titles and descriptions for panels and\n      dashboards.\n    Canvas: Enhanced flowcharting functionality.\n    Canvas: Universal data link support.\n    Canvas: Added infinite panning editor option.\n    Added colored table rows with conditional formatting.\n    Set threshold colors in the Config from query transformation.\n    Substring matcher added to the Filter by value transformation.\n    Keep Last State for Grafana Managed Alerting.\n    Redesigned alert detail view.\n    The Alerting Provisioning HTTP API has been updated to enforce\n      RBAC.\n    Removed old Tempo Search and Loki Search.\n    MSSQL: Windows Active Directory (Kerberos) authentication.\n    New strong password policy.\n\n- CVE-2025-27144: Fix Go JOSE's Parsing Vulnerability (bsc#1237671)\n- CVE-2024-51744: Fix bad documentation of error handling in ParseWithClaims (bsc#1232975)\n- CVE-2024-45339: Fix vulnerability when creating log files (bsc#1236559)\n\n- Update to version 10.4.15:\n  * Bugfixes\n    CVE-2024-11741: Fix the Grafana Alerting VictorOps integration\n    (bsc#1236734)\n    Chore: Bump dependency golang.org/x/crypto to v0.31.0\n\n- Update to version 10.4.14:\n  * Bugfixes\n    Alerting: Do not fetch Orgs if the user is authenticated by\n              apikey/sa or render key\n","status":"published","published":"2026-04-29T16:12:10Z","modified":"2026-05-19T06:28:55.298483241Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20798-1","title":"Security update for trivy","description":"This update for trivy fixes the following issues:\n\nUpdate to version 0.68.2:\n\nSecurity fixes:\n\n - CVE-2024-3817: hashicorp/go-getter: argument injection when fetching remote default git branches (bsc#1227010).\n - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (bsc#1234512).\n - CVE-2024-45338: golang.org/x/net/html: denial of service due to non-linear parsing of case-insensitive content (bsc#1235265).\n - CVE-2024-51744: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232948).\n - CVE-2025-11065: github.com/go-viper/mapstructure/v2: sensitive Information leak in logs (bsc#1250625).\n - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239225).\n - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239385).\n - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241724).\n - CVE-2025-27144: gopkg.in/go-jose/go-jose.v2: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237618).\n - CVE-2025-30204: github.com/golang-jwt/jwt/v4,github.com/golang-jwt/jwt/v5: jwt-go allows excessive memory allocation during header parsing (bsc#1240466).\n - CVE-2025-46569: github.com/open-policy-agent/opa: HTTP request path can be crafted to inject Rego code into a constructed query when a virtual document is requested through the Data API (bsc#1246730).\n - CVE-2025-47291: github.com/containerd/containerd/v2: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. (bsc#1243633).\n - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (bsc#1251363).\n - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253512).\n - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read (bsc#1253977).\n - CVE-2025-53547: helm.sh/helm/v3: Helm Chart Code Execution (bsc#1246151).\n - CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory (bsc#1248937, bsc#1248897).\n - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253786).\n - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input (bsc#1251547).\n\nOther fixes:\n\n - Update installation.md (#8979)\n - chore(alpine): add EOL date for Alpine 3.21 (#8221)\n - chore(alpine): add EOL date for Alpine 3.22 (#8992)\n - chore(cli): Remove Trivy Cloud (#9847)\n - chore(deps): Bump trivy-checks (#7819)\n - chore(deps): Bump trivy-checks (#8310)\n - chore(deps): Bump trivy-checks (#8619)\n - chore(deps): Bump trivy-checks (#8934)\n - chore(deps): Bump trivy-checks to v1.7.1 (#8467)\n - chore(deps): Bump up trivy-checks to v1.3.0 (#7959)\n - chore(deps): Switch to go-viper/mapstructure (#9579)\n - chore(deps): Update trivy-checks (#8798)\n - chore(deps): Upgrade trivy-checks (#8018)\n - chore(deps): bump Go to `v1.23.5` (#8341)\n - chore(deps): bump Go to `v1.23.5` [backport: release/v0.59] (#8343)\n - chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` (#8105)\n - chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` [backport: release/v0.58] (#8136)\n - chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` (#8140)\n - chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` [backport: release/v0.58] (#8142)\n - chore(deps): bump alpine from 3.20.0 to 3.21.0 in the docker group across 1 directory (#8196)\n - chore(deps): bump alpine from 3.21.0 to 3.21.3 in the docker group across 1 directory (#8490)\n - chore(deps): bump alpine from 3.21.4 to 3.22.1 (#9301)\n - chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 (#9764)\n - chore(deps): bump github.com/containerd/containerd/v2 from 2.1.0 to 2.1.1 (#8901)\n - chore(deps): bump github.com/containerd/containerd/v2 from 2.1.4 to 2.1.5 (#9763)\n - chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#9274)\n - chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#8443)\n - chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 (#9088)\n - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#7868)\n - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#8597)\n - chore(deps): bump github.com/moby/buildkit from 0.17.0 to 0.17.2 in the docker group across 1 directory (#7990)\n - chore(deps): bump github.com/moby/buildkit from 0.17.2 to 0.18.0 in the docker group (#8029)\n - chore(deps): bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 (#9778)\n - chore(deps): bump github.com/quic-go/quic-go from 0.52.0 to 0.54.1 (#9694)\n - chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (#9403)\n - chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#8103)\n - chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 [backport: release/v0.58] (#8122)\n - chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#9827)\n - chore(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 in the common group (#8822)\n - chore(deps): bump golangci-lint to v2.1.2 (#8766)\n - chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 (#9164)\n - chore(deps): bump the aws group across 1 directory with 5 updates (#8652)\n - chore(deps): bump the aws group across 1 directory with 6 updates (#8074)\n - chore(deps): bump the aws group across 1 directory with 6 updates (#8163)\n - chore(deps): bump the aws group across 1 directory with 7 updates (#7991)\n - chore(deps): bump the aws group across 1 directory with 7 updates (#8468)\n - chore(deps): bump the aws group with 6 updates (#7902)\n - chore(deps): bump the aws group with 6 updates (#9383)\n - chore(deps): bump the aws group with 6 updates (#9481)\n - chore(deps): bump the aws group with 6 updates (#9547)\n - chore(deps): bump the aws group with 7 updates (#8299)\n - chore(deps): bump the aws group with 7 updates (#9311)\n - chore(deps): bump the aws group with 7 updates (#9419)\n - chore(deps): bump the aws group with 7 updates (#9691)\n - chore(deps): bump the common group across 1 directory with 10 updates (#8566)\n - chore(deps): bump the common group across 1 directory with 10 updates (#8817)\n - chore(deps): bump the common group across 1 directory with 10 updates [backport: release/v0.62] (#8831)\n - chore(deps): bump the common group across 1 directory with 11 updates (#8381)\n - chore(deps): bump the common group across 1 directory with 13 updates (#8491)\n - chore(deps): bump the common group across 1 directory with 14 updates (#8126)\n - chore(deps): bump the common group across 1 directory with 20 updates (#7876)\n - chore(deps): bump the common group across 1 directory with 20 updates (#9840)\n - chore(deps): bump the common group across 1 directory with 23 updates (#8733)\n - chore(deps): bump the common group across 1 directory with 24 updates (#9228)\n - chore(deps): bump the common group across 1 directory with 24 updates (#9507)\n - chore(deps): bump the common group across 1 directory with 26 updates (#9063)\n - chore(deps): bump the common group across 1 directory with 26 updates (#9347)\n - chore(deps): bump the common group across 1 directory with 29 updates (#8261)\n - chore(deps): bump the common group across 1 directory with 7 updates (#9590)\n - chore(deps): bump the common group across 1 directory with 9 updates (#8887)\n - chore(deps): bump the common group across 1 directory with 9 updates (#9153)\n - chore(deps): bump the common group with 12 updates (#8301)\n - chore(deps): bump the common group with 4 updates (#7949)\n - chore(deps): bump the common group with 6 updates (#7904)\n - chore(deps): bump the common group with 6 updates (#8162)\n - chore(deps): bump the common group with 6 updates (#8411)\n - chore(deps): bump the common group with 7 updates (#9382)\n - chore(deps): bump the docker group across 1 directory with 3 updates (#8127)\n - chore(deps): bump the docker group across 1 directory with 3 updates (#8762)\n - chore(deps): bump the docker group with 3 updates (#9545)\n - chore(deps): bump the docker group with 3 updates (#9776)\n - chore(deps): bump the github-actions group across 1 directory with 2 updates (#7854)\n - chore(deps): bump the github-actions group across 1 directory with 2 updates (#8962)\n - chore(deps): bump the github-actions group across 1 directory with 4 updates (#8331)\n - chore(deps): bump the github-actions group across 1 directory with 9 updates (#9563)\n - chore(deps): bump the github-actions group with 3 updates (#8473)\n - chore(deps): bump the github-actions group with 4 updates (#9739)\n - chore(deps): bump the testcontainers group with 2 updates (#8650)\n - chore(deps): bump the testcontainers group with 2 updates (#9506)\n - chore(deps): bump to alpine from `3.21.3` to `3.21.4` (#9283)\n - chore(deps): bump up Trivy-kubernetes to v0.9.1 (#9214)\n - chore(deps): remove missed replace of `trivy-db` (#8492)\n - chore(deps): update Docker to v28.2.2 and fix compatibility issues (#9037)\n - chore(deps): update Go to 1.24 and switch to go-version-file (#8388)\n - chore(deps): update csaf module dependency from csaf-poc to gocsaf (#7992)\n - chore(deps): update go-rustaudit location (#8450)\n - chore(deps): update to module-compatible docker-credential-gcr/v2 (#9591)\n - chore(deps): use aqua forks for `github.com/liamg/jfather` and `github.com/liamg/iamgo` (#8289)\n - chore(k8s): enhance k8s scan log (#6997)\n - chore(k8s): update comments with deprecated command format (#8964)\n - chore(license): add missed spdx exceptions: (#9147)\n - chore(secret): add reported issues related to secrets in junit template (#8193)\n - chore(terraform): add accessors to underlying raw hcl values (#8306)\n - chore(terraform): assign *terraform.Module 'parent' field (#8444)\n - chore(terraform): export module path on terraform modules (#8374)\n - chore(terraform): option to pass in instanced logger  (#8738)\n - chore(terraform): remove os.OpenPath call from terraform file functions (#8737)\n - chore(vex): suppress CVE-2024-45337 (#8101)\n - chore(vex): suppress CVE-2024-45338 (#8137)\n - chore: Update release flow to include chocolatey (#9460)\n - chore: Update release workflow to trigger version updates (#9162)\n - chore: add an issue template for maintainers (#8838)\n - chore: add context to the cache interface (#9565)\n - chore: add debug log to show image source location (#9163)\n - chore: add modernize tool integration for code modernization (#9251)\n - chore: bump Go to 1.24.7 (#9435)\n - chore: bump `mockery` to update v2.52.2 version and rebuild mock files (#8390)\n - chore: bump containerd to v2.0.0 (#7875)\n - chore: bump go to 1.23.4 (#8123)\n - chore: bump golangci-lint to v1.61.0 (#7853)\n - chore: bump up Go version to 1.24.4 (#9031)\n - chore: downgrade the failed block expand message to debug (#7964)\n - chore: drop FreeBSD 32-bit support (#9102)\n - chore: enable int-conversion from perfsprint (#8194)\n - chore: enable staticcheck (#8815)\n - chore: fix errors and typos in docs (#8963)\n - chore: fix some function names in comment (#9314)\n - chore: implement process-safe temp file cleanup (#9241)\n - chore: lint `errors.Join` (#7845)\n - chore: migrate protoc setup from Docker to buf CLI (#9184)\n - chore: remove Go checks (#7907)\n - chore: remove aws iam related scripts (#8179)\n - chore: remove debug prints (#8347)\n - chore: remove mockery (#8417)\n - chore: replace deprecated tenv linter with usetesting (#8504)\n - chore: trigger the trivy-www workflow (#9737)\n - chore: typo fix to replace `rego` with `repo` on the RepoFlagGroup options error output (#8643)\n - chore: update Docker lib (#8681)\n - chore: update code owners (#8303)\n - chore: update template URL for brew formula (#9221)\n - chore: update the rpm download Update (#9202)\n - chore: use go.mod for managing Go tools (#8493)\n - chore: use require.ErrorContains when possible (#8291)\n - ci(deps): add 3-day cooldown period for Dependabot updates (#9475)\n - ci(helm): auto public Helm chart after PR merged (#7526)\n - ci(helm): bump Trivy version to 0.57.1 for Trivy Helm Chart 0.9.0 (#7945)\n - ci(helm): bump Trivy version to 0.58.0 for Trivy Helm Chart 0.10.0 (#8038)\n - ci(helm): bump Trivy version to 0.58.1 for Trivy Helm Chart 0.10.0 (#8170)\n - ci(helm): bump Trivy version to 0.59.0 for Trivy Helm Chart 0.11.0 (#8311)\n - ci(helm): bump Trivy version to 0.59.1 for Trivy Helm Chart 0.11.1 (#8354)\n - ci(helm): bump Trivy version to 0.60.0 for Trivy Helm Chart 0.12.0 (#8494)\n - ci(helm): bump Trivy version to 0.61.0 for Trivy Helm Chart 0.13.0 (#8638)\n - ci(helm): bump Trivy version to 0.61.1 for Trivy Helm Chart 0.13.1 (#8753)\n - ci(helm): bump Trivy version to 0.62.0 for Trivy Helm Chart 0.14.0 (#8802)\n - ci(helm): bump Trivy version to 0.62.1 for Trivy Helm Chart 0.14.1 (#8836)\n - ci(helm): bump Trivy version to 0.63.0 for Trivy Helm Chart 0.15.0 (#8946)\n - ci(helm): bump Trivy version to 0.64.0 for Trivy Helm Chart 0.16.0 (#9107)\n - ci(helm): bump Trivy version to 0.64.1 for Trivy Helm Chart 0.16.1 (#9135)\n - ci(helm): bump Trivy version to 0.65.0 for Trivy Helm Chart 0.17.0 (#9288)\n - ci(helm): bump Trivy version to 0.66.0 for Trivy Helm Chart 0.18.0 (#9425)\n - ci(helm): bump Trivy version to 0.67.0 for Trivy Helm Chart 0.19.0 (#9554)\n - ci(helm): bump Trivy version to 0.67.2 for Trivy Helm Chart 0.19.1 (#9641)\n - ci(helm): create a helm branch for patches from main (#8673)\n - ci(spdx): add `aqua-installer` step to fix `mage` error (#8353)\n - ci(vuln): reduce github action script injection attack risk (#8610)\n - ci: add API diff workflow (#9600)\n - ci: add auto-ready-for-review workflow (#9179)\n - ci: add workflow to restrict direct PRs to release branches (#8240)\n - ci: delete cache after artifacts upload in canary workflow (#9177)\n - ci: enable `check-latest` for `setup-go` [backport: release/v0.68] (#9946)\n - ci: fix path to main dir for canary builds (#8231)\n - ci: get base_sha using base.ref (#9704)\n - ci: improve PR title validation workflow (#8720)\n - ci: migrate GitHub Actions from version tags to SHA pinning (#9405)\n - ci: move runner.os context from job-level env to step-level in canary workflow (#9233)\n - ci: optimize golangci-lint performance with cache-based strategy (#9173)\n - ci: remove invalid `--confirm` flag from `gh cache delete` command in canary builds (#9236)\n - ci: remove unused preinstalled software/images for build tests to free up disk space. (#9814)\n - ci: skip undefined labels in discussion triage action (#9175)\n - ci: specify repository for `gh cache delete` in canary worklfow (#9240)\n - ci: update GitHub Actions cache to v4 (#8475)\n - ci: use `Skitionek/notify-microsoft-teams` instead of `aquasecurity` fork (#8740)\n - ci: use `github.event.pull_request.user.login` for release PR check workflow (#8702)\n - ci: use environment variables in GitHub Actions for improved security (#9433)\n - ci: use gh pr view to get PR number for forked repositories in auto-ready workflow (#9183)\n - ci: use merge commit for apidiff to avoid false positives (#9622)\n - ci: use pull_request_target for apidiff workflow to support fork PRs (#9605)\n - docs(cli): improve flag value display format (#8560)\n - docs(java):  Update info about dev deps in gradle lock (#8830)\n - docs(java): add info about supported scopes (#7842)\n - docs(k8s): add a note about multi-container pods (#7815)\n - docs(misconf): Remove duplicate sections (#9819)\n - docs(misconf): Reorganize misconfiguration scan pages (#8206)\n - docs(misconf): simplify misconfiguration docs (#9030)\n - docs(python): Mention pip-compile (#8484)\n - docs(python): fix type with METADATA file name (#9090)\n - docs(report): Improve SARIF reporting doc (#7655)\n - docs(report): add nuanses about secret/license scanner in summary table (#9442)\n - docs(report): fix reporting doc format (#7671)\n - docs(server): fix info about scanning licenses on the client side. (#9805)\n - docs(vex): use debian minor version in examples (#8166)\n - docs(vuln): remove OSV for Python from data sources (#8841)\n - docs: Add info about helm charts release (#8640)\n - docs: Fix broken link to \"Built-in Checks\" (#9375)\n - docs: Fix broken links (#7900)\n - docs: Fix typo in terraform docs (#9492)\n - docs: Fix typos and linguistic errors in documentation / hacktoberfest (#9586)\n - docs: Fix typos in documentation (#8361)\n - docs: Update maintainer docs (#8674)\n - docs: Updated JSON schema version 2 in the trivy documentation (#8188)\n - docs: add Headlamp to the Trivy Ecosystem page (#7916)\n - docs: add PR review policy for maintainers (#9032)\n - docs: add Windows install instructions (#7800)\n - docs: add `overview` page for `others` (#7972)\n - docs: add abbreviation list (#8453)\n - docs: add commercial content (#8030)\n - docs: add example of creating whitelist of checks (#7821)\n - docs: add explanation for how to use non-system certificates (#9081)\n - docs: add info about `java-db` subdir (#9706)\n - docs: add info that `SSL_CERT_FILE` works on `Unix systems other than macOS` only (#9772)\n - docs: add note about disabled DS016 check (#7724)\n - docs: add note about temporary podman socket (#7921)\n - docs: add partners page (#8988)\n - docs: add section on customizing default check data (#9114)\n - docs: add terminology page to explain Trivy concepts (#7996)\n - docs: add vulnerability database contribution guide (#9667)\n - docs: apt-transport-https is a transitional package (#7678)\n - docs: bump pygments from 2.18.0 to 2.19.2 (#9596)\n - docs: catch some missed docs -\u003e guide (#9850)\n - docs: change --disable-metrics to --disable-telemetry in example (#8999) (#9003)\n - docs: change SecObserve URLs in documentatio (#9771)\n - docs: change in java.md: fix the Trity -to-\u003e Trivy typo (#8813)\n - docs: clarify inline ignore limitations for resource-less checks (#9537)\n - docs: combine trivy.dev into trivy docs (#7884)\n - docs: correct Ruby documentation (#8402)\n - docs: document eol supportability (#9434)\n - docs: drop AWS account scanning (#7997)\n - docs: fix a broken link (#8546)\n - docs: fix assets with versioning (#8996)\n - docs: fix dead links (#7998)\n - docs: fix mistakes/typos (#7942)\n - docs: fix modules path and update code example (#9539)\n - docs: fix navigate links (#8336)\n - docs: improve databases documentation (#7732)\n - docs: improve documentation for scanning raw IaC configurations (#9571)\n - docs: improve skipping files documentation (#8749)\n - docs: move info about `detection priority` into coverage section (#9469)\n - docs: partners page content updates (#9149)\n - docs: remove slack (#8565)\n - docs: replace short codes with Unicode emojis (#8296)\n - docs: restructure docs for new hosting (#9799)\n - docs: trivy partners page updates (#9133)\n - docs: update VEX documentation index page (#8458)\n - docs: update links to Semaphore pages (#9352)\n - docs: update vulnerability reporting guidelines in SECURITY.md (#9395)\n - feat(alma): add AlmaLinux 10 support (#9207)\n - feat(alpine): add maintainer field extraction for APK packages (#8930)\n - feat(aws): Add support for dualstack ECR endpoints (#9862)\n - feat(cli): Add available version checking (#8553)\n - feat(cli): Add trivy cloud suppport (#9637)\n - feat(cli): add `trivy auth` (#7664)\n - feat(cli): add version constraints to annoucements (#9023)\n - feat(cli): change --list-all-pkgs default to true (#9510)\n - feat(cli): error out when ignore file cannot be found (#7624)\n - feat(cli): rename `trivy auth` to `trivy registry` (#7727)\n - feat(cloudformation): support default values and list results in Fn::FindInMap (#9515)\n - feat(cyclonedx): Add initial support for loading external VEX files from SBOM references (#8254)\n - feat(cyclonedx): add file checksums to `CycloneDX` reports (#7507)\n - feat(cyclonedx): preserve SBOM structure when scanning SBOM files with vulnerability updates (#9439)\n - feat(db): append errors (#7843)\n - feat(db): enable concurrent access to vulnerability database (#9750)\n - feat(dotnet): add dependency graph support for .deps.json files (#9726)\n - feat(echo): Add Echo Support (#8833)\n - feat(flag): add `--cacert` flag (#9781)\n - feat(flag): add schema validation for `--server` flag (#9270)\n - feat(fs): change artifact type to repository when git info is detected (#9613)\n - feat(fs): optimize scanning performance by direct file access for known paths (#8525)\n - feat(fs): use git commit hash as cache key for clean repositories (#8278)\n - feat(go): construct dependencies in the parser (#7973)\n - feat(go): construct dependencies of `go.mod` main module in the parser (#7977)\n - feat(go): fix parsing main module version for go \u003e= 1.24 (#8433)\n - feat(go): support license scanning in both GOPATH and vendor (#8843)\n - feat(image): add Docker context resolution (#9166)\n - feat(image): add RepoTags support for Docker archives (#9690)\n - feat(image): add Sigstore bundle SBOM support (#9516)\n - feat(image): pass global context to docker/podman image save func (#9733)\n - feat(image): prevent scanning oversized container images (#8178)\n - feat(image): return error early if total size of layers exceeds limit (#8294)\n - feat(image): save layers metadata into report (#8394)\n - feat(java): add support remote repositories from settings.xml files (#9708)\n - feat(java): dereference all maven settings.xml env placeholders (#9024)\n - feat(k8s): add default commands for unknown platform (#7863)\n - feat(k8s): add support for controllers (#8614)\n - feat(k8s): get components from namespaced resources (#8918)\n - feat(k8s): improve artifact selections for specific namespaces (#8248)\n - feat(license): Support compound licenses (licenses using SPDX operators) (#8816)\n - feat(license): improve work text licenses with custom classification (#8888)\n - feat(license): improve work with custom classification of licenses from config file (#8861)\n - feat(license): observe pkg types option in license scanner (#9091)\n - feat(license): scan vendor directory for license for go.mod files (#8689)\n - feat(license): use separate SPDX ids to ignore SPDX expressions (#9087)\n - feat(minimos): Add support for MinimOS (#8792)\n - feat(misconf): Add RoleAssignments attribute (#9396)\n - feat(misconf): Add support for `Minimum Trivy Version` (#8880)\n - feat(misconf): Add support for aws_ami (#8499)\n - feat(misconf): Add support for configurable Rego error limit (#9657)\n - feat(misconf): Show misconfig ID in output (#7762)\n - feat(misconf): Update AppService schema (#9792)\n - feat(misconf): Update Azure Compute schema (#9675)\n - feat(misconf): Update Azure Container Schema (#9673)\n - feat(misconf): Update Azure network schema for new checks (#9791)\n - feat(misconf): Update SecurityCenter schema (#9674)\n - feat(misconf): Update azure storage schema (#9728)\n - feat(misconf): adapt AWS::DynamoDB::Table (#8529)\n - feat(misconf): adapt AWS::EC2::VPC (#8534)\n - feat(misconf): adapt aws_default_security_group (#8538)\n - feat(misconf): adapt aws_opensearch_domain (#8550)\n - feat(misconf): add OpenTofu file extension support (#8747)\n - feat(misconf): add agentpools to azure container schema (#9714)\n - feat(misconf): add misconfiguration location to junit template (#8793)\n - feat(misconf): add option to pass Rego scanner to IaC scanner (#8369)\n - feat(misconf): add private ip google access attribute to subnetwork (#9199)\n - feat(misconf): added audit config attribute (#9249)\n - feat(misconf): added logging and versioning to the gcp storage bucket (#9226)\n - feat(misconf): convert AWS managed policy to document (#8757)\n - feat(misconf): export raw Terraform data to Rego (#8741)\n - feat(misconf): export unresolvable field of IaC types to Rego (#7765)\n - feat(misconf): generate placeholders for random provider resources (#8051)\n - feat(misconf): include map key in manifest snippet for diagnostics (#9681)\n - feat(misconf): log causes of HCL file parsing errors (#7634)\n - feat(misconf): normalize CreatedBy for buildah and legacy docker builder (#8953)\n - feat(misconf): public network support for Azure Storage Account (#7601)\n - feat(misconf): render causes for Terraform (#8360)\n - feat(misconf): ssl_mode support for GCP SQL DB instance (#7564)\n - feat(misconf): support auto_provisioning_defaults in google_container_cluster (#8705)\n - feat(misconf): support for ignoring by inline comments for Dockerfile (#8115)\n - feat(misconf): support for ignoring by inline comments for Helm (#8138)\n - feat(misconf): support https_traffic_only_enabled in Az storage account (#9784)\n - feat(nodejs): add a bun.lock analyzer (#8897)\n - feat(nodejs): add bun.lock parser (#8851)\n - feat(nodejs): add root and workspace for `yarn` packages (#8535)\n - feat(nodejs): respect peer dependencies for dependency tree (#7989)\n - feat(oracle): add `flavors` support (#7858)\n - feat(parser): ignore white space in pom.xml files (#7747)\n - feat(python): add support for poetry dev dependencies (#8152)\n - feat(python): add support for uv (#8080)\n - feat(python): add support for uv dev and optional dependencies (#8134)\n - feat(redhat): Add EOL date for RHEL 10. (#8910)\n - feat(redhat): add os-release detection for RHEL-based images (#9458)\n - feat(repo): add git repository metadata to reports (#9252)\n - feat(report): add CVSS vectors in sarif report (#9157)\n - feat(report): add fingerprint generation for vulnerabilities (#9794)\n - feat(report): add image reference to report metadata (#9729)\n - feat(report): switch ReportID from UUIDv4 to UUIDv7 (#9749)\n - feat(report): update gitlab template to populate operating_system value (#7735)\n - feat(rust): add root and workspace relationships/package for `cargo` lock files (#8676)\n - feat(sbom): add SHA-512 hash support for CycloneDX SBOM (#9126)\n - feat(sbom): add manufacturer field to CycloneDX tools metadata (#9019)\n - feat(sbom): add support for SPDX attestations (#9829)\n - feat(sbom): added support for CoreOS (#9448)\n - feat(sbom): use SPDX license IDs list to validate SPDX IDs  (#9569)\n - feat(seal): add seal support (#9370)\n - feat(secret): Add built-in secrets rules for Private Packagist (#7826)\n - feat(secret): implement streaming secret scanner with byte offset tracking (#9264)\n - feat(suse): Add new openSUSE, Micro and SLES releases end of life dates (#9788)\n - feat(suse): Align SUSE/OpenSUSE OS Identifiers (#7965)\n - feat(terraform): add partial evaluation for policy templates (#8967)\n - feat(terraform): use .terraform cache for remote modules in plan scanning (#9277)\n - feat(ubuntu): add end of life date for Ubuntu 25.04 (#9077)\n - feat(ubuntu): add eol date for 20.04-ESM (#8981)\n - feat(vuln): add Root.io support for container image scanning (#9073)\n - feat: Update registry fallbacks (#7679)\n - feat: Update registry fallbacks [backport: release/v0.57] (#7944)\n - feat: add ArtifactID field to uniquely identify scan targets (#9663)\n - feat: add Bottlerocket OS package analyzer (#8653)\n - feat: add HTTP request/response tracing support (#9125)\n - feat: add JSONC support for comments and trailing commas (#8862)\n - feat: add ReportID field to scan reports (#9670)\n - feat: add `--distro` flag to manually specify OS distribution for vulnerability scanning (#8070)\n - feat: add `--vuln-severity-source` flag (#8269)\n - feat: add `workspaceRelationship` (#7889)\n - feat: add a examples field to check metadata (#8068)\n - feat: add cvss v4 score and vector in scan response (#7968)\n - feat: add documentation URL for database lock errors (#9531)\n - feat: add end of life date for Ubuntu 24.10 (#7787)\n - feat: add graceful shutdown with signal handling (#9242)\n - feat: add report summary table (#8177)\n - feat: add support for registry mirrors (#8244)\n - feat: add timeout handling for cache database operations (#9307)\n - feat: allow ignoring findings by type in Rego (#9578)\n - feat: include registry and repository in artifact ID calculation (#9689)\n - feat: reject unsupported artifact types in remote image retrieval (#9052)\n - feat: replace TinyGo with standard Go for WebAssembly modules (#8496)\n - feat: terraform parser option to set current working directory (#8909)\n - fix(alma): parse epochs from rpmqa file (#9101)\n - fix(alma): parse epochs from rpmqa file [backport: release/v0.64] (#9119)\n - fix(alpine): add `UID` for removed packages (#7887)\n - fix(aws): change CPU and Memory type of ContainerDefinition to a string (#7995)\n - fix(aws): update amazon linux 2 EOL date (#9176)\n - fix(aws): use `BuildableClient` insead of `xhttp.Client` (#9436)\n - fix(cli): Add more non-sensitive flags to telemetry (#9110)\n - fix(cli): Add more non-sensitive flags to telemetry [backport: release/v0.64] (#9124)\n - fix(cli): Handle empty ignore files more gracefully (#7962)\n - fix(cli): `clean --all` deletes only relevant dirs (#7704)\n - fix(cli): add config name to skip-policy-update alias (#7820)\n - fix(cli): add some values to the telemetry call (#9056)\n - fix(cli): disable `--skip-dir` and `--skip-files` flags for `sbom` command (#8886)\n - fix(cli): don't use allow values for `--compliance` flag (#8881)\n - fix(cli): ensure correct command is picked by telemetry (#9260)\n - fix(cli): panic: attempt to get os.Args[1] when len(os.Args) \u003c 2 (#9206)\n - fix(conda): memory leak by adding closure method for `package.json` file (#9349)\n - fix(cyclonedx): handle multiple license types (#9378)\n - fix(db): Dowload database when missing but metadata still exists (#9393)\n - fix(db): fix case when 2 trivy-db were copied at the same time (#8452)\n - fix(db): fix javadb downloading error handling (#7642)\n - fix(debian): don't include empty licenses for `dpkgs` (#8623)\n - fix(debian): infinite loop (#7928)\n - fix(deps): bump alpine from `3.22.1` to `3.23.0` [backport: release/v0.68] (#9949)\n - fix(flag): remove viper.SetDefault to fix IsSet() for config-only flags (#9732)\n - fix(flag): skip hidden flags for `--generate-default-config` command (#8046)\n - fix(fs): add missing defered Cleanup() call to post analyzer fs (#7882)\n - fix(fs): avoid shadowing errors in file.glob (#9286)\n - fix(fs): check postAnalyzers for StaticPaths (#8543)\n - fix(fs): fix cache key generation to use UUID (#8275)\n - fix(go): Do not trim v prefix from versions in Go Mod Analyzer (#7733)\n - fix(go): merge nested flags into string for ldflags for Go binaries (#8368)\n - fix(helm): properly handle multiple archived dependencies (#7782)\n - fix(image): disable AVD-DS-0007 for history scanning (#8366)\n - fix(image): use standardized HTTP client for ECR authentication (#9322)\n - fix(java): correctly inherit `version` and `scope` from upper/root `depManagement` and `dependencies` into parents (#7541)\n - fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props (#8050)\n - fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props [backport: release/v0.58] (#8119)\n - fix(java): exclude dev dependencies in gradle lockfile (#8803)\n - fix(java): update order for resolving package fields from multiple demManagement (#9575)\n - fix(java): use `true` as default value for Repository Release|Snapshot Enabled in pom.xml and settings.xml files (#9751)\n - fix(julia): add `Relationship` field support (#8939)\n - fix(k8s)!: support k8s multi container (#7444)\n - fix(k8s): add missed option `PkgRelationships` (#8442)\n - fix(k8s): check all results for vulnerabilities (#7946)\n - fix(k8s): correct compare artifact versions (#8682)\n - fix(k8s): correct compare artifact versions [backport: release/v0.61] (#8699)\n - fix(k8s): disable parallel traversal with fs cache for k8s images (#9534)\n - fix(k8s): remove using `last-applied-configuration` (#8791)\n - fix(k8s): show report for `--report all` (#8613)\n - fix(k8s): skip passed misconfigs for the summary report (#8684)\n - fix(k8s): skip passed misconfigs for the summary report [backport: release/v0.61] (#8748)\n - fix(k8s): skip resources without misconfigs (#7797)\n - fix(k8s): support kubernetes v1.31 (#7810)\n - fix(k8s): use in-memory cache backend during misconfig scanning (#8873)\n - fix(license): add missed `GFDL-NIV-1.1` and `GFDL-NIV-1.2` into Trivy mapping (#9116)\n - fix(license): always trim leading and trailing spaces for licenses (#8095)\n - fix(license): don't normalize `unlicensed` licenses into `unlicense` (#9611)\n - fix(license): fix license normalization for Universal Permissive License (#7766)\n - fix(license): handle SPDX WITH exceptions as single license in category detection (#9380)\n - fix(license): handle WITH operator for `LaxSplitLicenses` (#9232)\n - fix(misconf): .Config.User always takes precedence over USER in .History (#9050)\n - fix(misconf): Check values wholly prior to evalution (#8604)\n - fix(misconf): Improve logging for unsupported checks (#8634)\n - fix(misconf): Update trivy-checks default repo to `mirror.gcr.io` (#7953)\n - fix(misconf): add ephemeral block type to config schema (#8513)\n - fix(misconf): add missing variable as unknown (#8683)\n - fix(misconf): allow null values only for tf variables (#8112)\n - fix(misconf): allow null values only for tf variables [backport: release/v0.58] (#8238)\n - fix(misconf): change default ACL of digitalocean_spaces_bucket to private (#7577)\n - fix(misconf): check if for-each is known when expanding dyn block (#8808)\n - fix(misconf): check if for-each is known when expanding dyn block [backport: release/v0.62] (#8826)\n - fix(misconf): check if metadata is not nil (#8647)\n - fix(misconf): check if property is not nil before conversion (#7578)\n - fix(misconf): correct Azure value-to-time conversion in AsTimeValue (#9015)\n - fix(misconf): correctly adapt azure storage account (#9138)\n - fix(misconf): correctly handle all YAML tags in K8S templates (#8259)\n - fix(misconf): correctly parse empty port ranges in google_compute_firewall (#9237)\n - fix(misconf): disable git terminal prompt on tf module load (#8026)\n - fix(misconf): do not erase variable type for child modules (#7941)\n - fix(misconf): do not log scanners when misconfig scanning is disabled (#8345)\n - fix(misconf): do not log scanners when misconfig scanning is disabled [backport: release/v0.59] (#8349)\n - fix(misconf): do not skip loading documents from subdirectories (#8526)\n - fix(misconf): do not use cty.NilVal for non-nil values (#8567)\n - fix(misconf): ecs include enhanced for container insights (#8326)\n - fix(misconf): ensure boolean metadata values are correctly interpreted (#9770)\n - fix(misconf): ensure ignore rules respect subdirectory chart paths (#9324)\n - fix(misconf): ensure module source is known (#9404)\n - fix(misconf): ensure value used as ignore marker is non-null and known (#9835)\n - fix(misconf): filter null nodes when parsing json manifest (#8785)\n - fix(misconf): fix for Azure Storage Account network acls adaptation (#7602)\n - fix(misconf): fix incorrect k8s locations due to JSON to YAML conversion (#8073)\n - fix(misconf): fix log bucket in schema (#9235)\n - fix(misconf): handle heredocs in dockerfile instructions (#8284)\n - fix(misconf): handle null properties in CloudFormation templates (#7813)\n - fix(misconf): handle tofu files in module detection (#9486)\n - fix(misconf): handle unsupported experimental flags in Dockerfile (#9769)\n - fix(misconf): identify the chart file exactly by name (#8590)\n - fix(misconf): load full Terraform module (#7925)\n - fix(misconf): map healthcheck start period flag to --start-period instead of --startPeriod (#9837)\n - fix(misconf): move disabled checks filtering after analyzer scan (#9002)\n - fix(misconf): perform operations on attribute safely (#8774)\n - fix(misconf): populate context correctly for module instances (#8656)\n - fix(misconf): preserve original paths of remote submodules from .terraform (#9294)\n - fix(misconf): properly expand dynamic blocks (#7612)\n - fix(misconf): properly resolve local Terraform cache (#7983)\n - fix(misconf): reduce log noise on incompatible check (#9029)\n - fix(misconf): set default values for AWS::EKS::Cluster.ResourcesVpcConfig (#8548)\n - fix(misconf): skip Azure CreateUiDefinition (#8503)\n - fix(misconf): skip rewriting expr if attr is nil (#9113)\n - fix(misconf): skip rewriting expr if attr is nil [backport: release/v0.64] (#9127)\n - fix(misconf): strip build metadata suffixes from image history (#9498)\n - fix(misconf): unmark cty values before access (#9495)\n - fix(misconf): use argument value in WithIncludeDeprecatedChecks (#8942)\n - fix(misconf): use correct field log_bucket instead of target_bucket in gcp bucket (#9296)\n - fix(misconf): use log instead of fmt for logging (#8033)\n - fix(misconf): wrap AWS EnvVar to iac types (#7407)\n - fix(misconf): wrap legacy ENV values in quotes to preserve spaces (#9497)\n - fix(nodejs): correctly parse `packages` array of `bun.lock` file (#8998)\n - fix(nodejs): don't use prerelease logic for compare npm constraints  (#9208)\n - fix(nodejs): fix npmjs parser.pkgNameFromPath() panic issue (#9688)\n - fix(nodejs): parse workspaces as objects for package-lock.json files (#9518)\n - fix(nodejs): use snapshot string as `Package.ID` for pnpm packages (#9330)\n - fix(nodejs): use the default ID format to match licenses in pnpm packages. (#9661)\n - fix(oracle): add architectures support for advisories (#4809)\n - fix(oracle): add architectures support for advisories [backport: release/v0.58] (#8125)\n - fix(os): Add photon 5.0 in supported OS (#9724)\n - fix(os): add mapping OS aliases (#8466)\n - fix(plugin): don't remove plugins when updating index.yaml file (#9358)\n - fix(python): add `poetry` v2 support (#8323)\n - fix(python): add `poetry` v2 support [backport: release/v0.59] (#8335)\n - fix(python): impove package name normalization  (#9290)\n - fix(python): skip dev group's deps for poetry (#8106)\n - fix(python): skip dev group's deps for poetry [backport: release/v0.58] (#8158)\n - fix(redhat): Also try to find buildinfo in root layer (layer 0) (#8924)\n - fix(redhat): check `usr/share/buildinfo/` dir to detect content sets (#8222)\n - fix(redhat): correct rewriting of recommendations for the same vulnerability (#8063)\n - fix(redhat): correct rewriting of recommendations for the same vulnerability [backport: release/v0.58] (#8135)\n - fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files (#7912)\n - fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files [backport: release/v0.57] (#7939)\n - fix(redhat): include arch in PURL qualifiers (#7654)\n - fix(redhat): include arch in PURL qualifiers [backport: release/v0.56] (#7702)\n - fix(redhat): save contentSets for OS packages in fs/vm modes (#8820)\n - fix(redhat): trim invalid suffix from content_sets in manifest parsing (#8818)\n - fix(redhat): trim invalid suffix from content_sets in manifest parsing [backport: release/v0.62] (#8824)\n - fix(repo): `git clone` output to Stderr (#7561)\n - fix(repo): preserve RepoMetadata on FS cache hit (#9389)\n - fix(repo): sanitize git repo URL before inserting into report metadata (#9391)\n - fix(report): Fix invalid URI in SARIF report (#7645)\n - fix(report): clean buffer after flushing (#8725)\n - fix(report): correct field order in SARIF license results (#9712)\n - fix(report): don't panic when report contains vulns, but doesn't contain packages for `table` format (#8549)\n - fix(report): handle `git@github.com` schema for misconfigs in `sarif` report (#7898)\n - fix(report): remove html escaping for `shortDescription` and `fullDescription` fields for sarif reports (#8344)\n - fix(rootio): check full version to detect `root.io` packages (#9117)\n - fix(rootio): check full version to detect `root.io` packages [backport: release/v0.64] (#9120)\n - fix(rootio): fix severity selection (#9181)\n - fix(sbom):  use `Annotation` instead of `AttributionTexts` for `SPDX` formats (#7811)\n - fix(sbom): Fixes for Programming Language Vulnerabilities and SBOM Package Maintainer Details (#7871)\n - fix(sbom): add SBOM file's filePath as Application FilePath if we can't detect its path (#8346)\n - fix(sbom): add `buildInfo` info as properties (#9683)\n - fix(sbom): add options for DBs in private registries (#7660)\n - fix(sbom): add options for DBs in private registries [backport: release/v0.56] (#7691)\n - fix(sbom): add support for `file` component type of `CycloneDX` (#9372)\n - fix(sbom): attach nested packages to Application (#8144)\n - fix(sbom): attach nested packages to Application [backport: release/v0.58] (#8168)\n - fix(sbom): don’t panic on SBOM format if scanned CycloneDX file has empty metadata (#9562)\n - fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type (#8052)\n - fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type [backport: release/v0.58] (#8124)\n - fix(sbom): improve logic for binding direct dependency to parent component (#8489)\n - fix(sbom): merge in-graph and out-of-graph OS packages in scan results (#9194)\n - fix(sbom): preserve OS packages from multiple SBOMs (#8325)\n - fix(sbom): preserve OS packages from multiple SBOMs [backport: release/v0.59] (#8333)\n - fix(sbom): remove unnecessary OS detection check in SBOM decoding (#9034)\n - fix(sbom): scan results of SBOMs generated from container images are missing layers (#7635)\n - fix(sbom): use correct field for licenses in CycloneDX reports (#9057)\n - fix(sbom): use root package for `unknown` dependencies (if exists) (#8104)\n - fix(sbom): use root package for `unknown` dependencies (if exists) [backport: release/v0.58] (#8156)\n - fix(secret): add UTF-8 validation in secret scanner to prevent protobuf marshalling errors (#9253)\n - fix(secret): fix line numbers for multiple-line secrets (#9104)\n - fix(secret): ignore .dist-info directories during secret scanning (#8646)\n - fix(server): add HTTP transport setup to server mode (#9217)\n - fix(server): add missed Relationship field for `rpc` (#8872)\n - fix(server): fix redis key when trying to delete blob (#8649)\n - fix(server): secrets inspectation for the config analyzer in client server mode (#8418)\n - fix(spdx): init `pkgFilePaths` map for all formats (#8380)\n - fix(spdx): save text licenses into `otherLicenses` without normalize (#8502)\n - fix(spdx): use the `hasExtractedLicensingInfos` field for licenses that are not listed in the SPDX (#8077)\n - fix(suse): SUSE - update OSType constants and references for compatility (#8236)\n - fix(suse): SUSE - update OSType constants and references for compatility [backport: release/v0.58] (#8237)\n - fix(terraform): `evaluateStep` to correctly set `EvalContext` for multiple instances of blocks (#8555)\n - fix(terraform): `for_each` on a map returns a resource for every key (#9156)\n - fix(terraform): apply parser options to submodule parsing (#8377)\n - fix(terraform): hcl object expressions to return references (#8271)\n - fix(terraform): set null value as fallback for missing variables (#7669)\n - fix(vex): don't  suppress vulns for packages with infinity loop (#9465)\n - fix(vex): don't use reused BOM (#9604)\n - fix(vex): don't use reused BOM [backport: release/v0.67] (#9612)\n - fix(vex): use `lo.IsNil` to check `VEX` from OCI artifact (#8858)\n - fix(vex): use a separate `visited` set for each DFS path (#9760)\n - fix(vuln): compare `nuget` package names in lower case (#9456)\n - fix(wolfi): support new APK database location (#8937)\n - fix: Add missing version check flags (#8951)\n - fix: CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass (#8088)\n - fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field (#8207)\n - fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field [backport: release/v0.58] (#8215)\n - fix: Correctly check for semver versions for trivy version check (#8948)\n - fix: Improve version comparisons when build identifiers are present (#7873)\n - fix: Trim the end-of-range suffix (#9618)\n - fix: Updated twitter icon (#7772)\n - fix: Use `fetch-level: 1` to check out trivy-repo in the release workflow (#9636)\n - fix: Use `fetch-level: 1` to check out trivy-repo in the release workflow [backport: release/v0.67] (#9638)\n - fix: add `buildInfo` for `BlobInfo` in `rpc` package (#9608)\n - fix: add `buildInfo` for `BlobInfo` in `rpc` package [backport: release/v0.67] (#9615)\n - fix: also check `filepath` when removing duplicate packages (#9142)\n - fix: check post-analyzers for StaticPaths (#8904)\n - fix: close all opened resources if an error occurs (#9665)\n - fix: close file descriptors and pipes on error paths (#9536)\n - fix: create temp file under composite fs dir (#9387)\n - fix: de-duplicate same `dpkg` packages with different filePaths from different layers (#8298)\n - fix: don't show corrupted trivy-db warning for first run (#8991)\n - fix: don't use `scope` for `trivy registry login` command (#8393)\n - fix: early-return, indent-error-flow and superfluous-else rules from revive  (#8796)\n - fix: enable err-error and errorf rules from perfsprint linter (#7859)\n - fix: enable usestdlibvars linter (#7770)\n - fix: filter all files when processing files installed from package managers (#8842)\n - fix: handle `BLOW_UNKNOWN` error to download DBs (#8060)\n - fix: handle `BLOW_UNKNOWN` error to download DBs [backport: release/v0.58] (#8121)\n - fix: improve conversion of image config to Dockerfile (#8308)\n - fix: julia parser panicing (#8883)\n - fix: migrate from `*.list` to `*.md5sums` files for `dpkg` (#9131)\n - fix: more revive rules (#8814)\n - fix: octalLiteral from go-critic (#8811)\n - fix: persistent flag option typo (#9374)\n - fix: prevent graceful shutdown message on normal exit (#9244)\n - fix: respect GITHUB_TOKEN to download artifacts from GHCR (#7580)\n - fix: restore compatibility for google.protobuf.Value (#9559)\n - fix: restore compatibility for google.protobuf.Value [backport: release/v0.67] (#9631)\n - fix: supporting .egg-info/METADATA in python.Packaging analyzer (#9151)\n - fix: suppress debug log for context cancellation errors (#9298)\n - fix: testifylint last issues (#8768)\n - fix: unused-parameter rule from revive (#8794)\n - fix: update all documentation links (#8045)\n - fix: update all documentation links (#9777)\n - fix: update cosing settings for GoReleaser after bumping cosing to v3 (#9863)\n - fix: use `--file-patterns` flag for all post analyzers (#7365)\n - fix: use context for analyzers (#9538)\n - fix: use-any from revive (#8810)\n - fix: using SrcVersion instead of Version for echo detector (#9552)\n - fix: using SrcVersion instead of Version for echo detector [backport: release/v0.67] (#9629)\n - fix: validate backport branch name (#9548)\n - fix: wasm module test (#8099)\n - perf(misconf): parse input for Rego once (#8483)\n - perf(misconf): retrieve check metadata from annotations once (#8478)\n - perf(secret): only match secrets of meaningful length, allow example strings to not be matched (#8602)\n - perf: avoid heap allocation in applier findPackage (#7883)\n - refactor(cli): Update the cloud config command (#9676)\n - refactor(cloudformation): remove unused ScanFile method from Scanner (#8927)\n - refactor(db): change logic to detect wrong DB (#8864)\n - refactor(db): use `Getter` interface with `GetParams` for trivy-db sources (#9239)\n - refactor(flag): improve flag system architecture and extensibility (#8718)\n - refactor(fs): use underlyingPath to determine virtual files more reliably (#9302)\n - refactor(k8s): add v prefix for Go packages (#7839)\n - refactor(k8s): scan config files as a folder (#7690)\n - refactor(license): improve license expression normalization (#8257)\n - refactor(license): simplify compound license scanning (#8896)\n - refactor(misconf): Deprecate `EXCEPTIONS` for misconfiguration scanning (#7776)\n - refactor(misconf): Remove unused options (#7896)\n - refactor(misconf): Simplify misconfig checks bundle parsing (#8533)\n - refactor(misconf): add ID to scan.Rule (#9573)\n - refactor(misconf): add ManifestFromYAML for unified manifest parsing (#9680)\n - refactor(misconf): decouple input fs and track extracted files with fs references (#9281)\n - refactor(misconf): get a block or attribute without calling HasChild (#8586)\n - refactor(misconf): introduce generic scanner (#7515)\n - refactor(misconf): make Rego scanner independent of config type (#7517)\n - refactor(misconf): mark AVDID fields as deprecated and use ID internally (#9576)\n - refactor(misconf): migrate from custom Azure JSON parser (#9222)\n - refactor(misconf): parse azure_policy_enabled to addonprofile.azurepolicy.enabled (#9851)\n - refactor(misconf): remove module outputs from parser.EvaluateAll (#8587)\n - refactor(misconf): remove unused methods for ec2.Instance (#8536)\n - refactor(misconf): remove unused methods from iac types (#8782)\n - refactor(misconf): remove unused methods from providers (#8781)\n - refactor(misconf): remove unused terraform attribute methods (#8657)\n - refactor(misconf): replace github.com/liamg/memoryfs with internal mapfs and testing/fstest (#9282)\n - refactor(misconf): rewrite Rego module filtering using functional filters (#9061)\n - refactor(misconf): set Trivy version by default in Rego scanner (#9001)\n - refactor(misconf): simplify k8s scanner (#7717)\n - refactor(misconf): switch to x/json  (#8719)\n - refactor(misconf): type-safe parser results in generic scanner (#9685)\n - refactor(misconf): use OPA v1 (#8518)\n - refactor(misconf): use atomic.Int32 (#9385)\n - refactor(python): use once + debug for `License acquired from METADATA...` logs (#8175)\n - refactor(report): write tables after rendering all results (#8357)\n - refactor(sbom): simplify relationship generation (#7985)\n - refactor(secret): clarify secret scanner messages (#9409)\n - refactor(secret): optimize performance by moving ToLower operation outside loop (#7862)\n - refactor(server): change custom advisory and vulnerability data types fr… (#8923)\n - refactor(terraform): make Scan method of Terraform plan scanner private (#9272)\n - refactor(terraform): remove result sorting from scanner (#8928)\n - refactor(terraform): simplify AllReferences method signature in Attribute (#8906)\n - refactor(ubuntu): update time handling for fixing time (#8780)\n - refactor(vex): improve SBOM reference handling with project standards (#8457)\n - refactor: add case-insensitive string set implementation (#9720)\n - refactor: add generic Set implementation (#8149)\n - refactor: add hook interface for extended functionality (#8585)\n - refactor: centralize HTTP transport configuration (#9058)\n - refactor: export `systemFileFiltering` Post Handler (#9359)\n - refactor: migrate from `github.com/aquasecurity/jfather` to `github.com/go-json-experiment/json` (#8591)\n - refactor: migrate from go-json-experiment to encoding/json/v2 (#9422)\n - refactor: move the aws config (#9617)\n - refactor: remove aws flag helper message (#9080)\n - refactor: remove google/wire dependency and implement manual DI (#9509)\n - refactor: remove support for custom Terraform checks (#7901)\n - refactor: rename scanner to service (#8584)\n - refactor: simplify Detect function signature (#9280)\n - refactor: switch to stable azcontainerregistry SDK package (#9319)\n - refactor: use slices package instead of custom function (#8172)\n - refactor: use strings.SplitSeq instead of strings.Split in for-loop (#8983)\n - refactor: use trivy-checks/pkg/specs package (#8226)\n - release: v0.56.2 [release/v0.56] (#7694)\n - release: v0.57.0 [main] (#7710)\n - release: v0.57.1 [release/v0.57] (#7943)\n - release: v0.58.0 [main] (#7874)\n - release: v0.58.1 [release/v0.58] (#8120)\n - release: v0.58.2 [release/v0.58] (#8216)\n - release: v0.59.0 [main] (#8041)\n - release: v0.59.1 [release/v0.59] (#8334)\n - release: v0.60.0 [main] (#8327)\n - release: v0.61.0 [main] (#8507)\n - release: v0.61.1 [release/v0.61] (#8704)\n - release: v0.62.0 [main] (#8669)\n - release: v0.62.1 [release/v0.62] (#8825)\n - release: v0.63.0 [main] (#8809)\n - release: v0.64.0 [main] (#8955)\n - release: v0.64.1 [release/v0.64] (#9122)\n - release: v0.65.0 [main] (#9108)\n - release: v0.66.0 [main] (#9289)\n - release: v0.67.0 [main] (#9432)\n - release: v0.67.1 [release/v0.67] (#9614)\n - release: v0.67.2 [release/v0.67] (#9639)\n - release: v0.68.0 [main] (#9549)\n - release: v0.68.1 [main] (#9867)\n - release: v0.68.2 [release/v0.68] (#9950)\n - style: Fix MD syntax in self-hosting.md (#8523)\n - test(go): refactor mod_test.go to use txtar format (#9775)\n - test(go): set `GOPATH` for tests (#9785)\n - test(helm): bump up Yamale dependency for Helm chart-testing-action (#9653)\n - test(k8s): update k8s integrtion test (#9725)\n - test(k8s): use a specific bundle for k8s misconfig scan (#9633)\n - test(misconf): drop gcp iam test covered by another case (#9285)\n - test(misconf): move terraform scan tests to integration tests (#9271)\n - test(misconf): remove BenchmarkCalculate using outdated check metadata (#9291)\n - test(server): replace mock driver with memory cache in server tests (#8416)\n - test: add HTTP basic authentication to git test server (#9407)\n - test: add end-to-end testing framework with image scan and proxy tests (#9231)\n - test: change branch in spdx schema link to check in integration tests (#7935)\n - test: change branch in spdx schema link to check in integration tests [backport: release/v0.57] (#7940)\n - test: define constants for test images (#7739)\n - test: improve and extend tests for iac/adapters/arm (#9028)\n - test: improve golden file management in integration tests (#9699)\n - test: include integration tests in linting and fix all issues (#9060)\n - test: replace Go checks with Rego (#7867)\n - test: replace mock with memory cache and fix non-deterministic tests (#8410)\n - test: replace mock with memory cache in scanner tests (#8413)\n - test: save `containerd` image into archive and use in tests (#7816)\n - test: set dummy value for NUGET_PACKAGES (#8107)\n - test: update golden files for TestRepository* integration tests (#9684)\n - test: use `aquasecurity` repository for test images (#8677)\n - test: use `aquasecurity` repository for test images [backport: release/v0.61] (#8698)\n - test: use forked images (#7755)\n - test: use memory cache (#8403)\n - test: use table-driven tests in Helm scanner tests (#8592)\n","status":"published","published":"2026-02-13T16:33:52Z","modified":"2026-05-29T18:24:10.235720339Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:21483-1","title":"Security update for govulncheck-vulndb","description":"This update for govulncheck-vulndb fixes the following issues:\n\n- Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z (jsc#PED-11136).\n\n Go CVE Numbering Authority IDs added or updated with aliases:\n * GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj\n * GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c\n * GO-2026-5102 CVE-2026-45021 GHSA-3vcp-chfh-f6r2\n * GO-2026-5272 CVE-2026-40938 GHSA-94jr-7pqp-xhcq\n * GO-2026-5486 CVE-2026-40924 GHSA-m2cx-gpqf-qf74\n * GO-2026-5542 CVE-2026-40090 GHSA-pj97-4p9w-gx3q\n * GO-2026-5630 CVE-2026-25542 GHSA-rmx9-2pp3-xhcr\n * GO-2026-5643 CVE-2026-40923 GHSA-rx35-6rhx-7858\n * GO-2026-5675 CVE-2026-41492 GHSA-vvf7-6rmr-m29q\n * GO-2026-5711 CVE-2026-40161 GHSA-wjxp-xrpv-xpff\n * GO-2026-5746 CVE-2026-41567 GHSA-x86f-5xw2-fm2r\n * GO-2026-5749 CVE-2026-41328 GHSA-x92x-px7w-4gx4\n * GO-2026-5837 CVE-2026-44840 GHSA-q2m9-6jp9-c6mc\n * GO-2026-5929 CVE-2026-44342 GHSA-26v7-h57m-gh9m\n * GO-2026-5930 CVE-2026-33655 GHSA-6qcr-qxgr-m7fv\n * GO-2026-5933 GHSA-3g4q-2f67-2gvh\n * GO-2026-5934 GHSA-59qp-cfj3-rp64\n * GO-2026-5935 GHSA-7856-g3gv-9wq8\n * GO-2026-5936 CVE-2026-53552 GHSA-26rh-24rg-j3vv\n * GO-2026-5937 CVE-2026-53508 GHSA-2jcc-mxv7-p3f9\n * GO-2026-5938 CVE-2026-53553 GHSA-4g5x-hcwm-82jw\n * GO-2026-5939 CVE-2026-10517 GHSA-698x-9w2p-7vvp\n * GO-2026-5940 CVE-2026-53572 GHSA-6w3m-4hhp-775q\n * GO-2026-5941 CVE-2026-53487 GHSA-gvhc-wv3v-7pf8\n * GO-2026-5942 CVE-2026-46600\n * GO-2026-5944 CVE-2026-50197 GHSA-659f-rgp5-w4wf\n * GO-2026-5945 CVE-2026-6815 GHSA-rmxx-v9rj-vpvg\n * GO-2026-5946 CVE-2026-52831 GHSA-v5px-423j-pf7p\n * GO-2026-5947 CVE-2026-53649 GHSA-xqhv-chqm-fhcc\n * GO-2026-5948 CVE-2026-50554 GHSA-588f-fvcv-xhvf\n * GO-2026-5949 CVE-2026-50553 GHSA-rqrh-8wpv-x7hh\n * GO-2026-5950 CVE-2026-53602 GHSA-339v-266x-79xr\n * GO-2026-5951 CVE-2026-10219 GHSA-6jm8-4fhr-5w64\n * GO-2026-5952 CVE-2026-49834 GHSA-9vcr-p3rj-q5q6\n * GO-2026-5953 CVE-2026-9094 GHSA-c9w5-qp6m-m395\n * GO-2026-5956 CVE-2026-55252 GHSA-h5g6-xmh4-hc37\n * GO-2026-5957 CVE-2026-54158 GHSA-5xfx-xj4h-5p7r\n * GO-2026-5958 CVE-2026-54068 GHSA-gcm7-57gf-953c\n * GO-2026-5959 CVE-2026-54072 GHSA-h29v-hj44-q8cv\n * GO-2026-5961 CVE-2026-54069 GHSA-hvr9-72v2-fff3\n * GO-2026-5962 CVE-2026-54088 GHSA-m93h-4hw7-5qcm\n * GO-2026-5963 CVE-2026-54067 GHSA-mvjr-vv3c-w4qv\n * GO-2026-5964 CVE-2026-54066 GHSA-p4m3-mgmm-c664\n * GO-2026-5965 CVE-2026-54070 GHSA-w7cg-whh7-xp28\n * GO-2026-5966 CVE-2026-54089 GHSA-xqp3-jq6g-x3qm\n * GO-2026-5967 CVE-2026-50551 GHSA-56mp-4f3v-fgj2\n * GO-2026-5968 CVE-2026-54174 GHSA-fpg8-7664-jc5q\n * GO-2026-5969 GHSA-g936-7jqj-mwv8\n * GO-2026-5970 CVE-2026-56852\n * GO-2026-5973 CVE-2026-54250 GHSA-jxr7-mqhw-9p98\n * GO-2026-5974 CVE-2026-44300 GHSA-wmj8-9953-vff5\n * GO-2026-5975 CVE-2026-50018 GHSA-42j2-w334-qxw7\n * GO-2026-5976 CVE-2026-50141 GHSA-g7mm-9vx7-jm7h\n * GO-2026-5977 CVE-2026-50013 GHSA-qrh4-p6v4-mrfg\n * GO-2026-5978 CVE-2026-50125 GHSA-qw5r-ppcg-f8rj\n * GO-2026-5979 CVE-2026-50006 GHSA-xrcf-6jh3-ggvx\n * GO-2026-5980 CVE-2026-50158 GHSA-2c7f-fxww-6w6c\n * GO-2026-5981 GHSA-mqxv-9rm6-w8qc\n * GO-2026-5982 GHSA-pqg7-v6wh-3pfp\n * GO-2026-5984 CVE-2026-53604 GHSA-2p2f-px33-4vv5\n * GO-2026-5985 GHSA-7rx3-5wx3-5v76\n * GO-2026-5986 CVE-2026-61699 GHSA-cm26-5974-52h8\n * GO-2026-5987 CVE-2026-55513 GHSA-g4x6-jcvr-9m3g\n * GO-2026-5988 CVE-2026-54628 GHSA-hwrq-8wxh-q4xv\n * GO-2026-5989 CVE-2026-55512 GHSA-m3cx-mwpg-32jg\n * GO-2026-5990 CVE-2026-54629 GHSA-mf78-3rpf-r784\n * GO-2026-5991 CVE-2026-53603 GHSA-q4vm-pq3q-8wgq\n * GO-2026-5992 CVE-2026-61549 GHSA-qf34-295c-26v8\n * GO-2026-5996 CVE-2026-54450 GHSA-pph6-vfjv-vpjw\n * GO-2026-5997 CVE-2026-54452 GHSA-xgch-x3mx-cm3c\n * GO-2026-5998 CVE-2026-54495 GHSA-398h-7f66-3h4p\n * GO-2026-5999 CVE-2026-10814 GHSA-jh6h-v6mp-h22v\n * GO-2026-6002 CVE-2026-58196 GHSA-pr64-jmmf-jp54\n * GO-2026-6003 CVE-2026-53714 GHSA-22xc-xg2r-9j7v\n * GO-2026-6004 CVE-2026-52833 GHSA-3v79-m2cg-89ww\n * GO-2026-6005 CVE-2026-53715 GHSA-8fv2-88gg-hm7q\n * GO-2026-6006 CVE-2026-53716 GHSA-cxpq-8v7q-cg56\n * GO-2026-6007 CVE-2026-53718 GHSA-fcrp-7gc2-93g7\n * GO-2026-6008 CVE-2026-53717 GHSA-h7pq-86h8-rp5x\n * GO-2026-6009 CVE-2026-53719 GHSA-m2v6-2jmh-4c68\n * GO-2026-6010 CVE-2026-50166 GHSA-v95x-xhq5-4929\n * GO-2026-6011 CVE-2026-53713 GHSA-wcrf-9vrr-854f\n * GO-2026-6012 CVE-2026-52832 GHSA-wpcj-rmv4-86qg\n * GO-2026-6013 CVE-2026-52724 GHSA-wvmp-6r4v-j6cv\n * GO-2026-6014 CVE-2025-7453 GHSA-2hfh-94w5-wxvf\n * GO-2026-6015 CVE-2026-54247 GHSA-cwxq-rc9x-2jvv\n * GO-2026-6016 GHSA-rjwr-m7qx-3fjr\n * GO-2026-6017 CVE-2026-27771 GHSA-8qw8-rq86-9pc2\n * GO-2026-6018 CVE-2026-54246 GHSA-5587-2x54-jj6h\n * GO-2026-6019 GHSA-8qqm-fp2q-v734\n * GO-2026-6020 CVE-2026-55668 GHSA-8wc8-hf36-mjh9\n * GO-2026-6021 CVE-2026-55667 GHSA-fmm7-x4gx-8jhr\n * GO-2026-6022 CVE-2026-54560 GHSA-vgj4-345g-jcf8\n * GO-2026-6023 CVE-2026-54562 GHSA-x756-g4x3-c64m\n * GO-2026-6024 CVE-2026-62685 GHSA-7rc3-g7h6-22m7\n * GO-2026-6025 CVE-2026-62684 GHSA-833g-cqhp-h72j\n * GO-2026-6026 CVE-2026-62843 GHSA-83xp-526h-j3ww\n * GO-2026-6027 CVE-2026-57894 GHSA-82f7-87hm-852x\n * GO-2026-6028 CVE-2026-58428 GHSA-25gq-j9jx-43pg\n * GO-2026-6029 CVE-2026-28740 GHSA-2m9v-5q2g-58vq\n * GO-2026-6030 CVE-2026-22874 GHSA-2r5c-gw76-rh3w\n * GO-2026-6031 CVE-2026-27761 GHSA-3pww-vcvm-3gmj\n * GO-2026-6032 CVE-2026-58420 GHSA-5ggr-2f2h-jmvm\n * GO-2026-6033 CVE-2026-58440 GHSA-66m4-5jjr-2rg5\n * GO-2026-6034 CVE-2026-56654 GHSA-683j-3ff6-hh2x\n * GO-2026-6035 CVE-2026-57886 GHSA-6c6r-5xr4-cr5m\n * GO-2026-6036 CVE-2026-50105 GHSA-6cqf-375w-639g\n * GO-2026-6037 CVE-2026-56755 GHSA-6hm7-3pwj-22rm\n * GO-2026-6038 CVE-2026-58314 GHSA-2fcr-jfvc-vgg2\n * GO-2026-6039 CVE-2026-59765 GHSA-2wm4-vwp6-v7xc\n * GO-2026-6040 CVE-2026-58511 GHSA-3r5c-2xxx-h872\n * GO-2026-6041 CVE-2026-58419 GHSA-44qc-pgvp-wx7v\n * GO-2026-6042 CVE-2026-56657 GHSA-4xjf-493q-98p3\n * GO-2026-6043 CVE-2026-27775 GHSA-649p-mmhf-85c7\n * GO-2026-6044 CVE-2026-58424 GHSA-777r-4v59-6486\n * GO-2026-6045 CVE-2026-56443 GHSA-7p4h-3gxq-x3h3\n * GO-2026-6046 CVE-2026-58423 GHSA-7wvc-rvp7-w99x\n * GO-2026-6047 CVE-2026-58437 GHSA-8p9h-49rc-qgxj\n * GO-2026-6048 CVE-2026-54481 GHSA-94v3-77j7-vm48\n * GO-2026-6049 CVE-2026-59763 GHSA-9mq6-mqjj-c2c5\n * GO-2026-6050 CVE-2026-58444 GHSA-cp3q-vrj2-ghhh\n * GO-2026-6051 CVE-2026-20896 GHSA-f75j-4cw6-rmx4\n * GO-2026-6052 CVE-2026-58416 GHSA-fj8v-hjwv-qm88\n * GO-2026-6053 CVE-2026-58429 GHSA-fq2p-5p22-8g6j\n * GO-2026-6054 CVE-2026-57897 GHSA-frpw-3h2q-4jj6\n * GO-2026-6055 CVE-2026-58436 GHSA-fw57-jgch-pgf3\n * GO-2026-6056 CVE-2026-58422 GHSA-g9g6-qhrc-p3qc\n * GO-2026-6057 CVE-2026-20779 GHSA-gx3v-q759-g323\n- Update to version 0.0.20260708T170500 2026-07-08T17:05:00Z.\n * GO-2026-4970 CVE-2026-39822\n * GO-2026-5856 CVE-2026-42505\n * GO-2026-5932\n- Update to version 0.0.20260707T200351 2026-07-07T20:03:51Z.\n * GO-2026-5073 CVE-2026-35480 GHSA-378j-3jfj-8r9f\n * GO-2026-5313 CVE-2026-50133 GHSA-c54g-xjwj-8g82\n * GO-2026-5320 CVE-2026-5160 GHSA-c97m-vxhj-p7j6\n * GO-2026-5380 CVE-2026-50135 GHSA-fw87-fv5r-9fpw\n * GO-2026-5410 GHSA-gxhx-2686-5h9g\n * GO-2026-5427 CVE-2026-7736 GHSA-hj4w-qr9j-c4cf\n * GO-2026-5496 CVE-2026-45570 GHSA-m7cr-m3pv-hgrp\n * GO-2026-5498 CVE-2026-44885 GHSA-m8fg-67j7-cx4v\n * GO-2026-5504 CVE-2026-35166 GHSA-mcv8-8m8x-48pg\n * GO-2026-5570 CVE-2025-66719 GHSA-q7c8-gfjh-8v4p\n * GO-2026-5665 CVE-2026-7734 GHSA-vm3g-8xwv-mxfp\n * GO-2026-5676 CVE-2026-40898 GHSA-vvgj-x9jq-8cj9\n * GO-2026-5681 CVE-2026-50134 GHSA-vxgm-5rmg-5w8g\n * GO-2026-5699 CVE-2026-7737 GHSA-w88c-9vg8-cmq8\n * GO-2026-5713 CVE-2026-37461 GHSA-wmvj-f67g-qg4g\n * GO-2026-5743 CVE-2026-45692 GHSA-x5w9-xh9r-mvfc\n * GO-2026-5761 CVE-2026-41579 GHSA-xjvp-4fhw-gc47\n * GO-2026-5762 CVE-2026-41589 GHSA-xjvp-7243-rg9h\n * GO-2026-5764 GHSA-xmrv-pmrh-hhx2\n * GO-2026-5778 CVE-2026-48702 GHSA-47q9-m4ww-924m\n * GO-2026-5779 CVE-2026-48529 GHSA-pjp5-fpmr-3349\n * GO-2026-5798 CVE-2026-48749 GHSA-2q3f-q5pq-g8wv\n * GO-2026-5799 CVE-2026-48751 GHSA-48q5-w887-33wv\n * GO-2026-5800 CVE-2026-48754 GHSA-4xg6-52mh-fpw8\n * GO-2026-5801 CVE-2026-48750 GHSA-73hr-m85f-64v9\n * GO-2026-5802 CVE-2026-48753 GHSA-ccjc-4qc3-jxqc\n * GO-2026-5803 CVE-2026-48752 GHSA-vxp5-584q-c479\n * GO-2026-5804 CVE-2026-48788 GHSA-4c8j-mgm4-qqvp\n * GO-2026-5805 CVE-2026-48785 GHSA-cr2j-534f-mf3g\n * GO-2026-5806 CVE-2026-48769 GHSA-f6m5-xw2g-xc4x\n * GO-2026-5807 GHSA-qh5x-rfwf-rvfv\n * GO-2026-5808 CVE-2026-48755 GHSA-v6mj-8pf4-hhw4\n * GO-2026-5809 GHSA-vgrc-hq28-p3xp\n * GO-2026-5810 CVE-2026-48756 GHSA-xhqx-mgh3-3h7q\n * GO-2026-5811 CVE-2026-48790 GHSA-57f6-pvx8-hwj6\n * GO-2026-5812 CVE-2026-41262 GHSA-gm7f-v959-fr2g\n * GO-2026-5813 GHSA-jqc5-2p7q-fqfc\n * GO-2026-5814 GHSA-rhq6-9rgh-v45c\n * GO-2026-5815 GHSA-v2jf-442r-6mjh\n * GO-2026-5816 CVE-2026-49258 GHSA-c6v2-3ffm-vcmc\n * GO-2026-5817 CVE-2026-3473 GHSA-7pf2-9c95-w332\n * GO-2026-5818 CVE-2026-3636 GHSA-ffpr-pfr4-g354\n * GO-2026-5819 CVE-2026-48794 GHSA-j748-h363-wqj8\n * GO-2026-5820 CVE-2026-4635 GHSA-pg7c-462j-grxv\n * GO-2026-5821 GHSA-q6xx-5vr8-p898\n * GO-2026-5822 CVE-2026-49349 GHSA-qvqc-4c52-x6qp\n * GO-2026-5823 GHSA-wcr3-9x4c-f5gj\n * GO-2026-5824 CVE-2026-53520 GHSA-x6fg-52vr-hj4w\n * GO-2026-5825 CVE-2026-49339 GHSA-2fp4-5v5c-4448\n * GO-2026-5826 CVE-2026-53521 GHSA-39g2-8x68-pmx8\n * GO-2026-5827 CVE-2026-49340 GHSA-4gxv-p5g5-j7w7\n * GO-2026-5828 CVE-2026-53519 GHSA-5c25-7vpj-9mqh\n * GO-2026-5829 CVE-2026-53523 GHSA-9rc6-8cjv-rcvx\n * GO-2026-5830 CVE-2026-49338 GHSA-hmgp-w9jm-vp95\n * GO-2026-5831 CVE-2026-53522 GHSA-jg62-j5h6-8mpq\n * GO-2026-5832 GHSA-ww5p-j6cj-6mqq\n * GO-2026-5833 CVE-2026-4646 GHSA-rmvv-8v8w-rf7x\n * GO-2026-5835 CVE-2026-5755 GHSA-37j2-3vv8-cf24\n * GO-2026-5836 CVE-2026-5308 GHSA-jmvr-r5hm-fxfr\n * GO-2026-5838 CVE-2026-5740 GHSA-w9m8-p4cc-4qj9\n * GO-2026-5839 CVE-2026-28735 GHSA-r5vf-grcx-5vqp\n * GO-2026-5842 CVE-2026-9300 GHSA-6p7m-c3mw-4gmw\n * GO-2026-5843 CVE-2026-9299 GHSA-m9r6-r5c3-jw4j\n * GO-2026-5844 CVE-2026-9301 GHSA-qm7q-rcm2-3frc\n * GO-2026-5845 CVE-2026-4915 GHSA-5gmf-x7hg-97wf\n * GO-2026-5846 CVE-2026-49823 GHSA-3r8v-2xmj-5c39\n * GO-2026-5847 GHSA-55f6-4pr5-c7m5\n * GO-2026-5848 CVE-2026-7374 GHSA-7jcp-v9w4-wjmg\n * GO-2026-5849 GHSA-7m8x-qg2j-4m3v\n * GO-2026-5850 CVE-2026-50565 GHSA-8wcj-mfrc-jx5q\n * GO-2026-5851 CVE-2026-49835 GHSA-9c54-x2g4-v92j\n * GO-2026-5852 CVE-2026-49824 GHSA-cvw6-gfvv-953q\n * GO-2026-5853 CVE-2026-49478 GHSA-f5mr-q85p-6hh6\n * GO-2026-5854 CVE-2026-49822 GHSA-gc3j-79f2-7vvw\n * GO-2026-5855 CVE-2026-50564 GHSA-gx55-f84r-v3r7\n * GO-2026-5857 CVE-2026-50566 GHSA-m63v-2g9w-2w6v\n * GO-2026-5858 CVE-2026-50563 GHSA-v455-mv2v-5g92\n * GO-2026-5859 CVE-2026-49821 GHSA-vjhc-cf4p-72q4\n * GO-2026-5860 CVE-2026-50545 GHSA-wmgg-3p4h-48x7\n * GO-2026-5861 CVE-2026-49820 GHSA-x7qq-m748-8p2c\n * GO-2026-5864 GHSA-3ccm-4qq2-5wrp\n * GO-2026-5865 GHSA-6c87-g9pw-78fx\n * GO-2026-5866 CVE-2026-49826 GHSA-8w27-c4vc-88q9\n * GO-2026-5867 CVE-2026-36045 GHSA-cv2p-68f4-f4pw\n * GO-2026-5868 CVE-2026-48824 GHSA-28pq-6qxg-wg5r\n * GO-2026-5869 CVE-2026-41053 GHSA-4j6x-2764-m8gh\n * GO-2026-5870 CVE-2026-9739 GHSA-7pf3-8xx7-rvhf\n * GO-2026-5871 CVE-2026-44938 GHSA-864g-863m-vcvq\n * GO-2026-5872 CVE-2026-49998 GHSA-g6vg-wj8f-48cj\n * GO-2026-5873 CVE-2026-44936 GHSA-hx4v-cxpf-vh8m\n * GO-2026-5874 CVE-2026-44937 GHSA-jmf4-m7j9-g72r\n * GO-2026-5875 CVE-2026-44939 GHSA-mhc6-2gfq-xx62\n * GO-2026-5876 CVE-2026-41052 GHSA-vx8h-4prv-g744\n * GO-2026-5877 CVE-2026-44935 GHSA-xr65-5cpm-g36x\n * GO-2026-5878 CVE-2026-50138 GHSA-3whc-qvhv-xqjp\n * GO-2026-5881 CVE-2026-50139 GHSA-j48m-h7xq-2xpj\n * GO-2026-5883 CVE-2026-9804 GHSA-mpmf-3w4r-qfpf\n * GO-2026-5888 CVE-2026-41184 GHSA-9p7w-w5q6-mxj3\n * GO-2026-5889 CVE-2026-50149 GHSA-g3xr-5w5j-w4q4\n * GO-2026-5890 CVE-2026-50192 GHSA-h5gx-45rj-2h5j\n * GO-2026-5891 CVE-2026-41185 GHSA-m67g-87rx-v42c\n * GO-2026-5892 CVE-2026-9097 GHSA-339w-3hqm-9pjc\n * GO-2026-5893 CVE-2026-6720 GHSA-3m4q-ggcj-j6m4\n * GO-2026-5894 CVE-2026-9093 GHSA-3w4h-g9f5-j84p\n * GO-2026-5895 CVE-2026-9090 GHSA-fwgq-j9r9-qjgr\n * GO-2026-5896 CVE-2026-9091 GHSA-gv4m-v8c8-hr3g\n * GO-2026-5897 CVE-2026-44454 GHSA-m3cr-vc2j-pm27\n * GO-2026-5898 CVE-2026-9098 GHSA-mfvp-7p3v-x9mh\n * GO-2026-5899 CVE-2026-9096 GHSA-rgq2-93gj-ffxg\n * GO-2026-5900 CVE-2026-49245 GHSA-3vcg-pv95-pq54\n * GO-2026-5901 CVE-2026-49254 GHSA-4q9j-6299-gxmr\n * GO-2026-5902 CVE-2026-49244 GHSA-h64p-8h4r-6gfh\n * GO-2026-5903 CVE-2026-52792 GHSA-mm6c-5j6x-hq8m\n * GO-2026-5905 CVE-2026-49445 GHSA-3fcv-jvfp-m4q9\n * GO-2026-5906 CVE-2026-55077 GHSA-29xf-69gq-m9jx\n * GO-2026-5907 CVE-2026-55076 GHSA-75vm-6w67-gwvp\n * GO-2026-5908 CVE-2026-55075 GHSA-9r87-mvcw-x35f\n * GO-2026-5909 CVE-2026-55429 GHSA-9rjw-3gwp-f59v\n * GO-2026-5910 CVE-2026-54637 GHSA-chwm-m7g7-685g\n * GO-2026-5911 CVE-2026-55079 GHSA-f962-qm93-mj4c\n * GO-2026-5913 CVE-2026-55427 GHSA-mcqq-fqgf-rxwm\n * GO-2026-5914 CVE-2026-53935 GHSA-q6h5-q3q6-f87x\n * GO-2026-5915 CVE-2026-55428 GHSA-wrq8-fcv5-8hvp\n * GO-2026-5916 CVE-2026-55078 GHSA-2mg2-p7r7-g27f\n * GO-2026-5917 CVE-2026-55430 GHSA-5g4w-3vw9-478w\n * GO-2026-5918 CVE-2026-55438 GHSA-5wg6-jmq2-53pw\n * GO-2026-5919 CVE-2026-55437 GHSA-7qw2-f75v-62f7\n * GO-2026-5920 CVE-2026-55436 GHSA-84rm-42xw-mx52\n * GO-2026-5921 CVE-2026-55434 GHSA-f5vp-w269-392g\n * GO-2026-5922 CVE-2026-55433 GHSA-jqj2-x4c5-jfxm\n * GO-2026-5923 GHSA-qrwj-vh9x-gw5v\n * GO-2026-5924 CVE-2026-55431 GHSA-v54h-cp2w-9x4g\n * GO-2026-5925 CVE-2026-55435 GHSA-wqxv-w64v-5wh6\n * GO-2026-5926 CVE-2026-55432 GHSA-x9qq-2qh5-8rxf\n- Update to version 0.0.20260626T200413 2026-06-26T20:04:13Z.\n * GO-2026-5066 CVE-2026-46604\n- Update to version 0.0.20260625T223441 2026-06-25T22:34:41Z.\n * GO-2026-4961 CVE-2026-33813\n * GO-2026-5003 CVE-2026-8275 GHSA-322p-rrj6-j44g\n * GO-2026-5004 CVE-2026-41889 GHSA-j88v-2chj-qfwx\n * GO-2026-5052 GHSA-mpwr-8vm7-h73f\n * GO-2026-5058 CVE-2026-4660 GHSA-92mm-2pjq-r785\n * GO-2026-5059 CVE-2026-55671 GHSA-29jh-8cfq-rr8x\n * GO-2026-5060 CVE-2026-55229 GHSA-2mrg-35hw-x3x9\n * GO-2026-5061 CVE-2026-46601\n * GO-2026-5062 CVE-2026-46602\n * GO-2026-5063 GHSA-2h46-9x5w-4wf7\n * GO-2026-5064 CVE-2026-53492 GHSA-33vj-92qq-66hc\n * GO-2026-5065 CVE-2026-52808 GHSA-268j-37xf-pp52\n * GO-2026-5067 CVE-2026-3108 GHSA-3439-vqgj-2gcf\n * GO-2026-5068 CVE-2026-25996 GHSA-34r5-6j7w-235f\n * GO-2026-5070 CVE-2026-45088 GHSA-35wr-x7v6-9fv2\n * GO-2026-5071 CVE-2026-44593 GHSA-3636-h3vx-6465\n * GO-2026-5072 CVE-2026-42296 GHSA-3775-99mw-8rp4\n * GO-2026-5076 CVE-2026-6959 GHSA-3934-423w-4jq3\n * GO-2026-5077 CVE-2026-45047 GHSA-39qr-rc93-vhqm\n * GO-2026-5078 CVE-2026-7573 GHSA-3c93-g9g6-p5j4\n * GO-2026-5079 CVE-2026-45224 GHSA-3cjv-h753-qf7h\n * GO-2026-5080 CVE-2026-42593 GHSA-3cv5-q585-h563\n * GO-2026-5081 CVE-2026-27783 GHSA-3fwp-p5rj-2pxf\n * GO-2026-5082 CVE-2026-46614 GHSA-3g33-6vg6-27m8\n * GO-2026-5083 CVE-2026-54761 GHSA-3g6v-2r68-prfc\n * GO-2026-5084 CVE-2026-45062 GHSA-3g8v-8r37-cgjm\n * GO-2026-5085 CVE-2026-41572 GHSA-3gr9-485j-v4xf\n * GO-2026-5086 CVE-2026-46415 GHSA-3h23-rrpc-3p87\n * GO-2026-5087 CVE-2026-8349 GHSA-3h63-fx68-x5fm\n * GO-2026-5088 CVE-2026-39429 GHSA-3j3q-wp9x-585p\n * GO-2026-5089 CVE-2026-46410 GHSA-3jmg-p96m-m328\n * GO-2026-5090 CVE-2026-40304 GHSA-3jpj-v3xr-5h6g\n * GO-2026-5091 GHSA-3m6q-h5gj-7mrw\n * GO-2026-5092 CVE-2026-3112 GHSA-3mw5-466q-295q\n * GO-2026-5093 CVE-2026-44326 GHSA-3p28-73q7-45xp\n * GO-2026-5094 CVE-2026-33540 GHSA-3p65-76g6-3w7r\n * GO-2026-5095 CVE-2026-27877 GHSA-3q27-7qjq-p9c5\n * GO-2026-5096 CVE-2026-54096 GHSA-3q2p-72cj-682c\n * GO-2026-5097 CVE-2026-42274 GHSA-3q34-rx83-r6mq\n * GO-2026-5098 CVE-2025-64719 GHSA-3qq3-668m-v9mj\n * GO-2026-5099 CVE-2026-42880 GHSA-3v3m-wc6v-x4x3\n * GO-2026-5100 GHSA-3v85-fqvh-7rxf\n * GO-2026-5101 CVE-2026-45298 GHSA-3v9w-6365-9w54\n * GO-2026-5103 CVE-2026-52816 GHSA-3w28-36p9-w929\n * GO-2026-5104 CVE-2026-8780 GHSA-3x4g-259h-5p7c\n * GO-2026-5106 CVE-2026-44477 GHSA-423p-g724-fr39\n * GO-2026-5107 CVE-2026-45686 GHSA-43g7-cwr8-q3jh\n * GO-2026-5108 CVE-2026-42272 GHSA-43jv-5j4x-qv67\n * GO-2026-5109 CVE-2026-44321 GHSA-44qj-cghf-9p97\n * GO-2026-5110 CVE-2026-52804 GHSA-4565-r4x7-hg8j\n * GO-2026-5111 CVE-2026-35600 GHSA-45q4-x4r9-8fqj\n * GO-2026-5112 CVE-2026-3113 GHSA-4765-v66x-rqx7\n * GO-2026-5113 CVE-2026-44425 GHSA-47r2-v3x6-wff9\n * GO-2026-5114 CVE-2026-35598 GHSA-48ch-p4gq-x46x\n * GO-2026-5115 CVE-2026-21726 GHSA-497x-rrr9-68jp\n * GO-2026-5117 CVE-2026-47190 GHSA-49pm-43hf-6xfq\n * GO-2026-5118 CVE-2026-40302 GHSA-4fxq-2x3x-6xqx\n * GO-2026-5120 CVE-2026-8621 GHSA-4g9m-rffv-h6wq\n * GO-2026-5121 GHSA-4gph-2hhr-5mwg\n * GO-2026-5123 GHSA-4h9q-p5j4-xvvh\n * GO-2026-5124 CVE-2026-52796 GHSA-4j89-2c4f-44c6\n * GO-2026-5125 GHSA-4jgr-pg2m-m988\n * GO-2026-5126 CVE-2026-47256 GHSA-4jvg-4jfx-fmhc\n * GO-2026-5127 CVE-2026-40251 GHSA-4m88-wxj4-9qj6\n * GO-2026-5128 CVE-2026-54762 GHSA-4mr2-fg2p-w63c\n * GO-2026-5129 CVE-2026-42238 GHSA-4pvg-prr3-9cxr\n * GO-2026-5130 CVE-2026-8781 GHSA-4qf2-p32m-7hmf\n * GO-2026-5131 CVE-2026-44323 GHSA-4rqf-grm6-vf75\n * GO-2026-5132 CVE-2026-42596 GHSA-4vmc-gm8v-m35h\n * GO-2026-5133 CVE-2026-55866 GHSA-4vrg-r928-h5vv\n * GO-2026-5134 CVE-2026-42572 GHSA-55gc-6fmc-fpx9\n * GO-2026-5136 CVE-2026-41131 GHSA-57j5-qwp2-vqp6\n * GO-2026-5137 CVE-2026-40193 GHSA-5835-4gvc-32pc\n * GO-2026-5138 CVE-2026-42459 GHSA-585v-hcgf-jhfr\n * GO-2026-5139 CVE-2026-47724 GHSA-598g-h2vc-h5vg\n * GO-2026-5140 CVE-2026-52809 GHSA-5c3f-6486-3g7g\n * GO-2026-5141 CVE-2026-40077 GHSA-5f5r-95pg-xrpm\n * GO-2026-5142 CVE-2026-44315 GHSA-5f62-53r8-qrqf\n * GO-2026-5143 CVE-2026-44849 GHSA-5fxq-qcf3-244w\n * GO-2026-5144 CVE-2026-11719 GHSA-5gf6-gc35-xjpc\n * GO-2026-5145 CVE-2026-40943 GHSA-5gqc-qhrj-9xw8\n * GO-2026-5146 CVE-2026-40876 GHSA-5h6h-7rc9-3824\n * GO-2026-5147 CVE-2026-34457 GHSA-5hvv-m4w4-gf6v\n * GO-2026-5148 CVE-2026-40886 GHSA-5jv8-h7qh-rf5p\n * GO-2026-5149 CVE-2026-39858 GHSA-5m6w-wvh7-57vm\n * GO-2026-5150 CVE-2026-35605 GHSA-5q48-q4fm-g3m6\n * GO-2026-5151 CVE-2026-40280 GHSA-5q7p-7jgv-ww56\n * GO-2026-5153 CVE-2026-24661 GHSA-5rfv-h47g-xj42\n * GO-2026-5154 CVE-2026-25705 GHSA-5v3h-x4wf-5c35\n * GO-2026-5155 CVE-2026-39383 GHSA-5vh4-rgv7-p9g4\n * GO-2026-5156 CVE-2026-34529 GHSA-5vpr-4fgw-f69h\n * GO-2026-5157 CVE-2023-34620 GHSA-5wfc-hjrc-gq87\n * GO-2026-5159 CVE-2026-54097 GHSA-5ww9-jg6q-38r7\n * GO-2026-5160 CVE-2026-45720 GHSA-5x9f-6vg5-qg4m\n * GO-2026-5161 CVE-2025-2842 GHSA-5xf3-gmx4-529v\n * GO-2026-5162 CVE-2026-40893 GHSA-62p3-hvxx-fxg4\n * GO-2026-5163 CVE-2026-35051 GHSA-6384-m2mw-rf54\n * GO-2026-5164 CVE-2026-32936 GHSA-63cw-r7xf-jmwr\n * GO-2026-5165 GHSA-6447-269v-g68m\n * GO-2026-5166 CVE-2026-47671 GHSA-64cj-qvx5-m4f3\n * GO-2026-5167 CVE-2026-35606 GHSA-67cg-cpj7-qgc9\n * GO-2026-5168 CVE-2026-41648 GHSA-67wx-r9xr-x75x\n * GO-2026-5169 CVE-2026-45796 GHSA-686c-7vgv-v3fx\n * GO-2026-5170 CVE-2026-40293 GHSA-68m9-983m-f3v5\n * GO-2026-5171 CVE-2026-34449 GHSA-68p4-j234-43mv\n * GO-2026-5172 GHSA-69hx-63pv-f8f4\n * GO-2026-5173 CVE-2026-4055 GHSA-6cfr-wp44-6qmv\n * GO-2026-5174 CVE-2026-7572 GHSA-6cmp-qv2f-x97x\n * GO-2026-5175 CVE-2026-34227 GHSA-6fpf-248c-m7wm\n * GO-2026-5176 CVE-2026-41574 GHSA-6g38-8j4p-j3pr\n * GO-2026-5177 CVE-2026-34761 GHSA-6gm8-3g4h-w82m\n * GO-2026-5178 CVE-2026-47780 GHSA-6gxq-gpr8-xgjp\n * GO-2026-5179 CVE-2026-8782 GHSA-6h8r-h22r-jj64\n * GO-2026-5180 CVE-2026-40912 GHSA-6jwx-7vp4-9847\n * GO-2026-5181 CVE-2026-55883 GHSA-6m68-r693-78qx\n * GO-2026-5182 CVE-2026-55770 GHSA-6mwx-4547-5vc9\n * GO-2026-5183 CVE-2026-48089 GHSA-6p54-fw2f-q7gf\n * GO-2026-5184 CVE-2026-52812 GHSA-6p9m-q3jp-47h4\n * GO-2026-5185 CVE-2026-41888 GHSA-6pjf-3r9x-m592\n * GO-2026-5186 CVE-2026-35471 GHSA-6qcc-6q27-whp8\n * GO-2026-5187 CVE-2026-6987 GHSA-6r3x-h84w-fhxx\n * GO-2026-5188 CVE-2026-45147 GHSA-6r88-8v7q-q4p2\n * GO-2026-5189 CVE-2026-42083 GHSA-6rgm-gr97-x3j5\n * GO-2026-5190 CVE-2026-8783 GHSA-6v92-ph9p-hrpc\n * GO-2026-5191 GHSA-6vgg-xhvh-38ff\n * GO-2026-5192 CVE-2026-39946 GHSA-6vgr-cp5c-ffx3\n * GO-2026-5193 GHSA-6vxv-wg6j-5qwp\n * GO-2026-5194 CVE-2026-47268 GHSA-6x26-5727-rrm9\n * GO-2026-5195 CVE-2026-41263 GHSA-6x2q-h3cr-8j2h\n * GO-2026-5196 CVE-2026-46354 GHSA-6x44-w3xg-hqqf\n * GO-2026-5197 CVE-2026-55670 GHSA-6x8v-2fq5-2229\n * GO-2026-5199 CVE-2026-4525 GHSA-72gw-fmmr-c4r4\n * GO-2026-5200 CVE-2026-42273 GHSA-72h4-mxfc-jx37\n * GO-2026-5201 CVE-2026-34605 GHSA-73g7-86qr-jrg3\n * GO-2026-5202 CVE-2026-52815 GHSA-744x-3838-5r56\n * GO-2026-5203 CVE-2026-42275 GHSA-74m3-9qvm-rp9h\n * GO-2026-5204 GHSA-74m6-4hjp-7226\n * GO-2026-5205 CVE-2026-35607 GHSA-7526-j432-6ppp\n * GO-2026-5206 GHSA-763j-3p5v-jfc6\n * GO-2026-5207 CVE-2026-41050 GHSA-765j-qfrp-hm3j\n * GO-2026-5209 CVE-2026-42081 GHSA-77x9-rf64-92gv\n * GO-2026-5210 CVE-2026-34403 GHSA-78mf-482w-62qj\n * GO-2026-5211 CVE-2026-24905 GHSA-79qw-g77v-2vfh\n * GO-2026-5212 CVE-2026-44310 GHSA-7c37-gx6w-8vc5\n * GO-2026-5213 CVE-2026-39388 GHSA-7ccv-rp6m-rffr\n * GO-2026-5214 CVE-2026-44778 GHSA-7cfq-5mhv-jrp9\n * GO-2026-5215 GHSA-7cwm-fpfh-rrch\n * GO-2026-5216 CVE-2026-48708 GHSA-7fq5-7wr8-rjwj\n * GO-2026-5217 CVE-2026-44850 GHSA-7fw3-x4r2-g7wc\n * GO-2026-5218 CVE-2026-44543 GHSA-7fxv-8wr2-mfc4\n * GO-2026-5219 CVE-2026-21724 GHSA-7g92-g4vh-hp84\n * GO-2026-5220 CVE-2026-45625 GHSA-7h26-hg47-p9hx\n * GO-2026-5221 CVE-2026-40885 GHSA-7h3j-592v-jcrp\n * GO-2026-5222 GHSA-7hgr-xvrr-xpw3\n * GO-2026-5223 CVE-2026-47722 GHSA-7hp6-g3pq-3pc3\n * GO-2026-5224 CVE-2026-44503 GHSA-7j59-v9qr-6fq9\n * GO-2026-5225 CVE-2026-46405 GHSA-7j6w-vvw2-5f9c\n * GO-2026-5226 CVE-2026-40944 GHSA-7jrq-q4pq-rhm6\n * GO-2026-5227 CVE-2026-42220 GHSA-7jrr-xw9c-mj39\n * GO-2026-5228 CVE-2026-5774 GHSA-7m55-2hr4-pw78\n * GO-2026-5229 CVE-2026-40259 GHSA-7m5h-w69j-qggg\n * GO-2026-5230 CVE-2026-46618 GHSA-7pjr-qpvh-m339\n * GO-2026-5231 GHSA-7qjx-gp9h-65qj\n * GO-2026-5232 GHSA-7qx6-f23w-3w7f\n * GO-2026-5233 CVE-2026-44309 GHSA-7rmh-48mx-2vwc\n * GO-2026-5234 CVE-2026-42590 GHSA-7v3r-m9c8-r855\n * GO-2026-5235 CVE-2026-42295 GHSA-7vf8-2cr6-54mf\n * GO-2026-5236 CVE-2026-40575 GHSA-7x63-xv5r-3p2x\n * GO-2026-5237 CVE-2026-7776 GHSA-7x9r-wcgg-w86f\n * GO-2026-5238 CVE-2026-6347 GHSA-82j6-4fq7-fx62\n * GO-2026-5239 CVE-2026-48096 GHSA-8396-jffm-qx4w\n * GO-2026-5240 GHSA-84g5-x8j3-7235\n * GO-2026-5241 CVE-2026-46617 GHSA-85g2-pmrx-r49q\n * GO-2026-5242 CVE-2026-41491 GHSA-85gx-3qv6-4463\n * GO-2026-5243 CVE-2026-25714 GHSA-8629-vc8r-5p58\n * GO-2026-5244 CVE-2026-45741 GHSA-86m8-88fq-xfxp\n * GO-2026-5245 CVE-2026-20719 GHSA-86vc-mg26-fj6x\n * GO-2026-5246 CVE-2026-44697 GHSA-87m7-qffr-542v\n * GO-2026-5247 CVE-2026-5807 GHSA-88v5-9hxc-f85r\n * GO-2026-5248 CVE-2026-45680 GHSA-89c6-vpcj-7vj4\n * GO-2026-5249 CVE-2026-52811 GHSA-89mr-xqfv-758m\n * GO-2026-5250 CVE-2026-54090 GHSA-8c9q-7855-wfxq\n * GO-2026-5251 CVE-2026-11717 GHSA-8fcc-w5hv-4gxv\n * GO-2026-5252 CVE-2026-47753 GHSA-8g7m-96c8-8wwc\n * GO-2026-5253 CVE-2026-41433 GHSA-8gmg-3w2q-65f4\n * GO-2026-5254 CVE-2026-35527 GHSA-8gw4-p4wq-4hcv\n * GO-2026-5255 CVE-2026-48025 GHSA-8h84-fhqq-q58v\n * GO-2026-5256 CVE-2026-28759 GHSA-8h9w-w78c-vvr3\n * GO-2026-5257 CVE-2026-45089 GHSA-8hf9-3q64-q2qf\n * GO-2026-5258 CVE-2026-34727 GHSA-8jvc-mcx6-r4cg\n * GO-2026-5259 GHSA-8mc6-xjpr-h98x\n * GO-2026-5260 CVE-2026-40922 GHSA-8q5w-mmxf-48jg\n * GO-2026-5261 CVE-2026-49396 GHSA-8qhj-4f8c-j8qg\n * GO-2026-5262 CVE-2026-5052 GHSA-8r5m-3f66-qpr3\n * GO-2026-5263 CVE-2026-5163 GHSA-8r89-8w26-cq32\n * GO-2026-5264 CVE-2026-42154 GHSA-8rm2-7qqf-34qm\n * GO-2026-5265 CVE-2026-45679 GHSA-8rrq-wcg8-cv5q\n * GO-2026-5267 CVE-2026-55776 GHSA-8w8f-r2xv-4q4j\n * GO-2026-5268 GHSA-8wfp-579w-6r25\n * GO-2026-5269 CVE-2026-44247 GHSA-8wxp-xxp2-rcgx\n * GO-2026-5270 CVE-2026-35454 GHSA-8x9r-hvwg-c55h\n * GO-2026-5271 CVE-2026-48501 GHSA-8xvp-7hj6-mcj9\n * GO-2026-5273 CVE-2026-44428 GHSA-95c3-6vvw-4mrq\n * GO-2026-5275 CVE-2026-45682 GHSA-962q-hwm5-52x5\n * GO-2026-5276 CVE-2026-35594 GHSA-96q5-xm3p-7m84\n * GO-2026-5277 CVE-2026-44774 GHSA-96qj-4jj5-wcjc\n * GO-2026-5278 CVE-2026-41135 GHSA-98cp-84m9-q3qp\n * GO-2026-5279 CVE-2026-29050 GHSA-98f2-w9h9-7fp9\n * GO-2026-5280 CVE-2026-41685 GHSA-98vh-x9cx-9cfp\n * GO-2026-5281 CVE-2026-45287 GHSA-995v-fvrw-c78m\n * GO-2026-5282 CVE-2026-46716 GHSA-99gv-2m7h-3hh9\n * GO-2026-5283 CVE-2026-39961 GHSA-99j8-wv67-4c72\n * GO-2026-5284 CVE-2026-40344 GHSA-9c4q-hq6p-c237\n * GO-2026-5285 GHSA-9cp7-j3f8-p5jx\n * GO-2026-5286 CVE-2026-28737 GHSA-9cpj-qc93-vw8v\n * GO-2026-5288 GHSA-9fw6-xgg2-mq9q\n * GO-2026-5289 CVE-2026-39350 GHSA-9gcg-w975-3rjh\n * GO-2026-5290 GHSA-9h64-2846-7x7f\n * GO-2026-5291 CVE-2026-41164 GHSA-9hmg-827w-9rhj\n * GO-2026-5292 CVE-2026-45626 GHSA-9mvm-4gwg-v8mp\n * GO-2026-5293 CVE-2026-6346 GHSA-9p64-jpc7-m2rp\n * GO-2026-5294 CVE-2026-47768 GHSA-9pg3-25fq-p6cc\n * GO-2026-5295 CVE-2026-40262 GHSA-9pr4-rf97-79qh\n * GO-2026-5296 CVE-2026-33544 GHSA-9q5m-jfc4-wc92\n * GO-2026-5297 CVE-2026-40097 GHSA-9qq8-cgcv-qmc9\n * GO-2026-5298 GHSA-9r4w-jg96-92mv\n * GO-2026-5299 CVE-2026-28699 GHSA-9r5x-wg6m-x2rc\n * GO-2026-5300 GHSA-9v4j-7g44-qcqw\n * GO-2026-5301 CVE-2026-26191 GHSA-9vcr-g537-3w5v\n * GO-2026-5302 CVE-2026-44423 GHSA-9w9c-9w8m-w89q\n * GO-2026-5303 CVE-2026-40884 GHSA-c29w-qq4m-2gcv\n * GO-2026-5304 CVE-2026-55774 GHSA-c36x-h252-g9x2\n * GO-2026-5305 CVE-2026-52813 GHSA-c39w-43gm-34h5\n * GO-2026-5308 CVE-2026-47179 GHSA-c3px-h233-h6fq\n * GO-2026-5310 CVE-2026-34476 GHSA-c4hg-6933-x62x\n * GO-2026-5311 CVE-2026-4858 GHSA-c4r7-j7pp-r8mp\n * GO-2026-5312 CVE-2026-47267 GHSA-c4v7-xg93-qf8g\n * GO-2026-5314 CVE-2026-40574 GHSA-c5c4-8r6x-56w3\n * GO-2026-5315 CVE-2026-45576 GHSA-c656-jcx2-7pqj\n * GO-2026-5316 CVE-2026-45723 GHSA-c66c-vq6w-fvh5\n * GO-2026-5317 CVE-2026-55884 GHSA-c73q-8xxr-rgqm\n * GO-2026-5318 CVE-2026-34453 GHSA-c77m-r996-jr3q\n * GO-2026-5319 CVE-2026-40243 GHSA-c839-4qxr-j4x3\n * GO-2026-5321 CVE-2026-28744 GHSA-cc8w-r4qh-3v65\n * GO-2026-5322 CVE-2026-55170 GHSA-cf98-j28v-49v6\n * GO-2026-5323 CVE-2026-46612 GHSA-chf8-4hv6-8pg6\n * GO-2026-5324 CVE-2026-42595 GHSA-chwh-f6gm-r836\n * GO-2026-5325 CVE-2026-6340 GHSA-cjm8-jxpw-g43m\n * GO-2026-5326 CVE-2026-44327 GHSA-cmpj-2x3g-m7g3\n * GO-2026-5328 GHSA-cp79-9mwr-wr49\n * GO-2026-5329 CVE-2026-40303 GHSA-cpf9-ph2j-ccr9\n * GO-2026-5330 CVE-2026-48154 GHSA-cpwg-x64r-rgwg\n * GO-2026-5331 CVE-2026-35037 GHSA-cqgf-f4x7-g6wc\n * GO-2026-5332 CVE-2025-41117 GHSA-cqp7-wf4c-3xgc\n * GO-2026-5333 CVE-2026-44884 GHSA-cqpq-2fgr-8mvc\n * GO-2026-5334 CVE-2026-20706 GHSA-cr4g-f395-h25h\n * GO-2026-5335 CVE-2026-45803 GHSA-crc3-h8v6-qh57\n * GO-2026-5337 CVE-2026-41068 GHSA-cvq5-hhx3-f99p\n * GO-2026-5338 CVE-2026-50195 GHSA-cvxm-645q-p574\n * GO-2026-5339 CVE-2026-47701 GHSA-cxh2-4639-vmc5\n * GO-2026-5340 CVE-2026-42461 GHSA-cxx3-hr75-4q96\n * GO-2026-5341 CVE-2026-34454 GHSA-f24x-5g9q-753f\n * GO-2026-5343 CVE-2026-48496 GHSA-f2r5-5m7w-p5cx\n * GO-2026-5344 CVE-2026-46703 GHSA-f396-4rp4-7v2j\n * GO-2026-5345 CVE-2026-45046 GHSA-f3jg-756w-gm35\n * GO-2026-5347 CVE-2026-48709 GHSA-f637-w7p2-m7fx\n * GO-2026-5348 CVE-2026-42560 GHSA-f6qq-3m3h-4g42\n * GO-2026-5349 CVE-2026-44325 GHSA-f8qv-7x5w-qr48\n * GO-2026-5350 CVE-2026-25726 GHSA-f8xp-wvcx-p6f4\n * GO-2026-5351 CVE-2026-41323 GHSA-f9g8-6ppc-pqq4\n * GO-2026-5352 CVE-2026-55828 GHSA-f9m7-vc86-p6jj\n * GO-2026-5353 GHSA-fc67-c4hg-q653\n * GO-2026-5354 GHSA-fcmh-qfxc-w685\n * GO-2026-5355 CVE-2026-11769 GHSA-fcw4-wwqm-m8cf\n * GO-2026-5356 CVE-2026-40242 GHSA-ff24-4prj-gpmj\n * GO-2026-5357 CVE-2026-34585 GHSA-ff66-236v-p4fg\n * GO-2026-5358 CVE-2026-24899 GHSA-ffg9-j72f-j6xm\n * GO-2026-5359 CVE-2026-28377 GHSA-ffqx-q65f-36jf\n * GO-2026-5360 CVE-2026-27656 GHSA-fg35-5rf6-qg3g\n * GO-2026-5361 CVE-2026-6970 GHSA-fg3j-5w9g-hmg7\n * GO-2026-5362 CVE-2026-35597 GHSA-fgfv-pv97-6cmj\n * GO-2026-5363 CVE-2026-41413 GHSA-fgw5-hp8f-xfhc\n * GO-2026-5364 CVE-2026-40946 GHSA-fhvp-9hcj-6m33\n * GO-2026-5365 CVE-2026-22555 GHSA-fhx7-m96w-mv29\n * GO-2026-5366 CVE-2026-45683 GHSA-fjq3-ffvr-vm46\n * GO-2026-5367 CVE-2026-54319 GHSA-fjv8-j4p5-cr9m\n * GO-2026-5369 CVE-2026-8634 GHSA-fm77-94qm-4894\n * GO-2026-5370 CVE-2026-45148 GHSA-fmh9-gpqh-g53g\n * GO-2026-5371 GHSA-fmqp-4wfc-w3v7\n * GO-2026-5372 CVE-2026-35458 GHSA-fmwg-qcqh-m992\n * GO-2026-5373 CVE-2026-53999 GHSA-fp5j-4fj2-4jvq\n * GO-2026-5374 CVE-2026-41485 GHSA-fpjq-c37h-cqcv\n * GO-2026-5375 GHSA-fpw6-hrg5-q5x5\n * GO-2026-5376 CVE-2026-45713 GHSA-fpxj-m5q8-fphw\n * GO-2026-5377 CVE-2026-42876 GHSA-fq7h-9x26-6j22\n * GO-2026-5378 CVE-2026-46680 GHSA-fqw6-gf59-qr4w\n * GO-2026-5379 CVE-2026-49343 GHSA-fw38-pc54-jvx9\n * GO-2026-5381 CVE-2026-44903 GHSA-fw8g-cg8f-9j28\n * GO-2026-5382 GHSA-fwg7-53p4-g33c\n * GO-2026-5383 CVE-2026-44542 GHSA-fwj3-42wh-8673\n * GO-2026-5384 CVE-2026-41647 GHSA-fwj8-62r8-8p8m\n * GO-2026-5385 CVE-2026-45728 GHSA-fwqx-8365-9983\n * GO-2026-5386 CVE-2026-8779 GHSA-fxvj-wqv2-xgcq\n * GO-2026-5387 CVE-2026-52805 GHSA-g2f5-gjr4-qjvm\n * GO-2026-5388 CVE-2026-34969 GHSA-g2qj-prgh-4g9r\n * GO-2026-5389 CVE-2026-44522 GHSA-g49p-4qxj-88v3\n * GO-2026-5390 GHSA-g53w-w6mj-hrpp\n * GO-2026-5391 CVE-2026-55669 GHSA-g5h5-m4hm-xjrr\n * GO-2026-5392 CVE-2026-46695 GHSA-g6ww-w5j2-r7x3\n * GO-2026-5393 CVE-2026-4274 GHSA-g7fp-cqj5-x8hf\n * GO-2026-5394 CVE-2026-35392 GHSA-g8mv-vp7j-qp64\n * GO-2026-5395 CVE-2026-42597 GHSA-g924-cjx7-2rjw\n * GO-2026-5396 CVE-2026-40246 GHSA-g9cw-qwhf-24jp\n * GO-2026-5397 CVE-2026-40195 GHSA-gc7j-g665-rxr9\n * GO-2026-5398 CVE-2024-53412 GHSA-ggmw-mjhv-75rm\n * GO-2026-5399 GHSA-ghmh-jhmj-wcmf\n * GO-2026-5400 CVE-2026-41520 GHSA-gj49-89wh-h4gj\n * GO-2026-5401 CVE-2026-46430 GHSA-gj84-924c-48fx\n * GO-2026-5402 CVE-2026-45371 GHSA-gmmv-4cc5-wr9r\n * GO-2026-5403 CVE-2026-6634 GHSA-gqp3-hfc3-8q54\n * GO-2026-5404 CVE-2026-4286 GHSA-gvg4-jhmr-6j23\n * GO-2026-5405 CVE-2026-4370 GHSA-gvrj-cjch-728p\n * GO-2026-5406 CVE-2026-55636 GHSA-gwxr-7h77-7777\n * GO-2026-5407 CVE-2026-40249 GHSA-gx38-8h33-pmxr\n * GO-2026-5409 CVE-2026-33380 GHSA-gxcp-jjxh-rwp4\n * GO-2026-5411 CVE-2026-54093 GHSA-gxjx-7m74-hcq8\n * GO-2026-5412 CVE-2026-42221 GHSA-h27v-ph7w-m9fp\n * GO-2026-5413 GHSA-h5fq-653g-gxrm\n * GO-2026-5414 CVE-2026-34828 GHSA-h5j9-cvrw-v5qh\n * GO-2026-5415 CVE-2026-39414 GHSA-h749-fxx7-pwpg\n * GO-2026-5416 GHSA-h829-5cg7-6hff\n * GO-2026-5417 CVE-2026-33489 GHSA-h8mm-c463-wjq3\n * GO-2026-5418 CVE-2026-45738 GHSA-h98r-wv3h-fr38\n * GO-2026-5419 CVE-2026-40109 GHSA-h9cx-xjg6-5v2w\n * GO-2026-5420 GHSA-h9mw-h4qc-f5jf\n * GO-2026-5421 CVE-2026-33414 GHSA-hc8w-h2mf-hp59\n * GO-2026-5422 CVE-2026-42575 GHSA-hcwr-pq9g-rq3m\n * GO-2026-5423 CVE-2026-55689 GHSA-hcxc-wf8j-23hv\n * GO-2026-5424 CVE-2026-52879 GHSA-hf2g-6j7h-98wg\n * GO-2026-5425 GHSA-hfc8-w5f4-3x6m\n * GO-2026-5428 CVE-2026-35596 GHSA-hj5c-mhh2-g7jq\n * GO-2026-5429 CVE-2026-41894 GHSA-hjh7-r5w8-5872\n * GO-2026-5430 CVE-2026-47203 GHSA-hjj4-hfjm-fmrj\n * GO-2026-5431 GHSA-hm2h-wwwh-g49x\n * GO-2026-5432 CVE-2026-4273 GHSA-hqpj-f3jh-29vx\n * GO-2026-5433 CVE-2026-42283 GHSA-hqwm-7x7x-8379\n * GO-2026-5434 CVE-2026-39901 GHSA-hqxq-hwqf-wg83\n * GO-2026-5436 CVE-2026-47252 GHSA-hrj8-hjv8-mgwc\n * GO-2026-5437 CVE-2026-41145 GHSA-hv4r-mvr4-25vw\n * GO-2026-5438 CVE-2026-6290 GHSA-hv5g-26jg-pc45\n * GO-2026-5439 CVE-2026-47124 GHSA-hvv7-hfrh-7gxj\n * GO-2026-5440 CVE-2026-46431 GHSA-hw27-4v2q-5qff\n * GO-2026-5441 GHSA-hw5x-4r37-72w7\n * GO-2026-5442 CVE-2026-4053 GHSA-hw87-6jcq-9f8q\n * GO-2026-5443 CVE-2026-44829 GHSA-hwc4-gmrw-5222\n * GO-2026-5444 CVE-2026-39972 GHSA-hwr4-mq23-wcv5\n * GO-2026-5445 CVE-2026-7474 GHSA-hx53-77qj-8663\n * GO-2026-5446 CVE-2026-45709 GHSA-j3fj-qppj-fmmc\n * GO-2026-5447 CVE-2026-44322 GHSA-j59f-x285-69jx\n * GO-2026-5448 CVE-2026-25779 GHSA-j5r2-4c8j-xc3m\n * GO-2026-5449 CVE-2026-44985 GHSA-j643-x8pv-8m67\n * GO-2026-5450 CVE-2026-6383 GHSA-j6cv-3w8p-vrg8\n * GO-2026-5451 CVE-2025-68152 GHSA-j6f6-jp3p-53mw\n * GO-2026-5453 CVE-2026-44424 GHSA-j72x-xfwg-783f\n * GO-2026-5454 CVE-2026-4054 GHSA-j76w-p754-g2w7\n * GO-2026-5455 CVE-2026-24000 GHSA-j8h8-75h3-jg53\n * GO-2026-5456 CVE-2026-45685 GHSA-j8p6-96vp-f3r9\n * GO-2026-5457 CVE-2026-48050 GHSA-j93g-rp6m-j32m\n * GO-2026-5458 CVE-2026-54091 GHSA-j9jx-hp4c-ghhh\n * GO-2026-5459 CVE-2026-47253 GHSA-j9rx-rppg-6hh4\n * GO-2026-5460 CVE-2026-48126 GHSA-jc3j-x6pg-4hmv\n * GO-2026-5461 CVE-2026-46403 GHSA-jc6w-wmfc-fh33\n * GO-2026-5462 CVE-2026-42294 GHSA-jcc8-g2q4-9fxq\n * GO-2026-5464 GHSA-jf2q-463c-6f52\n * GO-2026-5465 CVE-2026-40091 GHSA-jf4f-rr2c-9m58\n * GO-2026-5467 GHSA-jfwg-rxf3-p7r9\n * GO-2026-5468 CVE-2026-35393 GHSA-jg56-wf8x-qrv5\n * GO-2026-5469 CVE-2026-34581 GHSA-jgfx-74g2-9r6g\n * GO-2026-5470 CVE-2026-40248 GHSA-jgq2-qv8v-5cmj\n * GO-2026-5472 CVE-2026-47680 GHSA-jjrm-hr5f-673x\n * GO-2026-5473 CVE-2026-41645 GHSA-jm34-66cf-qpvr\n * GO-2026-5474 CVE-2026-6334 GHSA-jp3f-x449-4q75\n * GO-2026-5475 CVE-2026-47262 GHSA-jpcc-p29g-p8mq\n * GO-2026-5476 CVE-2026-47125 GHSA-jpjh-jm2p-39hh\n * GO-2026-5477 CVE-2026-52798 GHSA-jq8v-rmf6-65jw\n * GO-2026-5478 CVE-2026-44324 GHSA-jqfc-gwj5-3w63\n * GO-2026-5479 CVE-2026-40883 GHSA-jrq5-hg6x-j6g3\n * GO-2026-5480 CVE-2026-44883 GHSA-jvp4-q659-95mj\n * GO-2026-5481 CVE-2026-35585 GHSA-jvpw-637p-h3pw\n * GO-2026-5482 CVE-2026-40343 GHSA-jwch-w7wh-gqjm\n * GO-2026-5483 CVE-2026-34972 GHSA-jwvj-g8pc-cx45\n * GO-2026-5484 CVE-2026-3495 GHSA-jx93-pf6x-874r\n * GO-2026-5485 GHSA-m23h-6mwm-39m8\n * GO-2026-5487 CVE-2026-3605 GHSA-m2w4-8ggf-rj47\n * GO-2026-5489 CVE-2026-2325 GHSA-m3p3-8frq-q7qh\n * GO-2026-5491 CVE-2026-46377 GHSA-m5j3-4634-c2vq\n * GO-2026-5493 CVE-2026-46378 GHSA-m6xr-fvfg-5g64\n * GO-2026-5494 CVE-2026-6343 GHSA-m79q-8qf5-v622\n * GO-2026-5495 CVE-2026-28741 GHSA-m7cf-4gh2-v4qg\n * GO-2026-5497 CVE-2026-42576 GHSA-m7hm-vm4x-28jf\n * GO-2026-5499 CVE-2026-45730 GHSA-m8xg-8xg9-mxhm\n * GO-2026-5500 CVE-2026-55185 GHSA-m999-j542-5w3r\n * GO-2026-5501 CVE-2025-41118 GHSA-m9hq-h476-h2g8\n * GO-2026-5502 CVE-2026-44474 GHSA-mc29-hmx6-856q\n * GO-2026-5505 CVE-2026-44882 GHSA-mgq6-4x29-88r3\n * GO-2026-5507 CVE-2026-3590 GHSA-mh4x-rmrx-3hp4\n * GO-2026-5508 GHSA-mhc4-qq83-fmrr\n * GO-2026-5509 CVE-2026-5467 GHSA-mj24-pqx2-6788\n * GO-2026-5510 CVE-2026-26231 GHSA-mm7c-rhg6-qr4r\n * GO-2026-5511 GHSA-mmpx-jh39-wrv6\n * GO-2026-5512 CVE-2026-3115 GHSA-mpc7-mm28-f6wq\n * GO-2026-5514 CVE-2026-46668 GHSA-mqcf-gqvg-rmhm\n * GO-2026-5515 CVE-2026-48031 GHSA-mqq6-462x-jxmm\n * GO-2026-5517 CVE-2026-55775 GHSA-mwr2-wmgp-crj6\n * GO-2026-5519 GHSA-mxg3-432p-mr72\n * GO-2026-5520 CVE-2026-46356 GHSA-mxmp-wr3w-rvqx\n * GO-2026-5521 CVE-2026-42222 GHSA-mxqh-q9h6-v8pq\n * GO-2026-5522 CVE-2026-27769 GHSA-mxxh-fmjq-j6x4\n * GO-2026-5523 CVE-2026-47735 GHSA-p2j4-c4g6-rpf5\n * GO-2026-5524 CVE-2026-25773 GHSA-p32q-v29x-wq9r\n * GO-2026-5526 CVE-2026-40264 GHSA-p49j-v9wc-wg57\n * GO-2026-5527 CVE-2026-42183 GHSA-p4gq-3vxj-f4jq\n * GO-2026-5528 CVE-2026-21728 GHSA-p4r4-xvrq-gvmc\n * GO-2026-5530 CVE-2026-40265 GHSA-p5w6-75f9-cc2p\n * GO-2026-5531 GHSA-p64j-f4x9-wq66\n * GO-2026-5533 CVE-2026-55882 GHSA-p749-9w62-w533\n * GO-2026-5534 CVE-2026-45327 GHSA-p7c4-8x34-8j8f\n * GO-2026-5535 CVE-2026-5469 GHSA-p8c7-hjc4-gwf8\n * GO-2026-5536 CVE-2026-52799 GHSA-p9f5-h3rx-j5qw\n * GO-2026-5537 CVE-2026-44328 GHSA-p9mg-74mg-cwwr\n * GO-2026-5538 CVE-2025-71261 GHSA-pgh9-mpwc-8jjf\n * GO-2026-5539 CVE-2026-45678 GHSA-pgvv-q3wf-mm9m\n * GO-2026-5540 CVE-2026-39846 GHSA-phhp-9rm9-6gr2\n * GO-2026-5541 GHSA-pj6q-4vq4-r8cg\n * GO-2026-5544 CVE-2026-42602 GHSA-pjv4-3c63-699f\n * GO-2026-5545 CVE-2026-52797 GHSA-pm6v-2h4w-4rp2\n * GO-2026-5546 CVE-2026-40945 GHSA-pm7q-rjjx-979p\n * GO-2026-5547 GHSA-pmwq-pjrm-6p5r\n * GO-2026-5549 CVE-2026-40910 GHSA-pq96-pwvg-vrr9\n * GO-2026-5550 CVE-2025-52490 GHSA-pqhp-4xfc-hjgq\n * GO-2026-5551 CVE-2026-39087 GHSA-pqhx-w72w-m393\n * GO-2026-5552 CVE-2026-53541 GHSA-prj9-97mp-mwh2\n * GO-2026-5553 GHSA-prxj-3gcv-cqrh\n * GO-2026-5554 CVE-2026-44475 GHSA-pwfh-mqp3-pqwj\n * GO-2026-5555 CVE-2026-44349 GHSA-pwqg-q8pg-pp6r\n * GO-2026-5556 CVE-2026-52800 GHSA-pwx3-qcgw-vh7h\n * GO-2026-5557 CVE-2026-41571 GHSA-pxf8-6wqm-r6hh\n * GO-2026-5558 GHSA-pxh5-6rrc-8rjv\n * GO-2026-5559 CVE-2026-41059 GHSA-pxq7-h93f-9jrg\n * GO-2026-5560 CVE-2026-43644 GHSA-q23m-vm9r-5745\n * GO-2026-5561 CVE-2026-45627 GHSA-q2pj-8v84-9mh5\n * GO-2026-5562 CVE-2026-29051 GHSA-q2pw-xx38-p64j\n * GO-2026-5563 CVE-2026-41326 GHSA-q49m-57vm-c8cc\n * GO-2026-5564 CVE-2026-4740 GHSA-q4gv-pjmh-c735\n * GO-2026-5565 CVE-2026-42223 GHSA-q4w7-56hr-83rm\n * GO-2026-5567 CVE-2026-44523 GHSA-q6mh-rqwh-g786\n * GO-2026-5568 CVE-2026-55686 GHSA-q6r4-3wmg-fwcq\n * GO-2026-5571 GHSA-q7j3-v8qv-22vq\n * GO-2026-5572 CVE-2026-40281 GHSA-q7r4-hc83-hf2q\n * GO-2026-5573 CVE-2026-45760 GHSA-q8ch-jx67-q52x\n * GO-2026-5574 CVE-2026-46358 GHSA-q8cj-789h-vg24\n * GO-2026-5575 CVE-2026-40868 GHSA-q93q-v844-jrqp\n * GO-2026-5577 CVE-2026-44245 GHSA-q98m-7w8c-w388\n * GO-2026-5578 CVE-2026-5724 GHSA-q98v-9f9w-f49q\n * GO-2026-5579 CVE-2026-34992 GHSA-qcmw-8mm4-4p28\n * GO-2026-5580 CVE-2026-52806 GHSA-qf6p-p7ww-cwr9\n * GO-2026-5581 CVE-2026-44473 GHSA-qfxw-v8qx-vj3v\n * GO-2026-5582 CVE-2026-35602 GHSA-qh78-rvg3-cv54\n * GO-2026-5583 CVE-2026-33190 GHSA-qhmp-q7xh-99rh\n * GO-2026-5584 CVE-2026-22872 GHSA-qjjm-7j9w-pw72\n * GO-2026-5586 CVE-2026-47726 GHSA-qm33-p5p9-f8vg\n * GO-2026-5587 GHSA-qmwh-9m9c-h36m\n * GO-2026-5588 CVE-2026-38651 GHSA-qpv2-rwc8-c993\n * GO-2026-5589 CVE-2026-42574 GHSA-qq3r-w4hj-gjp6\n * GO-2026-5590 CVE-2026-45152 GHSA-qqq4-5773-pmw5\n * GO-2026-5591 CVE-2026-48777 GHSA-qqqm-5547-774x\n * GO-2026-5594 GHSA-qr4g-8hrp-c4rw\n * GO-2026-5598 CVE-2026-54324 GHSA-qwxf-2m7m-2m3x\n * GO-2026-5599 CVE-2026-45711 GHSA-qx5x-85p8-vg4j\n * GO-2026-5600 CVE-2026-54322 GHSA-qxvm-pcfm-qc39\n * GO-2026-5601 CVE-2026-11401 GHSA-r236-5pc3-3qcp\n * GO-2026-5602 CVE-2026-34984 GHSA-r2pg-r6h7-crf3\n * GO-2026-5603 GHSA-r2x7-427f-rq69\n * GO-2026-5604 CVE-2026-55887 GHSA-r2xf-7jw5-pjg6\n * GO-2026-5605 CVE-2026-42594 GHSA-r33j-c622-r6qp\n * GO-2026-5607 CVE-2026-44430 GHSA-r48c-v28r-pf6v\n * GO-2026-5608 CVE-2026-35599 GHSA-r4fg-73rc-hhh7\n * GO-2026-5609 CVE-2026-39396 GHSA-r65v-xgwc-g56j\n * GO-2026-5610 CVE-2026-45681 GHSA-r6c9-g6q5-qrf9\n * GO-2026-5611 CVE-2026-33467 GHSA-r727-5pf6-47r2\n * GO-2026-5612 CVE-2026-40197 GHSA-r7w7-mmxr-47r9\n * GO-2026-5613 CVE-2026-41136 GHSA-r99v-75p9-xqm5\n * GO-2026-5614 GHSA-rc6v-5rmx-w5mv\n * GO-2026-5615 GHSA-rf84-wr5g-m3rp\n * GO-2026-5616 CVE-2026-42882 GHSA-rfgq-wgg8-662p\n * GO-2026-5617 CVE-2026-42306 GHSA-rg2x-37c3-w2rh\n * GO-2026-5618 CVE-2026-45737 GHSA-rg3g-4rw9-gqrp\n * GO-2026-5619 CVE-2025-70950 GHSA-rg3p-p27c-2f39\n * GO-2026-5620 CVE-2026-44594 GHSA-rg65-45m7-hq57\n * GO-2026-5621 CVE-2026-4789 GHSA-rggm-jjmc-3394\n * GO-2026-5622 CVE-2026-53489 GHSA-rgh6-rfwx-v388\n * GO-2026-5623 GHSA-rgj7-vg8v-j4wr\n * GO-2026-5624 GHSA-rh99-wc69-c255\n * GO-2026-5625 CVE-2026-42091 GHSA-rhf7-wvw3-vjvm\n * GO-2026-5626 GHSA-rj4g-rqgh-rx9h\n * GO-2026-5627 CVE-2026-42591 GHSA-rm4c-xj6x-49mw\n * GO-2026-5628 CVE-2026-52878 GHSA-rm5c-5x2p-48wr\n * GO-2026-5629 CVE-2026-27659 GHSA-rmhw-c3xr-m3xx\n * GO-2026-5631 GHSA-rp7v-4384-hfrp\n * GO-2026-5632 CVE-2026-42571 GHSA-rpfr-x88x-xwcw\n * GO-2026-5633 CVE-2026-44881 GHSA-rpgq-m5fp-32wr\n * GO-2026-5634 CVE-2026-27806 GHSA-rphv-h674-5hp2\n * GO-2026-5635 CVE-2026-48058 GHSA-rqfj-vv8r-xhqc\n * GO-2026-5636 CVE-2026-42589 GHSA-rqgh-gxv4-6657\n * GO-2026-5637 CVE-2026-44429 GHSA-rqv2-m695-f8j4\n * GO-2026-5638 CVE-2026-44210 GHSA-rr59-xxvx-96qr\n * GO-2026-5639 CVE-2026-44848 GHSA-rrmm-9v76-h3p4\n * GO-2026-5640 CVE-2026-41422 GHSA-rw2c-8rfq-gwfv\n * GO-2026-5641 CVE-2026-44982 GHSA-rw47-hm26-6wr7\n * GO-2026-5642 CVE-2026-44330 GHSA-rwww-x45w-p52w\n * GO-2026-5644 CVE-2026-34448 GHSA-rx4h-526q-4458\n * GO-2026-5645 CVE-2026-47120 GHSA-rxf6-wjh4-jfj6\n * GO-2026-5646 GHSA-rxmp-8h9v-56cx\n * GO-2026-5647 CVE-2026-44319 GHSA-rxrq-fv76-26pr\n * GO-2026-5648 CVE-2026-44671 GHSA-rxvx-hhpj-q6px\n * GO-2026-5649 CVE-2026-45087 GHSA-v25v-m36w-jp4h\n * GO-2026-5650 CVE-2026-40103 GHSA-v479-vf79-mg83\n * GO-2026-5651 CVE-2026-3637 GHSA-v549-xx3c-6pc8\n * GO-2026-5652 CVE-2026-42339 GHSA-v5c3-6wvc-pc2q\n * GO-2026-5653 GHSA-v5mh-h5hx-7v92\n * GO-2026-5654 CVE-2026-40481 GHSA-v7xq-3wx6-fqc2\n * GO-2026-5656 CVE-2026-44514 GHSA-v8j7-hp7c-738f\n * GO-2026-5657 CVE-2026-45808 GHSA-v8v8-cm84-m686\n * GO-2026-5658 CVE-2026-44427 GHSA-v8vw-gw5j-w7m6\n * GO-2026-5659 CVE-2026-35604 GHSA-v9w4-gm2x-6rvf\n * GO-2026-5661 CVE-2026-52807 GHSA-vcm5-gvmp-78mp\n * GO-2026-5662 CVE-2026-40179 GHSA-vffh-x6r8-xx99\n * GO-2026-5663 CVE-2026-3114 GHSA-vhgh-g7x8-4rx8\n * GO-2026-5664 GHSA-vjgj-42f6-7997\n * GO-2026-5667 CVE-2026-35579 GHSA-vp29-5652-4fw9\n * GO-2026-5668 CVE-2026-41568 GHSA-vp62-88p7-qqf5\n * GO-2026-5669 CVE-2026-45742 GHSA-vp73-vjw8-8f32\n * GO-2026-5670 CVE-2026-28736 GHSA-vph7-r229-qxpf\n * GO-2026-5671 CVE-2026-6333 GHSA-vqp5-2mrp-qqxg\n * GO-2026-5672 CVE-2026-49397 GHSA-vrmh-5mmx-hjwx\n * GO-2026-5673 CVE-2026-42082 GHSA-vrrx-58h3-prmh\n * GO-2026-5674 CVE-2026-42186 GHSA-vv66-6rp4-wr4f\n * GO-2026-5677 CVE-2026-45684 GHSA-vvmg-8mjr-g6q3\n * GO-2026-5678 GHSA-vw82-7fv8-r6gp\n * GO-2026-5679 CVE-2026-40318 GHSA-vw86-c94w-v3x4\n * GO-2026-5680 CVE-2026-44426 GHSA-vwx9-7qcf-gg7f\n * GO-2026-5682 CVE-2026-46370 GHSA-vxm7-9x8v-8gm4\n * GO-2026-5683 CVE-2026-44544 GHSA-vxvc-cg7j-rwqj\n * GO-2026-5685 CVE-2026-47249 GHSA-w342-mj6g-v9c4\n * GO-2026-5686 CVE-2026-52880 GHSA-w4c6-7r69-w7j9\n * GO-2026-5687 CVE-2026-46717 GHSA-w4g9-mxgg-j532\n * GO-2026-5688 CVE-2026-55187 GHSA-w4mc-hhc6-xp28\n * GO-2026-5689 CVE-2026-45712 GHSA-w4vj-r5pg-3722\n * GO-2026-5690 CVE-2026-55701 GHSA-w5cv-pw74-4rxc\n * GO-2026-5691 CVE-2026-54092 GHSA-w5fm-68j4-fpc4\n * GO-2026-5692 CVE-2026-5412 GHSA-w5fq-8965-c969\n * GO-2026-5694 CVE-2026-39395 GHSA-w6c6-c85g-mmv6\n * GO-2026-5695 CVE-2026-25119 GHSA-w6j9-vw59-27wv\n * GO-2026-5696 CVE-2026-40263 GHSA-w6m9-39cv-2fwp\n * GO-2026-5697 CVE-2026-5468 GHSA-w799-7525-rpr6\n * GO-2026-5698 CVE-2026-47723 GHSA-w7w5-5gcp-38rw\n * GO-2026-5701 GHSA-w8jj-cwmc-wgq2\n * GO-2026-5702 CVE-2026-40107 GHSA-w95v-4h65-j455\n * GO-2026-5703 CVE-2026-8462 GHSA-wc3v-3457-c8cm\n * GO-2026-5704 CVE-2026-35036 GHSA-wc4h-2348-jc3p\n * GO-2026-5705 GHSA-wcmj-x466-56mm\n * GO-2026-5706 CVE-2026-11718 GHSA-wcpr-6g7x-p44r\n * GO-2026-5708 CVE-2026-33381 GHSA-wfhv-mj62-f5xh\n * GO-2026-5709 GHSA-wfqx-gjrf-g28r\n * GO-2026-5710 CVE-2026-42151 GHSA-wg65-39gg-5wfj\n * GO-2026-5712 CVE-2026-52810 GHSA-wmfg-5p4h-5fw3\n * GO-2026-5714 CVE-2026-45676 GHSA-wp73-mwgf-4jq9\n * GO-2026-5715 CVE-2026-47215 GHSA-wqcr-7rf3-f64m\n * GO-2026-5716 CVE-2026-42541 GHSA-wqcw-g35j-j578\n * GO-2026-5717 CVE-2026-44320 GHSA-wqfh-gq79-j8mf\n * GO-2026-5718 CVE-2026-8052 GHSA-wqwc-x3rc-2xw6\n * GO-2026-5719 CVE-2026-44015 GHSA-wr32-99hh-6f35\n * GO-2026-5720 CVE-2026-44316 GHSA-wr8j-6chw-gm6p\n * GO-2026-5721 CVE-2026-24791 GHSA-wrr5-99h5-gq57\n * GO-2026-5722 CVE-2026-40245 GHSA-wrwh-rpq4-87hf\n * GO-2026-5723 CVE-2026-42875 GHSA-wv26-88m5-6h59\n * GO-2026-5724 CVE-2026-52801 GHSA-wv27-2vqp-j7g5\n * GO-2026-5725 CVE-2026-45726 GHSA-wv8c-6mx2-xf4j\n * GO-2026-5726 CVE-2026-28732 GHSA-wvcv-9xpm-7mqc\n * GO-2026-5727 CVE-2026-6345 GHSA-wvgv-4fc3-2rcp\n * GO-2026-5728 CVE-2026-40189 GHSA-wvhv-qcqf-f3cx\n * GO-2026-5729 CVE-2026-54321 GHSA-ww63-pv5x-vfc8\n * GO-2026-5731 CVE-2026-44317 GHSA-wwqh-7jm5-gj7w\n * GO-2026-5732 GHSA-wxg7-w2v3-w38g\n * GO-2026-5733 CVE-2026-33031 GHSA-x234-x5vq-cc2v\n * GO-2026-5734 CVE-2026-21388 GHSA-x274-8qfc-hrgf\n * GO-2026-5735 CVE-2026-32885 GHSA-x2xq-qhjf-5mvg\n * GO-2026-5737 GHSA-x3f4-v83f-7wp2\n * GO-2026-5738 CVE-2026-41246 GHSA-x4mj-7f9g-29h4\n * GO-2026-5739 CVE-2026-46371 GHSA-x4qr-qw6h-wvxq\n * GO-2026-5741 CVE-2026-40247 GHSA-x5r2-r74c-3w28\n * GO-2026-5742 CVE-2026-41684 GHSA-x5r6-jr56-89pv\n * GO-2026-5744 CVE-2026-26062 GHSA-x67p-9m2r-fxqv\n * GO-2026-5745 GHSA-x845-2f78-7v36\n * GO-2026-5747 CVE-2026-34528 GHSA-x8jc-jvqm-pm3f\n * GO-2026-5751 CVE-2026-42297 GHSA-xchc-cqwg-g76q\n * GO-2026-5752 CVE-2026-48020 GHSA-xf64-8mw2-4gr2\n * GO-2026-5753 CVE-2026-41432 GHSA-xff3-5c9p-2mr4\n * GO-2026-5754 CVE-2026-34530 GHSA-xfqj-3vmx-63wv\n * GO-2026-5755 CVE-2026-10720 GHSA-xg3j-c7q4-f9ph\n * GO-2026-5756 CVE-2026-47703 GHSA-xgx4-4h9w-53pv\n * GO-2026-5757 CVE-2026-42600 GHSA-xh8f-g2qw-gcm7\n * GO-2026-5758 CVE-2026-53488 GHSA-xhf5-7wjv-pqxp\n * GO-2026-5759 GHSA-xhj4-g6w8-2xjw\n * GO-2026-5760 CVE-2026-41174 GHSA-xhjw-95fp-8vgq\n * GO-2026-5763 CVE-2026-39984 GHSA-xm5m-wgh2-rrg3\n * GO-2026-5765 CVE-2026-52814 GHSA-xp79-5mx3-jx52\n * GO-2026-5766 CVE-2026-5199 GHSA-xpg8-3hhp-p7w8\n * GO-2026-5767 CVE-2026-4531 GHSA-xq44-64rg-8g3h\n * GO-2026-5768 CVE-2026-55672 GHSA-xqxv-4jc2-x56x\n * GO-2026-5769 CVE-2026-6339 GHSA-xvcx-mgpc-5xh3\n * GO-2026-5770 CVE-2026-34762 GHSA-xw45-cc32-442f\n * GO-2026-5771 CVE-2026-34742 GHSA-xw59-hvm2-8pj6\n * GO-2026-5772 CVE-2026-45721 GHSA-xwcr-wm99-g9jc\n * GO-2026-5773 CVE-2026-52802 GHSA-xxhq-69mf-w8cr\n * GO-2026-5776 GHSA-r4v7-6wcg-ghj5\n- Update to version 0.0.20260616T235518 2026-06-16T23:55:18Z.\n * GO-2026-5041 CVE-2026-44981 GHSA-273h-gvwr-c3qj\n * GO-2026-5042 CVE-2026-47243 GHSA-2gv2-cffp-j227\n * GO-2026-5043 CVE-2026-30963 GHSA-2ww6-hf35-mfjm\n * GO-2026-5049 CVE-2026-47725 GHSA-273q-qgh5-wrj6\n * GO-2026-5054 CVE-2026-48113 GHSA-24fp-5v3p-rvpw\n * GO-2026-5055 CVE-2026-54094 GHSA-239w-m3h6-ch8v\n- Update to version 0.0.20260602T213947 2026-06-02T21:39:47Z.\n * GO-2026-4960 CVE-2026-39386 GHSA-2gw9-c2r2-f5qf\n * GO-2026-5031 CVE-2026-42500\n * GO-2026-5032 CVE-2026-46599\n * GO-2026-5037 CVE-2026-27145\n * GO-2026-5038 CVE-2026-42504\n * GO-2026-5039 CVE-2026-42507\n- Update to version 0.0.20260526T224918 2026-05-26T22:49:18Z.\n * GO-2026-4945 CVE-2026-34986 GHSA-78h2-9frx-2jm8\n * GO-2026-4958 CVE-2026-35469 GHSA-pc3f-x583-g7j2\n * GO-2026-4985 CVE-2026-39882 GHSA-w8rr-5gcm-pp58\n * GO-2026-5002 CVE-2026-23998 GHSA-2rc4-7jc6-qffh\n * GO-2026-5024 CVE-2026-39824\n * GO-2026-5025 CVE-2026-42506\n * GO-2026-5026 CVE-2026-39821\n * GO-2026-5027 CVE-2026-42502\n * GO-2026-5028 CVE-2026-25680\n * GO-2026-5029 CVE-2026-25681\n * GO-2026-5030 CVE-2026-27136\n- Update to version 0.0.20260522T020834 2026-05-22T02:08:34Z.\n * GO-2025-3548 CVE-2024-12886 GHSA-v464-r2r9-www7\n * GO-2026-4951 CVE-2026-35601 GHSA-2g7h-7rqr-9p4r\n * GO-2026-4952 CVE-2026-35595 GHSA-2vq4-854f-5c72\n * GO-2026-4953 CVE-2026-40188 GHSA-2943-crp8-38xx\n * GO-2026-4963 CVE-2026-41070 GHSA-246w-jgmq-88fg\n * GO-2026-4964 CVE-2026-41176 GHSA-25qr-6mpr-f7qx\n * GO-2026-4965 CVE-2026-41646 GHSA-29rg-wmcw-hpf4\n * GO-2026-4966 CVE-2026-41644 GHSA-29v9-frvh-c426\n * GO-2026-4967 CVE-2026-42072 GHSA-2hp7-65r3-wv54\n * GO-2026-4969 CVE-2026-32934 GHSA-2wpx-qpw2-g5h5\n * GO-2026-4983 GHSA-28xx-pppm-vqff\n * GO-2026-4988 CVE-2026-42300 GHSA-2g9v-7mr5-fgjg\n * GO-2026-4989 GHSA-2ccx-cjjh-r2j8\n * GO-2026-4990 CVE-2026-42592 GHSA-2pmr-289p-44r3\n * GO-2026-4991 GHSA-258c-965c-p3hc\n * GO-2026-4992 CVE-2026-44670 GHSA-2h64-c999-c9r6\n * GO-2026-4993 CVE-2026-44588 GHSA-25rp-h46x-2hjm\n * GO-2026-4994 CVE-2026-44318 GHSA-27ph-8q4f-h7m7\n * GO-2026-4995 CVE-2026-44329 GHSA-3258-qmv8-frp3\n * GO-2026-4996 CVE-2025-2786 GHSA-28gr-56hr-prp6\n * GO-2026-4997 CVE-2026-6863 GHSA-2v93-vp82-cjv8\n * GO-2026-4999 CVE-2026-45090 GHSA-2g4x-fq3j-cgq4\n * GO-2026-5001 CVE-2026-45375 GHSA-27qc-m5gf-jv5r\n * GO-2026-5005 CVE-2026-39833\n * GO-2026-5006 CVE-2026-39832\n * GO-2026-5008 CVE-2026-45781 GHSA-2v5f-5r6w-p67r\n * GO-2026-5009 CVE-2026-45695 GHSA-2q4c-3mrw-63c3\n * GO-2026-5010 GHSA-3278-c88v-xrh4\n * GO-2026-5013 CVE-2026-46597\n * GO-2026-5014 CVE-2026-39828\n * GO-2026-5015 CVE-2026-39835\n * GO-2026-5016 CVE-2026-39827\n * GO-2026-5017 CVE-2026-39830\n * GO-2026-5018 CVE-2026-39829\n * GO-2026-5019 CVE-2026-39831\n * GO-2026-5020 CVE-2026-39834\n * GO-2026-5021 CVE-2026-42508\n * GO-2026-5023 CVE-2026-46595\n * GO-2026-5033 CVE-2026-46598\n- Update to version 0.0.20260507T192140 2026-05-07T19:21:40Z.\n * GO-2026-4918 CVE-2026-33814\n * GO-2026-4971 CVE-2026-39836\n * GO-2026-4976 CVE-2026-39825\n * GO-2026-4977 CVE-2026-42499\n * GO-2026-4978 CVE-2026-39819\n * GO-2026-4979 CVE-2026-39817\n * GO-2026-4980 CVE-2026-39826\n * GO-2026-4981 CVE-2026-33811\n * GO-2026-4982 CVE-2026-39823\n * GO-2026-4984 CVE-2026-42501\n * GO-2026-4986 CVE-2026-39820\n- Update to version 0.0.20260421T185951 2026-04-21T18:59:51Z.\n * GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m\n * GO-2025-3993 CVE-2025-59531 GHSA-f9gq-prrc-hrhc\n * GO-2025-3996 CVE-2025-59537 GHSA-wp4p-9pxh-cgx2\n * GO-2026-4514 CVE-2026-32285 GHSA-6g7g-w4f8-9c9x\n * GO-2026-4771 CVE-2026-33815 GHSA-xgrm-4fwx-7qm8\n * GO-2026-4772 CVE-2026-33816 GHSA-9jj7-4m8r-rfcm\n * GO-2026-4962 CVE-2026-33812\n- Update to version 0.0.20260416T222113 2026-04-16T22:21:13Z.\n * GO-2025-3503 CVE-2025-22870 GHSA-qxp5-gwg8-xv66\n * GO-2026-4727 CVE-2026-26246 GHSA-44mv-jq72-gj49\n * GO-2026-4736 CVE-2026-30405 GHSA-4p9m-8gc4-rw2h\n * GO-2026-4738 CVE-2026-32761 GHSA-68j5-4m99-w9w9\n * GO-2026-4771 CVE-2026-33815\n * GO-2026-4772 CVE-2026-33816\n * GO-2026-4789 CVE-2026-26933 GHSA-27qj-9gvp-8rh9\n * GO-2026-4790 CVE-2026-26931 GHSA-5vrw-qjxw-89r5\n * GO-2026-4806 CVE-2026-33413 GHSA-q8m4-xhhv-38mg\n * GO-2026-4808 CVE-2026-33343 GHSA-rfx7-8w68-q57q\n * GO-2026-4815 CVE-2026-33809 GHSA-44p7-9xx4-hf2g\n * GO-2026-4864 CVE-2026-32282\n * GO-2026-4865 CVE-2026-32289\n * GO-2026-4866 CVE-2026-33810\n * GO-2026-4867 CVE-2026-27144\n * GO-2026-4868 CVE-2026-27143\n * GO-2026-4869 CVE-2026-32288\n * GO-2026-4870 CVE-2026-32283\n * GO-2026-4871 CVE-2026-27140\n * GO-2026-4879 CVE-2026-33898 GHSA-453r-g2pg-cxxq\n * GO-2026-4881 CVE-2026-33897 GHSA-83xr-5xxr-mh92\n * GO-2026-4882 CVE-2026-33542 GHSA-p8mm-23gg-jc9r\n * GO-2026-4884 CVE-2026-33945 GHSA-q4q8-7f2j-9h9f\n * GO-2026-4885 CVE-2026-33711 GHSA-q9vp-3wcg-8p4x\n * GO-2026-4886 CVE-2026-33743 GHSA-vg76-xmhg-j5x3\n * GO-2026-4909 CVE-2026-33762 GHSA-gm2x-2g9h-ccm8\n * GO-2026-4910 CVE-2026-34165 GHSA-jhf3-xxhw-2wpp\n * GO-2026-4920 CVE-2026-34940 GHSA-324q-cwx9-7crr\n * GO-2026-4923 CVE-2026-33817 GHSA-6jwv-w5xf-7j27\n * GO-2026-4924 CVE-2025-68153 GHSA-245v-p8fj-vwm2\n * GO-2026-4946 CVE-2026-32281\n * GO-2026-4947 CVE-2026-32280\n- Update to version 0.0.20260402T184258 2026-04-02T18:42:58Z.\n * GO-2026-4518 CVE-2026-32286 GHSA-jqcq-xjh3-6g23\n * GO-2026-4753 CVE-2026-33487 GHSA-479m-364c-43vc\n * GO-2026-4760 GHSA-hwqm-qvj9-4jr2\n * GO-2026-4762 CVE-2026-33186 GHSA-p77j-4mvh-x3m3\n * GO-2026-4764 GHSA-pcgw-qcv5-h8ch\n * GO-2026-4858 CVE-2026-33747 GHSA-4c29-8rgm-jvjj\n * GO-2026-4859 CVE-2026-33748 GHSA-4vrq-3vrq-g6gg\n * GO-2026-4863 GHSA-g9ww-x58f-9g6m\n * GO-2026-4872 CVE-2026-33907 GHSA-55q8-2gwx-29pc\n * GO-2026-4873 CVE-2026-33906 GHSA-87j9-m7x6-hvw2\n * GO-2026-4874 CVE-2026-33904 GHSA-9h59-p45g-445h\n * GO-2026-4875 CVE-2026-33903 GHSA-f2f3-9cx3-wcmf\n * GO-2026-4876 GHSA-prh4-vhfh-24mj\n * GO-2026-4880 CVE-2026-32695 GHSA-67jx-r9pv-98rj\n * GO-2026-4883 CVE-2026-33997 GHSA-pxq6-2prw-chj9\n * GO-2026-4887 CVE-2026-34040 GHSA-x744-4wpc-v9h2\n * GO-2026-4888 CVE-2026-26060 GHSA-3458-r943-hmx4\n * GO-2026-4889 CVE-2026-26061 GHSA-99hj-44vg-hfcp\n * GO-2026-4890 CVE-2026-34042 GHSA-x34h-54cw-9825\n * GO-2026-4891 CVE-2026-34041 GHSA-xmgr-9pqc-h5vw\n * GO-2026-4892 CVE-2026-29180 GHSA-m2h6-4xpq-qw3m\n * GO-2026-4893 CVE-2026-33433 GHSA-qr99-7898-vr7c\n * GO-2026-4894 CVE-2026-32241 GHSA-vchx-5pr6-ffx2\n * GO-2026-4896 CVE-2026-34204 GHSA-3rh2-v3gr-35p9\n * GO-2026-4897 GHSA-46wh-3698-f2cx\n * GO-2026-4899 GHSA-c279-989m-238f\n * GO-2026-4901 CVE-2026-33030 GHSA-5hf2-vhj6-gj9m\n * GO-2026-4902 CVE-2026-33029 GHSA-cp8r-8jvw-v3qg\n * GO-2026-4903 CVE-2026-33026 GHSA-fhh2-gg7w-gwpq\n * GO-2026-4904 CVE-2026-33032 GHSA-h6c2-x2m2-mwhf\n * GO-2026-4905 CVE-2026-27018 GHSA-jjwv-57xh-xr6r\n * GO-2026-4906 CVE-2026-33028 GHSA-m468-xcm6-fxg4\n * GO-2026-4907 CVE-2026-33027 GHSA-m8p8-53vf-8357\n * GO-2026-4911 CVE-2026-33990 GHSA-x2f5-332j-9xwq\n * GO-2026-4912 CVE-2026-34389 GHSA-4f9r-x588-pp2h\n * GO-2026-4913 CVE-2026-34386 GHSA-9p23-p2m4-2r4m\n * GO-2026-4914 CVE-2026-34385 GHSA-v895-833r-8c45\n * GO-2026-4915 CVE-2026-34388 GHSA-w254-4hp5-7cvv\n * GO-2026-4916 CVE-2026-26233 GHSA-247x-7qw8-fp98\n * GO-2026-4919 CVE-2026-33634 GHSA-69fq-xp46-6x23\n- Update to version 0.0.20260326T203309 2026-03-26T20:33:09Z.\n * GO-2026-4513 CVE-2026-32284\n * GO-2026-4514 CVE-2026-32285\n * GO-2026-4518 CVE-2026-32286\n * GO-2026-4526 CVE-2026-32287\n * GO-2026-4700 CVE-2026-32704 GHSA-4j3x-hhg2-fm2x\n * GO-2026-4701 CVE-2026-32720 GHSA-7x23-j8gv-v54x\n * GO-2026-4702 CVE-2026-32301 GHSA-j77h-rr39-c552\n * GO-2026-4703 GHSA-q926-c743-49qj\n * GO-2026-4704 CVE-2026-32606 GHSA-wj2j-qwcf-cfcc\n * GO-2026-4705 CVE-2026-32747 GHSA-h5vh-m7fg-w5h6\n * GO-2026-4706 CVE-2026-32751 GHSA-qr46-rcv3-4hq3\n * GO-2026-4707 CVE-2026-32749 GHSA-qvvf-q994-x79v\n * GO-2026-4708 CVE-2026-32750 GHSA-rjhh-m223-9qqv\n * GO-2026-4709 CVE-2026-32815 GHSA-xp2m-98x8-rpj6\n * GO-2026-4710 CVE-2026-32760 GHSA-5gg9-5g7w-hm73\n * GO-2026-4711 CVE-2026-32758 GHSA-9f3r-2vgw-m8xp\n * GO-2026-4712 CVE-2026-32771 GHSA-f7cq-gvh6-qr25\n * GO-2026-4713 CVE-2026-32759 GHSA-ffx7-75gc-jg7c\n * GO-2026-4714 CVE-2026-32737 GHSA-fgm3-q9r5-43v9\n * GO-2026-4715 CVE-2026-32769 GHSA-hxm7-9q36-c77f\n * GO-2026-4716 CVE-2026-32767 GHSA-j7wh-x834-p3r7\n * GO-2026-4717 CVE-2026-32828 GHSA-j94x-8wcp-x7hm\n * GO-2026-4718 CVE-2026-32768 GHSA-mw24-f3xh-j3qv\n * GO-2026-4719 CVE-2026-32805 GHSA-p799-g7vv-f279\n * GO-2026-4721 CVE-2026-32940 GHSA-4mx9-3c2h-hwhg\n * GO-2026-4722 CVE-2026-32938 GHSA-fq2j-j8hc-8vw8\n * GO-2026-4723 CVE-2026-32941 GHSA-97vp-pwqj-46qc\n * GO-2026-4724 CVE-2026-32254 GHSA-phqm-jgc3-qf8g\n * GO-2026-4725 CVE-2026-25783 GHSA-2v3w-6g35-5f9v\n * GO-2026-4726 CVE-2026-2456 GHSA-34g8-9fpp-46ch\n * GO-2026-4728 CVE-2026-32953 GHSA-4w7r-3222-8h6v\n * GO-2026-4729 CVE-2026-2458 GHSA-679f-wmrg-qf57\n * GO-2026-4731 CVE-2026-24458 GHSA-m5rv-56xx-hfc6\n * GO-2026-4732 CVE-2026-2457 GHSA-ph22-fw5m-w2q9\n * GO-2026-4733 CVE-2026-25780 GHSA-xv2p-wchj-qjhp\n * GO-2026-4734 CVE-2026-2578 GHSA-3rhr-jr63-hwq5\n * GO-2026-4735 CVE-2026-2463 GHSA-fx49-m253-27jj\n * GO-2026-4737 GHSA-594f-3595-c47v\n * GO-2026-4740 GHSA-h9q6-hc68-35rp\n * GO-2026-4742 CVE-2026-32811 GHSA-r8x2-fhmf-6mxp\n * GO-2026-4743 CVE-2026-33066 GHSA-4663-4mpg-879v\n * GO-2026-4744 CVE-2026-21386 GHSA-5mr9-crcg-8wh2\n * GO-2026-4745 CVE-2026-24692 GHSA-cwfj-642j-gfh4\n * GO-2026-4746 CVE-2026-2455 GHSA-gqv7-j2j8-qmwq\n * GO-2026-4747 CVE-2026-33067 GHSA-mvpm-v6q4-m2pf\n * GO-2026-4748 CVE-2026-33081 GHSA-qwxp-6qf9-wr4m\n * GO-2026-4749 CVE-2026-4265 GHSA-xpvf-6qcc-9jqc\n * GO-2026-4750 CVE-2026-32937 GHSA-6g43-577r-wf4x\n * GO-2026-4751 CVE-2026-33132 GHSA-g2pf-ww5m-2r9m\n * GO-2026-4752 CVE-2026-33203 GHSA-3g9h-9hp4-654v\n * GO-2026-4754 CVE-2026-33063 GHSA-4jrw-92fg-4jwx\n * GO-2026-4755 CVE-2026-33192 GHSA-5rvc-5cwx-g5x8\n * GO-2026-4756 CVE-2026-33062 GHSA-7c47-xr7q-p6hg\n * GO-2026-4757 CVE-2026-33064 GHSA-7g27-v5wj-jr75\n * GO-2026-4758 CVE-2026-33065 GHSA-958m-gxmc-mccm\n * GO-2026-4759 CVE-2026-33221 GHSA-g9f6-9775-hffm\n * GO-2026-4763 CVE-2026-33191 GHSA-p9hg-pq3q-v9gv\n * GO-2026-4765 GHSA-vccx-p757-pv6h\n * GO-2026-4766 CVE-2026-33194 GHSA-vm69-h85x-8p85\n * GO-2026-4768 CVE-2026-33320 GHSA-4fcp-jxh7-23x8\n * GO-2026-4769 CVE-2026-32691 GHSA-gfgr-6hrj-85ww\n * GO-2026-4770 GHSA-q382-vc8q-7jhj\n * GO-2026-4773 CVE-2026-33252 GHSA-89xv-2j6f-qhc8\n * GO-2026-4774 CVE-2026-30924 GHSA-h8vw-ph9r-xpch\n * GO-2026-4775 CVE-2026-30836 GHSA-q4r8-xm5f-56gw\n * GO-2026-4776 CVE-2026-33283 GHSA-3366-gw57-fcm5\n * GO-2026-4777 CVE-2026-32693 GHSA-439w-v2p7-pggc\n * GO-2026-4778 CVE-2026-32694 GHSA-5cj2-rqqf-hx9p\n * GO-2026-4779 CVE-2026-33322 GHSA-5cx5-wh4m-82fh\n * GO-2026-4780 CVE-2026-33282 GHSA-826q-wrq4-p23x\n * GO-2026-4781 CVE-2026-32692 GHSA-89x7-5m5m-mcmm\n * GO-2026-4782 CVE-2026-2461 GHSA-hf8w-x9h5-5gf9\n * GO-2026-4783 CVE-2026-33281 GHSA-q669-4gmv-g8mf\n * GO-2026-4784 CVE-2026-2476 GHSA-4ppj-6chv-5pgc\n * GO-2026-4785 CVE-2026-33344 GHSA-ph8x-4jfv-v9v8\n * GO-2026-4786 CVE-2026-22545 GHSA-rv67-7w2g-7976\n * GO-2026-4788 CVE-2026-33353 GHSA-xgxp-f695-6vrp\n * GO-2026-4791 CVE-2026-29794 GHSA-m547-hp4w-j6jx\n * GO-2026-4792 CVE-2026-32595 GHSA-g3hg-j4jv-cwfr\n * GO-2026-4793 CVE-2026-32305 GHSA-wvvq-wgcr-9q48\n * GO-2026-4794 CVE-2026-33315 GHSA-47cr-f226-r4pq\n * GO-2026-4795 CVE-2026-33312 GHSA-564f-wx8x-878h\n * GO-2026-4796 CVE-2026-4342 GHSA-f53h-mxv9-cp98\n * GO-2026-4797 CVE-2026-33313 GHSA-mr3j-p26x-72x4\n * GO-2026-4798 CVE-2026-33316 GHSA-vq4q-79hh-q767\n * GO-2026-4799 CVE-2026-33496 GHSA-4mq7-pvjg-xp2r\n * GO-2026-4800 CVE-2026-33505 GHSA-c38g-mx2c-9wf2\n * GO-2026-4801 CVE-2026-33503 GHSA-hgx2-28f8-6g2r\n * GO-2026-4802 CVE-2026-33476 GHSA-hhgj-gg9h-rjp7\n * GO-2026-4803 CVE-2026-33419 GHSA-jv87-32hw-hh99\n * GO-2026-4804 CVE-2026-33494 GHSA-p224-6x5r-fjpm\n * GO-2026-4805 CVE-2026-33473 GHSA-p747-qc5p-773r\n * GO-2026-4807 CVE-2026-33504 GHSA-r9w3-57w2-gch2\n * GO-2026-4809 CVE-2026-33481 GHSA-rjcw-vg7j-m9rc\n * GO-2026-4810 CVE-2026-33495 GHSA-vhr5-ggp3-qq85\n * GO-2026-4811 CVE-2026-33474 GHSA-wc83-79hj-hpmq\n * GO-2026-4812 CVE-2026-26304 GHSA-4pmx-622h-x359\n * GO-2026-4813 CVE-2026-32879 GHSA-5353-f8fq-65vc\n * GO-2026-4814 CVE-2026-30886 GHSA-f35r-v9x5-r8mc\n * GO-2026-4815 CVE-2026-33809\n * GO-2026-4816 CVE-2026-3864 GHSA-2mjq-54qg-7w6j\n * GO-2026-4817 CVE-2026-33528 GHSA-4753-cmc8-8j9v\n * GO-2026-4818 CVE-2026-33525 GHSA-gmfg-3v4q-9qr4\n * GO-2026-4820 GHSA-7789-65hx-f26w\n * GO-2026-4821 CVE-2026-33621 GHSA-j65m-hv65-r264\n * GO-2026-4822 CVE-2026-33620 GHSA-mrqc-3276-74f8\n * GO-2026-4823 CVE-2026-33623 GHSA-p8mm-644p-phmh\n * GO-2026-4824 CVE-2026-33622 GHSA-w5pc-m664-r62v\n * GO-2026-4825 CVE-2026-33619 GHSA-xqq2-4j46-vwp7\n * GO-2026-4826 CVE-2026-33249 GHSA-8m2x-3m6q-6w8j\n * GO-2026-4827 CVE-2026-33247 GHSA-x6g4-f6q3-fqvv\n * GO-2026-4828 CVE-2026-33248 GHSA-3f24-pcvm-5jqc\n * GO-2026-4829 CVE-2026-29785 GHSA-52jh-2xxh-pwh6\n * GO-2026-4830 CVE-2026-33246 GHSA-55h8-8g96-x4hj\n * GO-2026-4831 CVE-2026-33219 GHSA-8r68-gvr4-jh7j\n * GO-2026-4832 CVE-2026-33222 GHSA-9983-vrx2-fg9c\n * GO-2026-4833 CVE-2026-33215 GHSA-fcjp-h8cc-6879\n * GO-2026-4834 CVE-2026-33217 GHSA-jxxm-27vp-c3m5\n * GO-2026-4835 CVE-2026-33223 GHSA-pwx7-fx9r-hr4h\n * GO-2026-4836 CVE-2026-33216 GHSA-v722-jcv5-w7mc\n * GO-2026-4837 CVE-2026-33218 GHSA-vprv-35vv-q339\n * GO-2026-4838 CVE-2026-33638 GHSA-m983-7426-5hrj\n * GO-2026-4841 CVE-2026-27889 GHSA-pq2q-rcw4-3hr6\n * GO-2026-4842 CVE-2026-33669 GHSA-34xj-66v3-6j83\n * GO-2026-4843 CVE-2026-33670 GHSA-xmw9-6r43-x9ww\n * GO-2026-4844 CVE-2026-33529 GHSA-7pq3-326h-f8q9\n * GO-2026-4845 CVE-2026-4404 GHSA-hj7x-hmf2-hc2p\n * GO-2026-4846 CVE-2026-33677 GHSA-7c2g-p23p-4jg3\n * GO-2026-4847 CVE-2026-33676 GHSA-8cmm-j6c4-rr8v\n * GO-2026-4848 CVE-2026-33680 GHSA-8hp8-9fhr-pfm9\n * GO-2026-4849 CVE-2026-33668 GHSA-94xm-jj8x-3cr4\n * GO-2026-4850 CVE-2026-33700 GHSA-f95f-77jx-fcjc\n * GO-2026-4851 CVE-2026-33675 GHSA-g66v-54v9-52pr\n * GO-2026-4852 CVE-2026-33679 GHSA-g9xj-752q-xh63\n * GO-2026-4853 CVE-2026-33678 GHSA-jfmm-mjcp-8wq2\n * GO-2026-4854 CVE-2026-24516 GHSA-fh3m-562m-w4f6\n * GO-2026-4855 GHSA-2pv8-4c52-mf8j\n * GO-2026-4856 CVE-2026-33726 GHSA-hxv8-4j4r-cqgv\n * GO-2026-4857 CVE-2026-33729 GHSA-h6c8-cww8-35hf\n * GO-2026-4860 CVE-2026-33757 GHSA-7q7g-x6vg-xpc3\n * GO-2026-4861 CVE-2019-8400 GHSA-7v6r-w4r6-mhch\n * GO-2026-4862 CVE-2026-33758 GHSA-cpj3-3r2f-xj59\n- Update to version 0.0.20260317T205859 2026-03-17T20:58:59Z.\n * GO-2026-4360 CVE-2026-0528 GHSA-w2gr-585j-r428\n * GO-2026-4513\n * GO-2026-4514\n * GO-2026-4518\n * GO-2026-4526\n * GO-2026-4549 CVE-2026-24005 GHSA-9fj4-3849-rv9g\n * GO-2026-4550 CVE-2026-1229 GHSA-q9hv-hpm4-hj6x\n * GO-2026-4551 CVE-2026-27575 GHSA-3ccg-x393-96v8\n * GO-2026-4552 CVE-2026-27116 GHSA-4qgr-4h56-8895\n * GO-2026-4553 CVE-2026-27616 GHSA-7jp5-298q-jg98\n * GO-2026-4554 CVE-2026-27730 GHSA-p2v6-84h2-5x4r\n * GO-2026-4556 CVE-2026-27819 GHSA-42wg-38gx-85rh\n * GO-2026-4557 CVE-2026-26186 GHSA-49xw-vfc4-7p43\n * GO-2026-4558 CVE-2026-27808 GHSA-mpf7-p9x7-96r3\n * GO-2026-4560 CVE-2026-27465 GHSA-2v6m-6xw3-6467\n * GO-2026-4561 CVE-2026-25963 GHSA-5jvp-m9h4-253h\n * GO-2026-4562 CVE-2026-27900 GHSA-5rc7-2jj6-mp64\n * GO-2026-4563 CVE-2026-24004 GHSA-9pm7-6g36-6j78\n * GO-2026-4564 CVE-2026-23999 GHSA-ppwx-5jq7-px2w\n * GO-2026-4565 CVE-2026-22728 GHSA-465p-v42x-3fmj\n * GO-2026-4566 CVE-2026-27899 GHSA-5rmx-256w-8mj9\n * GO-2026-4567 CVE-2026-27965 GHSA-8g8j-r87h-p36x\n * GO-2026-4568 GHSA-gj6x-q8rh-wj6x\n * GO-2026-4569 CVE-2026-27896 GHSA-wvj2-96wp-fq3f\n * GO-2026-4570 CVE-2026-27969 GHSA-r492-hjgh-c9gw\n * GO-2026-4571 CVE-2026-27734 GHSA-phwh-4f42-gwf3\n * GO-2026-4572 CVE-2026-27946 GHSA-282g-fhmx-xf54\n * GO-2026-4573 CVE-2026-27840 GHSA-6mq3-xmgp-pjm5\n * GO-2026-4574 CVE-2026-27945 GHSA-7777-fhq9-592v\n * GO-2026-4575 CVE-2026-28268 GHSA-rfjg-6m84-crj2\n * GO-2026-4576 CVE-2026-28280 GHSA-4rv8-5cmm-2r22\n * GO-2026-4577 CVE-2026-28407 GHSA-945p-3jhm-6rcp\n * GO-2026-4578 CVE-2025-14443 GHSA-gxvv-45f6-3ch8\n * GO-2026-4579 CVE-2026-28279 GHSA-rchw-322g-f7rm\n * GO-2026-4580 CVE-2026-28406 GHSA-6rxq-q92g-4rmf\n * GO-2026-4581 GHSA-xfx2-prg5-jq3g\n * GO-2026-4583 GHSA-54p8-x2m9-c593\n * GO-2026-4584 CVE-2026-28342 GHSA-pc8g-78pf-4xrp\n * GO-2026-4585 CVE-2026-28492 GHSA-mr74-928f-rw69\n * GO-2026-4586 CVE-2026-28789 GHSA-45m3-398w-m2m9\n * GO-2026-4587 CVE-2026-28790 GHSA-4fqm-6fmh-82mq\n * GO-2026-4588 CVE-2026-29049 GHSA-7rp8-r62p-q6wc\n * GO-2026-4589 CVE-2021-25320 GHSA-gqf8-rvrh-g7w6\n * GO-2026-4590 GHSA-hwm2-4ph6-w6m5\n * GO-2026-4591 CVE-2025-62879 GHSA-wj3p-5h3x-c74q\n * GO-2026-4592 CVE-2026-29073 GHSA-jqwg-75qf-vmf9\n * GO-2026-4593 CVE-2026-26998 GHSA-fw45-f5q2-2p4x\n * GO-2026-4594 CVE-2026-26999 GHSA-xw98-5q62-jx94\n * GO-2026-4595 CVE-2026-3351 GHSA-crmg-9m86-636r\n * GO-2026-4596 CVE-2026-29183 GHSA-6865-qjcf-286f\n * GO-2026-4597 CVE-2026-29054 GHSA-92mv-8f8w-wq52\n * GO-2026-4598 CVE-2026-29042 GHSA-95fj-3w7g-4r27\n * GO-2026-4599 CVE-2026-27137\n * GO-2026-4600 CVE-2026-27138\n * GO-2026-4601 CVE-2026-25679\n * GO-2026-4602 CVE-2026-27139\n * GO-2026-4603 CVE-2026-27142\n * GO-2026-4604 CVE-2026-29193 GHSA-25rw-g6ff-fmg8\n * GO-2026-4605 CVE-2026-29192 GHSA-6rx5-m2rc-hmf7\n * GO-2026-4606 CVE-2026-29188 GHSA-79pf-vx4x-7jmm\n * GO-2026-4607 CVE-2026-29191 GHSA-pr34-2v5x-6qjq\n * GO-2026-4608 CVE-2026-29771 GHSA-rhr9-hgcm-x289\n * GO-2026-4609 CVE-2026-29781 GHSA-hx52-cv84-jr5v\n * GO-2026-4610 CVE-2025-15558 GHSA-p436-gjf2-799p\n * GO-2026-4612 CVE-2026-28683 GHSA-3c22-5j5m-4jq7\n * GO-2026-4613 CVE-2026-28682 GHSA-c36c-7pc2-f2ph\n * GO-2026-4614 CVE-2026-27944 GHSA-g9w5-qffc-6762\n * GO-2026-4615 CVE-2026-29060 GHSA-m2hx-wjxc-9fp4\n * GO-2026-4616 CVE-2026-25921 GHSA-cj4v-437j-jq4c\n * GO-2026-4617 CVE-2026-26194 GHSA-v9vm-r24h-6rqm\n * GO-2026-4618 CVE-2026-26195 GHSA-vgvf-m4fw-938j\n * GO-2026-4619 CVE-2026-26196 GHSA-x9p5-w45c-7ffc\n * GO-2026-4620 CVE-2026-26022 GHSA-xrcr-gmf5-2r8j\n * GO-2026-4621 GHSA-fwhj-785h-43hh\n * GO-2026-4622 CVE-2026-30223 GHSA-g962-2j28-3cg9\n * GO-2026-4623 CVE-2026-30224 GHSA-gq2m-77hf-vwgh\n * GO-2026-4624 CVE-2026-29084 GHSA-hcff-qv74-7hr4\n * GO-2026-4625 CVE-2026-30225 GHSA-p443-p7w5-2f7f\n * GO-2026-4626 CVE-2026-29061 GHSA-q658-hfpg-35qc\n * GO-2026-4627 CVE-2026-26276 GHSA-vgjm-2cpf-4g7c\n * GO-2026-4628 CVE-2026-30247 GHSA-595m-wc8g-6qgc\n * GO-2026-4629 CVE-2026-30233 GHSA-jf73-858c-54pg\n * GO-2026-4630 CVE-2026-26017 GHSA-c9v3-4pv7-87pr\n * GO-2026-4631 CVE-2026-30834 GHSA-rw8p-c6hf-q3pg\n * GO-2026-4634 CVE-2026-30832 GHSA-3fvx-xrxq-8jvv\n * GO-2026-4635 CVE-2026-26018 GHSA-h75p-j8xm-m278\n * GO-2026-4636 CVE-2026-29064 GHSA-hcm4-6hpj-vghm\n * GO-2026-4637 CVE-2026-30859 GHSA-2f4c-vrjq-rcgv\n * GO-2026-4638 CVE-2026-30856 GHSA-67q9-58vj-32qx\n * GO-2026-4639 CVE-2026-30851 GHSA-7r4p-vjf4-gxv4\n * GO-2026-4640 CVE-2026-30857 GHSA-8rf9-c59g-f82f\n * GO-2026-4641 CVE-2026-30860 GHSA-8w32-6mrw-q5wv\n * GO-2026-4642 CVE-2026-30855 GHSA-ccj6-79j6-cq5q\n * GO-2026-4643 CVE-2026-30858 GHSA-h6gw-8f77-mmmp\n * GO-2026-4644 CVE-2026-30852 GHSA-m2w3-8f23-hxxf\n * GO-2026-4645 CVE-2026-30861 GHSA-r55h-3rwj-hcmg\n * GO-2026-4646 CVE-2026-30869 GHSA-2h2p-mvfx-868w\n * GO-2026-4647 GHSA-qr2g-p6q7-w82m\n * GO-2026-4651 CVE-2026-29196 GHSA-4hgg-c4rr-6h7f\n * GO-2026-4652 CVE-2026-29773 GHSA-6r7f-3fwq-hq74\n * GO-2026-4653 CVE-2026-28512 GHSA-9h33-g3ww-mqff\n * GO-2026-4654 CVE-2026-29195 GHSA-ch3w-9456-38v3\n * GO-2026-4655 CVE-2026-29194 GHSA-hmqr-wjmj-376c\n * GO-2026-4656 CVE-2026-28513 GHSA-qh6q-598w-w6m2\n * GO-2026-4658 CVE-2026-30926 GHSA-f9cq-v43p-v523\n * GO-2026-4659 CVE-2026-30933 GHSA-525j-95gf-766f\n * GO-2026-4660 CVE-2026-30934 GHSA-r633-fcgp-m532\n * GO-2026-4661 GHSA-xv8g-fj9h-6gmv\n * GO-2026-4667 CVE-2026-31807 GHSA-5hc8-qmg8-pw27\n * GO-2026-4668 CVE-2026-31801 GHSA-85jx-fm8m-x8c6\n * GO-2026-4669 CVE-2026-31809 GHSA-pmc9-f5qr-2pcr\n * GO-2026-4670 CVE-2026-31817 GHSA-364q-w7vh-vhpc\n * GO-2026-4671 CVE-2026-31959 GHSA-7q3q-5px6-4c5p\n * GO-2026-4672 CVE-2026-31960 GHSA-g32c-4pvp-769g\n * GO-2026-4673 GHSA-j443-wcqq-xprh\n * GO-2026-4674 CVE-2026-31866 GHSA-rmrf-g9r3-73pm\n * GO-2026-4675 CVE-2026-31961 GHSA-xj69-m9qq-8m94\n * GO-2026-4677 GHSA-54gx-3cgr-7mfm\n * GO-2026-4678 CVE-2026-28229 GHSA-56px-hm34-xqj5\n * GO-2026-4679 CVE-2026-29777 GHSA-8q2w-wr49-whqj\n * GO-2026-4680 CVE-2026-31863 GHSA-vv3h-7qwr-722v\n * GO-2026-4681 CVE-2026-31892 GHSA-3wf5-g532-rcrr\n * GO-2026-4683 CVE-2026-32102 GHSA-228v-wc5r-j8m7\n * GO-2026-4684 GHSA-4hjq-9h5c-252j\n * GO-2026-4685 CVE-2026-32110 GHSA-56cv-c5p2-j2wg\n * GO-2026-4686 CVE-2026-32136 GHSA-5fg6-wrq4-w5gh\n * GO-2026-4687 GHSA-xx6g-43w2-9g6g\n * GO-2026-4688 CVE-2026-32246 GHSA-3q28-qjrv-qr39\n * GO-2026-4689 CVE-2026-32245 GHSA-xg2q-62g2-cvcm\n * GO-2026-4690 CVE-2026-2808 GHSA-cpfq-66p2-336j\n * GO-2026-4691 CVE-2026-32320 GHSA-j478-p7vq-3347\n * GO-2026-4692 CVE-2026-32319 GHSA-m9pm-w3gv-c68f\n * GO-2026-4693 CVE-2026-31886 GHSA-m4q3-457p-hh2x\n * GO-2026-4694 CVE-2026-32614 GHSA-5xxp-2vrj-x855\n * GO-2026-4695 CVE-2026-30961 GHSA-45vh-rpc8-hxpp\n * GO-2026-4696 CVE-2026-30943 GHSA-j6jp-78w8-34x6\n * GO-2026-4697 CVE-2026-30915 GHSA-m83q-5wr4-4gfp\n * GO-2026-4698 CVE-2026-30955 GHSA-qwc6-vc2v-2ggj\n * GO-2026-4699 CVE-2026-30914 GHSA-x8qh-7475-c5mp\n- Update to version 0.0.20260226T182644 2026-02-26T18:26:44Z.\n * GO-2025-4259 CVE-2025-13767 GHSA-fmqf-pmcm-8cx9\n * GO-2025-4260 CVE-2025-64641 GHSA-vww6-79rv-3j4x\n * GO-2026-4282 CVE-2017-18873 GHSA-x6mw-hf2j-vqpc\n * GO-2026-4305 CVE-2017-18903 GHSA-fcwg-45jh-5qhf\n * GO-2026-4325 CVE-2025-14822 GHSA-9r42-rhw3-2222\n * GO-2026-4326 CVE-2025-14435 GHSA-mx8m-v8qm-xwr8\n * GO-2026-4332 CVE-2026-23644 GHSA-2657-3c98-63jq\n * GO-2026-4348 CVE-2026-23991 GHSA-846p-jg2w-w324\n * GO-2026-4349 CVE-2026-23992 GHSA-fphv-w9fq-2525\n * GO-2026-4377 CVE-2026-24686 GHSA-jqc5-w2xx-5vq4\n * GO-2026-4410 CVE-2026-25140 GHSA-f4w5-5xv9-85f6\n * GO-2026-4502 CVE-2026-25766 GHSA-pgvm-wxw2-hrv9\n * GO-2026-4534 CVE-2026-25899 GHSA-2mr3-m5q5-wgp6\n * GO-2026-4535 CVE-2026-27585 GHSA-4xrr-hq4w-6vf4\n * GO-2026-4536 CVE-2026-27590 GHSA-5r3v-vc8m-m96g\n * GO-2026-4537 CVE-2026-27589 GHSA-879p-475x-rqh2\n * GO-2026-4538 CVE-2026-27587 GHSA-g7pc-pc7g-h8jh\n * GO-2026-4539 CVE-2026-27586 GHSA-hffm-g8v7-wrv7\n * GO-2026-4540 CVE-2026-25891 GHSA-m3c2-496v-cw3v\n * GO-2026-4541 CVE-2026-27588 GHSA-x76f-jf84-rqj8\n * GO-2026-4543 CVE-2026-25882 GHSA-mrq8-rjmw-wpq3\n * GO-2026-4559 CVE-2026-27141\n- Update to version 0.0.20260225T230704 2026-02-25T23:07:04Z.\n * GO-2026-4358 CVE-2026-24137 GHSA-fcv2-xgw5-pqxf\n * GO-2026-4361 GHSA-c32p-wcqj-j677\n * GO-2026-4394 CVE-2026-24051 GHSA-9h8m-3fm2-qjrq\n * GO-2026-4399 CVE-2026-25518 GHSA-gx3x-vq4p-mhhv\n * GO-2026-4507 CVE-2026-26314 GHSA-2gjw-fg97-vg3r\n * GO-2026-4508 CVE-2026-26313 GHSA-689v-6xwf-5jf3\n * GO-2026-4509 CVE-2026-27017 GHSA-7m29-f4hw-g2vx\n * GO-2026-4511 CVE-2026-26315 GHSA-m6j8-rg6r-7mv8\n * GO-2026-4512 CVE-2026-26995 GHSA-rrxv-pmq9-x67r\n * GO-2026-4531 CVE-2026-25591 GHSA-w6x6-9fp7-fqm4\n * GO-2026-4532 CVE-2026-25802 GHSA-299v-8pq9-5gjq\n * GO-2026-4533 CVE-2026-27571 GHSA-qrvq-68c2-7grw\n * GO-2026-4542 CVE-2026-27598 GHSA-6v48-fcq6-ff23\n * GO-2026-4545 CVE-2025-50180 GHSA-3c9r-837r-qqm4\n * GO-2026-4546 CVE-2026-27611 GHSA-8vrh-3pm2-v4v6\n * GO-2026-4547 CVE-2026-27626 GHSA-49gm-hh7w-wfvf\n * GO-2026-4548 GHSA-2phg-qgmm-r638\n- Update to version 0.0.20260223T182315 2026-02-23T18:23:15Z.\n * GO-2026-4392 CVE-2026-24845 GHSA-9m43-p3cx-w8j5\n * GO-2026-4434 CVE-2023-43635 GHSA-4jvr-vj2c-8q37\n * GO-2026-4435 CVE-2023-43636 GHSA-5h7v-g49c-h887\n * GO-2026-4436 CVE-2023-43637 GHSA-g7vp-j25f-h34p\n * GO-2026-4442 GHSA-x9p2-77v6-6vhf\n * GO-2026-4444 CVE-2026-23989 GHSA-9j2f-3rj3-wgpg\n * GO-2026-4445 CVE-2026-25760 GHSA-2286-hxv5-cmp2\n * GO-2026-4446 CVE-2026-24851 GHSA-jq9f-gm9w-rwm9\n * GO-2026-4447 GHSA-vf5j-r2hw-2hrw\n * GO-2026-4448 CVE-2025-64111 GHSA-gg64-xxr9-qhjp\n * GO-2026-4449 CVE-2025-64175 GHSA-p6x6-9mx6-26wj\n * GO-2026-4450 CVE-2026-23632 GHSA-5qhx-gwfj-6jqr\n * GO-2026-4451 CVE-2026-22592 GHSA-cr88-6mqm-4g57\n * GO-2026-4452 CVE-2026-24135 GHSA-jp7c-wj6q-3qf2\n * GO-2026-4453 CVE-2026-23633 GHSA-mrph-w4hh-gx3g\n * GO-2026-4454 GHSA-26gq-grmh-6xm6\n * GO-2026-4455 CVE-2025-70963 GHSA-9f8m-9547-2gqm\n * GO-2026-4456 CVE-2025-13523 GHSA-ffx7-34p2-vm3w\n * GO-2026-4457 CVE-2025-65852 GHSA-rjv5-9px2-fqw6\n * GO-2026-4458 CVE-2026-25793 GHSA-69x3-g4r3-p962\n * GO-2026-4459 CVE-2017-18907 GHSA-42x9-rr3c-gr59\n * GO-2026-4460 CVE-2017-18918 GHSA-5ghq-28r7-qwfj\n * GO-2026-4461 CVE-2026-25804 GHSA-86x4-wp9f-wrr9\n * GO-2026-4462 CVE-2017-18915 GHSA-hxxj-8phw-74vw\n * GO-2026-4463 CVE-2017-18917 GHSA-jxc4-w54c-qv5r\n * GO-2026-4464 CVE-2017-18911 GHSA-m462-mqw4-2c8m\n * GO-2026-4465 GHSA-vhvq-fv9f-wh4q\n * GO-2026-4466 CVE-2026-25791 GHSA-wxrw-gvg8-fqjp\n * GO-2026-4467 CVE-2017-18916 GHSA-x33g-375j-jhf7\n * GO-2026-4471 CVE-2025-66630 GHSA-68rr-p4fp-j59v\n * GO-2026-4473 CVE-2026-25934 GHSA-37cx-329c-33x3\n * GO-2026-4474 CVE-2026-25890 GHSA-4mh3-h929-w968\n * GO-2026-4475 CVE-2026-25889 GHSA-hxw8-4h9j-hq2r\n * GO-2026-4476 CVE-2017-18908 GHSA-34cx-hvm4-vx7j\n * GO-2026-4477 CVE-2017-18906 GHSA-fpcr-4rr5-hpcp\n * GO-2026-4478 CVE-2017-18909 GHSA-r6j5-fqx9-7qv9\n * GO-2026-4479 CVE-2026-26014 GHSA-9f3f-wv7r-qc8r\n * GO-2026-4480 CVE-2026-25935 GHSA-m4g2-2q66-vc9v\n * GO-2026-4481 CVE-2026-26190 GHSA-7ppg-37fh-vcr6\n * GO-2026-4483 CVE-2026-21438 GHSA-2f2x-8mwp-p2gc\n * GO-2026-4484 CVE-2026-25949 GHSA-89p3-4642-cr2w\n * GO-2026-4485 CVE-2026-21434 GHSA-g6x7-jq8p-6q9q\n * GO-2026-4486 CVE-2026-24895 GHSA-g966-83w7-6w38\n * GO-2026-4487 CVE-2017-18912 GHSA-m2ch-x2q7-2284\n * GO-2026-4488 CVE-2026-21435 GHSA-px4r-g4p3-hhqv\n * GO-2026-4489 CVE-2026-24894 GHSA-r3xh-3r3w-47gp\n * GO-2026-4490 CVE-2025-67860 GHSA-3c9m-gq32-g4jx\n * GO-2026-4491 CVE-2026-26055 GHSA-965m-v4cc-6334\n * GO-2026-4493 CVE-2026-26056 GHSA-wj8p-jj64-h7ff\n * GO-2026-4494 CVE-2026-26187 GHSA-699m-4v95-rmpm\n * GO-2026-4495 CVE-2026-20796 GHSA-2xf7-hmf6-p64j\n * GO-2026-4496 CVE-2026-22892 GHSA-9pj7-jh2r-87g8\n * GO-2026-4497 GHSA-hr7j-63v7-vj7g\n * GO-2026-4498 CVE-2026-25232 GHSA-2c6v-8r3v-gh6p\n * GO-2026-4499 CVE-2026-25229 GHSA-cv22-72px-f4gh\n * GO-2026-4500 CVE-2026-25242 GHSA-fc3h-92p8-h36f\n * GO-2026-4501 CVE-2026-25120 GHSA-jj5m-h57j-5gv7\n * GO-2026-4503 CVE-2026-26958\n * GO-2026-4504 CVE-2026-26201 GHSA-f5p9-j34q-pwcc\n * GO-2026-4505 CVE-2026-26957 GHSA-wgm6-9rvv-3438\n * GO-2026-4506 CVE-2026-26205 GHSA-9f29-v6mm-pw6w\n * GO-2026-4515 CVE-2026-27111 GHSA-5vvm-67pj-72g4\n * GO-2026-4516 CVE-2026-27112 GHSA-7g9x-cp9g-92mr\n * GO-2026-4517 CVE-2026-24834 GHSA-wwj6-vghv-5p64\n * GO-2026-4519 CVE-2026-0997 GHSA-2phx-frhf-xr55\n * GO-2026-4520 CVE-2026-0999 GHSA-3c9r-7f29-qp32\n * GO-2026-4521 CVE-2025-14350 GHSA-57cc-2pf4-mhmx\n * GO-2026-4522 CVE-2026-26963 GHSA-5r23-prx4-mqg3\n * GO-2026-4523 CVE-2025-14573 GHSA-cgjg-p2m2-qm4p\n * GO-2026-4524 CVE-2025-13821 GHSA-pp9j-pf5c-659x\n * GO-2026-4525 CVE-2026-0998 GHSA-w65c-fvp5-fvc5\n * GO-2026-4527 GHSA-6qr9-g2xw-cw92\n * GO-2026-4528 GHSA-j9wf-6r2x-hqmx\n * GO-2026-4529 CVE-2026-24122 GHSA-wfqv-66vq-46rm\n * GO-2026-4530 GHSA-gv8r-9rw9-9697\n- Update to version 0.0.20260205T172317 2026-02-05T17:23:17Z.\n * GO-2026-4337 CVE-2025-68121\n * GO-2026-4357 CVE-2026-23954 GHSA-7f67-crqm-jgh7\n * GO-2026-4359 CVE-2026-23953 GHSA-x6jc-phwx-hp32\n * GO-2026-4395 CVE-2026-25499 GHSA-gwch-7m8v-7544\n * GO-2026-4396 CVE-2026-25059 GHSA-qmj2-8r24-xxcq\n * GO-2026-4397 CVE-2026-25060 GHSA-wf93-3ghh-h389\n * GO-2026-4398 GHSA-grh9-37g7-53mj\n * GO-2026-4403 CVE-2025-22873\n * GO-2026-4404 CVE-2025-70849 GHSA-mw8w-q3f7-2v85\n * GO-2026-4405 CVE-2026-25121 GHSA-5g94-c2wx-8pxw\n * GO-2026-4406 CVE-2026-25122 GHSA-6p9p-q6wh-9j89\n * GO-2026-4407 CVE-2026-24843 GHSA-qxx2-7h4c-83f4\n * GO-2026-4408 CVE-2026-24844 GHSA-vqqr-rmpc-hhg2\n * GO-2026-4409 CVE-2026-25145 GHSA-2w4f-9fgg-q2v9\n * GO-2026-4411 CVE-2026-25579 GHSA-hrr4-3wgr-68x3\n * GO-2026-4412 CVE-2026-25143 GHSA-rf4g-89h5-crcr\n * GO-2026-4413 CVE-2026-25578 GHSA-rh3r-8pxm-hg4w\n * GO-2026-4414 CVE-2026-25160 GHSA-8jmm-3xwx-w974\n * GO-2026-4415 CVE-2026-25161 GHSA-x4q4-7phh-42j9\n * GO-2026-4416 CVE-2026-25538 GHSA-8wpc-j9q9-j5m2\n * GO-2026-4417 CVE-2026-24514 GHSA-2pf9-vr92-6h3v\n * GO-2026-4418 CVE-2023-43631 GHSA-3mq9-xhgq-r7gj\n * GO-2026-4419 CVE-2026-24513 GHSA-4g2f-xcph-2335\n * GO-2026-4421 CVE-2026-24735 GHSA-5w5r-8xc6-2xhw\n * GO-2026-4422 CVE-2023-43632 GHSA-6jp5-grgh-jw42\n * GO-2026-4423 CVE-2026-1580 GHSA-9h3p-52vh-959w\n * GO-2026-4425 CVE-2025-62878 GHSA-jr3w-9vfr-c746\n * GO-2026-4426 CVE-2026-24512 GHSA-jx8c-56mg-h6vp\n * GO-2026-4428 CVE-2023-43633 GHSA-4c4v-42hc-72p6\n * GO-2026-4430 CVE-2023-43630 GHSA-phcg-h58r-gmcq\n * GO-2026-4432 CVE-2023-43634 GHSA-wc42-fcjp-v8vq\n * GO-2026-4433 CVE-2025-61732\n * GO-2026-4440 CVE-2025-47911\n * GO-2026-4441 CVE-2025-58190\n- Update to version 0.0.20260204T190754 2026-02-04T19:07:54Z.\n * GO-2026-4324 CVE-2026-23645 GHSA-pcjq-j3mq-jv5j\n * GO-2026-4327 CVE-2026-23742 GHSA-cc8m-98fm-rc9g\n * GO-2026-4329 CVE-2026-21696 GHSA-2497-gp99-2m74\n * GO-2026-4330 CVE-2026-22822 GHSA-77v3-r3jw-j2v2\n * GO-2026-4331 CVE-2025-69199 GHSA-8w7m-w749-rx98\n * GO-2026-4333 CVE-2026-23829 GHSA-54wq-72mp-cq7c\n * GO-2026-4334 CVE-2026-23517 GHSA-4r5r-ccr6-q6f6\n * GO-2026-4335 CVE-2026-23518 GHSA-63m5-974w-448v\n * GO-2026-4336 CVE-2026-22808 GHSA-gfpw-jgvr-cw4j\n * GO-2026-4343 CVE-2026-23847 GHSA-w836-5gpm-7r93\n * GO-2026-4344 CVE-2026-23849 GHSA-43mm-m3h2-3prc\n * GO-2026-4345 CVE-2026-23845 GHSA-6jxm-fv7w-rw5j\n * GO-2026-4346 CVE-2026-23851 GHSA-94c7-g2fj-7682\n * GO-2026-4347 CVE-2026-23850 GHSA-cv54-7wv7-qxcw\n * GO-2026-4350 CVE-2026-23960 GHSA-cv78-6m8q-ph82\n * GO-2026-4351 CVE-2026-23990 GHSA-4xh5-jcj2-ch8q\n * GO-2026-4352 GHSA-r92c-9c7f-3pj8\n * GO-2026-4353 CVE-2026-24058 GHSA-pchf-49fh-w34r\n * GO-2026-4354 CVE-2026-23831 GHSA-273p-m2cw-6833\n * GO-2026-4355 CVE-2026-24117 GHSA-4c4x-jm2x-pf9j\n * GO-2026-4356 CVE-2026-24124 GHSA-j8hf-cp34-g4j7\n * GO-2026-4362 CVE-2026-20800 GHSA-2vgv-hgv4-22mh\n * GO-2026-4363 CVE-2026-20897 GHSA-393c-qgvj-3xph\n * GO-2026-4364 CVE-2026-20912 GHSA-4xx9-vc8v-87hv\n * GO-2026-4365 CVE-2026-0798 GHSA-8fwc-qjw5-rvgp\n * GO-2026-4366 CVE-2026-20888 GHSA-9cgq-wp42-4rpq\n * GO-2026-4367 CVE-2026-20736 GHSA-hgr3-x44x-33hx\n * GO-2026-4368 CVE-2026-20883 GHSA-j8xr-c56q-m8jj\n * GO-2026-4369 CVE-2026-20904 GHSA-qqgv-v353-cv8p\n * GO-2026-4370 CVE-2026-20750 GHSA-rw22-5hhq-pfpf\n * GO-2026-4378 CVE-2026-24470 GHSA-mxxc-p822-2hx9\n * GO-2026-4379 CVE-2026-24738 GHSA-j49h-6577-5xwq\n * GO-2026-4380 CVE-2026-24740 GHSA-m855-r557-5rc5\n * GO-2026-4381 CVE-2026-22039 GHSA-8p9x-46gm-qfx2\n * GO-2026-4382 CVE-2026-23881 GHSA-r2rj-wwm5-x6mq\n * GO-2026-4384 CVE-2025-14525 GHSA-25mh-hp8x-cgrv\n * GO-2026-4385 CVE-2026-24748 GHSA-w5wv-wvrp-v5m5\n * GO-2026-4386 GHSA-f72r-2h5j-7639\n * GO-2026-4387 GHSA-c4jr-5q7w-f6r9\n * GO-2026-4388 CVE-2026-1237 GHSA-j477-6vpg-6c8x\n * GO-2026-4390 CVE-2025-69820 GHSA-73jg-4qh6-3f4g\n * GO-2026-4391 CVE-2026-24846 GHSA-923j-vrcg-hxwh\n * GO-2026-4393 CVE-2025-67601 GHSA-mc24-7m59-4q5p\n- Update to version 0.0.20260128T190828 2026-01-28T19:08:28Z.\n * GO-2026-4338 CVE-2025-68119 CVE-2025-68119\n * GO-2026-4339 CVE-2025-61731 CVE-2025-61731\n * GO-2026-4340 CVE-2025-61730 CVE-2025-61730\n * GO-2026-4341 CVE-2025-61726 CVE-2025-61726\n * GO-2026-4342 CVE-2025-61728 CVE-2025-61728\n- Update to version 0.0.20260123T022811 2026-01-23T02:28:11Z.\n * GO-2025-3764 CVE-2024-44905 GHSA-6xp3-p59p-q4fj\n * GO-2025-4188 CVE-2025-65637 GHSA-4f99-4q7p-p3gh\n * GO-2025-4252 CVE-2025-68383 GHSA-2mj3-6grc-px38\n * GO-2025-4253 CVE-2025-68388 GHSA-fj69-23m4-ccvv\n * GO-2026-4310 CVE-2026-22689 GHSA-524m-q5m7-79mm\n * GO-2026-4311 CVE-2026-22772 GHSA-59jp-pj84-45mr\n * GO-2026-4312 CVE-2026-22771 GHSA-xrwg-mqj6-6m22\n * GO-2026-4313 CVE-2026-22786 GHSA-3558-j79f-vvm6\n * GO-2026-4314 CVE-2026-22868 GHSA-mq3p-rrmp-79jg\n * GO-2026-4315 CVE-2026-22862 GHSA-mr7q-c9w9-wh4h\n * GO-2026-4316 GHSA-mqqf-5wvp-8fh8\n * GO-2026-4317 CVE-2017-18892 GHSA-wj5w-qghh-gvqp\n * GO-2026-4318 CVE-2025-66292 GHSA-vh2x-fw87-4fxq\n * GO-2026-4319 CVE-2026-23511 GHSA-pvm5-9frx-264r\n * GO-2026-4320 CVE-2026-23520 GHSA-gjqq-6r35-w3r8\n * GO-2026-4321 CVE-2025-68671 GHSA-f2ph-gc9m-q55f\n * GO-2026-4322 CVE-2026-22045 GHSA-cwjm-3f7h-9hwq\n- Update to version 0.0.20260114T191543 2026-01-14T19:15:43Z.\n * GO-2025-4248 CVE-2025-62690 GHSA-q66g-q98c-q454\n * GO-2025-4251 CVE-2025-63389 GHSA-f6mr-38g8-39rg\n * GO-2026-4273 CVE-2025-14987 GHSA-hmhp-gh8m-c8xp\n- Update to version 0.0.20260113T164240 2026-01-13T16:42:40Z.\n * GO-2025-4269 CVE-2025-15107 GHSA-43h9-hc38-qph5\n * GO-2025-4272 CVE-2025-14986 GHSA-p2gr-hm8g-q772\n * GO-2026-4274 CVE-2025-69413 GHSA-pc73-rj2c-wvf9\n * GO-2026-4275 CVE-2025-14273 GHSA-qvmc-92vg-6r35\n * GO-2026-4277 CVE-2026-21483 GHSA-jmr4-p576-v565\n * GO-2026-4278 CVE-2024-6717 GHSA-5mqx-rpxv-mvxj\n * GO-2026-4279 GHSA-4c5f-9mj4-m247\n * GO-2026-4280 GHSA-hjr9-wj7v-7hv8\n * GO-2026-4281 CVE-2025-62877 GHSA-6g8q-hp2j-gvwv\n * GO-2026-4283 CVE-2025-68954 GHSA-8c39-xppg-479c\n * GO-2026-4284 CVE-2026-21859 GHSA-8v65-47jx-7mfr\n * GO-2026-4285 GHSA-gg4x-fgg2-h9w9\n * GO-2026-4286 CVE-2026-0650 GHSA-rwp9-5g7q-73q3\n * GO-2026-4287 CVE-2026-21885 GHSA-xwh2-742g-w3wp\n * GO-2026-4289 CVE-2025-68151 GHSA-527x-5wrf-22m2\n * GO-2026-4290 CVE-2026-22253 GHSA-6jm8-x3g6-r33j\n * GO-2026-4292 CVE-2026-22688 GHSA-78h3-63c4-5fqc\n * GO-2026-4293 CVE-2026-22687 GHSA-pcwc-3fw3-8cqv\n * GO-2026-4295 CVE-2017-18895 GHSA-h742-xx59-r9pq\n * GO-2026-4296 CVE-2017-18893 GHSA-887v-xh2x-47cm\n * GO-2026-4297 CVE-2017-18894 GHSA-gg42-mwr6-p82c\n * GO-2026-4298 CVE-2017-18891 GHSA-vrh2-rprg-rgc6\n * GO-2026-4299 CVE-2017-18896 GHSA-63wg-qmrv-7q66\n * GO-2026-4300 CVE-2017-18898 GHSA-9589-mq83-f749\n * GO-2026-4301 CVE-2017-18897 GHSA-f7c3-7vp3-44p6\n * GO-2026-4302 CVE-2017-18904 GHSA-8pff-p3gx-w4jf\n * GO-2026-4303 CVE-2017-18900 GHSA-8q4v-35v6-g8wr\n * GO-2026-4304 CVE-2017-18901 GHSA-c253-8hr4-r8v9\n * GO-2026-4306 CVE-2017-18905 GHSA-g24c-fx4v-xg9w\n * GO-2026-4308 CVE-2025-60538 GHSA-mw8h-g64c-rxv4\n * GO-2026-4309 CVE-2026-22703 GHSA-whqx-f9j3-ch6m\n- Update to version 0.0.20251230T014957 2025-12-30T01:49:57Z.\n * GO-2025-4249 CVE-2025-68120 CVE-2025-68120\n * GO-2025-4254 CVE-2025-62190 GHSA-gmx5-frv9-9m9f\n * GO-2025-4255 CVE-2025-12689 GHSA-j5vq-62gr-8v3r\n * GO-2025-4256 CVE-2025-13324 GHSA-x3r8-2hmh-89f5\n * GO-2025-4257 CVE-2025-68476 GHSA-c4p6-qg4m-9jmr\n * GO-2025-4258 CVE-2025-68938 GHSA-cm54-pfmc-xrwx\n * GO-2025-4261 CVE-2025-68939 GHSA-263q-5cv3-xq9g\n * GO-2025-4262 CVE-2025-68945 GHSA-7xq4-mwcp-q8fx\n * GO-2025-4263 CVE-2025-68942 GHSA-898p-hh3p-hf9r\n * GO-2025-4264 CVE-2025-68944 GHSA-f85h-c7m6-cfpm\n * GO-2025-4265 CVE-2025-68946 GHSA-hq57-c72x-4774\n * GO-2025-4266 CVE-2025-68943 GHSA-jhx5-4vr4-f327\n * GO-2025-4267 CVE-2025-68940 GHSA-rrcw-5rjv-vj26\n * GO-2025-4268 CVE-2025-68941 GHSA-xfq3-qj7j-4565\n- Update to version 0.0.20251222T181535 2025-12-22T18:15:35Z.\n * GO-2025-4241 CVE-2025-11393 GHSA-cc8c-28gj-px38\n * GO-2025-4242 CVE-2025-13888 GHSA-pcqx-8qww-7f4v\n * GO-2025-4243 GHSA-wh6m-h6f4-rjf4\n * GO-2025-4244 CVE-2025-68274 GHSA-c623-f998-8hhv\n * GO-2025-4245 CVE-2025-68156 GHSA-cfpf-hrx2-8rv6\n * GO-2025-4247 CVE-2025-13352 GHSA-jf5h-xfw4-p8gp\n * GO-2025-4250 CVE-2025-14764 GHSA-3g75-q268-r9r6\n- Update to version 0.0.20251216T193914 2025-12-16T19:39:14Z.\n * GO-2025-4239 CVE-2025-68113 GHSA-6gvq-jcmp-8959\n * GO-2025-4240 CVE-2025-13281 GHSA-r6j8-c6r2-37rr\n- Update to version 0.0.20251216T162327 2025-12-16T16:23:27Z.\n * GO-2024-3036 CVE-2024-41265 GHSA-vw7g-3cc7-7rmh\n * GO-2024-3057 CVE-2024-41260 GHSA-9v35-4xcr-w9ph\n * GO-2025-3437 GHSA-274v-mgcv-cm8j\n * GO-2025-3465 CVE-2025-0426 GHSA-jgfp-53c3-624w\n * GO-2025-3829 CVE-2025-54410 GHSA-4vq8-7jfc-9cvp\n * GO-2025-4116 CVE-2025-47913\n * GO-2025-4122 CVE-2025-11777 GHSA-mqcj-8c2g-h97q\n * GO-2025-4178 CVE-2025-13870 GHSA-58w6-w55x-6wq8\n- Update to version 0.0.20251215T203741 2025-12-15T20:37:41Z.\n * GO-2025-4136 CVE-2025-64708 GHSA-ch7q-53v8-73pc\n * GO-2025-4137 CVE-2025-64521 GHSA-xr73-jq5p-ch8r\n * GO-2025-4148 CVE-2017-18874 GHSA-8qg8-c7mw-6fj7\n * GO-2025-4154 CVE-2025-62155 GHSA-9f46-w24h-69w4\n * GO-2025-4161 CVE-2025-65942 GHSA-66jq-2c23-2xh5\n * GO-2025-4162 CVE-2025-60633 GHSA-3j9f-7w24-pcqg\n * GO-2025-4167 CVE-2025-64715 GHSA-38pp-6gcp-rqvm\n * GO-2025-4168 CVE-2025-12419 GHSA-3x39-62h4-f8j6\n * GO-2025-4169 CVE-2025-12559 GHSA-4g87-9x45-cx2h\n * GO-2025-4170 CVE-2025-12421 GHSA-mp6x-97xj-9x62\n * GO-2025-4173 CVE-2025-10543 GHSA-32fw-gq77-f2f2\n * GO-2025-4191 CVE-2017-18878 GHSA-h564-6gc2-fcc6\n * GO-2025-4199 CVE-2017-18887 GHSA-35c4-5qfp-wxj6\n * GO-2025-4200 CVE-2017-18885 GHSA-g78f-6xq7-rrhq\n * GO-2025-4201 CVE-2017-18889 GHSA-jp57-4x34-5v94\n * GO-2025-4202 CVE-2017-18890 GHSA-m497-hq5x-6jcv\n * GO-2025-4203 CVE-2017-18888 GHSA-v2vm-hq26-5jv6\n * GO-2025-4204 CVE-2017-18886 GHSA-wvjg-33p9-938h\n * GO-2025-4205 CVE-2025-66491 GHSA-7vww-mvcr-x6vj\n * GO-2025-4206 CVE-2025-66490 GHSA-gm3x-23wp-hc2c\n * GO-2025-4207 CVE-2025-66508 GHSA-7cqv-qcq2-r765\n * GO-2025-4208 CVE-2025-66565 GHSA-m98w-cqp3-qcqr\n * GO-2025-4209 CVE-2025-66507 GHSA-qmg5-v42x-qqhq\n * GO-2025-4210 CVE-2025-67494 GHSA-7wfc-4796-gmg5\n * GO-2025-4211 GHSA-m6wq-66p2-c8pc\n * GO-2025-4212 GHSA-pfrf-9r5f-73f5\n * GO-2025-4213 CVE-2025-67495 GHSA-v959-qxv6-6f8p\n * GO-2025-4214 GHSA-4rmq-mc2c-r495\n * GO-2025-4215 CVE-2025-65796 GHSA-8jcj-g9f4-qx42\n * GO-2025-4216 CVE-2025-65798 GHSA-8p44-g572-557h\n * GO-2025-4217 CVE-2025-65795 GHSA-mg56-wc4q-rw4w\n * GO-2025-4218 CVE-2025-65799 GHSA-qgjp-5g5x-vhq2\n * GO-2025-4219 GHSA-4r66-7rcv-x46x\n * GO-2025-4220 CVE-2025-65797 GHSA-99m2-qwx6-2w6f\n * GO-2025-4221 CVE-2025-67488 GHSA-gqfv-g4v7-m366\n * GO-2025-4222 CVE-2025-67499 GHSA-jv3w-x3r3-g6rm\n * GO-2025-4223 CVE-2025-66626 GHSA-xrqc-7xgx-c9vh\n * GO-2025-4224 GHSA-mjcp-gpgx-ggcg\n * GO-2025-4225 CVE-2025-8110 GHSA-mq8m-42gh-wq7r\n * GO-2025-4226 CVE-2025-67713 GHSA-wqv2-4wpg-8hc9\n * GO-2025-4227 CVE-2025-67717 GHSA-f4cf-9rvr-2rcx\n * GO-2025-4228 CVE-2025-65754 GHSA-8jqm-8qm3-qgqm\n * GO-2025-4229 CVE-2025-34410 GHSA-rpr2-4hqj-hc4q\n * GO-2025-4230 CVE-2025-34430 GHSA-5xpq-2vmc-5cqp\n * GO-2025-4231 CVE-2025-34429 GHSA-wrvc-x3wf-j5f5\n * GO-2025-4232 CVE-2025-67508 GHSA-fw33-qpx7-rhx2\n * GO-2025-4233 CVE-2025-64702 GHSA-g754-hx8w-x2g6\n * GO-2025-4235 CVE-2025-66001 GHSA-4jj9-cgqc-x9h5\n * GO-2025-4236 GHSA-4jmp-x7mh-rgmr\n * GO-2025-4237 CVE-2025-67818 GHSA-7v39-2hx7-7c43\n * GO-2025-4238 CVE-2025-67819 GHSA-hmmh-292h-3364\n- Update to version 0.0.20251209T172047 2025-12-09T17:20:47Z.\n * GO-2025-4006 CVE-2025-61725 CVE-2025-61725\n * GO-2025-4176 CVE-2025-65105 GHSA-j3rw-fx6g-q46j\n * GO-2025-4177 CVE-2025-64750 GHSA-wwrx-w7c9-rf87\n * GO-2025-4179 CVE-2025-64443 GHSA-46gc-mwh4-cc5r\n * GO-2025-4180 CVE-2025-44005 GHSA-h8cp-697h-8c8p\n * GO-2025-4181 CVE-2025-66406 GHSA-j7c9-79x7-8hpr\n * GO-2025-4182 CVE-2025-66411 GHSA-jf75-p25m-pw74\n * GO-2025-4183 CVE-2017-18870 GHSA-9j9j-mm2r-9rfm\n * GO-2025-4184 CVE-2017-18871 GHSA-jc6w-8r7f-vmp5\n * GO-2025-4185 CVE-2017-18902 GHSA-jwfv-5hwq-f97r\n * GO-2025-4186 CVE-2017-18875 GHSA-9rr5-q43r-ccv4\n * GO-2025-4187 CVE-2017-18876 GHSA-hjqh-j6rj-gh8q\n * GO-2025-4189 CVE-2017-18879 GHSA-498j-wxww-j897\n * GO-2025-4190 CVE-2017-18877 GHSA-9x8x-w6g5-hx4w\n * GO-2025-4192 CVE-2025-66564 GHSA-4qg8-fj49-pxjh\n * GO-2025-4193 CVE-2025-66506 GHSA-f83f-xpx7-ffpw\n * GO-2025-4197 CVE-2017-18884 GHSA-876j-jfqf-m7j7\n * GO-2025-4198 CVE-2017-18883 GHSA-w8cc-3h7q-jhc3\n- Update to version 0.0.20251203T174324 2025-12-03T17:43:24Z.\n * GO-2025-4155 CVE-2025-61729 CVE-2025-61729\n * GO-2025-4163 CVE-2025-60638 GHSA-f2hj-vpp9-6vm2\n * GO-2025-4164 CVE-2025-60632 GHSA-vgq7-9r5r-j9v3\n * GO-2025-4171 CVE-2025-66410 GHSA-jrhg-82w2-vvj7\n * GO-2025-4172 CVE-2025-12756 GHSA-p6gj-jc38-x2m7\n * GO-2025-4174 CVE-2025-13353 GHSA-69jw-4jj8-fcxm\n * GO-2025-4175 CVE-2025-61727\n- Update to version 0.0.20251125T181218 2025-11-25T18:12:18Z.\n * GO-2025-4133 CVE-2025-55074 GHSA-9hh7-6558-qfp2\n * GO-2025-4138 CVE-2025-65025 GHSA-h3mw-4f23-gwpw\n * GO-2025-4139 CVE-2025-65026 GHSA-hcpf-qv9m-vfgp\n * GO-2025-4146 CVE-2018-21258 GHSA-5mh6-p63g-3mv5\n * GO-2025-4147 GHSA-6xvf-4vh9-mw47\n * GO-2025-4149 CVE-2025-13425 GHSA-f786-75f3-74xj\n * GO-2025-4150 CVE-2025-64751 GHSA-2c64-vmv2-hgfc\n * GO-2025-4151 CVE-2025-65111 GHSA-9m7r-g8hg-x3vr\n * GO-2025-4152 CVE-2025-13357 GHSA-gmm6-j2g5-r52m\n * GO-2025-4153 CVE-2025-41115 GHSA-w62r-7c53-fmc5\n * GO-2025-4156 CVE-2025-64761 GHSA-7ff4-jw48-3436\n * GO-2025-4157 GHSA-2fcv-qww3-9v6h\n * GO-2025-4158 GHSA-rj4j-2jph-gg43\n * GO-2025-4159 GHSA-xq4h-wqm2-668w\n * GO-2025-4160 CVE-2025-65965 GHSA-6gxw-85q2-q646\n- Update to version 0.0.20251120T220319 2025-11-20T22:03:19Z.\n * GO-2023-2331 CVE-2023-47108 GHSA-8pgv-569h-w5rw\n * GO-2024-2587 CVE-2022-45786 GHSA-6p5q-h963-pwwf\n * GO-2025-3770 GHSA-vrw8-fxc6-2r93\n * GO-2025-4007 CVE-2025-58187 CVE-2025-58187\n * GO-2025-4134 CVE-2025-58181 GHSA-j5w8-q4qc-rx2x\n * GO-2025-4135 CVE-2025-47914 GHSA-f6x5-jh6r-wrfv\n- Update to version 0.0.20251118T154415 2025-11-18T15:44:15Z.\n * GO-2025-4025 GHSA-hrhf-2vcr-ghch\n * GO-2025-4090 CVE-2025-64179 GHSA-h238-5mwf-8xw8\n * GO-2025-4091 CVE-2025-64178 GHSA-xc93-q32j-cpcg\n * GO-2025-4093 CVE-2025-64171 GHSA-gf93-xccm-5g6j\n * GO-2025-4094 CVE-2025-64323 GHSA-4766-x535-jw3r\n * GO-2025-4095 GHSA-5pmx-7r6r-wfqq\n * GO-2025-4096 CVE-2025-31133 GHSA-9493-h29p-rfm2\n * GO-2025-4097 CVE-2025-52565 GHSA-qw9x-cqr3-wc7r\n * GO-2025-4098 CVE-2025-52881 GHSA-cgrx-mc8f-2prm\n * GO-2025-4099 CVE-2025-64431 GHSA-cpf4-pmr4-w6cx\n * GO-2025-4100 CVE-2024-25621 GHSA-pwhc-rpq9-4c8w\n * GO-2025-4101 GHSA-w2jf-268q-mrvh\n * GO-2025-4102 CVE-2025-64437 GHSA-2r4r-5x78-mvqf\n * GO-2025-4103 CVE-2025-64432 GHSA-38jw-g2qx-4286\n * GO-2025-4104 CVE-2025-64436 GHSA-7xgm-5prm-v5gc\n * GO-2025-4105 CVE-2025-64435 GHSA-9m94-w2vq-hcf9\n * GO-2025-4106 CVE-2025-64494 GHSA-fv2r-r8mp-pg48\n * GO-2025-4107 CVE-2025-64434 GHSA-ggp9-c99x-54gp\n * GO-2025-4108 CVE-2025-64329 GHSA-m6hq-p25p-ffr2\n * GO-2025-4109 CVE-2025-64433 GHSA-qw6q-3pgr-5cwq\n * GO-2025-4110 CVE-2025-64324 GHSA-46xp-26xh-hpqh\n * GO-2025-4111 CVE-2025-64522 GHSA-vwq2-jx9q-9h9f\n * GO-2025-4112 CVE-2025-64186 GHSA-88h9-77c7-p6w4\n * GO-2025-4113 CVE-2025-64484 GHSA-vjrc-mh2v-45x6\n * GO-2025-4114 CVE-2025-64513 GHSA-mhjq-8c7m-3f7p\n * GO-2025-4115 CVE-2025-64507 GHSA-56mx-8g9f-5crf\n * GO-2025-4117 CVE-2025-64523 GHSA-6cqf-cfhv-659g\n * GO-2025-4118 GHSA-6jqf-mv7m-3q7p\n * GO-2025-4119 GHSA-7wq2-32h4-9hc9\n * GO-2025-4120 CVE-2025-64529 GHSA-pm3x-jrhh-qcr7\n * GO-2025-4121 GHSA-3g2j-vm47-x4mj\n * GO-2025-4123 CVE-2025-63811 GHSA-9mj6-hxhv-w67j\n * GO-2025-4124 CVE-2025-64717 GHSA-j4g7-v4m4-77px\n * GO-2025-4125 CVE-2025-2843 GHSA-mj6p-p843-x5wc\n * GO-2025-4126 CVE-2025-11776 GHSA-j6gg-r5jc-47cm\n * GO-2025-4127 CVE-2024-21635 GHSA-mr34-8733-grr2\n * GO-2025-4128 CVE-2025-55070 GHSA-xpg8-8xpv-948p\n * GO-2025-4129 CVE-2025-55073 GHSA-ff85-qw3h-g9vp\n * GO-2025-4130 CVE-2025-11794 GHSA-mqp8-pgg5-7x7m\n * GO-2025-4131 CVE-2025-41436 GHSA-x3hx-ch7p-8xgg\n- Update to version 0.0.20251113T211203 2025-11-13T21:12:03Z.\n- Update to version 0.0.20251105T184115 2025-11-05T18:41:15Z.\n * GO-2025-3987 CVE-2025-10954 GHSA-fmjh-f678-cv3x\n * GO-2025-3988 CVE-2025-59937 GHSA-wpwj-69cm-q9c5\n * GO-2025-3999 CVE-2025-54289 GHSA-3g72-chj4-2228\n * GO-2025-4000 CVE-2025-54293 GHSA-472f-vmf2-pr3h\n * GO-2025-4001 CVE-2025-54288 GHSA-7232-97c6-j525\n * GO-2025-4002 CVE-2025-54290 GHSA-p3x5-mvmp-5f35\n * GO-2025-4003 CVE-2025-54286 GHSA-p8hw-rfjg-689h\n * GO-2025-4004 CVE-2025-54287 GHSA-w2hg-2v4p-vmh6\n * GO-2025-4005 CVE-2025-54291 GHSA-xch9-h8qw-85c7\n * GO-2025-4017 CVE-2025-59530 GHSA-47m2-4cr7-mhcw\n * GO-2025-4020 CVE-2025-11579 GHSA-rwvp-r38j-9rgg\n * GO-2025-4021 CVE-2025-59836 GHSA-4p3p-cr38-v5xp\n * GO-2025-4022 CVE-2025-61688 GHSA-77r9-w39m-9xh5\n * GO-2025-4023 CVE-2025-62156 GHSA-p84v-gxvw-73pf\n * GO-2025-4024 CVE-2025-62157 GHSA-c2hv-4pfj-mm2r\n * GO-2025-4026 CVE-2025-61524 GHSA-5m9m-j5p7-m7f9\n * GO-2025-4027 GHSA-fr8m-434r-g3xp\n * GO-2025-4028 CVE-2025-62375 GHSA-72c7-4g63-hpw5\n * GO-2025-4029 CVE-2025-41410 GHSA-3q4q-wqm6-hvf3\n * GO-2025-4030 CVE-2025-10545 GHSA-424h-xj87-m937\n * GO-2025-4031 CVE-2025-41443 GHSA-7cr3-38jm-6p45\n * GO-2025-4032 CVE-2025-58073 GHSA-6q7m-p8cc-998r\n * GO-2025-4033 CVE-2025-61581 GHSA-9m49-p2j3-c6xm\n * GO-2025-4034 CVE-2025-62506 GHSA-jjjj-jwhf-8rgr\n * GO-2025-4035 CVE-2025-58075 GHSA-r6qj-894f-5hr2\n * GO-2025-4036 CVE-2025-54499 GHSA-xr3w-rmvj-f6m7\n * GO-2025-4038 CVE-2025-26625 GHSA-6pvw-g552-53c5\n * GO-2025-4039 CVE-2025-59043 GHSA-g46h-2rq9-gw5m\n * GO-2025-4040 CVE-2025-10678 GHSA-g3j4-58mp-3x25\n * GO-2025-4041 GHSA-8pfh-j44r-f654\n * GO-2025-4042 CVE-2025-54469 GHSA-c8g6-qrwh-m3vp\n * GO-2025-4043 CVE-2025-54471 GHSA-h773-7gf7-9m2x\n * GO-2025-4044 CVE-2025-54470 GHSA-qqj3-g7mx-5p4w\n * GO-2025-4045 CVE-2016-11063 GHSA-cffj-7w5c-jqjh\n * GO-2025-4046 CVE-2016-11067 GHSA-ffcc-qr2v-3qmv\n * GO-2025-4047 CVE-2016-11066 GHSA-r93j-3mmp-px57\n * GO-2025-4048 CVE-2016-11068 GHSA-7vmw-6c7h-rrrv\n * GO-2025-4049 CVE-2025-62513 GHSA-ghfh-fmx4-26h8\n * GO-2025-4050 CVE-2016-11070 GHSA-h8qw-xqm9-q66j\n * GO-2025-4051 CVE-2016-11069 GHSA-qrf6-h5fc-7m96\n * GO-2025-4052 CVE-2025-62705 GHSA-rc54-2g2c-g36g\n * GO-2025-4053 CVE-2016-11079 GHSA-2j9c-76pp-xc5q\n * GO-2025-4054 CVE-2016-11076 GHSA-379p-37xc-q963\n * GO-2025-4055 CVE-2016-11072 GHSA-43m6-wvc8-2m7j\n * GO-2025-4056 CVE-2016-11073 GHSA-9jrx-fgrm-96qh\n * GO-2025-4057 CVE-2016-11078 GHSA-9w4v-9c99-hv7r\n * GO-2025-4058 CVE-2016-11071 GHSA-h3qg-w9j5-wh3m\n * GO-2025-4059 CVE-2016-11074 GHSA-j26g-95ph-2mwv\n * GO-2025-4060 CVE-2016-11077 GHSA-mj8v-773w-5qhj\n * GO-2025-4061 CVE-2016-11075 GHSA-q3g9-hgrx-hwhx\n * GO-2025-4062 CVE-2016-11081 GHSA-5q37-9874-qxcw\n * GO-2025-4063 CVE-2016-11080 GHSA-g3f3-p9rc-775p\n * GO-2025-4064 CVE-2016-11082 GHSA-m78r-2x6w-qqjp\n * GO-2025-4065 CVE-2016-11083 GHSA-rm24-25xm-9454\n * GO-2025-4066 CVE-2016-11084 GHSA-vw57-55f8-c73q\n * GO-2025-4067 CVE-2025-59048 GHSA-jp7h-4f3c-9rc7\n * GO-2025-4068 CVE-2025-62820 GHSA-x6fh-7qmf-69xh\n * GO-2025-4070 CVE-2025-11621 GHSA-9g4h-h484-3578\n * GO-2025-4071 CVE-2025-12044 GHSA-vp5w-xcfc-73wf\n * GO-2025-4072 CVE-2025-62714 GHSA-5qjg-9mjh-4r92\n * GO-2025-4073 CVE-2023-32199 GHSA-j4vr-pcmw-hx59\n * GO-2025-4074 CVE-2024-58269 GHSA-mw39-9qc2-f7mg\n * GO-2025-4075 CVE-2017-18872 GHSA-hgrp-fgm8-56g8\n * GO-2025-4076 CVE-2025-58356 GHSA-hq76-6gh2-5g4q\n * GO-2025-4077 CVE-2025-62725 GHSA-gv8h-7v7w-r22q\n * GO-2025-4078 GHSA-f5p4-p5q5-jv3h\n * GO-2025-4079 CVE-2025-27093 GHSA-q8j9-34qf-7vq7\n * GO-2025-4081 CVE-2025-11374 GHSA-7g3r-8c6v-hfmr\n * GO-2025-4082 CVE-2025-11375 GHSA-qh7p-pfq3-677h\n * GO-2025-4083 CVE-2025-64103 GHSA-cfjq-28r2-4jv5\n * GO-2025-4084 CVE-2025-64101 GHSA-mwmh-7px9-4c23\n * GO-2025-4085 CVE-2025-64102 GHSA-xrw9-r35x-x878\n * GO-2025-4086 GHSA-cf57-c578-7jvv\n * GO-2025-4087 GHSA-fj2x-735w-74vq\n * GO-2025-4088 CVE-2025-61141 GHSA-f9f4-5859-29mf\n- Update to version 0.0.20251029T215107 2025-10-29T21:51:07Z.\n * GO-2025-4008 CVE-2025-58189 CVE-2025-58189\n * GO-2025-4009 CVE-2025-61723 CVE-2025-61723\n * GO-2025-4010 CVE-2025-47912 CVE-2025-47912\n * GO-2025-4011 CVE-2025-58185 CVE-2025-58185\n * GO-2025-4012 CVE-2025-58186 CVE-2025-58186\n * GO-2025-4013 CVE-2025-58188 CVE-2025-58188\n * GO-2025-4014 CVE-2025-58183 CVE-2025-58183\n * GO-2025-4015 CVE-2025-61724 CVE-2025-61724\n- Update to version 0.0.20251023T162509 2025-10-23T16:25:09Z.\n * GO-2025-3979 CVE-2025-59824 GHSA-hqrf-67pm-wgfq\n * GO-2025-3981 CVE-2025-59823 GHSA-227x-7mh8-3cf6\n * GO-2025-3982 CVE-2025-54468 GHSA-mjcp-rj3c-36fr\n * GO-2025-3983 CVE-2024-58260 GHSA-q82v-h4rq-5c86\n * GO-2025-3984 CVE-2024-58267 GHSA-v3vj-5868-2ch2\n * GO-2025-3985 GHSA-q6hv-wcjr-wp8h\n * GO-2025-3986 CVE-2025-59163 GHSA-6q9c-m9fr-865m\n * GO-2025-3989 CVE-2025-59941 GHSA-7pq9-rf9p-wcrf\n * GO-2025-3990 CVE-2025-59942 GHSA-g99p-47x7-mq88\n * GO-2025-3991 CVE-2025-59956 GHSA-w64r-2g3w-w8w4\n * GO-2025-3992 CVE-2025-23266 GHSA-vmg3-7v43-9g23\n * GO-2025-3994 CVE-2025-55191 GHSA-g88p-r42r-ppp9\n * GO-2025-3995 CVE-2025-59538 GHSA-gpx4-37g2-c8pv\n * GO-2025-3997 CVE-2025-61595 GHSA-qwvm-wqq8-8j69\n * GO-2025-3998 CVE-2025-23267 GHSA-67jc-hmvg-q4c7\n * GO-2025-4018 CVE-2025-61926 GHSA-33f4-mjch-7fpr\n * GO-2025-4019 GHSA-xc79-566c-j4qx\n- Update to version 0.0.20250924T192141 2025-09-24T19:21:41Z.\n * GO-2025-3962 CVE-2025-59341 GHSA-49pv-gwxp-532r\n * GO-2025-3963 CVE-2025-59348 GHSA-2qgr-gfvj-qpcr\n * GO-2025-3964 CVE-2025-59349 GHSA-8425-8r2f-mrv6\n * GO-2025-3965 CVE-2025-59345 GHSA-89vc-vf32-ch59\n * GO-2025-3966 CVE-2025-59347 GHSA-98x5-jw98-6c97\n * GO-2025-3967 CVE-2025-59342 GHSA-g2h5-cvvr-7gmw\n * GO-2025-3968 CVE-2025-59346 GHSA-g2rq-jv54-wcpr\n * GO-2025-3969 CVE-2025-59353 GHSA-255v-qv84-29p5\n * GO-2025-3970 CVE-2025-59351 GHSA-4mhv-8rh3-4ghw\n * GO-2025-3971 CVE-2025-59352 GHSA-79hx-3fp8-hj66\n * GO-2025-3972 CVE-2025-59350 GHSA-c2fc-9q9c-5486\n * GO-2025-3973 CVE-2025-59354 GHSA-hx2h-vjw2-8r54\n * GO-2025-3974 CVE-2025-59410 GHSA-mcvp-rpgg-9273\n * GO-2025-3976 CVE-2025-10630 GHSA-g4rr-88fc-26fj\n * GO-2025-3977 CVE-2025-9079 GHSA-qx3f-6vq3-8j8m\n * GO-2025-3978 CVE-2025-9081 GHSA-f72g-52v7-mg3p\n- Update to version 0.0.20250922T204835 2025-09-22T20:48:35Z.\n * GO-2025-3955 CVE-2025-47910 CVE-2025-47910\n- Update to version 0.0.20250918T182144 2025-09-18T18:21:44Z.\n * GO-2025-3915 CVE-2025-5187 GHSA-4x4m-3c2p-qppc\n * GO-2025-3956 CVE-2025-47906 CVE-2025-47906\n- Update to version 0.0.20250917T170349 2025-09-17T17:03:49Z.\n * GO-2025-3922 CVE-2025-58058 GHSA-jc7w-c686-c4v9\n * GO-2025-3926 CVE-2025-58158 GHSA-w469-hj2f-jpr5\n * GO-2025-3929 CVE-2025-58157 GHSA-9fvj-xqr2-xwg8\n * GO-2025-3938 CVE-2025-58437 GHSA-j6xf-jwrj-v5qp\n * GO-2025-3939 CVE-2025-7445 GHSA-rcw7-pqfp-735x\n * GO-2025-3940 CVE-2025-58445 GHSA-xh7v-965r-23f7\n * GO-2025-3941 CVE-2025-58450 GHSA-p46v-f2x8-qp98\n * GO-2025-3942 CVE-2025-58063 GHSA-93mf-426m-g6x9\n * GO-2025-3943 CVE-2025-58430 GHSA-rf24-wg77-gq7w\n * GO-2025-3944 CVE-2025-54123 GHSA-r4h8-hfp2-ggmf\n * GO-2025-3945 CVE-2025-54376 GHSA-jxmr-2h4q-rhxp\n * GO-2025-3949 CVE-2025-59361 GHSA-2gcv-3qpf-c5qr\n * GO-2025-3950 CVE-2025-9076 GHSA-3vcm-c42p-3hhf\n * GO-2025-3951 CVE-2025-59358 GHSA-2gg8-85m5-8r2p\n * GO-2025-3952 CVE-2025-59359 GHSA-369h-6j28-wwcg\n * GO-2025-3953 CVE-2025-8396 GHSA-p768-c3pr-6459\n * GO-2025-3954 CVE-2025-59360 GHSA-xv9f-728h-9jgv\n * GO-2025-3958 CVE-2025-9072 GHSA-69j8-prx2-vx98\n * GO-2025-3959 CVE-2025-9078 GHSA-9p92-x77w-9fw2\n * GO-2025-3960 CVE-2025-9084 GHSA-hm95-jx66-g2gh\n * GO-2025-3961 CVE-2025-4953 GHSA-m68q-4hqr-mc6f\n- Update to version 0.0.20250908T141310 2025-09-08T14:13:10Z.\n * GO-2025-3916 CVE-2025-51667 GHSA-f2m2-4q6r-cwc4\n * GO-2025-3917 CVE-2025-53884 GHSA-8ff6-pc43-jwv3\n * GO-2025-3918 CVE-2025-8077 GHSA-8pxw-9c75-6w56\n * GO-2025-3919 CVE-2025-54467 GHSA-w54x-xfxg-4gxq\n * GO-2025-3920 GHSA-vxg3-w9rv-rhr2\n * GO-2025-3921 GHSA-3rw9-wmc8-8948\n * GO-2025-3923 CVE-2024-58259 GHSA-4h45-jpvh-6p5j\n * GO-2025-3924 CVE-2025-6203 GHSA-8f82-53h8-2p34\n * GO-2025-3925 GHSA-v2ch-c8v8-fgr7\n * GO-2025-3927 CVE-2024-52284 GHSA-6h9x-9j5v-7w9h\n * GO-2025-3930 CVE-2025-58355 GHSA-33pr-m977-5w97\n * GO-2025-3934 CVE-2025-55190 GHSA-786q-9hcg-v9ff\n * GO-2025-3935 CVE-2025-9566 GHSA-wp3j-xq48-xpjw\n * GO-2025-3936 CVE-2025-56760 GHSA-78j5-8vq7-jxv5\n * GO-2025-3937 CVE-2025-56761 GHSA-cgrg-86m5-xm4w\n- Update to version 0.0.20250829T154226 2025-08-29T15:42:26Z.\n * GO-2025-3884\n * GO-2025-3892\n * GO-2025-3893\n * GO-2025-3894\n * GO-2025-3895\n * GO-2025-3896\n * GO-2025-3897\n * GO-2025-3900\n * GO-2025-3901\n * GO-2025-3902\n * GO-2025-3903\n * GO-2025-3904\n * GO-2025-3905\n * GO-2025-3906\n * GO-2025-3907\n * GO-2025-3909\n * GO-2025-3910\n * GO-2025-3911\n * GO-2025-3912\n * GO-2025-3913\n- Update to version 0.0.20250820T174735 2025-08-20T17:47:35Z.\n * GO-2025-3783 CVE-2025-52894 GHSA-prpj-rchp-9j5h\n- Update to version 0.0.20250818T190335 2025-08-18T19:03:35Z.\n * GO-2023-2385 CVE-2023-26154 GHSA-5844-q3fc-56rh\n * GO-2025-3861 CVE-2025-48731 GHSA-cmpr-8prq-w5p5\n * GO-2025-3862 CVE-2025-49221 GHSA-rfg4-2m63-fw2q\n * GO-2025-3863 CVE-2025-44001 GHSA-vpcr-fqpc-386h\n * GO-2025-3864 CVE-2025-53857 GHSA-42m6-5vm7-fjv2\n * GO-2025-3865 CVE-2025-44004 GHSA-6ff3-jgxh-vffj\n * GO-2025-3866 CVE-2025-54463 GHSA-gjpm-6w34-ppvf\n * GO-2025-3867 CVE-2025-54458 GHSA-j66h-xhpr-7q5g\n * GO-2025-3868 CVE-2025-8285 GHSA-qjrx-j8wm-xf83\n * GO-2025-3869 CVE-2025-53910 GHSA-v6c8-g53h-mc2h\n * GO-2025-3870 CVE-2025-52931 GHSA-vc77-c2hx-h5x2\n * GO-2025-3871 CVE-2025-53514 GHSA-w92j-c6gr-hj8r\n * GO-2025-3872 CVE-2025-54525 GHSA-3cg3-3mmr-w8hj\n * GO-2025-3873 GHSA-jhmr-57cj-q6g9\n * GO-2025-3874 GHSA-q355-h244-969h\n * GO-2025-3875 CVE-2025-54478 GHSA-qpjq-c5hr-7925\n * GO-2025-3885 CVE-2025-55196 GHSA-fcxq-v2r3-cc8h\n * GO-2025-3886 CVE-2025-50946 GHSA-p3qf-84rg-jxfc\n * GO-2025-3887 CVE-2025-55199 GHSA-9h84-qmv7-982p\n * GO-2025-3888 CVE-2025-55198 GHSA-f9f8-9pmf-xv68\n * GO-2025-3891 CVE-2025-9039 GHSA-wm7x-ww72-r77q\n","status":"published","published":"2026-07-30T09:09:47Z","modified":"2026-07-31T18:24:10.643528544Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"RLSA-2025:0401","title":"Important: grafana security update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB. \n\nSecurity Fix(es):\n\n* go-git: argument injection via the URL field (CVE-2025-21613)\n\n* go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies (CVE-2025-21614)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-02-13T20:34:26.141542Z","modified":"2026-02-05T05:15:11.208254Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2025:0060-1","title":"Security update for govulncheck-vulndb","description":"This update for govulncheck-vulndb fixes the following issues:\n\n- Update to version 0.0.20250108T191942 2025-01-08T19:19:42Z.\n  Refs jsc#PED-11136\n  Go CVE Numbering Authority IDs added or updated with aliases:\n  * GO-2025-3371 GHSA-2r2v-9pf8-6342\n  * GO-2025-3374 CVE-2025-22130 GHSA-j4jw-m6xr-fv6c\n\n- Update to version 0.0.20250107T160406 2025-01-07T16:04:06Z.\n  Refs jsc#PED-11136\n  Go CVE Numbering Authority IDs added or updated with aliases:\n  * GO-2025-3363 GO-2025-3364 GO-2025-3367 GO-2025-3368\n  * GO-2024-3355 CVE-2024-54148 GHSA-r7j8-5h9c-f6fx\n  * GO-2024-3356 CVE-2024-55947 GHSA-qf5v-rp47-55gg\n  * GO-2024-3357 CVE-2024-56362 GHSA-xwx7-p63r-2rj8\n  * GO-2024-3358 CVE-2024-45387 GHSA-vq94-9pfv-ccqr\n  * GO-2024-3359 CVE-2024-28892 GHSA-5qww-56gc-f66c\n  * GO-2024-3360 CVE-2024-25133 GHSA-wgqq-9qh8-wvqv\n  * GO-2025-3361 CVE-2024-55196 GHSA-rv83-h68q-c4wq\n  * GO-2025-3362 CVE-2025-21609 GHSA-8fx8-pffw-w498\n  * GO-2025-3363 CVE-2024-56514 GHSA-cwrh-575j-8vr3\n  * GO-2025-3364 CVE-2024-56513 GHSA-mg7w-c9x2-xh7r\n  * GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4\n  * GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m\n\n- Update to version 0.0.20241220T214820 2024-12-20T21:48:20Z.\n  Refs jsc#PED-11136\n  Go CVE Numbering Authority IDs added or updated with aliases:\n  * GO-2024-3101 GHSA-75qh-gg76-p2w4\n  * GO-2024-3339 GHSA-8wcc-m6j2-qxvm\n\n- Update to version 0.0.20241220T203729 2024-12-20T20:37:29Z.\n  Refs jsc#PED-11136\n  Go CVE Numbering Authority IDs added or updated with aliases:\n  * GO-2024-3101 GHSA-75qh-gg76-p2w4\n  * GO-2024-3109 CVE-2024-43803 GHSA-pqfh-xh7w-7h3p\n  * GO-2024-3333 CVE-2024-45338 GHSA-w32m-9786-jp63\n  * GO-2024-3342 GHSA-hxr6-2p24-hf98\n  * GO-2024-3343 CVE-2024-9779 GHSA-jhh6-6fhp-q2xp\n  * GO-2024-3344 GHSA-32gq-x56h-299c\n  * GO-2024-3349 CVE-2024-25131 GHSA-77c2-c35q-254w\n  * GO-2024-3350 GHSA-5pf6-cq2v-23ww\n  * GO-2024-3354 CVE-2024-12678 GHSA-hr68-hvgv-xxqf\n","status":"published","published":"2025-01-10T11:33:29Z","modified":"2026-02-05T02:50:12.74079Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:0191-1","title":"Security update for amazon-ssm-agent","description":"This update for amazon-ssm-agent fixes the following issues:\n\nUpdate to version 3.3.1611.0:\n\n- CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 (bsc#1235575)\n\nFull changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0\n","status":"published","published":"2025-01-20T06:49:21Z","modified":"2025-05-02T04:37:30.263097Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:0277-1","title":"Security update for amazon-ssm-agent","description":"This update for amazon-ssm-agent fixes the following issues:\n\nUpdate to version 3.3.1611.0:\n\n- CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 (bsc#1235575)\n\nFull changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0\n","status":"published","published":"2025-01-28T23:46:31Z","modified":"2026-02-04T02:15:16.808937Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:0601-1","title":"Security update for brise","description":"This update for brise fixes the following issues:\n\n- CVE-2025-21613: Fixed argument injection via the URL field (bsc#1235573).\n- CVE-2024-45337: Fixed authorization bypass in golang.org/x/crypto via the ServerConfig.PublicKeyCallback callback\n  (bsc#1234597).\n","status":"published","published":"2025-02-20T09:14:11Z","modified":"2026-02-04T04:17:53.045538Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0622-1","title":"Security update for grafana","description":"This update for grafana fixes the following issues:\n\ngrafana was updated from version 10.4.13 to 10.4.15:\n\n- Security issues fixed:\n    * CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559)\n    * CVE-2024-11741: Fixed the Grafana Alerting VictorOps integration (bsc#1236734)\n    * CVE-2025-21613: Removed vulnerable library github.com/go-git/go-git/v5 (bsc#1235574)\n    * CVE-2024-28180: Fixed improper handling of highly compressed data (bsc#1235206)\n- Other bugs fixed and changes:\n    * Alerting: Do not fetch Orgs if the user is authenticated by apikey/sa or render key\n    * Added provisioning directories\n    * Use /bin/bash in wrapper scripts\n","status":"published","published":"2025-02-21T10:59:56Z","modified":"2026-02-04T03:44:56.470308Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0623-1","title":"Security update for grafana","description":"This update for grafana fixes the following issues:\n\ngrafana was updated from version 10.4.13 to 10.4.15:\n\n- Security issues fixed:\n    * CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559)\n    * CVE-2024-11741: Fixed the Grafana Alerting VictorOps integration (bsc#1236734)\n    * CVE-2025-21613: Removed vulnerable library github.com/go-git/go-git/v5 (bsc#1235574)\n    * CVE-2024-28180: Fixed improper handling of highly compressed data (bsc#1235206)\n- Other bugs fixed and changes:\n    * Alerting: Do not fetch Orgs if the user is authenticated by apikey/sa or render key\n    * Added provisioning directories\n    * Use /bin/bash in wrapper scripts\n","status":"published","published":"2025-02-21T11:00:07Z","modified":"2026-02-04T03:08:54.321528Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0624-1","title":"Security update for grafana","description":"This update for grafana fixes the following issues:\n\ngrafana was updated from version 10.4.13 to 10.4.15:\n\n- Security issues fixed:\n    * CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559)\n    * CVE-2024-11741: Fixed the Grafana Alerting VictorOps integration (bsc#1236734)\n    * CVE-2025-21613: Removed vulnerable library github.com/go-git/go-git/v5 (bsc#1235574)\n    * CVE-2024-28180: Fixed improper handling of highly compressed data (bsc#1235206)\n- Other bugs fixed and changes:\n    * Alerting: Do not fetch Orgs if the user is authenticated by apikey/sa or render key\n    * Added provisioning directories\n    * Use /bin/bash in wrapper scripts\n","status":"published","published":"2025-02-21T11:00:27Z","modified":"2026-02-04T03:59:59.883486Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"USN-8088-1","title":"golang-github-go-git-go-git vulnerabilities","description":"Ionut Lalu discovered that go-git incorrectly handled certain specially\ncrafted Git server responses. An attacker could possibly use this issue to\ncause a denial of service. (CVE-2023-49568, CVE-2025-21614)\n\nIonut Lalu discovered that go-git incorrectly handled file system paths\nwhen using the ChrootOS implementation. A remote attacker could possibly\nuse this issue to perform a path traversal and create or modify arbitrary\nfiles, leading to remote code execution. (CVE-2023-49569)\n\nIt was discovered that go-git did not properly sanitize arguments when\ninvoking git-upload-pack using the file transport protocol. An attacker\ncould possibly use this issue to inject arbitrary flag values when\ninteracting with local Git repositories. (CVE-2025-21613)\n\nIt was discovered that go-git did not properly verify integrity checks for\npack and index files. An attacker could possibly use this issue to cause\ngo-git to process corrupted repository data, resulting in unexpected errors\nor an incorrect repository state. (CVE-2026-25934)","status":"published","published":"2026-03-12T15:53:02Z","modified":"2026-04-27T18:41:29.619775Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}