{"id":"CVE-2025-58058","aliases":["AZL-66713","AZL-66716","AZL-66720","AZL-66723","AZL-66725","AZL-66728","AZL-66731","AZL-66735","AZL-66741","AZL-66744","AZL-66747","AZL-66750","AZL-66753","AZL-66759","AZL-66762","DEBIAN-CVE-2025-58058","EUVD-2025-26149","GHSA-jc7w-c686-c4v9","GO-2025-3922","SUSE-SU-2025:03289-1","SUSE-SU-2025:03448-1","SUSE-SU-2025:21137-1","SUSE-SU-2025:4121-1","SUSE-SU-2026:0383-1","SUSE-SU-2026:4209-1","UBUNTU-CVE-2025-58058","openSUSE-SU-2025:15503-1","openSUSE-SU-2025:15508-1","openSUSE-SU-2025:15509-1","openSUSE-SU-2025:15515-1","openSUSE-SU-2025:15537-1","openSUSE-SU-2025:15542-1","openSUSE-SU-2025:15564-1","openSUSE-SU-2025:15631-1","openSUSE-SU-2025:15722-1","openSUSE-SU-2025:20031-1","openSUSE-SU-2025:20073-1","openSUSE-SU-2025:20117-1","openSUSE-SU-2025:20160-1","openSUSE-SU-2026:11126-1","openSUSE-SU-2026:11305-1","openSUSE-SU-2026:11514-1","openSUSE-SU-2026:20105-1","openSUSE-SU-2026:20192-1","openSUSE-SU-2026:20798-1","openSUSE-SU-2026:21151-1","openSUSE-SU-2026:21483-1","openSUSE-SU-2026:21824-1"],"status":"published","title":"github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00433,"percentile":0.37991,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2025-08-28T19:36:22Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Go","package":"github.com/ulikunitz/xz","fixed_in":["0.5.15"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:2","package":"containerized-data-importer","fixed_in":["1.55.0-25"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cri-o","fixed_in":["1.22.3-16"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"buildah","fixed_in":["1.41.4-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"podman","fixed_in":["5.6.1-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"jx","fixed_in":["3.2.236-23"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"packer","fixed_in":["1.9.5-15"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"skopeo","fixed_in":["1.14.2-12"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"containerized-data-importer","fixed_in":["1.57.0-16"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"terraform","fixed_in":["1.3.2-27"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"jx","fixed_in":["3.10.182-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"packer","fixed_in":["1.9.5-10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"skopeo","fixed_in":["1.14.4-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"golang-github-ulikunitz-xz","fixed_in":["0.5.15-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP6","package":"warewulf4","fixed_in":["4.6.4-150500.6.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP7","package":"warewulf4","fixed_in":["4.6.4-150500.6.37.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"warewulf4","fixed_in":["4.6.4-150500.6.37.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"tailscale","fixed_in":["1.86.5-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"sbctl","fixed_in":["0.17-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"regclient","fixed_in":["0.9.2-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"warewulf4","fixed_in":["4.6.4-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"trivy","fixed_in":["0.66.0-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"warewulf4","fixed_in":["4.6.4-bp160.1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/ulikunitz/xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.5.13"},{"fixed":"0.5.15"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.18.0-29"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1-26"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.55.0-25"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.3-16"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41.4-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.30.1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"jx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.236-23"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"packer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-15"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.57.0-16"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"terraform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-27"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"jx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.182-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"packer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"golang-github-ulikunitz-xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.5.12-1","0.5.15-1","0.5.6-2"]},{"source":"osv","ecosystem":"Debian:13","package":"golang-github-ulikunitz-xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.5.12-1","0.5.15-1","0.5.6-2"]},{"source":"osv","ecosystem":"Debian:14","package":"golang-github-ulikunitz-xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.15-1"}]}],"versions":["0.5.12-1","0.5.6-2"]},{"source":"osv","ecosystem":"Go","package":"github.com/ulikunitz/xz","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.5.15"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/ulikunitz/xz","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.5.15"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250918T182144-150000.1.107.1"}]}],"bundled":35},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250918T182144-150000.1.107.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP6","package":"warewulf4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-150500.6.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP7","package":"warewulf4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-150500.6.37.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"warewulf4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-150500.6.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"alloy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"alloy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"alloy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3-150700.15.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-150400.4.28.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-150400.4.28.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.64.0-150700.9.14.1"}]}],"bundled":27},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-github-ulikunitz-xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.5.6-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-github-ulikunitz-xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.5.6-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"golang-github-ulikunitz-xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.5.6-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"golang-github-ulikunitz-xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.5.6-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"golang-github-ulikunitz-xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.5.15-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"golang-github-ulikunitz-xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.5.6-2","0.5.15-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tailscale","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.86.5-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sbctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"regclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.2-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"warewulf4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"trivy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250917T170349-1.1"}]}],"bundled":21},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"alloy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.2-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"hauler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"warewulf4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-bp160.1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"alloy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"hauler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-bp160.1.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"velociraptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.4.git185.a5708584-2.1"}]}],"bundled":49},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"containerized-data-importer1.65","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.65.0-2.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"containerized-data-importer1.66","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.66.0-1.1"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"sbctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18-bp160.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"tailscale","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.94.1-bp160.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"warewulf4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-bp160.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20260723T184607-160000.1.1"}]}],"bundled":1734},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"containerized-data-importer1.65","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.65.0-160000.3.1"}]}],"bundled":39}],"products":[{"vendor":"tukaani-project","product":"xz"},{"vendor":"ulikunitz","product":"xz"}],"references":[{"url":"https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9","tags":["x_refsource_CONFIRM","advisory","web","report"]},{"url":"https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2","tags":["x_refsource_MISC","fix","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58058","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-jc7w-c686-c4v9"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58058.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-58058","tags":["advisory"]},{"url":"https://github.com/ulikunitz/xz","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503289-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-51667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-56760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-56761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9566","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503448-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227465","tags":["report"]},{"url":"https://bugzilla.suse.com/1227686","tags":["report"]},{"url":"https://bugzilla.suse.com/1246082","tags":["report"]},{"url":"https://bugzilla.suse.com/1248768","tags":["report"]},{"url":"https://bugzilla.suse.com/1248906","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521137-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1248960","tags":["report"]},{"url":"https://bugzilla.suse.com/1250621","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11065","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254121-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260383-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1241153","tags":["report"]},{"url":"https://bugzilla.suse.com/1248910","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29923","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264209-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1248946","tags":["report"]},{"url":"https://bugzilla.suse.com/1262952","tags":["report"]},{"url":"https://bugzilla.suse.com/1265799","tags":["report"]},{"url":"https://bugzilla.suse.com/1266179","tags":["report"]},{"url":"https://bugzilla.suse.com/1266639","tags":["report"]},{"url":"https://bugzilla.suse.com/1267176","tags":["report"]},{"url":"https://bugzilla.suse.com/1272064","tags":["report"]},{"url":"https://bugzilla.suse.com/1276687","tags":["report"]},{"url":"https://bugzilla.suse.com/1278621","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78662","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-58058","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58058","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47911","tags":["web"]},{"url":"https://bugzilla.suse.com/1227010","tags":["report"]},{"url":"https://bugzilla.suse.com/1232948","tags":["report"]},{"url":"https://bugzilla.suse.com/1234512","tags":["report"]},{"url":"https://bugzilla.suse.com/1235265","tags":["report"]},{"url":"https://bugzilla.suse.com/1237618","tags":["report"]},{"url":"https://bugzilla.suse.com/1239225","tags":["report"]},{"url":"https://bugzilla.suse.com/1239385","tags":["report"]},{"url":"https://bugzilla.suse.com/1240466","tags":["report"]},{"url":"https://bugzilla.suse.com/1241724","tags":["report"]},{"url":"https://bugzilla.suse.com/1243633","tags":["report"]},{"url":"https://bugzilla.suse.com/1246151","tags":["report"]},{"url":"https://bugzilla.suse.com/1246730","tags":["report"]},{"url":"https://bugzilla.suse.com/1248897","tags":["report"]},{"url":"https://bugzilla.suse.com/1248937","tags":["report"]},{"url":"https://bugzilla.suse.com/1250625","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-51744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53547","tags":["web"]},{"url":"https://bugzilla.suse.com/1235332","tags":["report"]},{"url":"https://bugzilla.suse.com/1241184","tags":["report"]},{"url":"https://bugzilla.suse.com/1241804","tags":["report"]},{"url":"https://bugzilla.suse.com/1246722","tags":["report"]},{"url":"https://bugzilla.suse.com/1251516","tags":["report"]},{"url":"https://bugzilla.suse.com/1251651","tags":["report"]},{"url":"https://bugzilla.suse.com/1251891","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35469","tags":["web"]},{"url":"https://bugzilla.suse.com/1248949","tags":["report"]},{"url":"https://bugzilla.suse.com/1251399","tags":["report"]},{"url":"https://bugzilla.suse.com/1251609","tags":["report"]},{"url":"https://bugzilla.suse.com/1248920","tags":["report"]},{"url":"https://bugzilla.suse.com/1251363","tags":["report"]},{"url":"https://bugzilla.suse.com/1251547","tags":["report"]},{"url":"https://bugzilla.suse.com/1253512","tags":["report"]},{"url":"https://bugzilla.suse.com/1253786","tags":["report"]},{"url":"https://bugzilla.suse.com/1253977","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47914","tags":["web"]},{"url":"https://bugzilla.suse.com/1254470","tags":["report"]},{"url":"https://bugzilla.suse.com/1258511","tags":["report"]},{"url":"https://bugzilla.suse.com/1262810","tags":["report"]},{"url":"https://bugzilla.suse.com/1265653","tags":["report"]},{"url":"https://bugzilla.suse.com/1266483","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-26625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-34410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-34429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-34430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-44001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-44004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-44005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-63389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-63811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-70849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-70950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-70963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-36045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-37461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-38651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9804","tags":["web"]},{"url":"https://bugzilla.suse.com/1238699","tags":["report"]},{"url":"https://bugzilla.suse.com/1239322","tags":["report"]},{"url":"https://bugzilla.suse.com/1241838","tags":["report"]},{"url":"https://bugzilla.suse.com/1251495","tags":["report"]},{"url":"https://bugzilla.suse.com/1251689","tags":["report"]},{"url":"https://bugzilla.suse.com/1253506","tags":["report"]},{"url":"https://bugzilla.suse.com/1253784","tags":["report"]},{"url":"https://bugzilla.suse.com/1253967","tags":["report"]},{"url":"https://bugzilla.suse.com/1260295","tags":["report"]},{"url":"https://bugzilla.suse.com/1262269","tags":["report"]},{"url":"https://bugzilla.suse.com/1279234","tags":["report"]},{"url":"https://bugzilla.suse.com/1279315","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84304","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-58058","title":"github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T21:54:05.561Z","modified":"2025-08-29T13:23:07.497Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:32:37.027582Z"}],"euvd":[{"id":"EUVD-2025-26149","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T21:54:05Z","modified":"2025-08-29T13:23:07Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T20:31:50.093994Z"}],"ghsa":[{"id":"GHSA-jc7w-c686-c4v9","title":"github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives","description":"### Summary\n\nIt is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has  a checksum to detect such an issue according to the [specification](https://github.com/jljusten/LZMA-SDK/blob/master/DOC/lzma-specification.txt).\n\nNote that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done.\n\n### Mitigations\n\nThe release v0.5.15 includes following mitigations:\n\n- The ReaderConfig DictCap field is now interpreted as a limit for the dictionary size.\n- The default is 2 Gigabytes - 1 byte (2^31-1 bytes).\n- Users can check with the [Reader.Header] method what the actual values are in  their LZMA files and set a smaller limit using ReaderConfig.\n- The dictionary size will not exceed the larger of the file size and the minimum dictionary size. This is another measure to prevent huge memory allocations for the dictionary.\n- The code supports stream sizes only up to a pebibyte (1024^5).\n\nNote that the original v0.5.14 version had a compiler error for 32 bit platforms, which has been fixed by v0.5.15.\n\n### Methods affected\n\nOnly software that uses [lzma.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#NewReader) or [lzma.ReaderConfig.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#ReaderConfig.NewReader) is affected. There is no issue for software using the xz functionality.\n\nI thank  @GregoryBuligin for his report, which is provided below.\n\n### Summary\nWhen unpacking a large number of LZMA archives, even in a single goroutine, if the first byte of the archive file is 0 (a zero byte added to the beginning), an error __writeMatch: distance out of range__ occurs. Memory consumption spikes sharply, and the GC clearly cannot handle this situation.\n\n### Details\nJudging by the error  __writeMatch: distance out of range__, the problems occur in the code around this function.\nhttps://github.com/ulikunitz/xz/blob/c8314b8f21e9c5e25b52da07544cac14db277e89/lzma/decoderdict.go#L81\n\n### PoC\nRun a function similar to this one in 1 or several goroutines on a multitude of LZMA archives that have a 0 (a zero byte) added to the beginning.\n```\nconst ProjectLocalPath = \"some/path\"\nconst TmpDir = \"tmp\"\n\nfunc UnpackLZMA(lzmaFile string) error {\n\tfile, err := os.Open(lzmaFile)\n\tif err != nil {\n\t\treturn err\n\t}\n\tdefer file.Close()\n\n\treader, err := lzma.NewReader(bufio.NewReader(file))\n\tif err != nil {\n\t\treturn err\n\t}\n\n\ttmpFile, err := os.CreateTemp(TmpDir, TmpLZMAPrefix)\n\tif err != nil {\n\t\treturn err\n\t}\n\tdefer func() {\n\t\ttmpFile.Close()\n\t\t_ = os.Remove(tmpFile.Name())\n\t}()\n\n\tsha256Hasher := sha256.New()\n\tmultiWriter := io.MultiWriter(tmpFile, sha256Hasher)\n\n\tif _, err = io.Copy(multiWriter, reader); err != nil {\n\t\treturn err\n\t}\n\n\tunpackHash := hex.EncodeToString(sha256Hasher.Sum(nil))\n\tunpackDir := filepath.Join(\n\t\tProjectLocalPath, unpackHash[:2],\n\t)\n\t_ = os.MkdirAll(unpackDir, DirPerm)\n\n\tunpackPath := filepath.Join(unpackDir, unpackHash)\n\n\treturn os.Rename(tmpFile.Name(), unpackPath)\n}\n```\n\n\n\n### Impact\nServers with a small amount of RAM that download and unpack a large number of unverified LZMA archives","status":"published","published":"2025-08-28T19:36:22Z","modified":"2025-08-29T20:25:39Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:38:55.953734Z"}],"nvd":[{"id":"CVE-2025-58058","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32.577Z","modified":"2026-09-26T00:10:00.127Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:11:25.826804Z"}],"osv":[{"id":"CVE-2025-58058","title":"github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T21:54:05.561Z","modified":"2026-10-28T02:30:34.040287947Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:44:51.190588Z"},{"id":"DEBIAN-CVE-2025-58058","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32.577Z","modified":"2026-09-26T08:47:41.567011571Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"GHSA-jc7w-c686-c4v9","title":"github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives","description":"### Summary\n\nIt is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has  a checksum to detect such an issue according to the [specification](https://github.com/jljusten/LZMA-SDK/blob/master/DOC/lzma-specification.txt).\n\nNote that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done.\n\n### Mitigations\n\nThe release v0.5.15 includes following mitigations:\n\n- The ReaderConfig DictCap field is now interpreted as a limit for the dictionary size.\n- The default is 2 Gigabytes - 1 byte (2^31-1 bytes).\n- Users can check with the [Reader.Header] method what the actual values are in  their LZMA files and set a smaller limit using ReaderConfig.\n- The dictionary size will not exceed the larger of the file size and the minimum dictionary size. This is another measure to prevent huge memory allocations for the dictionary.\n- The code supports stream sizes only up to a pebibyte (1024^5).\n\nNote that the original v0.5.14 version had a compiler error for 32 bit platforms, which has been fixed by v0.5.15.\n\n### Methods affected\n\nOnly software that uses [lzma.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#NewReader) or [lzma.ReaderConfig.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#ReaderConfig.NewReader) is affected. There is no issue for software using the xz functionality.\n\nI thank  @GregoryBuligin for his report, which is provided below.\n\n### Summary\nWhen unpacking a large number of LZMA archives, even in a single goroutine, if the first byte of the archive file is 0 (a zero byte added to the beginning), an error __writeMatch: distance out of range__ occurs. Memory consumption spikes sharply, and the GC clearly cannot handle this situation.\n\n### Details\nJudging by the error  __writeMatch: distance out of range__, the problems occur in the code around this function.\nhttps://github.com/ulikunitz/xz/blob/c8314b8f21e9c5e25b52da07544cac14db277e89/lzma/decoderdict.go#L81\n\n### PoC\nRun a function similar to this one in 1 or several goroutines on a multitude of LZMA archives that have a 0 (a zero byte) added to the beginning.\n```\nconst ProjectLocalPath = \"some/path\"\nconst TmpDir = \"tmp\"\n\nfunc UnpackLZMA(lzmaFile string) error {\n\tfile, err := os.Open(lzmaFile)\n\tif err != nil {\n\t\treturn err\n\t}\n\tdefer file.Close()\n\n\treader, err := lzma.NewReader(bufio.NewReader(file))\n\tif err != nil {\n\t\treturn err\n\t}\n\n\ttmpFile, err := os.CreateTemp(TmpDir, TmpLZMAPrefix)\n\tif err != nil {\n\t\treturn err\n\t}\n\tdefer func() {\n\t\ttmpFile.Close()\n\t\t_ = os.Remove(tmpFile.Name())\n\t}()\n\n\tsha256Hasher := sha256.New()\n\tmultiWriter := io.MultiWriter(tmpFile, sha256Hasher)\n\n\tif _, err = io.Copy(multiWriter, reader); err != nil {\n\t\treturn err\n\t}\n\n\tunpackHash := hex.EncodeToString(sha256Hasher.Sum(nil))\n\tunpackDir := filepath.Join(\n\t\tProjectLocalPath, unpackHash[:2],\n\t)\n\t_ = os.MkdirAll(unpackDir, DirPerm)\n\n\tunpackPath := filepath.Join(unpackDir, unpackHash)\n\n\treturn os.Rename(tmpFile.Name(), unpackPath)\n}\n```\n\n\n\n### Impact\nServers with a small amount of RAM that download and unpack a large number of unverified LZMA archives","status":"published","published":"2025-08-28T19:36:22Z","modified":"2026-09-10T03:50:27.157647943Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:50.336262Z"},{"id":"UBUNTU-CVE-2025-58058","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:00Z","modified":"2026-10-17T12:57:09.071008816Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"AZL-66713","title":"CVE-2025-58058 affecting package buildah 1.18.0-29","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-04-21T04:37:56.984365Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66716","title":"CVE-2025-58058 affecting package podman 4.1.1-26","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-04-21T04:37:57.589685Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66720","title":"CVE-2025-58058 affecting package containerized-data-importer for versions less than 1.55.0-25","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-04-21T04:37:57.668536Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66723","title":"CVE-2025-58058 affecting package cri-o for versions less than 1.22.3-16","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-04-21T04:37:57.794762Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66725","title":"CVE-2025-58058 affecting package buildah for versions less than 1.41.4-2","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-04-21T04:48:37.162962Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66728","title":"CVE-2025-58058 affecting package cri-o 1.30.1-1","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:23.841127Z"},{"id":"AZL-66731","title":"CVE-2025-58058 affecting package podman for versions less than 5.6.1-2","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-04-21T04:49:53.939319Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66735","title":"CVE-2025-58058 affecting package jx for versions less than 3.2.236-23","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-04-21T04:37:57.607992Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66741","title":"CVE-2025-58058 affecting package packer for versions less than 1.9.5-15","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-04-21T04:37:57.496884Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66744","title":"CVE-2025-58058 affecting package skopeo for versions less than 1.14.2-12","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-04-21T04:37:57.541413Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66747","title":"CVE-2025-58058 affecting package containerized-data-importer for versions less than 1.57.0-16","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.841127Z"},{"id":"AZL-66750","title":"CVE-2025-58058 affecting package terraform for versions less than 1.3.2-27","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-04-21T04:37:57.521982Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66753","title":"CVE-2025-58058 affecting package jx for versions less than 3.10.182-3","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.841127Z"},{"id":"AZL-66759","title":"CVE-2025-58058 affecting package packer for versions less than 1.9.5-10","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.841127Z"},{"id":"AZL-66762","title":"CVE-2025-58058 affecting package skopeo for versions less than 1.14.4-6","description":"xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.","status":"published","published":"2025-08-28T22:15:32Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.841127Z"},{"id":"GO-2025-3922","title":"Memory leaks when decoding a corrupted multiple LZMA archives in github.com/ulikunitz/xz","description":"Memory leaks when decoding a corrupted multiple LZMA archives in github.com/ulikunitz/xz","status":"published","published":"2025-09-17T17:03:38Z","modified":"2026-02-04T03:52:11.088726Z","updated_at":"2026-11-02T15:47:01.728182Z"},{"id":"openSUSE-SU-2025:15503-1","title":"tailscale-1.86.5-1.1 on GA media","description":"These are all security issues fixed in the tailscale-1.86.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-29T00:00:00Z","modified":"2026-03-23T04:53:52.532595Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15508-1","title":"rekor-1.4.1-1.1 on GA media","description":"These are all security issues fixed in the rekor-1.4.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-01T00:00:00Z","modified":"2026-03-23T04:53:52.515652Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15509-1","title":"sbctl-0.17-2.1 on GA media","description":"These are all security issues fixed in the sbctl-0.17-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-01T00:00:00Z","modified":"2026-03-23T04:53:52.53415Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15515-1","title":"regclient-0.9.2-1.1 on GA media","description":"These are all security issues fixed in the regclient-0.9.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-02T00:00:00Z","modified":"2026-03-23T04:53:53.160911Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15537-1","title":"warewulf4-4.6.4-1.1 on GA media","description":"These are all security issues fixed in the warewulf4-4.6.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-09T00:00:00Z","modified":"2026-03-23T04:53:54.670783Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15542-1","title":"trivy-0.66.0-1.1 on GA media","description":"These are all security issues fixed in the trivy-0.66.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-10T00:00:00Z","modified":"2026-03-23T04:53:55.189282Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15564-1","title":"govulncheck-vulndb-0.0.20250917T170349-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20250917T170349-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-18T00:00:00Z","modified":"2026-03-23T04:53:56.310711Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15631-1","title":"alloy-1.11.2-2.1 on GA media","description":"These are all security issues fixed in the alloy-1.11.2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-14T00:00:00Z","modified":"2026-03-23T04:54:01.705502Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15722-1","title":"hauler-1.3.1-1.1 on GA media","description":"These are all security issues fixed in the hauler-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-11-10T00:00:00Z","modified":"2026-03-23T04:54:08.431607Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:20031-1","title":"Security update for warewulf4","description":"This update for warewulf4 fixes the following issues:\n\nChanges in warewulf4:\n\n- Update to version 4.6.4:\n  * v4.6.4 release updates\n  * Convert disk booleans from wwbool to *bool which allows bools in\n    disk to be set to false via command line (bsc#1248768)\n  * Update NetworkManager Overlay\n    * Disable ipv4 in NetworkManager if no address or route is specified\n  * fix(wwctl): Create overlay edit tempfile in tmpdir\n  * Add default for systemd name for warewulf in warewulf.conf\n  * Atomic overlay file application in wwclient\n  * Simpler names for overlay methods\n  * Fix warewulfd api behavior when deleting distribution overlay\n\n- Update to version 4.6.3:\n  * v4.6.3 release\n  * IPv6 iPXE support\n  * Fix a syntax error in the RPM specfile\n  * Fix a race condition in wwctl overlay edit\n  * Fixed handling of comma-separated mount options in `fstab` and `ignition` overlays\n  * Move reexec.Init() to beginning of wwctl\n  * Add documentation for using tmpfs to distribute across numa nodes\n  * added warewuld configure option\n  * Fix wwctl upgrade nodes to handle kernel argument lists (bsc#1227686 bsc#1227465)\n  * Address copilot review from #1945\n  * Refactor wwapi tests for proper isolation\n  * Bugfix: cloning a site overlay when parent dir does not exist\n  * Clone to a site overlay when adding files in wwapi\n  * Consolidated createOverlayFile and updateOverlayFile to addOverlayFile\n  * Support for creating and updating overlay file in wwapi\n  * Only return overlay files that refer to a path within the overlay\n  * add overlay file deletion support\n  * DELETE /api/overlays/{id}?force=true can delete overlays in use\n  * Restore idempotency of PUT /api/nodes/{id}\n  * Simplify overlay mtime api and add tests\n  * add node overlay buildtime\n  * Improved netplan support\n  * Rebuild overlays for discovered nodes\n  * Restrict userdocs from building during pr when not modified\n  * Update to v4.6.2 GitHub release notes\n","status":"published","published":"2025-10-27T09:58:12Z","modified":"2026-03-23T04:54:15.748688Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2025:20073-1","title":"Security update for alloy","description":"This update for alloy fixes the following issues:\n\n- CVE-2025-58058: Removed dependency on vulnerable github.com/ulikunitz/xz (bsc#1248960).\n- CVE-2025-11065: Fixed sensitive information leak in logs (bsc#1250621).\n","status":"published","published":"2025-11-20T17:26:16Z","modified":"2026-03-23T04:54:16.428452Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2025:20117-1","title":"Security update for trivy","description":"This update for trivy fixes the following issues:\n\nChanges in trivy:\n\nUpdate to version 0.67.2 (bsc#1250625, CVE-2025-11065, bsc#1248897, CVE-2025-58058):\n\n  * fix: Use `fetch-level: 1` to check out trivy-repo in the release workflow [backport: release/v0.67] (#9638)\n  * fix: restore compatibility for google.protobuf.Value [backport: release/v0.67] (#9631)\n  * fix: using SrcVersion instead of Version for echo detector [backport: release/v0.67] (#9629)\n  * fix: add `buildInfo` for `BlobInfo` in `rpc` package [backport: release/v0.67] (#9615)\n  * fix(vex): don't use reused BOM [backport: release/v0.67] (#9612)\n  * fix(vex): don't  suppress vulns for packages with infinity loop (#9465)\n  * fix(aws): use `BuildableClient` insead of `xhttp.Client` (#9436)\n  * refactor(misconf): replace github.com/liamg/memoryfs with internal mapfs and testing/fstest (#9282)\n  * docs: clarify inline ignore limitations for resource-less checks (#9537)\n  * fix(k8s): disable parallel traversal with fs cache for k8s images (#9534)\n  * fix(misconf): handle tofu files in module detection (#9486)\n  * feat(seal): add seal support (#9370)\n  * docs: fix modules path and update code example (#9539)\n  * fix: close file descriptors and pipes on error paths (#9536)\n  * feat: add documentation URL for database lock errors (#9531)\n  * fix(db): Dowload database when missing but metadata still exists (#9393)\n  * feat(cloudformation): support default values and list results in Fn::FindInMap (#9515)\n  * fix(misconf): unmark cty values before access (#9495)\n  * feat(cli): change --list-all-pkgs default to true (#9510)\n  * fix(nodejs): parse workspaces as objects for package-lock.json files (#9518)\n  * refactor(fs): use underlyingPath to determine virtual files more reliably (#9302)\n  * refactor: remove google/wire dependency and implement manual DI (#9509)\n  * chore(deps): bump the aws group with 6 updates (#9481)\n  * chore(deps): bump the common group across 1 directory with 24 updates (#9507)\n  * fix(misconf): wrap legacy ENV values in quotes to preserve spaces (#9497)\n  * docs: move info about `detection priority` into coverage section (#9469)\n  * feat(sbom): added support for CoreOS (#9448)\n  * fix(misconf): strip build metadata suffixes from image history (#9498)\n  * feat(cyclonedx): preserve SBOM structure when scanning SBOM files with vulnerability updates (#9439)\n  * docs: Fix typo in terraform docs (#9492)\n  * feat(redhat): add os-release detection for RHEL-based images (#9458)\n  * ci(deps): add 3-day cooldown period for Dependabot updates (#9475)\n  * refactor: migrate from go-json-experiment to encoding/json/v2 (#9422)\n  * fix(vuln): compare `nuget` package names in lower case (#9456)\n  * chore: Update release flow to include chocolatey (#9460)\n  * docs: document eol supportability (#9434)\n  * docs(report): add nuanses about secret/license scanner in summary table (#9442)\n  * ci: use environment variables in GitHub Actions for improved security (#9433)\n  * chore: bump Go to 1.24.7 (#9435)\n  * fix(nodejs): use snapshot string as `Package.ID` for pnpm packages (#9330)\n  * ci(helm): bump Trivy version to 0.66.0 for Trivy Helm Chart 0.18.0 (#9425)\n\nUpdate to version 0.66.0 (bsc#1248937, CVE-2025-58058):\n\n  * chore(deps): bump the aws group with 7 updates (#9419)\n  * refactor(secret): clarify secret scanner messages (#9409)\n  * fix(cyclonedx): handle multiple license types (#9378)\n  * fix(repo): sanitize git repo URL before inserting into report metadata (#9391)\n  * test: add HTTP basic authentication to git test server (#9407)\n  * fix(sbom): add support for `file` component type of `CycloneDX` (#9372)\n  * fix(misconf): ensure module source is known (#9404)\n  * ci: migrate GitHub Actions from version tags to SHA pinning (#9405)\n  * fix: create temp file under composite fs dir (#9387)\n  * chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (#9403)\n  * refactor: switch to stable azcontainerregistry SDK package (#9319)\n  * chore(deps): bump the common group with 7 updates (#9382)\n  * refactor(misconf): migrate from custom Azure JSON parser (#9222)\n  * fix(repo): preserve RepoMetadata on FS cache hit (#9389)\n  * refactor(misconf): use atomic.Int32 (#9385)\n  * chore(deps): bump the aws group with 6 updates (#9383)\n  * docs: Fix broken link to \"Built-in Checks\" (#9375)\n  * fix(plugin): don't remove plugins when updating index.yaml file (#9358)\n  * fix: persistent flag option typo (#9374)\n  * chore(deps): bump the common group across 1 directory with 26 updates (#9347)\n  * fix(image): use standardized HTTP client for ECR authentication (#9322)\n  * refactor: export `systemFileFiltering` Post Handler (#9359)\n  * docs: update links to Semaphore pages (#9352)\n  * fix(conda): memory leak by adding closure method for `package.json` file (#9349)\n  * feat: add timeout handling for cache database operations (#9307)\n  * fix(misconf): use correct field log_bucket instead of target_bucket in gcp bucket (#9296)\n  * fix(misconf): ensure ignore rules respect subdirectory chart paths (#9324)\n  * chore(deps): bump alpine from 3.21.4 to 3.22.1 (#9301)\n  * feat(terraform): use .terraform cache for remote modules in plan scanning (#9277)\n  * chore: fix some function names in comment (#9314)\n  * chore(deps): bump the aws group with 7 updates (#9311)\n  * docs: add explanation for how to use non-system certificates (#9081)\n  * chore(deps): bump the github-actions group across 1 directory with 2 updates (#8962)\n  * fix(misconf): preserve original paths of remote submodules from .terraform (#9294)\n  * refactor(terraform): make Scan method of Terraform plan scanner private (#9272)\n  * fix: suppress debug log for context cancellation errors (#9298)\n  * feat(secret): implement streaming secret scanner with byte offset tracking (#9264)\n  * fix(python): impove package name normalization  (#9290)\n  * feat(misconf): added audit config attribute (#9249)\n  * refactor(misconf): decouple input fs and track extracted files with fs references (#9281)\n  * test(misconf): remove BenchmarkCalculate using outdated check metadata (#9291)\n  * refactor: simplify Detect function signature (#9280)\n  * ci(helm): bump Trivy version to 0.65.0 for Trivy Helm Chart 0.17.0 (#9288)\n  * fix(fs): avoid shadowing errors in file.glob (#9286)\n  * test(misconf): move terraform scan tests to integration tests (#9271)\n  * test(misconf): drop gcp iam test covered by another case (#9285)\n  * chore(deps): bump to alpine from `3.21.3` to `3.21.4` (#9283)\n\nUpdate to version 0.65.0:\n\n  * fix(cli): ensure correct command is picked by telemetry (#9260)\n  * feat(flag): add schema validation for `--server` flag (#9270)\n  * chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#9274)\n  * ci: skip undefined labels in discussion triage action (#9175)\n  * feat(repo): add git repository metadata to reports (#9252)\n  * fix(license): handle WITH operator for `LaxSplitLicenses` (#9232)\n  * chore: add modernize tool integration for code modernization (#9251)\n  * fix(secret): add UTF-8 validation in secret scanner to prevent protobuf marshalling errors (#9253)\n  * chore: implement process-safe temp file cleanup (#9241)\n  * fix: prevent graceful shutdown message on normal exit (#9244)\n  * fix(misconf): correctly parse empty port ranges in google_compute_firewall (#9237)\n  * feat: add graceful shutdown with signal handling (#9242)\n  * chore: update template URL for brew formula (#9221)\n  * test: add end-to-end testing framework with image scan and proxy tests (#9231)\n  * refactor(db): use `Getter` interface with `GetParams` for trivy-db sources (#9239)\n  * ci: specify repository for `gh cache delete` in canary worklfow (#9240)\n  * ci: remove invalid `--confirm` flag from `gh cache delete` command in canary builds (#9236)\n  * fix(misconf): fix log bucket in schema (#9235)\n  * chore(deps): bump the common group across 1 directory with 24 updates (#9228)\n  * ci: move runner.os context from job-level env to step-level in canary workflow (#9233)\n  * chore(deps): bump up Trivy-kubernetes to v0.9.1 (#9214)\n  * feat(misconf): added logging and versioning to the gcp storage bucket (#9226)\n  * fix(server): add HTTP transport setup to server mode (#9217)\n  * chore: update the rpm download Update (#9202)\n  * feat(alma): add AlmaLinux 10 support (#9207)\n  * fix(nodejs): don't use prerelease logic for compare npm constraints  (#9208)\n  * fix(rootio): fix severity selection (#9181)\n  * fix(sbom): merge in-graph and out-of-graph OS packages in scan results (#9194)\n  * fix(cli): panic: attempt to get os.Args[1] when len(os.Args) \u003c 2 (#9206)\n  * fix(misconf): correctly adapt azure storage account (#9138)\n  * feat(misconf): add private ip google access attribute to subnetwork (#9199)\n  * feat(report): add CVSS vectors in sarif report (#9157)\n  * fix(terraform): `for_each` on a map returns a resource for every key (#9156)\n  * fix: supporting .egg-info/METADATA in python.Packaging analyzer (#9151)\n  * chore: migrate protoc setup from Docker to buf CLI (#9184)\n  * ci: delete cache after artifacts upload in canary workflow (#9177)\n  * refactor: remove aws flag helper message (#9080)\n  * ci: use gh pr view to get PR number for forked repositories in auto-ready workflow (#9183)\n  * ci: add auto-ready-for-review workflow (#9179)\n  * feat(image): add Docker context resolution (#9166)\n  * ci: optimize golangci-lint performance with cache-based strategy (#9173)\n  * feat: add HTTP request/response tracing support (#9125)\n  * fix(aws): update amazon linux 2 EOL date (#9176)\n  * chore: Update release workflow to trigger version updates (#9162)\n  * chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 (#9164)\n  * fix: also check `filepath` when removing duplicate packages (#9142)\n  * chore: add debug log to show image source location (#9163)\n  * docs: add section on customizing default check data (#9114)\n  * chore(deps): bump the common group across 1 directory with 9 updates (#9153)\n  * docs: partners page content updates (#9149)\n  * chore(license): add missed spdx exceptions: (#9147)\n  * docs: trivy partners page updates (#9133)\n  * fix: migrate from `*.list` to `*.md5sums` files for `dpkg` (#9131)\n  * ci(helm): bump Trivy version to 0.64.1 for Trivy Helm Chart 0.16.1 (#9135)\n  * feat(sbom): add SHA-512 hash support for CycloneDX SBOM (#9126)\n  * fix(misconf): skip rewriting expr if attr is nil (#9113)\n  * fix(license): add missed `GFDL-NIV-1.1` and `GFDL-NIV-1.2` into Trivy mapping (#9116)\n  * fix(cli): Add more non-sensitive flags to telemetry (#9110)\n  * fix(alma): parse epochs from rpmqa file (#9101)\n  * fix(rootio): check full version to detect `root.io` packages (#9117)\n  * chore: drop FreeBSD 32-bit support (#9102)\n  * fix(sbom): use correct field for licenses in CycloneDX reports (#9057)\n  * fix(secret): fix line numbers for multiple-line secrets (#9104)\n  * feat(license): observe pkg types option in license scanner (#9091)\n  * ci(helm): bump Trivy version to 0.64.0 for Trivy Helm Chart 0.16.0 (#9107)\n- (CVE-2025-53547, bsc#1246151)\n\n- Update to version 0.64.1 (bsc#1243633, CVE-2025-47291,\n                           (bsc#1246730, CVE-2025-46569):\n\n  * fix(misconf): skip rewriting expr if attr is nil [backport: release/v0.64] (#9127)\n  * fix(cli): Add more non-sensitive flags to telemetry [backport: release/v0.64] (#9124)\n  * fix(rootio): check full version to detect `root.io` packages [backport: release/v0.64] (#9120)\n  * fix(alma): parse epochs from rpmqa file [backport: release/v0.64] (#9119)\n  * docs(python): fix type with METADATA file name (#9090)\n  * feat: reject unsupported artifact types in remote image retrieval (#9052)\n  * chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 (#9088)\n  * refactor(misconf): rewrite Rego module filtering using functional filters (#9061)\n  * feat(terraform): add partial evaluation for policy templates (#8967)\n  * feat(vuln): add Root.io support for container image scanning (#9073)\n  * feat(sbom): add manufacturer field to CycloneDX tools metadata (#9019)\n  * fix(cli): add some values to the telemetry call (#9056)\n  * feat(ubuntu): add end of life date for Ubuntu 25.04 (#9077)\n  * refactor: centralize HTTP transport configuration (#9058)\n  * test: include integration tests in linting and fix all issues (#9060)\n  * chore(deps): bump the common group across 1 directory with 26 updates (#9063)\n  * feat(java): dereference all maven settings.xml env placeholders (#9024)\n  * fix(misconf): reduce log noise on incompatible check (#9029)\n  * fix(misconf): .Config.User always takes precedence over USER in .History (#9050)\n  * chore(deps): update Docker to v28.2.2 and fix compatibility issues (#9037)\n  * docs(misconf): simplify misconfiguration docs (#9030)\n  * fix(misconf): move disabled checks filtering after analyzer scan (#9002)\n  * docs: add PR review policy for maintainers (#9032)\n  * fix(sbom): remove unnecessary OS detection check in SBOM decoding (#9034)\n  * test: improve and extend tests for iac/adapters/arm (#9028)\n  * chore: bump up Go version to 1.24.4 (#9031)\n  * feat(cli): add version constraints to annoucements (#9023)\n  * fix(misconf): correct Azure value-to-time conversion in AsTimeValue (#9015)\n  * feat(ubuntu): add eol date for 20.04-ESM (#8981)\n  * fix(report): don't panic when report contains vulns, but doesn't contain packages for `table` format (#8549)\n  * fix(nodejs): correctly parse `packages` array of `bun.lock` file (#8998)\n  * refactor: use strings.SplitSeq instead of strings.Split in for-loop (#8983)\n  * docs: change --disable-metrics to --disable-telemetry in example (#8999) (#9003)\n  * feat(misconf): add OpenTofu file extension support (#8747)\n  * refactor(misconf): set Trivy version by default in Rego scanner (#9001)\n  * docs: fix assets with versioning (#8996)\n  * docs: add partners page (#8988)\n  * chore(alpine): add EOL date for Alpine 3.22 (#8992)\n  * fix: don't show corrupted trivy-db warning for first run (#8991)\n  * Update installation.md (#8979)\n  * feat(misconf): normalize CreatedBy for buildah and legacy docker builder (#8953)\n  * chore(k8s): update comments with deprecated command format (#8964)\n  * chore: fix errors and typos in docs (#8963)\n  * fix: Add missing version check flags (#8951)\n  * feat(redhat): Add EOL date for RHEL 10. (#8910)\n  * fix: Correctly check for semver versions for trivy version check (#8948)\n  * refactor(server): change custom advisory and vulnerability data types fr… (#8923)\n  * ci(helm): bump Trivy version to 0.63.0 for Trivy Helm Chart 0.15.0 (#8946)\n  * fix(misconf): use argument value in WithIncludeDeprecatedChecks (#8942)\n  * chore(deps): Bump trivy-checks (#8934)\n  * fix(julia): add `Relationship` field support (#8939)\n  * feat(minimos): Add support for MinimOS (#8792)\n  * feat(alpine): add maintainer field extraction for APK packages (#8930)\n  * feat(echo): Add Echo Support (#8833)\n  * fix(redhat): Also try to find buildinfo in root layer (layer 0) (#8924)\n  * fix(wolfi): support new APK database location (#8937)\n  * feat(k8s): get components from namespaced resources (#8918)\n  * refactor(cloudformation): remove unused ScanFile method from Scanner (#8927)\n  * refactor(terraform): remove result sorting from scanner (#8928)\n  * feat(misconf): Add support for `Minimum Trivy Version` (#8880)\n  * docs: improve skipping files documentation (#8749)\n  * feat(cli): Add available version checking (#8553)\n  * feat(nodejs): add a bun.lock analyzer (#8897)\n  * feat: terraform parser option to set current working directory (#8909)\n  * perf(secret): only match secrets of meaningful length, allow example strings to not be matched (#8602)\n  * feat(misconf): export raw Terraform data to Rego (#8741)\n  * refactor(terraform): simplify AllReferences method signature in Attribute (#8906)\n  * fix: check post-analyzers for StaticPaths (#8904)\n  * feat: add Bottlerocket OS package analyzer (#8653)\n  * feat(license): improve work text licenses with custom classification (#8888)\n  * chore(deps): bump github.com/containerd/containerd/v2 from 2.1.0 to 2.1.1 (#8901)\n  * chore(deps): bump the common group across 1 directory with 9 updates (#8887)\n  * refactor(license): simplify compound license scanning (#8896)\n  * feat(license): Support compound licenses (licenses using SPDX operators) (#8816)\n  * fix(k8s): use in-memory cache backend during misconfig scanning (#8873)\n  * feat(nodejs): add bun.lock parser (#8851)\n  * feat(license): improve work with custom classification of licenses from config file (#8861)\n  * fix(cli): disable `--skip-dir` and `--skip-files` flags for `sbom` command (#8886)\n  * fix: julia parser panicing (#8883)\n  * refactor(db): change logic to detect wrong DB (#8864)\n  * fix(cli): don't use allow values for `--compliance` flag (#8881)\n  * docs(misconf): Reorganize misconfiguration scan pages (#8206)\n  * fix(server): add missed Relationship field for `rpc` (#8872)\n  * feat: add JSONC support for comments and trailing commas (#8862)\n  * fix(vex): use `lo.IsNil` to check `VEX` from OCI artifact (#8858)\n  * feat(go): support license scanning in both GOPATH and vendor (#8843)\n  * fix(redhat): save contentSets for OS packages in fs/vm modes (#8820)\n  * fix: filter all files when processing files installed from package managers (#8842)\n  * feat(misconf): add misconfiguration location to junit template (#8793)\n  * docs(vuln): remove OSV for Python from data sources (#8841)\n  * chore: add an issue template for maintainers (#8838)\n  * chore: enable staticcheck (#8815)\n  * ci(helm): bump Trivy version to 0.62.1 for Trivy Helm Chart 0.14.1 (#8836)\n  * feat(license): scan vendor directory for license for go.mod files (#8689)\n  * docs(java):  Update info about dev deps in gradle lock (#8830)\n  * chore(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 in the common group (#8822)\n  * fix(java): exclude dev dependencies in gradle lockfile (#8803)\n  * fix: octalLiteral from go-critic (#8811)\n  * fix(redhat): trim invalid suffix from content_sets in manifest parsing (#8818)\n  * chore(deps): bump the common group across 1 directory with 10 updates (#8817)\n  * fix: use-any from revive (#8810)\n  * fix: more revive rules (#8814)\n  * docs: change in java.md: fix the Trity -to-\u003e Trivy typo (#8813)\n  * fix(misconf): check if for-each is known when expanding dyn block (#8808)\n  * ci(helm): bump Trivy version to 0.62.0 for Trivy Helm Chart 0.14.0 (#8802)\n\n- Update to version 0.62.1 (bsc#1239225, CVE-2025-22868,\n                            bsc#1241724, CVE-2025-22872):\n\n  * chore(deps): bump the common group across 1 directory with 10 updates [backport: release/v0.62] (#8831)\n  * fix(misconf): check if for-each is known when expanding dyn block [backport: release/v0.62] (#8826)\n  * fix(redhat): trim invalid suffix from content_sets in manifest parsing [backport: release/v0.62] (#8824)\n  * feat(nodejs): add root and workspace for `yarn` packages (#8535)\n  * fix: unused-parameter rule from revive (#8794)\n  * chore(deps): Update trivy-checks (#8798)\n  * fix: early-return, indent-error-flow and superfluous-else rules from revive  (#8796)\n  * fix(k8s): remove using `last-applied-configuration` (#8791)\n  * refactor(misconf): remove unused methods from providers (#8781)\n  * refactor(misconf): remove unused methods from iac types (#8782)\n  * fix(misconf): filter null nodes when parsing json manifest (#8785)\n  * fix: testifylint last issues (#8768)\n  * fix(misconf): perform operations on attribute safely (#8774)\n  * refactor(ubuntu): update time handling for fixing time (#8780)\n  * chore(deps): bump golangci-lint to v2.1.2 (#8766)\n  * feat(image): save layers metadata into report (#8394)\n  * feat(misconf): convert AWS managed policy to document (#8757)\n  * chore(deps): bump the docker group across 1 directory with 3 updates (#8762)\n  * ci(helm): bump Trivy version to 0.61.1 for Trivy Helm Chart 0.13.1 (#8753)\n  * ci(helm): create a helm branch for patches from main (#8673)\n  * fix(terraform): hcl object expressions to return references (#8271)\n  * chore(terraform): option to pass in instanced logger  (#8738)\n  * ci: use `Skitionek/notify-microsoft-teams` instead of `aquasecurity` fork (#8740)\n  * chore(terraform): remove os.OpenPath call from terraform file functions (#8737)\n  * chore(deps): bump the common group across 1 directory with 23 updates (#8733)\n  * feat(rust): add root and workspace relationships/package for `cargo` lock files (#8676)\n  * refactor(misconf): remove module outputs from parser.EvaluateAll (#8587)\n  * fix(misconf): populate context correctly for module instances (#8656)\n  * fix(misconf): check if metadata is not nil (#8647)\n  * refactor(misconf): switch to x/json  (#8719)\n  * fix(report): clean buffer after flushing (#8725)\n  * ci: improve PR title validation workflow (#8720)\n  * refactor(flag): improve flag system architecture and extensibility (#8718)\n  * fix(terraform): `evaluateStep` to correctly set `EvalContext` for multiple instances of blocks (#8555)\n  * refactor: migrate from `github.com/aquasecurity/jfather` to `github.com/go-json-experiment/json` (#8591)\n  * feat(misconf): support auto_provisioning_defaults in google_container_cluster (#8705)\n  * ci: use `github.event.pull_request.user.login` for release PR check workflow (#8702)\n  * refactor: add hook interface for extended functionality (#8585)\n  * fix(misconf): add missing variable as unknown (#8683)\n  * docs: Update maintainer docs (#8674)\n  * ci(vuln): reduce github action script injection attack risk (#8610)\n  * fix(secret): ignore .dist-info directories during secret scanning (#8646)\n  * fix(server): fix redis key when trying to delete blob (#8649)\n  * chore(deps): bump the testcontainers group with 2 updates (#8650)\n  * test: use `aquasecurity` repository for test images (#8677)\n  * chore(deps): bump the aws group across 1 directory with 5 updates (#8652)\n  * fix(k8s): skip passed misconfigs for the summary report (#8684)\n  * fix(k8s): correct compare artifact versions (#8682)\n  * chore: update Docker lib (#8681)\n  * refactor(misconf): remove unused terraform attribute methods (#8657)\n  * feat(misconf): add option to pass Rego scanner to IaC scanner (#8369)\n  * chore: typo fix to replace `rego` with `repo` on the RepoFlagGroup options error output (#8643)\n  * docs: Add info about helm charts release (#8640)\n  * ci(helm): bump Trivy version to 0.61.0 for Trivy Helm Chart 0.13.0 (#8638)\n\nUpdate to version 0.61.1 (bsc#1239385, CVE-2025-22869, bsc#1240466, CVE-2025-30204):\n\n  * fix(k8s): skip passed misconfigs for the summary report [backport: release/v0.61] (#8748)\n  * fix(k8s): correct compare artifact versions [backport: release/v0.61] (#8699)\n  * test: use `aquasecurity` repository for test images [backport: release/v0.61] (#8698)\n  * fix(misconf): Improve logging for unsupported checks (#8634)\n  * feat(k8s): add support for controllers (#8614)\n  * fix(debian): don't include empty licenses for `dpkgs` (#8623)\n  * fix(misconf): Check values wholly prior to evalution (#8604)\n  * chore(deps): Bump trivy-checks (#8619)\n  * fix(k8s): show report for `--report all` (#8613)\n  * chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#8597)\n  * refactor: rename scanner to service (#8584)\n  * fix(misconf): do not skip loading documents from subdirectories (#8526)\n  * refactor(misconf): get a block or attribute without calling HasChild (#8586)\n  * fix(misconf): identify the chart file exactly by name (#8590)\n  * test: use table-driven tests in Helm scanner tests (#8592)\n  * refactor(misconf): Simplify misconfig checks bundle parsing (#8533)\n  * chore(deps): bump the common group across 1 directory with 10 updates (#8566)\n  * fix(misconf): do not use cty.NilVal for non-nil values (#8567)\n  * docs(cli): improve flag value display format (#8560)\n  * fix(misconf): set default values for AWS::EKS::Cluster.ResourcesVpcConfig (#8548)\n  * docs: remove slack (#8565)\n  * fix: use `--file-patterns` flag for all post analyzers (#7365)\n  * docs(python): Mention pip-compile (#8484)\n  * feat(misconf): adapt aws_opensearch_domain (#8550)\n  * feat(misconf): adapt AWS::EC2::VPC (#8534)\n  * docs: fix a broken link (#8546)\n  * fix(fs): check postAnalyzers for StaticPaths (#8543)\n  * refactor(misconf): remove unused methods for ec2.Instance (#8536)\n  * feat(misconf): adapt aws_default_security_group (#8538)\n  * feat(fs): optimize scanning performance by direct file access for known paths (#8525)\n  * feat(misconf): adapt AWS::DynamoDB::Table (#8529)\n  * style: Fix MD syntax in self-hosting.md (#8523)\n  * perf(misconf): retrieve check metadata from annotations once (#8478)\n  * feat(misconf): Add support for aws_ami (#8499)\n  * fix(misconf): skip Azure CreateUiDefinition (#8503)\n  * refactor(misconf): use OPA v1 (#8518)\n  * fix(misconf): add ephemeral block type to config schema (#8513)\n  * perf(misconf): parse input for Rego once (#8483)\n  * feat: replace TinyGo with standard Go for WebAssembly modules (#8496)\n  * chore: replace deprecated tenv linter with usetesting (#8504)\n  * fix(spdx): save text licenses into `otherLicenses` without normalize (#8502)\n  * chore(deps): bump the common group across 1 directory with 13 updates (#8491)\n  * chore: use go.mod for managing Go tools (#8493)\n  * ci(helm): bump Trivy version to 0.60.0 for Trivy Helm Chart 0.12.0 (#8494)\n  * fix(sbom): improve logic for binding direct dependency to parent component (#8489)\n  * chore(deps): remove missed replace of `trivy-db` (#8492)\n  * chore(deps): bump alpine from 3.21.0 to 3.21.3 in the docker group across 1 directory (#8490)\n  * chore(deps): update Go to 1.24 and switch to go-version-file (#8388)\n  * docs: add abbreviation list (#8453)\n  * chore(terraform): assign *terraform.Module 'parent' field (#8444)\n  * feat: add report summary table (#8177)\n  * chore(deps): bump the github-actions group with 3 updates (#8473)\n  * refactor(vex): improve SBOM reference handling with project standards (#8457)\n  * ci: update GitHub Actions cache to v4 (#8475)\n  * feat: add `--vuln-severity-source` flag (#8269)\n  * fix(os): add mapping OS aliases (#8466)\n  * chore(deps): bump the aws group across 1 directory with 7 updates (#8468)\n  * chore(deps): Bump trivy-checks to v1.7.1 (#8467)\n  * refactor(report): write tables after rendering all results (#8357)\n  * docs: update VEX documentation index page (#8458)\n  * fix(db): fix case when 2 trivy-db were copied at the same time (#8452)\n  * feat(misconf): render causes for Terraform (#8360)\n  * fix(misconf): fix incorrect k8s locations due to JSON to YAML conversion (#8073)\n  * feat(cyclonedx): Add initial support for loading external VEX files from SBOM references (#8254)\n  * chore(deps): update go-rustaudit location (#8450)\n  * fix: update all documentation links (#8045)\n  * chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#8443)\n  * chore(deps): bump the common group with 6 updates (#8411)\n  * fix(k8s): add missed option `PkgRelationships` (#8442)\n  * fix(sbom): add SBOM file's filePath as Application FilePath if we can't detect its path (#8346)\n  * feat(go): fix parsing main module version for go \u003e= 1.24 (#8433)\n  * refactor(misconf): make Rego scanner independent of config type (#7517)\n  * fix(image): disable AVD-DS-0007 for history scanning (#8366)\n  * fix(server): secrets inspectation for the config analyzer in client server mode (#8418)\n  * chore: remove mockery (#8417)\n  * test(server): replace mock driver with memory cache in server tests (#8416)\n  * test: replace mock with memory cache and fix non-deterministic tests (#8410)\n  * test: replace mock with memory cache in scanner tests (#8413)\n  * test: use memory cache (#8403)\n  * fix(spdx): init `pkgFilePaths` map for all formats (#8380)\n  * chore(deps): bump the common group across 1 directory with 11 updates (#8381)\n  * docs: correct Ruby documentation (#8402)\n  * chore: bump `mockery` to update v2.52.2 version and rebuild mock files (#8390)\n  * fix: don't use `scope` for `trivy registry login` command (#8393)\n  * fix(go): merge nested flags into string for ldflags for Go binaries (#8368)\n  * chore(terraform): export module path on terraform modules (#8374)\n  * fix(terraform): apply parser options to submodule parsing (#8377)\n  * docs: Fix typos in documentation (#8361)\n  * docs: fix navigate links (#8336)\n  * ci(helm): bump Trivy version to 0.59.1 for Trivy Helm Chart 0.11.1 (#8354)\n  * ci(spdx): add `aqua-installer` step to fix `mage` error (#8353)\n  * chore: remove debug prints (#8347)\n  * fix(misconf): do not log scanners when misconfig scanning is disabled (#8345)\n  * fix(report): remove html escaping for `shortDescription` and `fullDescription` fields for sarif reports (#8344)\n  * chore(deps): bump Go to `v1.23.5` (#8341)\n  * fix(python): add `poetry` v2 support (#8323)\n  * chore(deps): bump the github-actions group across 1 directory with 4 updates (#8331)\n  * fix(misconf): ecs include enhanced for container insights (#8326)\n  * fix(sbom): preserve OS packages from multiple SBOMs (#8325)\n  * ci(helm): bump Trivy version to 0.59.0 for Trivy Helm Chart 0.11.0 (#8311)\n  *  (bsc#1237618, CVE-2025-27144)\n\nUpdate to version 0.59.1:\n\n  * fix(misconf): do not log scanners when misconfig scanning is disabled [backport: release/v0.59] (#8349)\n  * chore(deps): bump Go to `v1.23.5` [backport: release/v0.59] (#8343)\n  * fix(python): add `poetry` v2 support [backport: release/v0.59] (#8335)\n  * fix(sbom): preserve OS packages from multiple SBOMs [backport: release/v0.59] (#8333)\n\nUpdate to version 0.59.0:\n\n  * feat(image): return error early if total size of layers exceeds limit (#8294)\n  * chore(deps): Bump trivy-checks (#8310)\n  * chore(terraform): add accessors to underlying raw hcl values (#8306)\n  * fix: improve conversion of image config to Dockerfile (#8308)\n  * docs: replace short codes with Unicode emojis (#8296)\n  * feat(k8s): improve artifact selections for specific namespaces (#8248)\n  * chore: update code owners (#8303)\n  * fix(misconf): handle heredocs in dockerfile instructions (#8284)\n  * fix: de-duplicate same `dpkg` packages with different filePaths from different layers (#8298)\n  * chore(deps): bump the aws group with 7 updates (#8299)\n  * chore(deps): bump the common group with 12 updates (#8301)\n  * chore: enable int-conversion from perfsprint (#8194)\n  * feat(fs): use git commit hash as cache key for clean repositories (#8278)\n  * fix(spdx): use the `hasExtractedLicensingInfos` field for licenses that are not listed in the SPDX (#8077)\n  * chore: use require.ErrorContains when possible (#8291)\n  * feat(image): prevent scanning oversized container images (#8178)\n  * chore(deps): use aqua forks for `github.com/liamg/jfather` and `github.com/liamg/iamgo` (#8289)\n  * fix(fs): fix cache key generation to use UUID (#8275)\n  * fix(misconf): correctly handle all YAML tags in K8S templates (#8259)\n  * feat: add support for registry mirrors (#8244)\n  * chore(deps): bump the common group across 1 directory with 29 updates (#8261)\n  * refactor(license): improve license expression normalization (#8257)\n  * feat(misconf): support for ignoring by inline comments for Dockerfile (#8115)\n  * feat: add a examples field to check metadata (#8068)\n  * chore(deps): bump alpine from 3.20.0 to 3.21.0 in the docker group across 1 directory (#8196)\n  * ci: add workflow to restrict direct PRs to release branches (#8240)\n  * fix(suse): SUSE - update OSType constants and references for compatility (#8236)\n  * ci: fix path to main dir for canary builds (#8231)\n  * chore(secret): add reported issues related to secrets in junit template (#8193)\n  * refactor: use trivy-checks/pkg/specs package (#8226)\n  * ci(helm): bump Trivy version to 0.58.1 for Trivy Helm Chart 0.10.0 (#8170)\n  * fix(misconf): allow null values only for tf variables (#8112)\n  * feat(misconf): support for ignoring by inline comments for Helm (#8138)\n  * fix(redhat): check `usr/share/buildinfo/` dir to detect content sets (#8222)\n  * chore(alpine): add EOL date for Alpine 3.21 (#8221)\n  * fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field (#8207)\n  * fix(misconf): disable git terminal prompt on tf module load (#8026)\n  * chore: remove aws iam related scripts (#8179)\n  * docs: Updated JSON schema version 2 in the trivy documentation (#8188)\n  * refactor(python): use once + debug for `License acquired from METADATA...` logs (#8175)\n  * refactor: use slices package instead of custom function (#8172)\n  * chore(deps): bump the common group with 6 updates (#8162)\n  * feat(python): add support for uv dev and optional dependencies (#8134)\n  * feat(python): add support for poetry dev dependencies (#8152)\n  * fix(sbom): attach nested packages to Application (#8144)\n  * docs(vex): use debian minor version in examples (#8166)\n  * refactor: add generic Set implementation (#8149)\n  * chore(deps): bump the aws group across 1 directory with 6 updates (#8163)\n  * fix(python): skip dev group's deps for poetry (#8106)\n  * fix(sbom): use root package for `unknown` dependencies (if exists) (#8104)\n  * chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` (#8140)\n  * chore(vex): suppress CVE-2024-45338 (#8137)\n  * feat(python): add support for uv (#8080)\n  * chore(deps): bump the docker group across 1 directory with 3 updates (#8127)\n  * chore(deps): bump the common group across 1 directory with 14 updates (#8126)\n  * chore: bump go to 1.23.4 (#8123)\n  * test: set dummy value for NUGET_PACKAGES (#8107)\n  * chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` (#8105)\n  * chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#8103)\n  * fix: wasm module test (#8099)\n  * fix: CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass (#8088)\n  * chore(vex): suppress CVE-2024-45337 (#8101)\n  * fix(license): always trim leading and trailing spaces for licenses (#8095)\n  * fix(sbom): scan results of SBOMs generated from container images are missing layers (#7635)\n  * fix(redhat): correct rewriting of recommendations for the same vulnerability (#8063)\n  * fix: enable err-error and errorf rules from perfsprint linter (#7859)\n  * chore(deps): bump the aws group across 1 directory with 6 updates (#8074)\n  * perf: avoid heap allocation in applier findPackage (#7883)\n  * fix: Updated twitter icon (#7772)\n  * docs(k8s): add a note about multi-container pods (#7815)\n  * feat: add `--distro` flag to manually specify OS distribution for vulnerability scanning (#8070)\n  * fix(oracle): add architectures support for advisories (#4809)\n  * fix: handle `BLOW_UNKNOWN` error to download DBs (#8060)\n  * feat(misconf): generate placeholders for random provider resources (#8051)\n  * fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type (#8052)\n  * fix(flag): skip hidden flags for `--generate-default-config` command (#8046)\n  * fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props (#8050)\n  * feat(nodejs): respect peer dependencies for dependency tree (#7989)\n  * ci(helm): bump Trivy version to 0.58.0 for Trivy Helm Chart 0.10.0 (#8038)\n  * fix: respect GITHUB_TOKEN to download artifacts from GHCR (#7580)\n  * chore(deps): bump github.com/moby/buildkit from 0.17.2 to 0.18.0 in the docker group (#8029)\n  * fix(misconf): use log instead of fmt for logging (#8033)\n  * docs: add commercial content (#8030)\n\n- Update to version 0.58.2 (\n      bsc#1234512, CVE-2024-45337,\n      bsc#1235265, CVE-2024-45338,\n      bsc#1232948, CVE-2024-51744):\n\n  * fix(misconf): allow null values only for tf variables [backport: release/v0.58] (#8238)\n  * fix(suse): SUSE - update OSType constants and references for compatility [backport: release/v0.58] (#8237)\n  * fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field [backport: release/v0.58] (#8215)\n  * fix(sbom): attach nested packages to Application [backport: release/v0.58] (#8168)\n  * fix(python): skip dev group's deps for poetry [backport: release/v0.58] (#8158)\n  * fix(sbom): use root package for `unknown` dependencies (if exists) [backport: release/v0.58] (#8156)\n  * chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` [backport: release/v0.58] (#8142)\n  * chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` [backport: release/v0.58] (#8136)\n  * fix(redhat): correct rewriting of recommendations for the same vulnerability [backport: release/v0.58] (#8135)\n  * fix(oracle): add architectures support for advisories [backport: release/v0.58] (#8125)\n  * fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type [backport: release/v0.58] (#8124)\n  * chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 [backport: release/v0.58] (#8122)\n  * fix: handle `BLOW_UNKNOWN` error to download DBs [backport: release/v0.58] (#8121)\n  * fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props [backport: release/v0.58] (#8119)\n  * fix(misconf): wrap AWS EnvVar to iac types (#7407)\n  * chore(deps): Upgrade trivy-checks (#8018)\n  * refactor(misconf): Remove unused options (#7896)\n  * docs: add terminology page to explain Trivy concepts (#7996)\n  * feat: add `workspaceRelationship` (#7889)\n  * refactor(sbom): simplify relationship generation (#7985)\n  * chore: remove Go checks (#7907)\n  * docs: improve databases documentation (#7732)\n  * refactor: remove support for custom Terraform checks (#7901)\n  * docs: fix dead links (#7998)\n  * docs: drop AWS account scanning (#7997)\n  * fix(aws): change CPU and Memory type of ContainerDefinition to a string (#7995)\n  * fix(cli): Handle empty ignore files more gracefully (#7962)\n  * fix(misconf): load full Terraform module (#7925)\n  * fix(misconf): properly resolve local Terraform cache (#7983)\n  * refactor(k8s): add v prefix for Go packages (#7839)\n  * test: replace Go checks with Rego (#7867)\n  * feat(misconf): log causes of HCL file parsing errors (#7634)\n  * chore(deps): bump the aws group across 1 directory with 7 updates (#7991)\n  * chore(deps): bump github.com/moby/buildkit from 0.17.0 to 0.17.2 in the docker group across 1 directory (#7990)\n  * chore(deps): update csaf module dependency from csaf-poc to gocsaf (#7992)\n  * chore: downgrade the failed block expand message to debug (#7964)\n  * fix(misconf): do not erase variable type for child modules (#7941)\n  * feat(go): construct dependencies of `go.mod` main module in the parser (#7977)\n  * feat(go): construct dependencies in the parser (#7973)\n  * feat: add cvss v4 score and vector in scan response (#7968)\n  * docs: add `overview` page for `others` (#7972)\n  * fix(sbom): Fixes for Programming Language Vulnerabilities and SBOM Package Maintainer Details (#7871)\n  * feat(suse): Align SUSE/OpenSUSE OS Identifiers (#7965)\n  * chore(deps): bump the common group with 4 updates (#7949)\n  * feat(oracle): add `flavors` support (#7858)\n  * fix(misconf): Update trivy-checks default repo to `mirror.gcr.io` (#7953)\n  * chore(deps): Bump up trivy-checks to v1.3.0 (#7959)\n  * fix(k8s): check all results for vulnerabilities (#7946)\n  * ci(helm): bump Trivy version to 0.57.1 for Trivy Helm Chart 0.9.0 (#7945)\n  * feat(secret): Add built-in secrets rules for Private Packagist (#7826)\n  * docs: Fix broken links (#7900)\n  * docs: fix mistakes/typos (#7942)\n  * feat: Update registry fallbacks (#7679)\n  * fix(alpine): add `UID` for removed packages (#7887)\n  * chore(deps): bump the aws group with 6 updates (#7902)\n  * chore(deps): bump the common group with 6 updates (#7904)\n  * fix(debian): infinite loop (#7928)\n  * fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files (#7912)\n  * docs: add note about temporary podman socket (#7921)\n  * docs: combine trivy.dev into trivy docs (#7884)\n  * test: change branch in spdx schema link to check in integration tests (#7935)\n  * docs: add Headlamp to the Trivy Ecosystem page (#7916)\n  * fix(report): handle `git@github.com` schema for misconfigs in `sarif` report (#7898)\n  * chore(k8s): enhance k8s scan log (#6997)\n  * fix(terraform): set null value as fallback for missing variables (#7669)\n  * fix(misconf): handle null properties in CloudFormation templates (#7813)\n  * fix(fs): add missing defered Cleanup() call to post analyzer fs (#7882)\n  * chore(deps): bump the common group across 1 directory with 20 updates (#7876)\n  * chore: bump containerd to v2.0.0 (#7875)\n  * fix: Improve version comparisons when build identifiers are present (#7873)\n  * feat(k8s): add default commands for unknown platform (#7863)\n  * chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#7868)\n  * refactor(secret): optimize performance by moving ToLower operation outside loop (#7862)\n  * test: save `containerd` image into archive and use in tests (#7816)\n  * chore(deps): bump the github-actions group across 1 directory with 2 updates (#7854)\n  * chore: bump golangci-lint to v1.61.0 (#7853)\n\nUpdate to version 0.57.1:\n\n  * feat: Update registry fallbacks [backport: release/v0.57] (#7944)\n  * fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files [backport: release/v0.57] (#7939)\n  * test: change branch in spdx schema link to check in integration tests [backport: release/v0.57] (#7940)\n  * release: v0.57.0 [main] (#7710)\n  * chore: lint `errors.Join` (#7845)\n  * feat(db): append errors (#7843)\n  * docs(java): add info about supported scopes (#7842)\n  * docs: add example of creating whitelist of checks (#7821)\n  * chore(deps): Bump trivy-checks (#7819)\n  * fix(go): Do not trim v prefix from versions in Go Mod Analyzer (#7733)\n  * fix(k8s): skip resources without misconfigs (#7797)\n  * fix(sbom):  use `Annotation` instead of `AttributionTexts` for `SPDX` formats (#7811)\n  * fix(cli): add config name to skip-policy-update alias (#7820)\n  * fix(helm): properly handle multiple archived dependencies (#7782)\n  * refactor(misconf): Deprecate `EXCEPTIONS` for misconfiguration scanning (#7776)\n  * fix(k8s)!: support k8s multi container (#7444)\n  * fix(k8s): support kubernetes v1.31 (#7810)\n  * docs: add Windows install instructions (#7800)\n  * ci(helm): auto public Helm chart after PR merged (#7526)\n  * feat: add end of life date for Ubuntu 24.10 (#7787)\n  * feat(report): update gitlab template to populate operating_system value (#7735)\n  * feat(misconf): Show misconfig ID in output (#7762)\n  * feat(misconf): export unresolvable field of IaC types to Rego (#7765)\n  * refactor(k8s): scan config files as a folder (#7690)\n  * fix(license): fix license normalization for Universal Permissive License (#7766)\n  * fix: enable usestdlibvars linter (#7770)\n  * fix(misconf): properly expand dynamic blocks (#7612)\n  * feat(cyclonedx): add file checksums to `CycloneDX` reports (#7507)\n  * fix(misconf): fix for Azure Storage Account network acls adaptation (#7602)\n  * refactor(misconf): simplify k8s scanner (#7717)\n  * feat(parser): ignore white space in pom.xml files (#7747)\n  * test: use forked images (#7755)\n  * fix(java): correctly inherit `version` and `scope` from upper/root `depManagement` and `dependencies` into parents (#7541)\n  * fix(misconf): check if property is not nil before conversion (#7578)\n  * fix(misconf): change default ACL of digitalocean_spaces_bucket to private (#7577)\n  * feat(misconf): ssl_mode support for GCP SQL DB instance (#7564)\n  * test: define constants for test images (#7739)\n  * docs: add note about disabled DS016 check (#7724)\n  * feat(misconf): public network support for Azure Storage Account (#7601)\n  * feat(cli): rename `trivy auth` to `trivy registry` (#7727)\n  * docs: apt-transport-https is a transitional package (#7678)\n  * refactor(misconf): introduce generic scanner (#7515)\n  * fix(cli): `clean --all` deletes only relevant dirs (#7704)\n  * feat(cli): add `trivy auth` (#7664)\n  * fix(sbom): add options for DBs in private registries (#7660)\n  * docs(report): fix reporting doc format (#7671)\n  * fix(repo): `git clone` output to Stderr (#7561)\n  * fix(redhat): include arch in PURL qualifiers (#7654)\n  * fix(report): Fix invalid URI in SARIF report (#7645)\n  * docs(report): Improve SARIF reporting doc (#7655)\n  * fix(db): fix javadb downloading error handling (#7642)\n  * feat(cli): error out when ignore file cannot be found (#7624)\n\nUpdate to version 0.56.2:\n\n  * fix(redhat): include arch in PURL qualifiers [backport: release/v0.56] (#7702)\n  * fix(sbom): add options for DBs in private registries [backport: release/v0.56] (#7691)\n\n- Update to version 0.51.1 (bsc#1227010, CVE-2024-3817):\n","status":"withdrawn","published":"2025-11-27T12:27:44Z","modified":"2026-06-24T14:04:22.238238822Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2025:20160-1","title":"Security update for hauler","description":"This update for hauler fixes the following issues:\n\n- Update to version 1.3.1 (bsc#1251516, CVE-2025-47911,\n  bsc#1251891, CVE-2025-11579, bsc#1251651, CVE-2025-58190,\n  bsc#1248937, CVE-2025-58058):\n  * bump github.com/containerd/containerd (#474)\n  * another fix to tests for new tests (#472)\n  * fixed typo in testdata (#471)\n  * fixed/cleaned new tests (#470)\n  * trying a new way for hauler testing (#467)\n  * update for cosign v3 verify (#469)\n  * added digests view to info (#465)\n  * bump github.com/nwaples/rardecode/v2 from 2.1.1 to 2.2.0 in the go_modules group across 1 directory (#457)\n  * update oras-go to v1.2.7 for security patches (#464)\n  * update cosign to v3.0.2+hauler.1 (#463)\n  * fixed homebrew directory deprecation (#462)\n  * add registry logout command (#460)\n\n- Update to version 1.3.0:\n  * bump the go_modules group across 1 directory with 2 updates (#455)\n  * upgraded versions/dependencies/deprecations (#454)\n  * allow loading of docker tarballs (#452)\n  * bump the go_modules group across 1 directory with 2 updates (#449)\n\n- update to 1.2.5 (bsc#1246722, CVE-2025-46569):\n  * Bump github.com/open-policy-agent/opa from 1.1.0 to 1.4.0 in\n    the go_modules group across 1 directory (CVE-2025-46569)\n  * deprecate auth from hauler store copy\n  * Bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in the\n    go_modules group across 1 directory\n  * Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0\n    in the go_modules group across 1 directory\n  * upgraded go and dependencies versions\n\n- Update to version 1.2.5:\n  * upgraded go and dependencies versions (#444)\n  * Bump github.com/go-viper/mapstructure/v2 (#442)\n  * bump github.com/cloudflare/circl (#441)\n  * deprecate auth from hauler store copy (#440)\n  * Bump github.com/open-policy-agent/opa (#438)\n\n- update to 1.2.4 (CVE-2025-22872, bsc#1241804):\n  * Bump golang.org/x/net from 0.37.0 to 0.38.0 in the go_modules\n    group across 1 directory\n  * minor tests updates\n\n- Update to version 1.2.3:\n  * formatting and flag text updates\n  * add keyless signature verification (#434)\n  * bump helm.sh/helm/v3 in the go_modules group across 1 directory (#430)\n  * add --only flag to hauler store copy (for images) (#429)\n  * fix tlog verification error/warning output (#428)\n\n- Update to version 1.2.2 (bsc#1241184, CVE-2024-0406):\n  * cleanup new tlog flag typos and add shorthand (#426)\n  * default public transparency log verification to false to be airgap friendly but allow override (#425)\n  * bump github.com/golang-jwt/jwt/v4 (#423)\n  * bump the go_modules group across 1 directory with 2 updates (#422)\n  * bump github.com/go-jose/go-jose/v3 (#417)\n  * bump github.com/go-jose/go-jose/v4 (#415)\n  * clear default manifest name if product flag used with sync (#412)\n  * updates for v1.2.0 (#408)\n  * fixed remote code (#407)\n  * added remote file fetch to load (#406)\n  * added remote and multiple file fetch to sync (#405)\n  * updated save flag and related logs (#404)\n  * updated load flag and related logs [breaking change] (#403)\n  * updated sync flag and related logs [breaking change] (#402)\n  * upgraded api update to v1/updated dependencies (#400)\n  * fixed consts for oci declarations (#398)\n  * fix for correctly grabbing platform post cosign 2.4 updates (#393)\n  * use cosign v2.4.1+carbide.2 to address containerd annotation in index.json (#390)\n  * Bump the go_modules group across 1 directory with 2 updates (#385)\n  * replace mholt/archiver with mholt/archives (#384)\n  * forked cosign bump to 2.4.1 and use as a library vs embedded binary (#383)\n  * cleaned up registry and improved logging (#378)\n  * Bump golang.org/x/crypto in the go_modules group across 1 directory (#377)\n- bump net/html dependencies (bsc#1235332, CVE-2024-45338)\n\n- Update to version 1.1.1:\n  * fixed cli desc for store env var (#374)\n  * updated versions for go/k8s/helm (#373)\n  * updated version flag to internal/flags (#369)\n  * renamed incorrectly named consts (#371)\n  * added store env var (#370)\n  * adding ignore errors and retries for continue on error/fail on error (#368)\n  * updated/fixed hauler directory (#354)\n  * standardize consts (#353)\n  * removed cachedir code (#355)\n  * removed k3s code (#352)\n  * updated dependencies for go, helm, and k8s (#351)\n  * [feature] build with boring crypto where available (#344)\n  * updated workflow to goreleaser builds (#341)\n  * added timeout to goreleaser workflow (#340)\n  * trying new workflow build processes (#337)\n  * improved workflow performance (#336)\n  * have extract use proper ref (#335)\n  * yet another workflow goreleaser fix (#334)\n  * even more workflow fixes (#333)\n  * added more fixes to github workflow (#332)\n  * fixed typo in hauler store save (#331)\n  * updates to fix build processes (#330)\n  * added integration tests for non hauler tarballs (#325)\n  * bump: golang \u003e= 1.23.1 (#328)\n  * add platform flag to store save (#329)\n  * Update feature_request.md\n  * updated/standardize command descriptions (#313)\n  * use new annotation for 'store save' manifest.json (#324)\n  * enable docker load for hauler tarballs (#320)\n  * bump to cosign v2.2.3-carbide.3 for new annotation (#322)\n  * continue on error when adding images to store (#317)\n  * Update README.md (#318)\n  * fixed completion commands (#312)\n  * github.com/rancherfederal/hauler =\u003e hauler.dev/go/hauler (#311)\n  * pages: enable go install hauler.dev/go/hauler (#310)\n  * Create CNAME\n  * pages: initial workflow (#309)\n  * testing and linting updates (#305)\n  * feat-273: TLS Flags (#303)\n  * added list-repos flag (#298)\n  * fixed hauler login typo (#299)\n  * updated cobra function for shell completion (#304)\n  * updated install.sh to remove github api (#293)\n  * fix image ref keys getting squashed when containing sigs/atts (#291)\n  * fix missing versin info in release build (#283)\n  * bump github.com/docker/docker in the go_modules group across 1 directory (#281)\n  * updated install script (`install.sh`) (#280)\n  * fix digest images being lost on load of hauls (Signed). (#259)\n  * feat: add readonly flag (#277)\n  * fixed makefile for goreleaser v2 changes (#278)\n  * updated goreleaser versioning defaults (#279)\n  * update feature_request.md (#274)\n  * updated old references\n  * updated actions workflow user\n  * added dockerhub to github actions workflow\n  * removed helm chart\n  * added debug container and workflow\n  * updated products flag description\n  * updated chart for release\n  * fixed workflow errors/warnings\n  * fixed permissions on testdata\n  * updated chart versions (will need to update again)\n  * last bit of fixes to workflow\n  * updated unit test workflow\n  * updated goreleaser deprecations\n  * added helm chart release job\n  * updated github template names\n  * updated imports (and go fmt)\n  * formatted gitignore to match dockerignore\n  * formatted all code (go fmt)\n  * updated chart tests for new features\n  * Adding the timeout flag for fileserver command\n  * Configure chart commands to use helm clients for OCI and private registry support\n  * Added some documentation text to sync command\n  * Bump golang.org/x/net from 0.17.0 to 0.23.0\n  * fix for dup digest smashing in cosign\n  * removed vagrant scripts\n  * last bit of updates and formatting of chart\n  * updated hauler testdata\n  * adding functionality and cleaning up\n  * added initial helm chart\n  * removed tag in release workflow\n  * updated/fixed image ref in release workflow\n  * updated/fixed platforms in release workflow\n  * updated/cleaned github actions (#222)\n  * Make Product Registry configurable (#194)\n  * updated fileserver directory name (#219)\n  * fix logging for files\n  * add extra info for the tempdir override flag\n  * tempdir override flag for load\n  * deprecate the cache flag instead of remove\n  * switch to using bci-golang as builder image\n  * fix: ensure /tmp for hauler store load\n  * added the copy back for now\n  * remove copy at the image sync not needed with cosign update\n  * removed misleading cache flag\n  * better logging when adding to store\n  * update to v2.2.3 of our cosign fork\n  * add: dockerignore\n  * add: Dockerfile\n  * Bump google.golang.org/protobuf from 1.31.0 to 1.33.0\n  * Bump github.com/docker/docker\n  * updated and added new logos\n  * updated github files\n","status":"published","published":"2025-12-12T13:20:11Z","modified":"2026-03-23T04:54:19.019904Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:11126-1","title":"velociraptor-0.7.0.4.git185.a5708584-2.1 on GA media","description":"These are all security issues fixed in the velociraptor-0.7.0.4.git185.a5708584-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-25T00:00:00Z","modified":"2026-06-26T08:15:07.590096547Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11305-1","title":"containerized-data-importer1.65-api-1.65.0-2.1 on GA media","description":"These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-18T00:00:00Z","modified":"2026-07-19T13:15:06.539765476Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11514-1","title":"containerized-data-importer1.66-api-1.66.0-1.1 on GA media","description":"These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-15T00:00:00Z","modified":"2026-08-16T11:45:05.55610978Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:20105-1","title":"Security update for sbctl","description":"This update for sbctl fixes the following issues:\n\nChanges in sbctl:\n\n- Upgrade the embedded golang.org/x/net to 0.46.0\n  * Fixes: bsc#1251399, CVE-2025-47911: various algorithms with\n    quadratic complexity when parsing HTML documents\n  * Fixes: bsc#1251609, CVE-2025-58190: excessive memory consumption\n    by 'html.ParseFragment' when processing specially crafted input\n\n- Update to version 0.18:\n  * logging: fixup new go vet warning\n  * workflows: add cc for cross compile\n  * workflow: add sudo to apt\n  * workflow: add pcsclite to ci\n  * workflow: try enable cgo\n  * go.mod: update golang.org/x/ dependencies\n  * fix: avoid adding bogus Country attribute to subject DNs\n  * sbctl: only store file if we did actually sign the file\n  * installkernel: add post install hook for Debian's traditional installkernel\n  * CI: missing libpcsclite pkg\n  * workflows: add missing depends and new pattern keyword\n  * Add yubikey example for create keys to the README\n  * Initial yubikey backend keytype support\n  * verify: ensure we pass args in correct order\n\n- bsc#1248949 (CVE-2025-58058):\n  Bump xz to 0.5.14\n\n- Update to version 0.17:\n  * Ensure we don't wrongly compare input/output files when signing\n  * Added --json supprt to sbctl verify\n  * Ensure sbctl setup with no arguments returns a helpful output\n  * Import latest Microsoft keys for KEK and db databases\n  * Ensure we print the path of the file when encountering an invalid PE file\n  * Misc fixups in tests\n  * Misc typo fixes in prints\n\n- Update to version 0.16:\n  * Ensure sbctl reads --config even if /etc/sbctl/sbctl.conf is\n    present\n  * Fixed a bug where sbctl would abort if the TPM eventlog\n    contains the same byte multiple times\n  * Fixed a landlock bug where enroll-keys --export did not work\n  * Fixed a bug where an ESP mounted to multiple paths would not be\n    detected\n  * Exporting keys without efivars present work again\n  * sbctl sign will now use the saved output path if the signed\n    file is enrolled\n  * enroll-keys --append will now work without --force.\n- Updates from version 0.15.4:\n  * Fixed an issue where sign-all did not report a non-zero exit\n    code when something failed\n  * Fixed and issue where we couldn't write to a file with landlock\n  * Fixed an issue where --json would print the human readable\n    output and the json\n  * Fixes landlock for UKI/bundles by disabling the sandbox feature\n  * Some doc fixups that mentioned /usr/share/\n","status":"published","published":"2026-01-23T10:02:42Z","modified":"2026-03-23T04:54:44.107703Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20192-1","title":"Security update for tailscale","description":"This update for tailscale fixes the following issues:\n\nChanges in tailscale:\n\n- Update to version 1.94.0:\n  * IS SET and NOT SET have been added as device posture operators\n  * India DERP Region City Name updated\n  * Custom DERP servers support GCP Certificate Manager\n  * Tailscale SSH authentication, when successful, results in LOGIN audit\n    messages being sent to the kernel audit subsystem\n  * Tailscale Peer Relay throughput is improved when the SO_REUSEPORT socket\n    option is supported on multi-core systems\n  * Tailscale Peer Relay server handshake transmission is guarded against\n    routing loops over Tailscale\n  * MagicDNS always resolves when using resolv.conf without a DNS manager\n  * tailscaled_peer_relay_forwarded_packets_total and\n    tailscaled_peer_relay_forwarded_bytes_total client metrics are available for\n    Tailscale Peer Relays\n  * Identity tokens are automatically generated for workload identities\n  * --audience flag added to tailscale up command to support auto generation of\n    ID tokens for workload identity\n  * tsnet nodes can host Tailscale Services\n  * The tailscale lock status -json command returns tailnet key authority (TKA)\n    data in a stable format\n  * Tailscale Peer Relays deliver improved throughput through monotonic time\n    comparison optimizations and reduced lock contention\n  * Tailscale Services virtual IPs are now automatically accepted by clients\n    across all platforms regardless of the status of the --accept-routes\n    feature\n\n- Update to version 1.94.0:\n  * derp/derpserver: add a unique sender cardinality estimate\n  * syncs: add means of declare locking assumptions for debug mode\n  * cmd/k8s-operator: add support for taiscale.com/http-redirect\n  * cmd/k8s-operator fix populateTLSSecret on tests\n  * feature/posture: log method and full URL for posture identity requests\n  * k8s-operator: Fix typos in egress-pod-readiness.go\n  * cmd/tailscale,ipn: add Unix socket support for serve\n  * client/systray: change systray to start after graphical.target\n  * cmd/k8s-operator: warn if users attempt to expose a headless Service\n  * cmd/tailscale/cli, util/qrcodes: format QR codes on Linux consoles\n  * tsnet: ensure funnel listener cleans up after itself when closed\n  * ipn/store/kubestore: don't load write replica certs in memory\n  * tsnet: allow for automatic ID token generation\n\n- Update to version 1.92.5:\n  * types/persist: omit Persist.AttestationKey based on IsZero\n  * disable hardware attestation for kubernetes\n  * allow opting out of ACME order replace extension\n- Update to version 1.92.4:\n  * nothing of importance\n\n- Update to version 1.92.3:\n  * WireGuard configuration that occurs automatically in the client, no longer\n    results in a panic\n\n- Update to version 1.92.2:\n  * cmd/derper: add GCP Certificate Manager support\n\n- Update to version 1.92.1:\n  * fix LocalBackend deadlock when packet arrives during profile switch\n  * wgengine: fix TSMP/ICMP callback leak\n- Update to version 1.92.0:\n  * no changelog provided\n- Update to version 1.90.9:\n  * tailscaled no longer deadlocks during event bursts\n  * The client no longer hangs after wake up\n\n- Update to version 1.90.8:\n  * tka: move RemoveAll() to CompactableChonk\n- Update to version 1.90.7:\n  * wgengine/magicsock: validate endpoint.derpAddr\n  * wgengine/magicsock: fix UDPRelayAllocReq/Resp deadlock\n  * net/udprelay: replace VNI pool with selection algorithm\n  * feature/relayserver,ipn/ipnlocal,net/udprelay: plumb DERPMap\n  * feature/relayserver: fix Shutdown() deadlock\n  * net/netmon: do not abandon a subscriber when exiting early\n  * tka: don't try to read AUMs which are partway through being written\n  * tka: rename a mutex to mu instead of single-letter l\n  * ipn/ipnlocal: use an in-memory TKA store if FS is unavailable\n\n- Update to version 1.90.6:\n  * Routes no longer stall and fail to apply when updated repeatedly in a short\n    period of time\n  * Tailscale SSH no longer hangs for 10s when connecting to tsrecorder. This\n    affected tailnets that use Tailscale SSH recording\n\n- Update to version 1.90.4:\n  * deadlock issue no longer occurs in the client when checking\n    for the network to be available\n  * tailscaled no longer sporadically panics when a\n    Trusted Platform Module (TPM) device is present\n\n- Update to version 1.90.3:\n  * tailscaled shuts down as expected and without panic\n  * tailscaled starts up as expected in a no router configuration environment\n\n- Update to version 1.90.2:\n  * util/linuxfw: fix 32-bit arm regression with iptables\n  * health: compare warnable codes to avoid errors on release branch\n  * feature/tpm: check TPM family data for compatibility\n\n- Upate to version 1.90.1:\n  * Clients can use configured DNS resolvers for all domains\n  * Node keys will be renewed seamlessly\n  * Unnecessary path discovery packets over DERP servers are suppressed\n  * Node key sealing is GA (generally available) and enabled by default\n\n- update to version 1.88.3:\n  * cmd/tailscale/cli: add ts2021 debug flag to set a dial plan\n  * control/controlhttp: simplify, fix race dialing, remove priority concept\n- update to version 1.88.2:\n  * k8s-operator: reset service status before append\n- require the minimum go version directly, in comparison to using the golang(API)\n  symbol\n\n- update to version 1.88.1:\n  * Tailscale CLI prompts users to confirm impactful actions\n  * Tailscale SSH works as expected when using an IP address instead of a\n    hostname and MagicDNS is disabled\n  * fixed: Taildrive sharing when su not present\n  * Taildrive files remain consistently accessible\n  * new: Tailscale tray GUI\n  * DERP IPs changed for Singapore and Tokyo\n- Fixing CVE-2025-58058, bsc#1248920\n\n- update to version 1.86.5:\n  * cmd/k8s-proxy,k8s-operator: fix serve config for userspace mode\n- update to version 1.86.4:\n  * nothing of relevance\n- update to version 1.86.3:\n  * nothing of relevance\n\n- update to version 1.86.2:\n  * A deadlock issue that may have occurred in the client\n  * An occasional crash when establishing a new port mapping with a gateway or\n    firewall\n\n- update to version 1.86.0:\n  * tsStateEncrypted device posture attribute for checking whether the\n    Tailscale client state is encrypted at rest\n  * Cross-site request forgery (CSRF) issue that may have resulted in a log in\n    error when accessing the web interface\n  * Recommended exit node when the previously recommended exit node is offline\n  * tailscale up --exit-node=auto:any and tailscale set --exit-node=auto:any\n    CLI commands track the recommended exit node and automatically switches to\n    it when available exit nodes or network conditions change\n  * tailscaled CLI command flag --encrypt-state encrypts the node state file on\n    the disk using trusted platform module (TPM)\n\n- update to 1.84.3:\n  * ipn/ipnlocal: Update hostinfo to control on service config change\n\n- update to 1.84.2:\n  * Re-enable setting —accept-dns by using TS_EXTRA_ARGS. This issue resulted\n    from stricter CLI arguments parsing introduced in Tailscale v1.84.0\n\n- update to 1.84.1:\n  * net/dns: cache dns.Config for reuse when compileConfig fails\n\n- update to 1.84.0:\n  * The --reason flag is added to the tailscale down command\n  * ReconnectAfter policy setting, which configures the maximum period of time\n    between a user disconnecting Tailscale and the client automatically\n    reconnecting\n  * Tailscale CLI commands throw an error if multiple of the same flag are detected\n  * Network connectivity issues when creating a new profile or switching\n    profiles while using an exit node\n  * DNS-over-TCP fallback works correctly with upstream servers reachable only\n    via the tailnet\n\n- update to 1.82.5:\n  * A panic issue related to CUBIC congestion control in userspace mode is resolved.\n\n- update to 1.82.0:\n  * DERP functionality within the client supports certificate pinning for\n    self-signed IP address certificates for those unable to use Let's Encrypt\n    or WebPKI certificates.\n  * Go is updated to version 1.24.1\n  * NAT traversal code uses the DERP connection that a packet arrived on as an\n    ultimate fallback route if no other information is available\n  * Captive portal detection reliability is improved on some in-flight Wi-Fi networks\n  * Port mapping success rate is improved\n  * Helsinki is added as a DERP region.\n","status":"published","published":"2026-02-10T21:45:05Z","modified":"2026-03-23T04:54:47.135581Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20798-1","title":"Security update for trivy","description":"This update for trivy fixes the following issues:\n\nUpdate to version 0.68.2:\n\nSecurity fixes:\n\n - CVE-2024-3817: hashicorp/go-getter: argument injection when fetching remote default git branches (bsc#1227010).\n - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (bsc#1234512).\n - CVE-2024-45338: golang.org/x/net/html: denial of service due to non-linear parsing of case-insensitive content (bsc#1235265).\n - CVE-2024-51744: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232948).\n - CVE-2025-11065: github.com/go-viper/mapstructure/v2: sensitive Information leak in logs (bsc#1250625).\n - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239225).\n - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239385).\n - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241724).\n - CVE-2025-27144: gopkg.in/go-jose/go-jose.v2: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237618).\n - CVE-2025-30204: github.com/golang-jwt/jwt/v4,github.com/golang-jwt/jwt/v5: jwt-go allows excessive memory allocation during header parsing (bsc#1240466).\n - CVE-2025-46569: github.com/open-policy-agent/opa: HTTP request path can be crafted to inject Rego code into a constructed query when a virtual document is requested through the Data API (bsc#1246730).\n - CVE-2025-47291: github.com/containerd/containerd/v2: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. (bsc#1243633).\n - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (bsc#1251363).\n - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253512).\n - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read (bsc#1253977).\n - CVE-2025-53547: helm.sh/helm/v3: Helm Chart Code Execution (bsc#1246151).\n - CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory (bsc#1248937, bsc#1248897).\n - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253786).\n - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input (bsc#1251547).\n\nOther fixes:\n\n - Update installation.md (#8979)\n - chore(alpine): add EOL date for Alpine 3.21 (#8221)\n - chore(alpine): add EOL date for Alpine 3.22 (#8992)\n - chore(cli): Remove Trivy Cloud (#9847)\n - chore(deps): Bump trivy-checks (#7819)\n - chore(deps): Bump trivy-checks (#8310)\n - chore(deps): Bump trivy-checks (#8619)\n - chore(deps): Bump trivy-checks (#8934)\n - chore(deps): Bump trivy-checks to v1.7.1 (#8467)\n - chore(deps): Bump up trivy-checks to v1.3.0 (#7959)\n - chore(deps): Switch to go-viper/mapstructure (#9579)\n - chore(deps): Update trivy-checks (#8798)\n - chore(deps): Upgrade trivy-checks (#8018)\n - chore(deps): bump Go to `v1.23.5` (#8341)\n - chore(deps): bump Go to `v1.23.5` [backport: release/v0.59] (#8343)\n - chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` (#8105)\n - chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` [backport: release/v0.58] (#8136)\n - chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` (#8140)\n - chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` [backport: release/v0.58] (#8142)\n - chore(deps): bump alpine from 3.20.0 to 3.21.0 in the docker group across 1 directory (#8196)\n - chore(deps): bump alpine from 3.21.0 to 3.21.3 in the docker group across 1 directory (#8490)\n - chore(deps): bump alpine from 3.21.4 to 3.22.1 (#9301)\n - chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 (#9764)\n - chore(deps): bump github.com/containerd/containerd/v2 from 2.1.0 to 2.1.1 (#8901)\n - chore(deps): bump github.com/containerd/containerd/v2 from 2.1.4 to 2.1.5 (#9763)\n - chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#9274)\n - chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#8443)\n - chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 (#9088)\n - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#7868)\n - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#8597)\n - chore(deps): bump github.com/moby/buildkit from 0.17.0 to 0.17.2 in the docker group across 1 directory (#7990)\n - chore(deps): bump github.com/moby/buildkit from 0.17.2 to 0.18.0 in the docker group (#8029)\n - chore(deps): bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 (#9778)\n - chore(deps): bump github.com/quic-go/quic-go from 0.52.0 to 0.54.1 (#9694)\n - chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (#9403)\n - chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#8103)\n - chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 [backport: release/v0.58] (#8122)\n - chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#9827)\n - chore(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 in the common group (#8822)\n - chore(deps): bump golangci-lint to v2.1.2 (#8766)\n - chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 (#9164)\n - chore(deps): bump the aws group across 1 directory with 5 updates (#8652)\n - chore(deps): bump the aws group across 1 directory with 6 updates (#8074)\n - chore(deps): bump the aws group across 1 directory with 6 updates (#8163)\n - chore(deps): bump the aws group across 1 directory with 7 updates (#7991)\n - chore(deps): bump the aws group across 1 directory with 7 updates (#8468)\n - chore(deps): bump the aws group with 6 updates (#7902)\n - chore(deps): bump the aws group with 6 updates (#9383)\n - chore(deps): bump the aws group with 6 updates (#9481)\n - chore(deps): bump the aws group with 6 updates (#9547)\n - chore(deps): bump the aws group with 7 updates (#8299)\n - chore(deps): bump the aws group with 7 updates (#9311)\n - chore(deps): bump the aws group with 7 updates (#9419)\n - chore(deps): bump the aws group with 7 updates (#9691)\n - chore(deps): bump the common group across 1 directory with 10 updates (#8566)\n - chore(deps): bump the common group across 1 directory with 10 updates (#8817)\n - chore(deps): bump the common group across 1 directory with 10 updates [backport: release/v0.62] (#8831)\n - chore(deps): bump the common group across 1 directory with 11 updates (#8381)\n - chore(deps): bump the common group across 1 directory with 13 updates (#8491)\n - chore(deps): bump the common group across 1 directory with 14 updates (#8126)\n - chore(deps): bump the common group across 1 directory with 20 updates (#7876)\n - chore(deps): bump the common group across 1 directory with 20 updates (#9840)\n - chore(deps): bump the common group across 1 directory with 23 updates (#8733)\n - chore(deps): bump the common group across 1 directory with 24 updates (#9228)\n - chore(deps): bump the common group across 1 directory with 24 updates (#9507)\n - chore(deps): bump the common group across 1 directory with 26 updates (#9063)\n - chore(deps): bump the common group across 1 directory with 26 updates (#9347)\n - chore(deps): bump the common group across 1 directory with 29 updates (#8261)\n - chore(deps): bump the common group across 1 directory with 7 updates (#9590)\n - chore(deps): bump the common group across 1 directory with 9 updates (#8887)\n - chore(deps): bump the common group across 1 directory with 9 updates (#9153)\n - chore(deps): bump the common group with 12 updates (#8301)\n - chore(deps): bump the common group with 4 updates (#7949)\n - chore(deps): bump the common group with 6 updates (#7904)\n - chore(deps): bump the common group with 6 updates (#8162)\n - chore(deps): bump the common group with 6 updates (#8411)\n - chore(deps): bump the common group with 7 updates (#9382)\n - chore(deps): bump the docker group across 1 directory with 3 updates (#8127)\n - chore(deps): bump the docker group across 1 directory with 3 updates (#8762)\n - chore(deps): bump the docker group with 3 updates (#9545)\n - chore(deps): bump the docker group with 3 updates (#9776)\n - chore(deps): bump the github-actions group across 1 directory with 2 updates (#7854)\n - chore(deps): bump the github-actions group across 1 directory with 2 updates (#8962)\n - chore(deps): bump the github-actions group across 1 directory with 4 updates (#8331)\n - chore(deps): bump the github-actions group across 1 directory with 9 updates (#9563)\n - chore(deps): bump the github-actions group with 3 updates (#8473)\n - chore(deps): bump the github-actions group with 4 updates (#9739)\n - chore(deps): bump the testcontainers group with 2 updates (#8650)\n - chore(deps): bump the testcontainers group with 2 updates (#9506)\n - chore(deps): bump to alpine from `3.21.3` to `3.21.4` (#9283)\n - chore(deps): bump up Trivy-kubernetes to v0.9.1 (#9214)\n - chore(deps): remove missed replace of `trivy-db` (#8492)\n - chore(deps): update Docker to v28.2.2 and fix compatibility issues (#9037)\n - chore(deps): update Go to 1.24 and switch to go-version-file (#8388)\n - chore(deps): update csaf module dependency from csaf-poc to gocsaf (#7992)\n - chore(deps): update go-rustaudit location (#8450)\n - chore(deps): update to module-compatible docker-credential-gcr/v2 (#9591)\n - chore(deps): use aqua forks for `github.com/liamg/jfather` and `github.com/liamg/iamgo` (#8289)\n - chore(k8s): enhance k8s scan log (#6997)\n - chore(k8s): update comments with deprecated command format (#8964)\n - chore(license): add missed spdx exceptions: (#9147)\n - chore(secret): add reported issues related to secrets in junit template (#8193)\n - chore(terraform): add accessors to underlying raw hcl values (#8306)\n - chore(terraform): assign *terraform.Module 'parent' field (#8444)\n - chore(terraform): export module path on terraform modules (#8374)\n - chore(terraform): option to pass in instanced logger  (#8738)\n - chore(terraform): remove os.OpenPath call from terraform file functions (#8737)\n - chore(vex): suppress CVE-2024-45337 (#8101)\n - chore(vex): suppress CVE-2024-45338 (#8137)\n - chore: Update release flow to include chocolatey (#9460)\n - chore: Update release workflow to trigger version updates (#9162)\n - chore: add an issue template for maintainers (#8838)\n - chore: add context to the cache interface (#9565)\n - chore: add debug log to show image source location (#9163)\n - chore: add modernize tool integration for code modernization (#9251)\n - chore: bump Go to 1.24.7 (#9435)\n - chore: bump `mockery` to update v2.52.2 version and rebuild mock files (#8390)\n - chore: bump containerd to v2.0.0 (#7875)\n - chore: bump go to 1.23.4 (#8123)\n - chore: bump golangci-lint to v1.61.0 (#7853)\n - chore: bump up Go version to 1.24.4 (#9031)\n - chore: downgrade the failed block expand message to debug (#7964)\n - chore: drop FreeBSD 32-bit support (#9102)\n - chore: enable int-conversion from perfsprint (#8194)\n - chore: enable staticcheck (#8815)\n - chore: fix errors and typos in docs (#8963)\n - chore: fix some function names in comment (#9314)\n - chore: implement process-safe temp file cleanup (#9241)\n - chore: lint `errors.Join` (#7845)\n - chore: migrate protoc setup from Docker to buf CLI (#9184)\n - chore: remove Go checks (#7907)\n - chore: remove aws iam related scripts (#8179)\n - chore: remove debug prints (#8347)\n - chore: remove mockery (#8417)\n - chore: replace deprecated tenv linter with usetesting (#8504)\n - chore: trigger the trivy-www workflow (#9737)\n - chore: typo fix to replace `rego` with `repo` on the RepoFlagGroup options error output (#8643)\n - chore: update Docker lib (#8681)\n - chore: update code owners (#8303)\n - chore: update template URL for brew formula (#9221)\n - chore: update the rpm download Update (#9202)\n - chore: use go.mod for managing Go tools (#8493)\n - chore: use require.ErrorContains when possible (#8291)\n - ci(deps): add 3-day cooldown period for Dependabot updates (#9475)\n - ci(helm): auto public Helm chart after PR merged (#7526)\n - ci(helm): bump Trivy version to 0.57.1 for Trivy Helm Chart 0.9.0 (#7945)\n - ci(helm): bump Trivy version to 0.58.0 for Trivy Helm Chart 0.10.0 (#8038)\n - ci(helm): bump Trivy version to 0.58.1 for Trivy Helm Chart 0.10.0 (#8170)\n - ci(helm): bump Trivy version to 0.59.0 for Trivy Helm Chart 0.11.0 (#8311)\n - ci(helm): bump Trivy version to 0.59.1 for Trivy Helm Chart 0.11.1 (#8354)\n - ci(helm): bump Trivy version to 0.60.0 for Trivy Helm Chart 0.12.0 (#8494)\n - ci(helm): bump Trivy version to 0.61.0 for Trivy Helm Chart 0.13.0 (#8638)\n - ci(helm): bump Trivy version to 0.61.1 for Trivy Helm Chart 0.13.1 (#8753)\n - ci(helm): bump Trivy version to 0.62.0 for Trivy Helm Chart 0.14.0 (#8802)\n - ci(helm): bump Trivy version to 0.62.1 for Trivy Helm Chart 0.14.1 (#8836)\n - ci(helm): bump Trivy version to 0.63.0 for Trivy Helm Chart 0.15.0 (#8946)\n - ci(helm): bump Trivy version to 0.64.0 for Trivy Helm Chart 0.16.0 (#9107)\n - ci(helm): bump Trivy version to 0.64.1 for Trivy Helm Chart 0.16.1 (#9135)\n - ci(helm): bump Trivy version to 0.65.0 for Trivy Helm Chart 0.17.0 (#9288)\n - ci(helm): bump Trivy version to 0.66.0 for Trivy Helm Chart 0.18.0 (#9425)\n - ci(helm): bump Trivy version to 0.67.0 for Trivy Helm Chart 0.19.0 (#9554)\n - ci(helm): bump Trivy version to 0.67.2 for Trivy Helm Chart 0.19.1 (#9641)\n - ci(helm): create a helm branch for patches from main (#8673)\n - ci(spdx): add `aqua-installer` step to fix `mage` error (#8353)\n - ci(vuln): reduce github action script injection attack risk (#8610)\n - ci: add API diff workflow (#9600)\n - ci: add auto-ready-for-review workflow (#9179)\n - ci: add workflow to restrict direct PRs to release branches (#8240)\n - ci: delete cache after artifacts upload in canary workflow (#9177)\n - ci: enable `check-latest` for `setup-go` [backport: release/v0.68] (#9946)\n - ci: fix path to main dir for canary builds (#8231)\n - ci: get base_sha using base.ref (#9704)\n - ci: improve PR title validation workflow (#8720)\n - ci: migrate GitHub Actions from version tags to SHA pinning (#9405)\n - ci: move runner.os context from job-level env to step-level in canary workflow (#9233)\n - ci: optimize golangci-lint performance with cache-based strategy (#9173)\n - ci: remove invalid `--confirm` flag from `gh cache delete` command in canary builds (#9236)\n - ci: remove unused preinstalled software/images for build tests to free up disk space. (#9814)\n - ci: skip undefined labels in discussion triage action (#9175)\n - ci: specify repository for `gh cache delete` in canary worklfow (#9240)\n - ci: update GitHub Actions cache to v4 (#8475)\n - ci: use `Skitionek/notify-microsoft-teams` instead of `aquasecurity` fork (#8740)\n - ci: use `github.event.pull_request.user.login` for release PR check workflow (#8702)\n - ci: use environment variables in GitHub Actions for improved security (#9433)\n - ci: use gh pr view to get PR number for forked repositories in auto-ready workflow (#9183)\n - ci: use merge commit for apidiff to avoid false positives (#9622)\n - ci: use pull_request_target for apidiff workflow to support fork PRs (#9605)\n - docs(cli): improve flag value display format (#8560)\n - docs(java):  Update info about dev deps in gradle lock (#8830)\n - docs(java): add info about supported scopes (#7842)\n - docs(k8s): add a note about multi-container pods (#7815)\n - docs(misconf): Remove duplicate sections (#9819)\n - docs(misconf): Reorganize misconfiguration scan pages (#8206)\n - docs(misconf): simplify misconfiguration docs (#9030)\n - docs(python): Mention pip-compile (#8484)\n - docs(python): fix type with METADATA file name (#9090)\n - docs(report): Improve SARIF reporting doc (#7655)\n - docs(report): add nuanses about secret/license scanner in summary table (#9442)\n - docs(report): fix reporting doc format (#7671)\n - docs(server): fix info about scanning licenses on the client side. (#9805)\n - docs(vex): use debian minor version in examples (#8166)\n - docs(vuln): remove OSV for Python from data sources (#8841)\n - docs: Add info about helm charts release (#8640)\n - docs: Fix broken link to \"Built-in Checks\" (#9375)\n - docs: Fix broken links (#7900)\n - docs: Fix typo in terraform docs (#9492)\n - docs: Fix typos and linguistic errors in documentation / hacktoberfest (#9586)\n - docs: Fix typos in documentation (#8361)\n - docs: Update maintainer docs (#8674)\n - docs: Updated JSON schema version 2 in the trivy documentation (#8188)\n - docs: add Headlamp to the Trivy Ecosystem page (#7916)\n - docs: add PR review policy for maintainers (#9032)\n - docs: add Windows install instructions (#7800)\n - docs: add `overview` page for `others` (#7972)\n - docs: add abbreviation list (#8453)\n - docs: add commercial content (#8030)\n - docs: add example of creating whitelist of checks (#7821)\n - docs: add explanation for how to use non-system certificates (#9081)\n - docs: add info about `java-db` subdir (#9706)\n - docs: add info that `SSL_CERT_FILE` works on `Unix systems other than macOS` only (#9772)\n - docs: add note about disabled DS016 check (#7724)\n - docs: add note about temporary podman socket (#7921)\n - docs: add partners page (#8988)\n - docs: add section on customizing default check data (#9114)\n - docs: add terminology page to explain Trivy concepts (#7996)\n - docs: add vulnerability database contribution guide (#9667)\n - docs: apt-transport-https is a transitional package (#7678)\n - docs: bump pygments from 2.18.0 to 2.19.2 (#9596)\n - docs: catch some missed docs -\u003e guide (#9850)\n - docs: change --disable-metrics to --disable-telemetry in example (#8999) (#9003)\n - docs: change SecObserve URLs in documentatio (#9771)\n - docs: change in java.md: fix the Trity -to-\u003e Trivy typo (#8813)\n - docs: clarify inline ignore limitations for resource-less checks (#9537)\n - docs: combine trivy.dev into trivy docs (#7884)\n - docs: correct Ruby documentation (#8402)\n - docs: document eol supportability (#9434)\n - docs: drop AWS account scanning (#7997)\n - docs: fix a broken link (#8546)\n - docs: fix assets with versioning (#8996)\n - docs: fix dead links (#7998)\n - docs: fix mistakes/typos (#7942)\n - docs: fix modules path and update code example (#9539)\n - docs: fix navigate links (#8336)\n - docs: improve databases documentation (#7732)\n - docs: improve documentation for scanning raw IaC configurations (#9571)\n - docs: improve skipping files documentation (#8749)\n - docs: move info about `detection priority` into coverage section (#9469)\n - docs: partners page content updates (#9149)\n - docs: remove slack (#8565)\n - docs: replace short codes with Unicode emojis (#8296)\n - docs: restructure docs for new hosting (#9799)\n - docs: trivy partners page updates (#9133)\n - docs: update VEX documentation index page (#8458)\n - docs: update links to Semaphore pages (#9352)\n - docs: update vulnerability reporting guidelines in SECURITY.md (#9395)\n - feat(alma): add AlmaLinux 10 support (#9207)\n - feat(alpine): add maintainer field extraction for APK packages (#8930)\n - feat(aws): Add support for dualstack ECR endpoints (#9862)\n - feat(cli): Add available version checking (#8553)\n - feat(cli): Add trivy cloud suppport (#9637)\n - feat(cli): add `trivy auth` (#7664)\n - feat(cli): add version constraints to annoucements (#9023)\n - feat(cli): change --list-all-pkgs default to true (#9510)\n - feat(cli): error out when ignore file cannot be found (#7624)\n - feat(cli): rename `trivy auth` to `trivy registry` (#7727)\n - feat(cloudformation): support default values and list results in Fn::FindInMap (#9515)\n - feat(cyclonedx): Add initial support for loading external VEX files from SBOM references (#8254)\n - feat(cyclonedx): add file checksums to `CycloneDX` reports (#7507)\n - feat(cyclonedx): preserve SBOM structure when scanning SBOM files with vulnerability updates (#9439)\n - feat(db): append errors (#7843)\n - feat(db): enable concurrent access to vulnerability database (#9750)\n - feat(dotnet): add dependency graph support for .deps.json files (#9726)\n - feat(echo): Add Echo Support (#8833)\n - feat(flag): add `--cacert` flag (#9781)\n - feat(flag): add schema validation for `--server` flag (#9270)\n - feat(fs): change artifact type to repository when git info is detected (#9613)\n - feat(fs): optimize scanning performance by direct file access for known paths (#8525)\n - feat(fs): use git commit hash as cache key for clean repositories (#8278)\n - feat(go): construct dependencies in the parser (#7973)\n - feat(go): construct dependencies of `go.mod` main module in the parser (#7977)\n - feat(go): fix parsing main module version for go \u003e= 1.24 (#8433)\n - feat(go): support license scanning in both GOPATH and vendor (#8843)\n - feat(image): add Docker context resolution (#9166)\n - feat(image): add RepoTags support for Docker archives (#9690)\n - feat(image): add Sigstore bundle SBOM support (#9516)\n - feat(image): pass global context to docker/podman image save func (#9733)\n - feat(image): prevent scanning oversized container images (#8178)\n - feat(image): return error early if total size of layers exceeds limit (#8294)\n - feat(image): save layers metadata into report (#8394)\n - feat(java): add support remote repositories from settings.xml files (#9708)\n - feat(java): dereference all maven settings.xml env placeholders (#9024)\n - feat(k8s): add default commands for unknown platform (#7863)\n - feat(k8s): add support for controllers (#8614)\n - feat(k8s): get components from namespaced resources (#8918)\n - feat(k8s): improve artifact selections for specific namespaces (#8248)\n - feat(license): Support compound licenses (licenses using SPDX operators) (#8816)\n - feat(license): improve work text licenses with custom classification (#8888)\n - feat(license): improve work with custom classification of licenses from config file (#8861)\n - feat(license): observe pkg types option in license scanner (#9091)\n - feat(license): scan vendor directory for license for go.mod files (#8689)\n - feat(license): use separate SPDX ids to ignore SPDX expressions (#9087)\n - feat(minimos): Add support for MinimOS (#8792)\n - feat(misconf): Add RoleAssignments attribute (#9396)\n - feat(misconf): Add support for `Minimum Trivy Version` (#8880)\n - feat(misconf): Add support for aws_ami (#8499)\n - feat(misconf): Add support for configurable Rego error limit (#9657)\n - feat(misconf): Show misconfig ID in output (#7762)\n - feat(misconf): Update AppService schema (#9792)\n - feat(misconf): Update Azure Compute schema (#9675)\n - feat(misconf): Update Azure Container Schema (#9673)\n - feat(misconf): Update Azure network schema for new checks (#9791)\n - feat(misconf): Update SecurityCenter schema (#9674)\n - feat(misconf): Update azure storage schema (#9728)\n - feat(misconf): adapt AWS::DynamoDB::Table (#8529)\n - feat(misconf): adapt AWS::EC2::VPC (#8534)\n - feat(misconf): adapt aws_default_security_group (#8538)\n - feat(misconf): adapt aws_opensearch_domain (#8550)\n - feat(misconf): add OpenTofu file extension support (#8747)\n - feat(misconf): add agentpools to azure container schema (#9714)\n - feat(misconf): add misconfiguration location to junit template (#8793)\n - feat(misconf): add option to pass Rego scanner to IaC scanner (#8369)\n - feat(misconf): add private ip google access attribute to subnetwork (#9199)\n - feat(misconf): added audit config attribute (#9249)\n - feat(misconf): added logging and versioning to the gcp storage bucket (#9226)\n - feat(misconf): convert AWS managed policy to document (#8757)\n - feat(misconf): export raw Terraform data to Rego (#8741)\n - feat(misconf): export unresolvable field of IaC types to Rego (#7765)\n - feat(misconf): generate placeholders for random provider resources (#8051)\n - feat(misconf): include map key in manifest snippet for diagnostics (#9681)\n - feat(misconf): log causes of HCL file parsing errors (#7634)\n - feat(misconf): normalize CreatedBy for buildah and legacy docker builder (#8953)\n - feat(misconf): public network support for Azure Storage Account (#7601)\n - feat(misconf): render causes for Terraform (#8360)\n - feat(misconf): ssl_mode support for GCP SQL DB instance (#7564)\n - feat(misconf): support auto_provisioning_defaults in google_container_cluster (#8705)\n - feat(misconf): support for ignoring by inline comments for Dockerfile (#8115)\n - feat(misconf): support for ignoring by inline comments for Helm (#8138)\n - feat(misconf): support https_traffic_only_enabled in Az storage account (#9784)\n - feat(nodejs): add a bun.lock analyzer (#8897)\n - feat(nodejs): add bun.lock parser (#8851)\n - feat(nodejs): add root and workspace for `yarn` packages (#8535)\n - feat(nodejs): respect peer dependencies for dependency tree (#7989)\n - feat(oracle): add `flavors` support (#7858)\n - feat(parser): ignore white space in pom.xml files (#7747)\n - feat(python): add support for poetry dev dependencies (#8152)\n - feat(python): add support for uv (#8080)\n - feat(python): add support for uv dev and optional dependencies (#8134)\n - feat(redhat): Add EOL date for RHEL 10. (#8910)\n - feat(redhat): add os-release detection for RHEL-based images (#9458)\n - feat(repo): add git repository metadata to reports (#9252)\n - feat(report): add CVSS vectors in sarif report (#9157)\n - feat(report): add fingerprint generation for vulnerabilities (#9794)\n - feat(report): add image reference to report metadata (#9729)\n - feat(report): switch ReportID from UUIDv4 to UUIDv7 (#9749)\n - feat(report): update gitlab template to populate operating_system value (#7735)\n - feat(rust): add root and workspace relationships/package for `cargo` lock files (#8676)\n - feat(sbom): add SHA-512 hash support for CycloneDX SBOM (#9126)\n - feat(sbom): add manufacturer field to CycloneDX tools metadata (#9019)\n - feat(sbom): add support for SPDX attestations (#9829)\n - feat(sbom): added support for CoreOS (#9448)\n - feat(sbom): use SPDX license IDs list to validate SPDX IDs  (#9569)\n - feat(seal): add seal support (#9370)\n - feat(secret): Add built-in secrets rules for Private Packagist (#7826)\n - feat(secret): implement streaming secret scanner with byte offset tracking (#9264)\n - feat(suse): Add new openSUSE, Micro and SLES releases end of life dates (#9788)\n - feat(suse): Align SUSE/OpenSUSE OS Identifiers (#7965)\n - feat(terraform): add partial evaluation for policy templates (#8967)\n - feat(terraform): use .terraform cache for remote modules in plan scanning (#9277)\n - feat(ubuntu): add end of life date for Ubuntu 25.04 (#9077)\n - feat(ubuntu): add eol date for 20.04-ESM (#8981)\n - feat(vuln): add Root.io support for container image scanning (#9073)\n - feat: Update registry fallbacks (#7679)\n - feat: Update registry fallbacks [backport: release/v0.57] (#7944)\n - feat: add ArtifactID field to uniquely identify scan targets (#9663)\n - feat: add Bottlerocket OS package analyzer (#8653)\n - feat: add HTTP request/response tracing support (#9125)\n - feat: add JSONC support for comments and trailing commas (#8862)\n - feat: add ReportID field to scan reports (#9670)\n - feat: add `--distro` flag to manually specify OS distribution for vulnerability scanning (#8070)\n - feat: add `--vuln-severity-source` flag (#8269)\n - feat: add `workspaceRelationship` (#7889)\n - feat: add a examples field to check metadata (#8068)\n - feat: add cvss v4 score and vector in scan response (#7968)\n - feat: add documentation URL for database lock errors (#9531)\n - feat: add end of life date for Ubuntu 24.10 (#7787)\n - feat: add graceful shutdown with signal handling (#9242)\n - feat: add report summary table (#8177)\n - feat: add support for registry mirrors (#8244)\n - feat: add timeout handling for cache database operations (#9307)\n - feat: allow ignoring findings by type in Rego (#9578)\n - feat: include registry and repository in artifact ID calculation (#9689)\n - feat: reject unsupported artifact types in remote image retrieval (#9052)\n - feat: replace TinyGo with standard Go for WebAssembly modules (#8496)\n - feat: terraform parser option to set current working directory (#8909)\n - fix(alma): parse epochs from rpmqa file (#9101)\n - fix(alma): parse epochs from rpmqa file [backport: release/v0.64] (#9119)\n - fix(alpine): add `UID` for removed packages (#7887)\n - fix(aws): change CPU and Memory type of ContainerDefinition to a string (#7995)\n - fix(aws): update amazon linux 2 EOL date (#9176)\n - fix(aws): use `BuildableClient` insead of `xhttp.Client` (#9436)\n - fix(cli): Add more non-sensitive flags to telemetry (#9110)\n - fix(cli): Add more non-sensitive flags to telemetry [backport: release/v0.64] (#9124)\n - fix(cli): Handle empty ignore files more gracefully (#7962)\n - fix(cli): `clean --all` deletes only relevant dirs (#7704)\n - fix(cli): add config name to skip-policy-update alias (#7820)\n - fix(cli): add some values to the telemetry call (#9056)\n - fix(cli): disable `--skip-dir` and `--skip-files` flags for `sbom` command (#8886)\n - fix(cli): don't use allow values for `--compliance` flag (#8881)\n - fix(cli): ensure correct command is picked by telemetry (#9260)\n - fix(cli): panic: attempt to get os.Args[1] when len(os.Args) \u003c 2 (#9206)\n - fix(conda): memory leak by adding closure method for `package.json` file (#9349)\n - fix(cyclonedx): handle multiple license types (#9378)\n - fix(db): Dowload database when missing but metadata still exists (#9393)\n - fix(db): fix case when 2 trivy-db were copied at the same time (#8452)\n - fix(db): fix javadb downloading error handling (#7642)\n - fix(debian): don't include empty licenses for `dpkgs` (#8623)\n - fix(debian): infinite loop (#7928)\n - fix(deps): bump alpine from `3.22.1` to `3.23.0` [backport: release/v0.68] (#9949)\n - fix(flag): remove viper.SetDefault to fix IsSet() for config-only flags (#9732)\n - fix(flag): skip hidden flags for `--generate-default-config` command (#8046)\n - fix(fs): add missing defered Cleanup() call to post analyzer fs (#7882)\n - fix(fs): avoid shadowing errors in file.glob (#9286)\n - fix(fs): check postAnalyzers for StaticPaths (#8543)\n - fix(fs): fix cache key generation to use UUID (#8275)\n - fix(go): Do not trim v prefix from versions in Go Mod Analyzer (#7733)\n - fix(go): merge nested flags into string for ldflags for Go binaries (#8368)\n - fix(helm): properly handle multiple archived dependencies (#7782)\n - fix(image): disable AVD-DS-0007 for history scanning (#8366)\n - fix(image): use standardized HTTP client for ECR authentication (#9322)\n - fix(java): correctly inherit `version` and `scope` from upper/root `depManagement` and `dependencies` into parents (#7541)\n - fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props (#8050)\n - fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props [backport: release/v0.58] (#8119)\n - fix(java): exclude dev dependencies in gradle lockfile (#8803)\n - fix(java): update order for resolving package fields from multiple demManagement (#9575)\n - fix(java): use `true` as default value for Repository Release|Snapshot Enabled in pom.xml and settings.xml files (#9751)\n - fix(julia): add `Relationship` field support (#8939)\n - fix(k8s)!: support k8s multi container (#7444)\n - fix(k8s): add missed option `PkgRelationships` (#8442)\n - fix(k8s): check all results for vulnerabilities (#7946)\n - fix(k8s): correct compare artifact versions (#8682)\n - fix(k8s): correct compare artifact versions [backport: release/v0.61] (#8699)\n - fix(k8s): disable parallel traversal with fs cache for k8s images (#9534)\n - fix(k8s): remove using `last-applied-configuration` (#8791)\n - fix(k8s): show report for `--report all` (#8613)\n - fix(k8s): skip passed misconfigs for the summary report (#8684)\n - fix(k8s): skip passed misconfigs for the summary report [backport: release/v0.61] (#8748)\n - fix(k8s): skip resources without misconfigs (#7797)\n - fix(k8s): support kubernetes v1.31 (#7810)\n - fix(k8s): use in-memory cache backend during misconfig scanning (#8873)\n - fix(license): add missed `GFDL-NIV-1.1` and `GFDL-NIV-1.2` into Trivy mapping (#9116)\n - fix(license): always trim leading and trailing spaces for licenses (#8095)\n - fix(license): don't normalize `unlicensed` licenses into `unlicense` (#9611)\n - fix(license): fix license normalization for Universal Permissive License (#7766)\n - fix(license): handle SPDX WITH exceptions as single license in category detection (#9380)\n - fix(license): handle WITH operator for `LaxSplitLicenses` (#9232)\n - fix(misconf): .Config.User always takes precedence over USER in .History (#9050)\n - fix(misconf): Check values wholly prior to evalution (#8604)\n - fix(misconf): Improve logging for unsupported checks (#8634)\n - fix(misconf): Update trivy-checks default repo to `mirror.gcr.io` (#7953)\n - fix(misconf): add ephemeral block type to config schema (#8513)\n - fix(misconf): add missing variable as unknown (#8683)\n - fix(misconf): allow null values only for tf variables (#8112)\n - fix(misconf): allow null values only for tf variables [backport: release/v0.58] (#8238)\n - fix(misconf): change default ACL of digitalocean_spaces_bucket to private (#7577)\n - fix(misconf): check if for-each is known when expanding dyn block (#8808)\n - fix(misconf): check if for-each is known when expanding dyn block [backport: release/v0.62] (#8826)\n - fix(misconf): check if metadata is not nil (#8647)\n - fix(misconf): check if property is not nil before conversion (#7578)\n - fix(misconf): correct Azure value-to-time conversion in AsTimeValue (#9015)\n - fix(misconf): correctly adapt azure storage account (#9138)\n - fix(misconf): correctly handle all YAML tags in K8S templates (#8259)\n - fix(misconf): correctly parse empty port ranges in google_compute_firewall (#9237)\n - fix(misconf): disable git terminal prompt on tf module load (#8026)\n - fix(misconf): do not erase variable type for child modules (#7941)\n - fix(misconf): do not log scanners when misconfig scanning is disabled (#8345)\n - fix(misconf): do not log scanners when misconfig scanning is disabled [backport: release/v0.59] (#8349)\n - fix(misconf): do not skip loading documents from subdirectories (#8526)\n - fix(misconf): do not use cty.NilVal for non-nil values (#8567)\n - fix(misconf): ecs include enhanced for container insights (#8326)\n - fix(misconf): ensure boolean metadata values are correctly interpreted (#9770)\n - fix(misconf): ensure ignore rules respect subdirectory chart paths (#9324)\n - fix(misconf): ensure module source is known (#9404)\n - fix(misconf): ensure value used as ignore marker is non-null and known (#9835)\n - fix(misconf): filter null nodes when parsing json manifest (#8785)\n - fix(misconf): fix for Azure Storage Account network acls adaptation (#7602)\n - fix(misconf): fix incorrect k8s locations due to JSON to YAML conversion (#8073)\n - fix(misconf): fix log bucket in schema (#9235)\n - fix(misconf): handle heredocs in dockerfile instructions (#8284)\n - fix(misconf): handle null properties in CloudFormation templates (#7813)\n - fix(misconf): handle tofu files in module detection (#9486)\n - fix(misconf): handle unsupported experimental flags in Dockerfile (#9769)\n - fix(misconf): identify the chart file exactly by name (#8590)\n - fix(misconf): load full Terraform module (#7925)\n - fix(misconf): map healthcheck start period flag to --start-period instead of --startPeriod (#9837)\n - fix(misconf): move disabled checks filtering after analyzer scan (#9002)\n - fix(misconf): perform operations on attribute safely (#8774)\n - fix(misconf): populate context correctly for module instances (#8656)\n - fix(misconf): preserve original paths of remote submodules from .terraform (#9294)\n - fix(misconf): properly expand dynamic blocks (#7612)\n - fix(misconf): properly resolve local Terraform cache (#7983)\n - fix(misconf): reduce log noise on incompatible check (#9029)\n - fix(misconf): set default values for AWS::EKS::Cluster.ResourcesVpcConfig (#8548)\n - fix(misconf): skip Azure CreateUiDefinition (#8503)\n - fix(misconf): skip rewriting expr if attr is nil (#9113)\n - fix(misconf): skip rewriting expr if attr is nil [backport: release/v0.64] (#9127)\n - fix(misconf): strip build metadata suffixes from image history (#9498)\n - fix(misconf): unmark cty values before access (#9495)\n - fix(misconf): use argument value in WithIncludeDeprecatedChecks (#8942)\n - fix(misconf): use correct field log_bucket instead of target_bucket in gcp bucket (#9296)\n - fix(misconf): use log instead of fmt for logging (#8033)\n - fix(misconf): wrap AWS EnvVar to iac types (#7407)\n - fix(misconf): wrap legacy ENV values in quotes to preserve spaces (#9497)\n - fix(nodejs): correctly parse `packages` array of `bun.lock` file (#8998)\n - fix(nodejs): don't use prerelease logic for compare npm constraints  (#9208)\n - fix(nodejs): fix npmjs parser.pkgNameFromPath() panic issue (#9688)\n - fix(nodejs): parse workspaces as objects for package-lock.json files (#9518)\n - fix(nodejs): use snapshot string as `Package.ID` for pnpm packages (#9330)\n - fix(nodejs): use the default ID format to match licenses in pnpm packages. (#9661)\n - fix(oracle): add architectures support for advisories (#4809)\n - fix(oracle): add architectures support for advisories [backport: release/v0.58] (#8125)\n - fix(os): Add photon 5.0 in supported OS (#9724)\n - fix(os): add mapping OS aliases (#8466)\n - fix(plugin): don't remove plugins when updating index.yaml file (#9358)\n - fix(python): add `poetry` v2 support (#8323)\n - fix(python): add `poetry` v2 support [backport: release/v0.59] (#8335)\n - fix(python): impove package name normalization  (#9290)\n - fix(python): skip dev group's deps for poetry (#8106)\n - fix(python): skip dev group's deps for poetry [backport: release/v0.58] (#8158)\n - fix(redhat): Also try to find buildinfo in root layer (layer 0) (#8924)\n - fix(redhat): check `usr/share/buildinfo/` dir to detect content sets (#8222)\n - fix(redhat): correct rewriting of recommendations for the same vulnerability (#8063)\n - fix(redhat): correct rewriting of recommendations for the same vulnerability [backport: release/v0.58] (#8135)\n - fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files (#7912)\n - fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files [backport: release/v0.57] (#7939)\n - fix(redhat): include arch in PURL qualifiers (#7654)\n - fix(redhat): include arch in PURL qualifiers [backport: release/v0.56] (#7702)\n - fix(redhat): save contentSets for OS packages in fs/vm modes (#8820)\n - fix(redhat): trim invalid suffix from content_sets in manifest parsing (#8818)\n - fix(redhat): trim invalid suffix from content_sets in manifest parsing [backport: release/v0.62] (#8824)\n - fix(repo): `git clone` output to Stderr (#7561)\n - fix(repo): preserve RepoMetadata on FS cache hit (#9389)\n - fix(repo): sanitize git repo URL before inserting into report metadata (#9391)\n - fix(report): Fix invalid URI in SARIF report (#7645)\n - fix(report): clean buffer after flushing (#8725)\n - fix(report): correct field order in SARIF license results (#9712)\n - fix(report): don't panic when report contains vulns, but doesn't contain packages for `table` format (#8549)\n - fix(report): handle `git@github.com` schema for misconfigs in `sarif` report (#7898)\n - fix(report): remove html escaping for `shortDescription` and `fullDescription` fields for sarif reports (#8344)\n - fix(rootio): check full version to detect `root.io` packages (#9117)\n - fix(rootio): check full version to detect `root.io` packages [backport: release/v0.64] (#9120)\n - fix(rootio): fix severity selection (#9181)\n - fix(sbom):  use `Annotation` instead of `AttributionTexts` for `SPDX` formats (#7811)\n - fix(sbom): Fixes for Programming Language Vulnerabilities and SBOM Package Maintainer Details (#7871)\n - fix(sbom): add SBOM file's filePath as Application FilePath if we can't detect its path (#8346)\n - fix(sbom): add `buildInfo` info as properties (#9683)\n - fix(sbom): add options for DBs in private registries (#7660)\n - fix(sbom): add options for DBs in private registries [backport: release/v0.56] (#7691)\n - fix(sbom): add support for `file` component type of `CycloneDX` (#9372)\n - fix(sbom): attach nested packages to Application (#8144)\n - fix(sbom): attach nested packages to Application [backport: release/v0.58] (#8168)\n - fix(sbom): don’t panic on SBOM format if scanned CycloneDX file has empty metadata (#9562)\n - fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type (#8052)\n - fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type [backport: release/v0.58] (#8124)\n - fix(sbom): improve logic for binding direct dependency to parent component (#8489)\n - fix(sbom): merge in-graph and out-of-graph OS packages in scan results (#9194)\n - fix(sbom): preserve OS packages from multiple SBOMs (#8325)\n - fix(sbom): preserve OS packages from multiple SBOMs [backport: release/v0.59] (#8333)\n - fix(sbom): remove unnecessary OS detection check in SBOM decoding (#9034)\n - fix(sbom): scan results of SBOMs generated from container images are missing layers (#7635)\n - fix(sbom): use correct field for licenses in CycloneDX reports (#9057)\n - fix(sbom): use root package for `unknown` dependencies (if exists) (#8104)\n - fix(sbom): use root package for `unknown` dependencies (if exists) [backport: release/v0.58] (#8156)\n - fix(secret): add UTF-8 validation in secret scanner to prevent protobuf marshalling errors (#9253)\n - fix(secret): fix line numbers for multiple-line secrets (#9104)\n - fix(secret): ignore .dist-info directories during secret scanning (#8646)\n - fix(server): add HTTP transport setup to server mode (#9217)\n - fix(server): add missed Relationship field for `rpc` (#8872)\n - fix(server): fix redis key when trying to delete blob (#8649)\n - fix(server): secrets inspectation for the config analyzer in client server mode (#8418)\n - fix(spdx): init `pkgFilePaths` map for all formats (#8380)\n - fix(spdx): save text licenses into `otherLicenses` without normalize (#8502)\n - fix(spdx): use the `hasExtractedLicensingInfos` field for licenses that are not listed in the SPDX (#8077)\n - fix(suse): SUSE - update OSType constants and references for compatility (#8236)\n - fix(suse): SUSE - update OSType constants and references for compatility [backport: release/v0.58] (#8237)\n - fix(terraform): `evaluateStep` to correctly set `EvalContext` for multiple instances of blocks (#8555)\n - fix(terraform): `for_each` on a map returns a resource for every key (#9156)\n - fix(terraform): apply parser options to submodule parsing (#8377)\n - fix(terraform): hcl object expressions to return references (#8271)\n - fix(terraform): set null value as fallback for missing variables (#7669)\n - fix(vex): don't  suppress vulns for packages with infinity loop (#9465)\n - fix(vex): don't use reused BOM (#9604)\n - fix(vex): don't use reused BOM [backport: release/v0.67] (#9612)\n - fix(vex): use `lo.IsNil` to check `VEX` from OCI artifact (#8858)\n - fix(vex): use a separate `visited` set for each DFS path (#9760)\n - fix(vuln): compare `nuget` package names in lower case (#9456)\n - fix(wolfi): support new APK database location (#8937)\n - fix: Add missing version check flags (#8951)\n - fix: CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass (#8088)\n - fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field (#8207)\n - fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field [backport: release/v0.58] (#8215)\n - fix: Correctly check for semver versions for trivy version check (#8948)\n - fix: Improve version comparisons when build identifiers are present (#7873)\n - fix: Trim the end-of-range suffix (#9618)\n - fix: Updated twitter icon (#7772)\n - fix: Use `fetch-level: 1` to check out trivy-repo in the release workflow (#9636)\n - fix: Use `fetch-level: 1` to check out trivy-repo in the release workflow [backport: release/v0.67] (#9638)\n - fix: add `buildInfo` for `BlobInfo` in `rpc` package (#9608)\n - fix: add `buildInfo` for `BlobInfo` in `rpc` package [backport: release/v0.67] (#9615)\n - fix: also check `filepath` when removing duplicate packages (#9142)\n - fix: check post-analyzers for StaticPaths (#8904)\n - fix: close all opened resources if an error occurs (#9665)\n - fix: close file descriptors and pipes on error paths (#9536)\n - fix: create temp file under composite fs dir (#9387)\n - fix: de-duplicate same `dpkg` packages with different filePaths from different layers (#8298)\n - fix: don't show corrupted trivy-db warning for first run (#8991)\n - fix: don't use `scope` for `trivy registry login` command (#8393)\n - fix: early-return, indent-error-flow and superfluous-else rules from revive  (#8796)\n - fix: enable err-error and errorf rules from perfsprint linter (#7859)\n - fix: enable usestdlibvars linter (#7770)\n - fix: filter all files when processing files installed from package managers (#8842)\n - fix: handle `BLOW_UNKNOWN` error to download DBs (#8060)\n - fix: handle `BLOW_UNKNOWN` error to download DBs [backport: release/v0.58] (#8121)\n - fix: improve conversion of image config to Dockerfile (#8308)\n - fix: julia parser panicing (#8883)\n - fix: migrate from `*.list` to `*.md5sums` files for `dpkg` (#9131)\n - fix: more revive rules (#8814)\n - fix: octalLiteral from go-critic (#8811)\n - fix: persistent flag option typo (#9374)\n - fix: prevent graceful shutdown message on normal exit (#9244)\n - fix: respect GITHUB_TOKEN to download artifacts from GHCR (#7580)\n - fix: restore compatibility for google.protobuf.Value (#9559)\n - fix: restore compatibility for google.protobuf.Value [backport: release/v0.67] (#9631)\n - fix: supporting .egg-info/METADATA in python.Packaging analyzer (#9151)\n - fix: suppress debug log for context cancellation errors (#9298)\n - fix: testifylint last issues (#8768)\n - fix: unused-parameter rule from revive (#8794)\n - fix: update all documentation links (#8045)\n - fix: update all documentation links (#9777)\n - fix: update cosing settings for GoReleaser after bumping cosing to v3 (#9863)\n - fix: use `--file-patterns` flag for all post analyzers (#7365)\n - fix: use context for analyzers (#9538)\n - fix: use-any from revive (#8810)\n - fix: using SrcVersion instead of Version for echo detector (#9552)\n - fix: using SrcVersion instead of Version for echo detector [backport: release/v0.67] (#9629)\n - fix: validate backport branch name (#9548)\n - fix: wasm module test (#8099)\n - perf(misconf): parse input for Rego once (#8483)\n - perf(misconf): retrieve check metadata from annotations once (#8478)\n - perf(secret): only match secrets of meaningful length, allow example strings to not be matched (#8602)\n - perf: avoid heap allocation in applier findPackage (#7883)\n - refactor(cli): Update the cloud config command (#9676)\n - refactor(cloudformation): remove unused ScanFile method from Scanner (#8927)\n - refactor(db): change logic to detect wrong DB (#8864)\n - refactor(db): use `Getter` interface with `GetParams` for trivy-db sources (#9239)\n - refactor(flag): improve flag system architecture and extensibility (#8718)\n - refactor(fs): use underlyingPath to determine virtual files more reliably (#9302)\n - refactor(k8s): add v prefix for Go packages (#7839)\n - refactor(k8s): scan config files as a folder (#7690)\n - refactor(license): improve license expression normalization (#8257)\n - refactor(license): simplify compound license scanning (#8896)\n - refactor(misconf): Deprecate `EXCEPTIONS` for misconfiguration scanning (#7776)\n - refactor(misconf): Remove unused options (#7896)\n - refactor(misconf): Simplify misconfig checks bundle parsing (#8533)\n - refactor(misconf): add ID to scan.Rule (#9573)\n - refactor(misconf): add ManifestFromYAML for unified manifest parsing (#9680)\n - refactor(misconf): decouple input fs and track extracted files with fs references (#9281)\n - refactor(misconf): get a block or attribute without calling HasChild (#8586)\n - refactor(misconf): introduce generic scanner (#7515)\n - refactor(misconf): make Rego scanner independent of config type (#7517)\n - refactor(misconf): mark AVDID fields as deprecated and use ID internally (#9576)\n - refactor(misconf): migrate from custom Azure JSON parser (#9222)\n - refactor(misconf): parse azure_policy_enabled to addonprofile.azurepolicy.enabled (#9851)\n - refactor(misconf): remove module outputs from parser.EvaluateAll (#8587)\n - refactor(misconf): remove unused methods for ec2.Instance (#8536)\n - refactor(misconf): remove unused methods from iac types (#8782)\n - refactor(misconf): remove unused methods from providers (#8781)\n - refactor(misconf): remove unused terraform attribute methods (#8657)\n - refactor(misconf): replace github.com/liamg/memoryfs with internal mapfs and testing/fstest (#9282)\n - refactor(misconf): rewrite Rego module filtering using functional filters (#9061)\n - refactor(misconf): set Trivy version by default in Rego scanner (#9001)\n - refactor(misconf): simplify k8s scanner (#7717)\n - refactor(misconf): switch to x/json  (#8719)\n - refactor(misconf): type-safe parser results in generic scanner (#9685)\n - refactor(misconf): use OPA v1 (#8518)\n - refactor(misconf): use atomic.Int32 (#9385)\n - refactor(python): use once + debug for `License acquired from METADATA...` logs (#8175)\n - refactor(report): write tables after rendering all results (#8357)\n - refactor(sbom): simplify relationship generation (#7985)\n - refactor(secret): clarify secret scanner messages (#9409)\n - refactor(secret): optimize performance by moving ToLower operation outside loop (#7862)\n - refactor(server): change custom advisory and vulnerability data types fr… (#8923)\n - refactor(terraform): make Scan method of Terraform plan scanner private (#9272)\n - refactor(terraform): remove result sorting from scanner (#8928)\n - refactor(terraform): simplify AllReferences method signature in Attribute (#8906)\n - refactor(ubuntu): update time handling for fixing time (#8780)\n - refactor(vex): improve SBOM reference handling with project standards (#8457)\n - refactor: add case-insensitive string set implementation (#9720)\n - refactor: add generic Set implementation (#8149)\n - refactor: add hook interface for extended functionality (#8585)\n - refactor: centralize HTTP transport configuration (#9058)\n - refactor: export `systemFileFiltering` Post Handler (#9359)\n - refactor: migrate from `github.com/aquasecurity/jfather` to `github.com/go-json-experiment/json` (#8591)\n - refactor: migrate from go-json-experiment to encoding/json/v2 (#9422)\n - refactor: move the aws config (#9617)\n - refactor: remove aws flag helper message (#9080)\n - refactor: remove google/wire dependency and implement manual DI (#9509)\n - refactor: remove support for custom Terraform checks (#7901)\n - refactor: rename scanner to service (#8584)\n - refactor: simplify Detect function signature (#9280)\n - refactor: switch to stable azcontainerregistry SDK package (#9319)\n - refactor: use slices package instead of custom function (#8172)\n - refactor: use strings.SplitSeq instead of strings.Split in for-loop (#8983)\n - refactor: use trivy-checks/pkg/specs package (#8226)\n - release: v0.56.2 [release/v0.56] (#7694)\n - release: v0.57.0 [main] (#7710)\n - release: v0.57.1 [release/v0.57] (#7943)\n - release: v0.58.0 [main] (#7874)\n - release: v0.58.1 [release/v0.58] (#8120)\n - release: v0.58.2 [release/v0.58] (#8216)\n - release: v0.59.0 [main] (#8041)\n - release: v0.59.1 [release/v0.59] (#8334)\n - release: v0.60.0 [main] (#8327)\n - release: v0.61.0 [main] (#8507)\n - release: v0.61.1 [release/v0.61] (#8704)\n - release: v0.62.0 [main] (#8669)\n - release: v0.62.1 [release/v0.62] (#8825)\n - release: v0.63.0 [main] (#8809)\n - release: v0.64.0 [main] (#8955)\n - release: v0.64.1 [release/v0.64] (#9122)\n - release: v0.65.0 [main] (#9108)\n - release: v0.66.0 [main] (#9289)\n - release: v0.67.0 [main] (#9432)\n - release: v0.67.1 [release/v0.67] (#9614)\n - release: v0.67.2 [release/v0.67] (#9639)\n - release: v0.68.0 [main] (#9549)\n - release: v0.68.1 [main] (#9867)\n - release: v0.68.2 [release/v0.68] (#9950)\n - style: Fix MD syntax in self-hosting.md (#8523)\n - test(go): refactor mod_test.go to use txtar format (#9775)\n - test(go): set `GOPATH` for tests (#9785)\n - test(helm): bump up Yamale dependency for Helm chart-testing-action (#9653)\n - test(k8s): update k8s integrtion test (#9725)\n - test(k8s): use a specific bundle for k8s misconfig scan (#9633)\n - test(misconf): drop gcp iam test covered by another case (#9285)\n - test(misconf): move terraform scan tests to integration tests (#9271)\n - test(misconf): remove BenchmarkCalculate using outdated check metadata (#9291)\n - test(server): replace mock driver with memory cache in server tests (#8416)\n - test: add HTTP basic authentication to git test server (#9407)\n - test: add end-to-end testing framework with image scan and proxy tests (#9231)\n - test: change branch in spdx schema link to check in integration tests (#7935)\n - test: change branch in spdx schema link to check in integration tests [backport: release/v0.57] (#7940)\n - test: define constants for test images (#7739)\n - test: improve and extend tests for iac/adapters/arm (#9028)\n - test: improve golden file management in integration tests (#9699)\n - test: include integration tests in linting and fix all issues (#9060)\n - test: replace Go checks with Rego (#7867)\n - test: replace mock with memory cache and fix non-deterministic tests (#8410)\n - test: replace mock with memory cache in scanner tests (#8413)\n - test: save `containerd` image into archive and use in tests (#7816)\n - test: set dummy value for NUGET_PACKAGES (#8107)\n - test: update golden files for TestRepository* integration tests (#9684)\n - test: use `aquasecurity` repository for test images (#8677)\n - test: use `aquasecurity` repository for test images [backport: release/v0.61] (#8698)\n - test: use forked images (#7755)\n - test: use memory cache (#8403)\n - test: use table-driven tests in Helm scanner tests (#8592)\n","status":"published","published":"2026-02-13T16:33:52Z","modified":"2026-05-29T18:24:10.235720339Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:21151-1","title":"Security update for warewulf4","description":"This update for warewulf4 fixes the following issues:\n\nChanges in warewulf4:\n\n- updated go-jose to fix CVE-2026-34986 (bsc#1262810)\n- chi is fixed in the upstream project\n\n- updating to v4.7.0 with following security fixes\n * fixed CVE-2026-39821 (bsc#1266483)\n * fixed CVE-2026-33814 (bsc#1265653)\n- v4.7.0 with significant changes relative to the v4.6.x series which are:\n  * New wwctl unset command\n  * Refactored server routes (URLs)\n  * New /files/ route for serving individual files and templates\n  * Server TLS support\n  * Removed support for fetching individual overlays and individual files from overlays\n  * Fixed whitespace handling around template functions\n  * Security fixes, including updated Go and library versions\n- changes from v4.6.5:\n  * new wwctl overlay info command\n  * fixed wwctl image import --update option\n  * cross-arch support for wwclient\n  * improved IPv6 support\n  * improved support for bonded interfaces\n  * renamed debian.interfaces overlay to ifupdown\n  * new systemd-networkd overlay\n  * warewulf-dracut fixes, including \"provision-to-disk\" fixes\n- remove slurm-overlay package\n\n- fix CVE-2025-69725 (bsc#1258511) by updating chi\n\n- updated to v4.6.5 with following changes:\n  * new wwctl overlay info command\n  * fixed wwctl image import --update option (bsc#1254470)\n  * cross-arch support for wwclient\n  * improved IPv6 support\n  * improved support for bonded interfaces\n  * renamed debian.interfaces overlay to ifupdown\n  * new systemd-networkd overlay\n  * warewulf-dracut fixes, including \"provision-to-disk\" fixes\n- default to dnsmasq instead of dhcpd and tftp\n","status":"published","published":"2026-06-23T09:37:25Z","modified":"2026-06-30T18:24:45.673043944Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21483-1","title":"Security update for govulncheck-vulndb","description":"This update for govulncheck-vulndb fixes the following issues:\n\n- Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z (jsc#PED-11136).\n\n Go CVE Numbering Authority IDs added or updated with aliases:\n * GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj\n * GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c\n * GO-2026-5102 CVE-2026-45021 GHSA-3vcp-chfh-f6r2\n * GO-2026-5272 CVE-2026-40938 GHSA-94jr-7pqp-xhcq\n * GO-2026-5486 CVE-2026-40924 GHSA-m2cx-gpqf-qf74\n * GO-2026-5542 CVE-2026-40090 GHSA-pj97-4p9w-gx3q\n * GO-2026-5630 CVE-2026-25542 GHSA-rmx9-2pp3-xhcr\n * GO-2026-5643 CVE-2026-40923 GHSA-rx35-6rhx-7858\n * GO-2026-5675 CVE-2026-41492 GHSA-vvf7-6rmr-m29q\n * GO-2026-5711 CVE-2026-40161 GHSA-wjxp-xrpv-xpff\n * GO-2026-5746 CVE-2026-41567 GHSA-x86f-5xw2-fm2r\n * GO-2026-5749 CVE-2026-41328 GHSA-x92x-px7w-4gx4\n * GO-2026-5837 CVE-2026-44840 GHSA-q2m9-6jp9-c6mc\n * GO-2026-5929 CVE-2026-44342 GHSA-26v7-h57m-gh9m\n * GO-2026-5930 CVE-2026-33655 GHSA-6qcr-qxgr-m7fv\n * GO-2026-5933 GHSA-3g4q-2f67-2gvh\n * GO-2026-5934 GHSA-59qp-cfj3-rp64\n * GO-2026-5935 GHSA-7856-g3gv-9wq8\n * GO-2026-5936 CVE-2026-53552 GHSA-26rh-24rg-j3vv\n * GO-2026-5937 CVE-2026-53508 GHSA-2jcc-mxv7-p3f9\n * GO-2026-5938 CVE-2026-53553 GHSA-4g5x-hcwm-82jw\n * GO-2026-5939 CVE-2026-10517 GHSA-698x-9w2p-7vvp\n * GO-2026-5940 CVE-2026-53572 GHSA-6w3m-4hhp-775q\n * GO-2026-5941 CVE-2026-53487 GHSA-gvhc-wv3v-7pf8\n * GO-2026-5942 CVE-2026-46600\n * GO-2026-5944 CVE-2026-50197 GHSA-659f-rgp5-w4wf\n * GO-2026-5945 CVE-2026-6815 GHSA-rmxx-v9rj-vpvg\n * GO-2026-5946 CVE-2026-52831 GHSA-v5px-423j-pf7p\n * GO-2026-5947 CVE-2026-53649 GHSA-xqhv-chqm-fhcc\n * GO-2026-5948 CVE-2026-50554 GHSA-588f-fvcv-xhvf\n * GO-2026-5949 CVE-2026-50553 GHSA-rqrh-8wpv-x7hh\n * GO-2026-5950 CVE-2026-53602 GHSA-339v-266x-79xr\n * GO-2026-5951 CVE-2026-10219 GHSA-6jm8-4fhr-5w64\n * GO-2026-5952 CVE-2026-49834 GHSA-9vcr-p3rj-q5q6\n * GO-2026-5953 CVE-2026-9094 GHSA-c9w5-qp6m-m395\n * GO-2026-5956 CVE-2026-55252 GHSA-h5g6-xmh4-hc37\n * GO-2026-5957 CVE-2026-54158 GHSA-5xfx-xj4h-5p7r\n * GO-2026-5958 CVE-2026-54068 GHSA-gcm7-57gf-953c\n * GO-2026-5959 CVE-2026-54072 GHSA-h29v-hj44-q8cv\n * GO-2026-5961 CVE-2026-54069 GHSA-hvr9-72v2-fff3\n * GO-2026-5962 CVE-2026-54088 GHSA-m93h-4hw7-5qcm\n * GO-2026-5963 CVE-2026-54067 GHSA-mvjr-vv3c-w4qv\n * GO-2026-5964 CVE-2026-54066 GHSA-p4m3-mgmm-c664\n * GO-2026-5965 CVE-2026-54070 GHSA-w7cg-whh7-xp28\n * GO-2026-5966 CVE-2026-54089 GHSA-xqp3-jq6g-x3qm\n * GO-2026-5967 CVE-2026-50551 GHSA-56mp-4f3v-fgj2\n * GO-2026-5968 CVE-2026-54174 GHSA-fpg8-7664-jc5q\n * GO-2026-5969 GHSA-g936-7jqj-mwv8\n * GO-2026-5970 CVE-2026-56852\n * GO-2026-5973 CVE-2026-54250 GHSA-jxr7-mqhw-9p98\n * GO-2026-5974 CVE-2026-44300 GHSA-wmj8-9953-vff5\n * GO-2026-5975 CVE-2026-50018 GHSA-42j2-w334-qxw7\n * GO-2026-5976 CVE-2026-50141 GHSA-g7mm-9vx7-jm7h\n * GO-2026-5977 CVE-2026-50013 GHSA-qrh4-p6v4-mrfg\n * GO-2026-5978 CVE-2026-50125 GHSA-qw5r-ppcg-f8rj\n * GO-2026-5979 CVE-2026-50006 GHSA-xrcf-6jh3-ggvx\n * GO-2026-5980 CVE-2026-50158 GHSA-2c7f-fxww-6w6c\n * GO-2026-5981 GHSA-mqxv-9rm6-w8qc\n * GO-2026-5982 GHSA-pqg7-v6wh-3pfp\n * GO-2026-5984 CVE-2026-53604 GHSA-2p2f-px33-4vv5\n * GO-2026-5985 GHSA-7rx3-5wx3-5v76\n * GO-2026-5986 CVE-2026-61699 GHSA-cm26-5974-52h8\n * GO-2026-5987 CVE-2026-55513 GHSA-g4x6-jcvr-9m3g\n * GO-2026-5988 CVE-2026-54628 GHSA-hwrq-8wxh-q4xv\n * GO-2026-5989 CVE-2026-55512 GHSA-m3cx-mwpg-32jg\n * GO-2026-5990 CVE-2026-54629 GHSA-mf78-3rpf-r784\n * GO-2026-5991 CVE-2026-53603 GHSA-q4vm-pq3q-8wgq\n * GO-2026-5992 CVE-2026-61549 GHSA-qf34-295c-26v8\n * GO-2026-5996 CVE-2026-54450 GHSA-pph6-vfjv-vpjw\n * GO-2026-5997 CVE-2026-54452 GHSA-xgch-x3mx-cm3c\n * GO-2026-5998 CVE-2026-54495 GHSA-398h-7f66-3h4p\n * GO-2026-5999 CVE-2026-10814 GHSA-jh6h-v6mp-h22v\n * GO-2026-6002 CVE-2026-58196 GHSA-pr64-jmmf-jp54\n * GO-2026-6003 CVE-2026-53714 GHSA-22xc-xg2r-9j7v\n * GO-2026-6004 CVE-2026-52833 GHSA-3v79-m2cg-89ww\n * GO-2026-6005 CVE-2026-53715 GHSA-8fv2-88gg-hm7q\n * GO-2026-6006 CVE-2026-53716 GHSA-cxpq-8v7q-cg56\n * GO-2026-6007 CVE-2026-53718 GHSA-fcrp-7gc2-93g7\n * GO-2026-6008 CVE-2026-53717 GHSA-h7pq-86h8-rp5x\n * GO-2026-6009 CVE-2026-53719 GHSA-m2v6-2jmh-4c68\n * GO-2026-6010 CVE-2026-50166 GHSA-v95x-xhq5-4929\n * GO-2026-6011 CVE-2026-53713 GHSA-wcrf-9vrr-854f\n * GO-2026-6012 CVE-2026-52832 GHSA-wpcj-rmv4-86qg\n * GO-2026-6013 CVE-2026-52724 GHSA-wvmp-6r4v-j6cv\n * GO-2026-6014 CVE-2025-7453 GHSA-2hfh-94w5-wxvf\n * GO-2026-6015 CVE-2026-54247 GHSA-cwxq-rc9x-2jvv\n * GO-2026-6016 GHSA-rjwr-m7qx-3fjr\n * GO-2026-6017 CVE-2026-27771 GHSA-8qw8-rq86-9pc2\n * GO-2026-6018 CVE-2026-54246 GHSA-5587-2x54-jj6h\n * GO-2026-6019 GHSA-8qqm-fp2q-v734\n * GO-2026-6020 CVE-2026-55668 GHSA-8wc8-hf36-mjh9\n * GO-2026-6021 CVE-2026-55667 GHSA-fmm7-x4gx-8jhr\n * GO-2026-6022 CVE-2026-54560 GHSA-vgj4-345g-jcf8\n * GO-2026-6023 CVE-2026-54562 GHSA-x756-g4x3-c64m\n * GO-2026-6024 CVE-2026-62685 GHSA-7rc3-g7h6-22m7\n * GO-2026-6025 CVE-2026-62684 GHSA-833g-cqhp-h72j\n * GO-2026-6026 CVE-2026-62843 GHSA-83xp-526h-j3ww\n * GO-2026-6027 CVE-2026-57894 GHSA-82f7-87hm-852x\n * GO-2026-6028 CVE-2026-58428 GHSA-25gq-j9jx-43pg\n * GO-2026-6029 CVE-2026-28740 GHSA-2m9v-5q2g-58vq\n * GO-2026-6030 CVE-2026-22874 GHSA-2r5c-gw76-rh3w\n * GO-2026-6031 CVE-2026-27761 GHSA-3pww-vcvm-3gmj\n * GO-2026-6032 CVE-2026-58420 GHSA-5ggr-2f2h-jmvm\n * GO-2026-6033 CVE-2026-58440 GHSA-66m4-5jjr-2rg5\n * GO-2026-6034 CVE-2026-56654 GHSA-683j-3ff6-hh2x\n * GO-2026-6035 CVE-2026-57886 GHSA-6c6r-5xr4-cr5m\n * GO-2026-6036 CVE-2026-50105 GHSA-6cqf-375w-639g\n * GO-2026-6037 CVE-2026-56755 GHSA-6hm7-3pwj-22rm\n * GO-2026-6038 CVE-2026-58314 GHSA-2fcr-jfvc-vgg2\n * GO-2026-6039 CVE-2026-59765 GHSA-2wm4-vwp6-v7xc\n * GO-2026-6040 CVE-2026-58511 GHSA-3r5c-2xxx-h872\n * GO-2026-6041 CVE-2026-58419 GHSA-44qc-pgvp-wx7v\n * GO-2026-6042 CVE-2026-56657 GHSA-4xjf-493q-98p3\n * GO-2026-6043 CVE-2026-27775 GHSA-649p-mmhf-85c7\n * GO-2026-6044 CVE-2026-58424 GHSA-777r-4v59-6486\n * GO-2026-6045 CVE-2026-56443 GHSA-7p4h-3gxq-x3h3\n * GO-2026-6046 CVE-2026-58423 GHSA-7wvc-rvp7-w99x\n * GO-2026-6047 CVE-2026-58437 GHSA-8p9h-49rc-qgxj\n * GO-2026-6048 CVE-2026-54481 GHSA-94v3-77j7-vm48\n * GO-2026-6049 CVE-2026-59763 GHSA-9mq6-mqjj-c2c5\n * GO-2026-6050 CVE-2026-58444 GHSA-cp3q-vrj2-ghhh\n * GO-2026-6051 CVE-2026-20896 GHSA-f75j-4cw6-rmx4\n * GO-2026-6052 CVE-2026-58416 GHSA-fj8v-hjwv-qm88\n * GO-2026-6053 CVE-2026-58429 GHSA-fq2p-5p22-8g6j\n * GO-2026-6054 CVE-2026-57897 GHSA-frpw-3h2q-4jj6\n * GO-2026-6055 CVE-2026-58436 GHSA-fw57-jgch-pgf3\n * GO-2026-6056 CVE-2026-58422 GHSA-g9g6-qhrc-p3qc\n * GO-2026-6057 CVE-2026-20779 GHSA-gx3v-q759-g323\n- Update to version 0.0.20260708T170500 2026-07-08T17:05:00Z.\n * GO-2026-4970 CVE-2026-39822\n * GO-2026-5856 CVE-2026-42505\n * GO-2026-5932\n- Update to version 0.0.20260707T200351 2026-07-07T20:03:51Z.\n * GO-2026-5073 CVE-2026-35480 GHSA-378j-3jfj-8r9f\n * GO-2026-5313 CVE-2026-50133 GHSA-c54g-xjwj-8g82\n * GO-2026-5320 CVE-2026-5160 GHSA-c97m-vxhj-p7j6\n * GO-2026-5380 CVE-2026-50135 GHSA-fw87-fv5r-9fpw\n * GO-2026-5410 GHSA-gxhx-2686-5h9g\n * GO-2026-5427 CVE-2026-7736 GHSA-hj4w-qr9j-c4cf\n * GO-2026-5496 CVE-2026-45570 GHSA-m7cr-m3pv-hgrp\n * GO-2026-5498 CVE-2026-44885 GHSA-m8fg-67j7-cx4v\n * GO-2026-5504 CVE-2026-35166 GHSA-mcv8-8m8x-48pg\n * GO-2026-5570 CVE-2025-66719 GHSA-q7c8-gfjh-8v4p\n * GO-2026-5665 CVE-2026-7734 GHSA-vm3g-8xwv-mxfp\n * GO-2026-5676 CVE-2026-40898 GHSA-vvgj-x9jq-8cj9\n * GO-2026-5681 CVE-2026-50134 GHSA-vxgm-5rmg-5w8g\n * GO-2026-5699 CVE-2026-7737 GHSA-w88c-9vg8-cmq8\n * GO-2026-5713 CVE-2026-37461 GHSA-wmvj-f67g-qg4g\n * GO-2026-5743 CVE-2026-45692 GHSA-x5w9-xh9r-mvfc\n * GO-2026-5761 CVE-2026-41579 GHSA-xjvp-4fhw-gc47\n * GO-2026-5762 CVE-2026-41589 GHSA-xjvp-7243-rg9h\n * GO-2026-5764 GHSA-xmrv-pmrh-hhx2\n * GO-2026-5778 CVE-2026-48702 GHSA-47q9-m4ww-924m\n * GO-2026-5779 CVE-2026-48529 GHSA-pjp5-fpmr-3349\n * GO-2026-5798 CVE-2026-48749 GHSA-2q3f-q5pq-g8wv\n * GO-2026-5799 CVE-2026-48751 GHSA-48q5-w887-33wv\n * GO-2026-5800 CVE-2026-48754 GHSA-4xg6-52mh-fpw8\n * GO-2026-5801 CVE-2026-48750 GHSA-73hr-m85f-64v9\n * GO-2026-5802 CVE-2026-48753 GHSA-ccjc-4qc3-jxqc\n * GO-2026-5803 CVE-2026-48752 GHSA-vxp5-584q-c479\n * GO-2026-5804 CVE-2026-48788 GHSA-4c8j-mgm4-qqvp\n * GO-2026-5805 CVE-2026-48785 GHSA-cr2j-534f-mf3g\n * GO-2026-5806 CVE-2026-48769 GHSA-f6m5-xw2g-xc4x\n * GO-2026-5807 GHSA-qh5x-rfwf-rvfv\n * GO-2026-5808 CVE-2026-48755 GHSA-v6mj-8pf4-hhw4\n * GO-2026-5809 GHSA-vgrc-hq28-p3xp\n * GO-2026-5810 CVE-2026-48756 GHSA-xhqx-mgh3-3h7q\n * GO-2026-5811 CVE-2026-48790 GHSA-57f6-pvx8-hwj6\n * GO-2026-5812 CVE-2026-41262 GHSA-gm7f-v959-fr2g\n * GO-2026-5813 GHSA-jqc5-2p7q-fqfc\n * GO-2026-5814 GHSA-rhq6-9rgh-v45c\n * GO-2026-5815 GHSA-v2jf-442r-6mjh\n * GO-2026-5816 CVE-2026-49258 GHSA-c6v2-3ffm-vcmc\n * GO-2026-5817 CVE-2026-3473 GHSA-7pf2-9c95-w332\n * GO-2026-5818 CVE-2026-3636 GHSA-ffpr-pfr4-g354\n * GO-2026-5819 CVE-2026-48794 GHSA-j748-h363-wqj8\n * GO-2026-5820 CVE-2026-4635 GHSA-pg7c-462j-grxv\n * GO-2026-5821 GHSA-q6xx-5vr8-p898\n * GO-2026-5822 CVE-2026-49349 GHSA-qvqc-4c52-x6qp\n * GO-2026-5823 GHSA-wcr3-9x4c-f5gj\n * GO-2026-5824 CVE-2026-53520 GHSA-x6fg-52vr-hj4w\n * GO-2026-5825 CVE-2026-49339 GHSA-2fp4-5v5c-4448\n * GO-2026-5826 CVE-2026-53521 GHSA-39g2-8x68-pmx8\n * GO-2026-5827 CVE-2026-49340 GHSA-4gxv-p5g5-j7w7\n * GO-2026-5828 CVE-2026-53519 GHSA-5c25-7vpj-9mqh\n * GO-2026-5829 CVE-2026-53523 GHSA-9rc6-8cjv-rcvx\n * GO-2026-5830 CVE-2026-49338 GHSA-hmgp-w9jm-vp95\n * GO-2026-5831 CVE-2026-53522 GHSA-jg62-j5h6-8mpq\n * GO-2026-5832 GHSA-ww5p-j6cj-6mqq\n * GO-2026-5833 CVE-2026-4646 GHSA-rmvv-8v8w-rf7x\n * GO-2026-5835 CVE-2026-5755 GHSA-37j2-3vv8-cf24\n * GO-2026-5836 CVE-2026-5308 GHSA-jmvr-r5hm-fxfr\n * GO-2026-5838 CVE-2026-5740 GHSA-w9m8-p4cc-4qj9\n * GO-2026-5839 CVE-2026-28735 GHSA-r5vf-grcx-5vqp\n * GO-2026-5842 CVE-2026-9300 GHSA-6p7m-c3mw-4gmw\n * GO-2026-5843 CVE-2026-9299 GHSA-m9r6-r5c3-jw4j\n * GO-2026-5844 CVE-2026-9301 GHSA-qm7q-rcm2-3frc\n * GO-2026-5845 CVE-2026-4915 GHSA-5gmf-x7hg-97wf\n * GO-2026-5846 CVE-2026-49823 GHSA-3r8v-2xmj-5c39\n * GO-2026-5847 GHSA-55f6-4pr5-c7m5\n * GO-2026-5848 CVE-2026-7374 GHSA-7jcp-v9w4-wjmg\n * GO-2026-5849 GHSA-7m8x-qg2j-4m3v\n * GO-2026-5850 CVE-2026-50565 GHSA-8wcj-mfrc-jx5q\n * GO-2026-5851 CVE-2026-49835 GHSA-9c54-x2g4-v92j\n * GO-2026-5852 CVE-2026-49824 GHSA-cvw6-gfvv-953q\n * GO-2026-5853 CVE-2026-49478 GHSA-f5mr-q85p-6hh6\n * GO-2026-5854 CVE-2026-49822 GHSA-gc3j-79f2-7vvw\n * GO-2026-5855 CVE-2026-50564 GHSA-gx55-f84r-v3r7\n * GO-2026-5857 CVE-2026-50566 GHSA-m63v-2g9w-2w6v\n * GO-2026-5858 CVE-2026-50563 GHSA-v455-mv2v-5g92\n * GO-2026-5859 CVE-2026-49821 GHSA-vjhc-cf4p-72q4\n * GO-2026-5860 CVE-2026-50545 GHSA-wmgg-3p4h-48x7\n * GO-2026-5861 CVE-2026-49820 GHSA-x7qq-m748-8p2c\n * GO-2026-5864 GHSA-3ccm-4qq2-5wrp\n * GO-2026-5865 GHSA-6c87-g9pw-78fx\n * GO-2026-5866 CVE-2026-49826 GHSA-8w27-c4vc-88q9\n * GO-2026-5867 CVE-2026-36045 GHSA-cv2p-68f4-f4pw\n * GO-2026-5868 CVE-2026-48824 GHSA-28pq-6qxg-wg5r\n * GO-2026-5869 CVE-2026-41053 GHSA-4j6x-2764-m8gh\n * GO-2026-5870 CVE-2026-9739 GHSA-7pf3-8xx7-rvhf\n * GO-2026-5871 CVE-2026-44938 GHSA-864g-863m-vcvq\n * GO-2026-5872 CVE-2026-49998 GHSA-g6vg-wj8f-48cj\n * GO-2026-5873 CVE-2026-44936 GHSA-hx4v-cxpf-vh8m\n * GO-2026-5874 CVE-2026-44937 GHSA-jmf4-m7j9-g72r\n * GO-2026-5875 CVE-2026-44939 GHSA-mhc6-2gfq-xx62\n * GO-2026-5876 CVE-2026-41052 GHSA-vx8h-4prv-g744\n * GO-2026-5877 CVE-2026-44935 GHSA-xr65-5cpm-g36x\n * GO-2026-5878 CVE-2026-50138 GHSA-3whc-qvhv-xqjp\n * GO-2026-5881 CVE-2026-50139 GHSA-j48m-h7xq-2xpj\n * GO-2026-5883 CVE-2026-9804 GHSA-mpmf-3w4r-qfpf\n * GO-2026-5888 CVE-2026-41184 GHSA-9p7w-w5q6-mxj3\n * GO-2026-5889 CVE-2026-50149 GHSA-g3xr-5w5j-w4q4\n * GO-2026-5890 CVE-2026-50192 GHSA-h5gx-45rj-2h5j\n * GO-2026-5891 CVE-2026-41185 GHSA-m67g-87rx-v42c\n * GO-2026-5892 CVE-2026-9097 GHSA-339w-3hqm-9pjc\n * GO-2026-5893 CVE-2026-6720 GHSA-3m4q-ggcj-j6m4\n * GO-2026-5894 CVE-2026-9093 GHSA-3w4h-g9f5-j84p\n * GO-2026-5895 CVE-2026-9090 GHSA-fwgq-j9r9-qjgr\n * GO-2026-5896 CVE-2026-9091 GHSA-gv4m-v8c8-hr3g\n * GO-2026-5897 CVE-2026-44454 GHSA-m3cr-vc2j-pm27\n * GO-2026-5898 CVE-2026-9098 GHSA-mfvp-7p3v-x9mh\n * GO-2026-5899 CVE-2026-9096 GHSA-rgq2-93gj-ffxg\n * GO-2026-5900 CVE-2026-49245 GHSA-3vcg-pv95-pq54\n * GO-2026-5901 CVE-2026-49254 GHSA-4q9j-6299-gxmr\n * GO-2026-5902 CVE-2026-49244 GHSA-h64p-8h4r-6gfh\n * GO-2026-5903 CVE-2026-52792 GHSA-mm6c-5j6x-hq8m\n * GO-2026-5905 CVE-2026-49445 GHSA-3fcv-jvfp-m4q9\n * GO-2026-5906 CVE-2026-55077 GHSA-29xf-69gq-m9jx\n * GO-2026-5907 CVE-2026-55076 GHSA-75vm-6w67-gwvp\n * GO-2026-5908 CVE-2026-55075 GHSA-9r87-mvcw-x35f\n * GO-2026-5909 CVE-2026-55429 GHSA-9rjw-3gwp-f59v\n * GO-2026-5910 CVE-2026-54637 GHSA-chwm-m7g7-685g\n * GO-2026-5911 CVE-2026-55079 GHSA-f962-qm93-mj4c\n * GO-2026-5913 CVE-2026-55427 GHSA-mcqq-fqgf-rxwm\n * GO-2026-5914 CVE-2026-53935 GHSA-q6h5-q3q6-f87x\n * GO-2026-5915 CVE-2026-55428 GHSA-wrq8-fcv5-8hvp\n * GO-2026-5916 CVE-2026-55078 GHSA-2mg2-p7r7-g27f\n * GO-2026-5917 CVE-2026-55430 GHSA-5g4w-3vw9-478w\n * GO-2026-5918 CVE-2026-55438 GHSA-5wg6-jmq2-53pw\n * GO-2026-5919 CVE-2026-55437 GHSA-7qw2-f75v-62f7\n * GO-2026-5920 CVE-2026-55436 GHSA-84rm-42xw-mx52\n * GO-2026-5921 CVE-2026-55434 GHSA-f5vp-w269-392g\n * GO-2026-5922 CVE-2026-55433 GHSA-jqj2-x4c5-jfxm\n * GO-2026-5923 GHSA-qrwj-vh9x-gw5v\n * GO-2026-5924 CVE-2026-55431 GHSA-v54h-cp2w-9x4g\n * GO-2026-5925 CVE-2026-55435 GHSA-wqxv-w64v-5wh6\n * GO-2026-5926 CVE-2026-55432 GHSA-x9qq-2qh5-8rxf\n- Update to version 0.0.20260626T200413 2026-06-26T20:04:13Z.\n * GO-2026-5066 CVE-2026-46604\n- Update to version 0.0.20260625T223441 2026-06-25T22:34:41Z.\n * GO-2026-4961 CVE-2026-33813\n * GO-2026-5003 CVE-2026-8275 GHSA-322p-rrj6-j44g\n * GO-2026-5004 CVE-2026-41889 GHSA-j88v-2chj-qfwx\n * GO-2026-5052 GHSA-mpwr-8vm7-h73f\n * GO-2026-5058 CVE-2026-4660 GHSA-92mm-2pjq-r785\n * GO-2026-5059 CVE-2026-55671 GHSA-29jh-8cfq-rr8x\n * GO-2026-5060 CVE-2026-55229 GHSA-2mrg-35hw-x3x9\n * GO-2026-5061 CVE-2026-46601\n * GO-2026-5062 CVE-2026-46602\n * GO-2026-5063 GHSA-2h46-9x5w-4wf7\n * GO-2026-5064 CVE-2026-53492 GHSA-33vj-92qq-66hc\n * GO-2026-5065 CVE-2026-52808 GHSA-268j-37xf-pp52\n * GO-2026-5067 CVE-2026-3108 GHSA-3439-vqgj-2gcf\n * GO-2026-5068 CVE-2026-25996 GHSA-34r5-6j7w-235f\n * GO-2026-5070 CVE-2026-45088 GHSA-35wr-x7v6-9fv2\n * GO-2026-5071 CVE-2026-44593 GHSA-3636-h3vx-6465\n * GO-2026-5072 CVE-2026-42296 GHSA-3775-99mw-8rp4\n * GO-2026-5076 CVE-2026-6959 GHSA-3934-423w-4jq3\n * GO-2026-5077 CVE-2026-45047 GHSA-39qr-rc93-vhqm\n * GO-2026-5078 CVE-2026-7573 GHSA-3c93-g9g6-p5j4\n * GO-2026-5079 CVE-2026-45224 GHSA-3cjv-h753-qf7h\n * GO-2026-5080 CVE-2026-42593 GHSA-3cv5-q585-h563\n * GO-2026-5081 CVE-2026-27783 GHSA-3fwp-p5rj-2pxf\n * GO-2026-5082 CVE-2026-46614 GHSA-3g33-6vg6-27m8\n * GO-2026-5083 CVE-2026-54761 GHSA-3g6v-2r68-prfc\n * GO-2026-5084 CVE-2026-45062 GHSA-3g8v-8r37-cgjm\n * GO-2026-5085 CVE-2026-41572 GHSA-3gr9-485j-v4xf\n * GO-2026-5086 CVE-2026-46415 GHSA-3h23-rrpc-3p87\n * GO-2026-5087 CVE-2026-8349 GHSA-3h63-fx68-x5fm\n * GO-2026-5088 CVE-2026-39429 GHSA-3j3q-wp9x-585p\n * GO-2026-5089 CVE-2026-46410 GHSA-3jmg-p96m-m328\n * GO-2026-5090 CVE-2026-40304 GHSA-3jpj-v3xr-5h6g\n * GO-2026-5091 GHSA-3m6q-h5gj-7mrw\n * GO-2026-5092 CVE-2026-3112 GHSA-3mw5-466q-295q\n * GO-2026-5093 CVE-2026-44326 GHSA-3p28-73q7-45xp\n * GO-2026-5094 CVE-2026-33540 GHSA-3p65-76g6-3w7r\n * GO-2026-5095 CVE-2026-27877 GHSA-3q27-7qjq-p9c5\n * GO-2026-5096 CVE-2026-54096 GHSA-3q2p-72cj-682c\n * GO-2026-5097 CVE-2026-42274 GHSA-3q34-rx83-r6mq\n * GO-2026-5098 CVE-2025-64719 GHSA-3qq3-668m-v9mj\n * GO-2026-5099 CVE-2026-42880 GHSA-3v3m-wc6v-x4x3\n * GO-2026-5100 GHSA-3v85-fqvh-7rxf\n * GO-2026-5101 CVE-2026-45298 GHSA-3v9w-6365-9w54\n * GO-2026-5103 CVE-2026-52816 GHSA-3w28-36p9-w929\n * GO-2026-5104 CVE-2026-8780 GHSA-3x4g-259h-5p7c\n * GO-2026-5106 CVE-2026-44477 GHSA-423p-g724-fr39\n * GO-2026-5107 CVE-2026-45686 GHSA-43g7-cwr8-q3jh\n * GO-2026-5108 CVE-2026-42272 GHSA-43jv-5j4x-qv67\n * GO-2026-5109 CVE-2026-44321 GHSA-44qj-cghf-9p97\n * GO-2026-5110 CVE-2026-52804 GHSA-4565-r4x7-hg8j\n * GO-2026-5111 CVE-2026-35600 GHSA-45q4-x4r9-8fqj\n * GO-2026-5112 CVE-2026-3113 GHSA-4765-v66x-rqx7\n * GO-2026-5113 CVE-2026-44425 GHSA-47r2-v3x6-wff9\n * GO-2026-5114 CVE-2026-35598 GHSA-48ch-p4gq-x46x\n * GO-2026-5115 CVE-2026-21726 GHSA-497x-rrr9-68jp\n * GO-2026-5117 CVE-2026-47190 GHSA-49pm-43hf-6xfq\n * GO-2026-5118 CVE-2026-40302 GHSA-4fxq-2x3x-6xqx\n * GO-2026-5120 CVE-2026-8621 GHSA-4g9m-rffv-h6wq\n * GO-2026-5121 GHSA-4gph-2hhr-5mwg\n * GO-2026-5123 GHSA-4h9q-p5j4-xvvh\n * GO-2026-5124 CVE-2026-52796 GHSA-4j89-2c4f-44c6\n * GO-2026-5125 GHSA-4jgr-pg2m-m988\n * GO-2026-5126 CVE-2026-47256 GHSA-4jvg-4jfx-fmhc\n * GO-2026-5127 CVE-2026-40251 GHSA-4m88-wxj4-9qj6\n * GO-2026-5128 CVE-2026-54762 GHSA-4mr2-fg2p-w63c\n * GO-2026-5129 CVE-2026-42238 GHSA-4pvg-prr3-9cxr\n * GO-2026-5130 CVE-2026-8781 GHSA-4qf2-p32m-7hmf\n * GO-2026-5131 CVE-2026-44323 GHSA-4rqf-grm6-vf75\n * GO-2026-5132 CVE-2026-42596 GHSA-4vmc-gm8v-m35h\n * GO-2026-5133 CVE-2026-55866 GHSA-4vrg-r928-h5vv\n * GO-2026-5134 CVE-2026-42572 GHSA-55gc-6fmc-fpx9\n * GO-2026-5136 CVE-2026-41131 GHSA-57j5-qwp2-vqp6\n * GO-2026-5137 CVE-2026-40193 GHSA-5835-4gvc-32pc\n * GO-2026-5138 CVE-2026-42459 GHSA-585v-hcgf-jhfr\n * GO-2026-5139 CVE-2026-47724 GHSA-598g-h2vc-h5vg\n * GO-2026-5140 CVE-2026-52809 GHSA-5c3f-6486-3g7g\n * GO-2026-5141 CVE-2026-40077 GHSA-5f5r-95pg-xrpm\n * GO-2026-5142 CVE-2026-44315 GHSA-5f62-53r8-qrqf\n * GO-2026-5143 CVE-2026-44849 GHSA-5fxq-qcf3-244w\n * GO-2026-5144 CVE-2026-11719 GHSA-5gf6-gc35-xjpc\n * GO-2026-5145 CVE-2026-40943 GHSA-5gqc-qhrj-9xw8\n * GO-2026-5146 CVE-2026-40876 GHSA-5h6h-7rc9-3824\n * GO-2026-5147 CVE-2026-34457 GHSA-5hvv-m4w4-gf6v\n * GO-2026-5148 CVE-2026-40886 GHSA-5jv8-h7qh-rf5p\n * GO-2026-5149 CVE-2026-39858 GHSA-5m6w-wvh7-57vm\n * GO-2026-5150 CVE-2026-35605 GHSA-5q48-q4fm-g3m6\n * GO-2026-5151 CVE-2026-40280 GHSA-5q7p-7jgv-ww56\n * GO-2026-5153 CVE-2026-24661 GHSA-5rfv-h47g-xj42\n * GO-2026-5154 CVE-2026-25705 GHSA-5v3h-x4wf-5c35\n * GO-2026-5155 CVE-2026-39383 GHSA-5vh4-rgv7-p9g4\n * GO-2026-5156 CVE-2026-34529 GHSA-5vpr-4fgw-f69h\n * GO-2026-5157 CVE-2023-34620 GHSA-5wfc-hjrc-gq87\n * GO-2026-5159 CVE-2026-54097 GHSA-5ww9-jg6q-38r7\n * GO-2026-5160 CVE-2026-45720 GHSA-5x9f-6vg5-qg4m\n * GO-2026-5161 CVE-2025-2842 GHSA-5xf3-gmx4-529v\n * GO-2026-5162 CVE-2026-40893 GHSA-62p3-hvxx-fxg4\n * GO-2026-5163 CVE-2026-35051 GHSA-6384-m2mw-rf54\n * GO-2026-5164 CVE-2026-32936 GHSA-63cw-r7xf-jmwr\n * GO-2026-5165 GHSA-6447-269v-g68m\n * GO-2026-5166 CVE-2026-47671 GHSA-64cj-qvx5-m4f3\n * GO-2026-5167 CVE-2026-35606 GHSA-67cg-cpj7-qgc9\n * GO-2026-5168 CVE-2026-41648 GHSA-67wx-r9xr-x75x\n * GO-2026-5169 CVE-2026-45796 GHSA-686c-7vgv-v3fx\n * GO-2026-5170 CVE-2026-40293 GHSA-68m9-983m-f3v5\n * GO-2026-5171 CVE-2026-34449 GHSA-68p4-j234-43mv\n * GO-2026-5172 GHSA-69hx-63pv-f8f4\n * GO-2026-5173 CVE-2026-4055 GHSA-6cfr-wp44-6qmv\n * GO-2026-5174 CVE-2026-7572 GHSA-6cmp-qv2f-x97x\n * GO-2026-5175 CVE-2026-34227 GHSA-6fpf-248c-m7wm\n * GO-2026-5176 CVE-2026-41574 GHSA-6g38-8j4p-j3pr\n * GO-2026-5177 CVE-2026-34761 GHSA-6gm8-3g4h-w82m\n * GO-2026-5178 CVE-2026-47780 GHSA-6gxq-gpr8-xgjp\n * GO-2026-5179 CVE-2026-8782 GHSA-6h8r-h22r-jj64\n * GO-2026-5180 CVE-2026-40912 GHSA-6jwx-7vp4-9847\n * GO-2026-5181 CVE-2026-55883 GHSA-6m68-r693-78qx\n * GO-2026-5182 CVE-2026-55770 GHSA-6mwx-4547-5vc9\n * GO-2026-5183 CVE-2026-48089 GHSA-6p54-fw2f-q7gf\n * GO-2026-5184 CVE-2026-52812 GHSA-6p9m-q3jp-47h4\n * GO-2026-5185 CVE-2026-41888 GHSA-6pjf-3r9x-m592\n * GO-2026-5186 CVE-2026-35471 GHSA-6qcc-6q27-whp8\n * GO-2026-5187 CVE-2026-6987 GHSA-6r3x-h84w-fhxx\n * GO-2026-5188 CVE-2026-45147 GHSA-6r88-8v7q-q4p2\n * GO-2026-5189 CVE-2026-42083 GHSA-6rgm-gr97-x3j5\n * GO-2026-5190 CVE-2026-8783 GHSA-6v92-ph9p-hrpc\n * GO-2026-5191 GHSA-6vgg-xhvh-38ff\n * GO-2026-5192 CVE-2026-39946 GHSA-6vgr-cp5c-ffx3\n * GO-2026-5193 GHSA-6vxv-wg6j-5qwp\n * GO-2026-5194 CVE-2026-47268 GHSA-6x26-5727-rrm9\n * GO-2026-5195 CVE-2026-41263 GHSA-6x2q-h3cr-8j2h\n * GO-2026-5196 CVE-2026-46354 GHSA-6x44-w3xg-hqqf\n * GO-2026-5197 CVE-2026-55670 GHSA-6x8v-2fq5-2229\n * GO-2026-5199 CVE-2026-4525 GHSA-72gw-fmmr-c4r4\n * GO-2026-5200 CVE-2026-42273 GHSA-72h4-mxfc-jx37\n * GO-2026-5201 CVE-2026-34605 GHSA-73g7-86qr-jrg3\n * GO-2026-5202 CVE-2026-52815 GHSA-744x-3838-5r56\n * GO-2026-5203 CVE-2026-42275 GHSA-74m3-9qvm-rp9h\n * GO-2026-5204 GHSA-74m6-4hjp-7226\n * GO-2026-5205 CVE-2026-35607 GHSA-7526-j432-6ppp\n * GO-2026-5206 GHSA-763j-3p5v-jfc6\n * GO-2026-5207 CVE-2026-41050 GHSA-765j-qfrp-hm3j\n * GO-2026-5209 CVE-2026-42081 GHSA-77x9-rf64-92gv\n * GO-2026-5210 CVE-2026-34403 GHSA-78mf-482w-62qj\n * GO-2026-5211 CVE-2026-24905 GHSA-79qw-g77v-2vfh\n * GO-2026-5212 CVE-2026-44310 GHSA-7c37-gx6w-8vc5\n * GO-2026-5213 CVE-2026-39388 GHSA-7ccv-rp6m-rffr\n * GO-2026-5214 CVE-2026-44778 GHSA-7cfq-5mhv-jrp9\n * GO-2026-5215 GHSA-7cwm-fpfh-rrch\n * GO-2026-5216 CVE-2026-48708 GHSA-7fq5-7wr8-rjwj\n * GO-2026-5217 CVE-2026-44850 GHSA-7fw3-x4r2-g7wc\n * GO-2026-5218 CVE-2026-44543 GHSA-7fxv-8wr2-mfc4\n * GO-2026-5219 CVE-2026-21724 GHSA-7g92-g4vh-hp84\n * GO-2026-5220 CVE-2026-45625 GHSA-7h26-hg47-p9hx\n * GO-2026-5221 CVE-2026-40885 GHSA-7h3j-592v-jcrp\n * GO-2026-5222 GHSA-7hgr-xvrr-xpw3\n * GO-2026-5223 CVE-2026-47722 GHSA-7hp6-g3pq-3pc3\n * GO-2026-5224 CVE-2026-44503 GHSA-7j59-v9qr-6fq9\n * GO-2026-5225 CVE-2026-46405 GHSA-7j6w-vvw2-5f9c\n * GO-2026-5226 CVE-2026-40944 GHSA-7jrq-q4pq-rhm6\n * GO-2026-5227 CVE-2026-42220 GHSA-7jrr-xw9c-mj39\n * GO-2026-5228 CVE-2026-5774 GHSA-7m55-2hr4-pw78\n * GO-2026-5229 CVE-2026-40259 GHSA-7m5h-w69j-qggg\n * GO-2026-5230 CVE-2026-46618 GHSA-7pjr-qpvh-m339\n * GO-2026-5231 GHSA-7qjx-gp9h-65qj\n * GO-2026-5232 GHSA-7qx6-f23w-3w7f\n * GO-2026-5233 CVE-2026-44309 GHSA-7rmh-48mx-2vwc\n * GO-2026-5234 CVE-2026-42590 GHSA-7v3r-m9c8-r855\n * GO-2026-5235 CVE-2026-42295 GHSA-7vf8-2cr6-54mf\n * GO-2026-5236 CVE-2026-40575 GHSA-7x63-xv5r-3p2x\n * GO-2026-5237 CVE-2026-7776 GHSA-7x9r-wcgg-w86f\n * GO-2026-5238 CVE-2026-6347 GHSA-82j6-4fq7-fx62\n * GO-2026-5239 CVE-2026-48096 GHSA-8396-jffm-qx4w\n * GO-2026-5240 GHSA-84g5-x8j3-7235\n * GO-2026-5241 CVE-2026-46617 GHSA-85g2-pmrx-r49q\n * GO-2026-5242 CVE-2026-41491 GHSA-85gx-3qv6-4463\n * GO-2026-5243 CVE-2026-25714 GHSA-8629-vc8r-5p58\n * GO-2026-5244 CVE-2026-45741 GHSA-86m8-88fq-xfxp\n * GO-2026-5245 CVE-2026-20719 GHSA-86vc-mg26-fj6x\n * GO-2026-5246 CVE-2026-44697 GHSA-87m7-qffr-542v\n * GO-2026-5247 CVE-2026-5807 GHSA-88v5-9hxc-f85r\n * GO-2026-5248 CVE-2026-45680 GHSA-89c6-vpcj-7vj4\n * GO-2026-5249 CVE-2026-52811 GHSA-89mr-xqfv-758m\n * GO-2026-5250 CVE-2026-54090 GHSA-8c9q-7855-wfxq\n * GO-2026-5251 CVE-2026-11717 GHSA-8fcc-w5hv-4gxv\n * GO-2026-5252 CVE-2026-47753 GHSA-8g7m-96c8-8wwc\n * GO-2026-5253 CVE-2026-41433 GHSA-8gmg-3w2q-65f4\n * GO-2026-5254 CVE-2026-35527 GHSA-8gw4-p4wq-4hcv\n * GO-2026-5255 CVE-2026-48025 GHSA-8h84-fhqq-q58v\n * GO-2026-5256 CVE-2026-28759 GHSA-8h9w-w78c-vvr3\n * GO-2026-5257 CVE-2026-45089 GHSA-8hf9-3q64-q2qf\n * GO-2026-5258 CVE-2026-34727 GHSA-8jvc-mcx6-r4cg\n * GO-2026-5259 GHSA-8mc6-xjpr-h98x\n * GO-2026-5260 CVE-2026-40922 GHSA-8q5w-mmxf-48jg\n * GO-2026-5261 CVE-2026-49396 GHSA-8qhj-4f8c-j8qg\n * GO-2026-5262 CVE-2026-5052 GHSA-8r5m-3f66-qpr3\n * GO-2026-5263 CVE-2026-5163 GHSA-8r89-8w26-cq32\n * GO-2026-5264 CVE-2026-42154 GHSA-8rm2-7qqf-34qm\n * GO-2026-5265 CVE-2026-45679 GHSA-8rrq-wcg8-cv5q\n * GO-2026-5267 CVE-2026-55776 GHSA-8w8f-r2xv-4q4j\n * GO-2026-5268 GHSA-8wfp-579w-6r25\n * GO-2026-5269 CVE-2026-44247 GHSA-8wxp-xxp2-rcgx\n * GO-2026-5270 CVE-2026-35454 GHSA-8x9r-hvwg-c55h\n * GO-2026-5271 CVE-2026-48501 GHSA-8xvp-7hj6-mcj9\n * GO-2026-5273 CVE-2026-44428 GHSA-95c3-6vvw-4mrq\n * GO-2026-5275 CVE-2026-45682 GHSA-962q-hwm5-52x5\n * GO-2026-5276 CVE-2026-35594 GHSA-96q5-xm3p-7m84\n * GO-2026-5277 CVE-2026-44774 GHSA-96qj-4jj5-wcjc\n * GO-2026-5278 CVE-2026-41135 GHSA-98cp-84m9-q3qp\n * GO-2026-5279 CVE-2026-29050 GHSA-98f2-w9h9-7fp9\n * GO-2026-5280 CVE-2026-41685 GHSA-98vh-x9cx-9cfp\n * GO-2026-5281 CVE-2026-45287 GHSA-995v-fvrw-c78m\n * GO-2026-5282 CVE-2026-46716 GHSA-99gv-2m7h-3hh9\n * GO-2026-5283 CVE-2026-39961 GHSA-99j8-wv67-4c72\n * GO-2026-5284 CVE-2026-40344 GHSA-9c4q-hq6p-c237\n * GO-2026-5285 GHSA-9cp7-j3f8-p5jx\n * GO-2026-5286 CVE-2026-28737 GHSA-9cpj-qc93-vw8v\n * GO-2026-5288 GHSA-9fw6-xgg2-mq9q\n * GO-2026-5289 CVE-2026-39350 GHSA-9gcg-w975-3rjh\n * GO-2026-5290 GHSA-9h64-2846-7x7f\n * GO-2026-5291 CVE-2026-41164 GHSA-9hmg-827w-9rhj\n * GO-2026-5292 CVE-2026-45626 GHSA-9mvm-4gwg-v8mp\n * GO-2026-5293 CVE-2026-6346 GHSA-9p64-jpc7-m2rp\n * GO-2026-5294 CVE-2026-47768 GHSA-9pg3-25fq-p6cc\n * GO-2026-5295 CVE-2026-40262 GHSA-9pr4-rf97-79qh\n * GO-2026-5296 CVE-2026-33544 GHSA-9q5m-jfc4-wc92\n * GO-2026-5297 CVE-2026-40097 GHSA-9qq8-cgcv-qmc9\n * GO-2026-5298 GHSA-9r4w-jg96-92mv\n * GO-2026-5299 CVE-2026-28699 GHSA-9r5x-wg6m-x2rc\n * GO-2026-5300 GHSA-9v4j-7g44-qcqw\n * GO-2026-5301 CVE-2026-26191 GHSA-9vcr-g537-3w5v\n * GO-2026-5302 CVE-2026-44423 GHSA-9w9c-9w8m-w89q\n * GO-2026-5303 CVE-2026-40884 GHSA-c29w-qq4m-2gcv\n * GO-2026-5304 CVE-2026-55774 GHSA-c36x-h252-g9x2\n * GO-2026-5305 CVE-2026-52813 GHSA-c39w-43gm-34h5\n * GO-2026-5308 CVE-2026-47179 GHSA-c3px-h233-h6fq\n * GO-2026-5310 CVE-2026-34476 GHSA-c4hg-6933-x62x\n * GO-2026-5311 CVE-2026-4858 GHSA-c4r7-j7pp-r8mp\n * GO-2026-5312 CVE-2026-47267 GHSA-c4v7-xg93-qf8g\n * GO-2026-5314 CVE-2026-40574 GHSA-c5c4-8r6x-56w3\n * GO-2026-5315 CVE-2026-45576 GHSA-c656-jcx2-7pqj\n * GO-2026-5316 CVE-2026-45723 GHSA-c66c-vq6w-fvh5\n * GO-2026-5317 CVE-2026-55884 GHSA-c73q-8xxr-rgqm\n * GO-2026-5318 CVE-2026-34453 GHSA-c77m-r996-jr3q\n * GO-2026-5319 CVE-2026-40243 GHSA-c839-4qxr-j4x3\n * GO-2026-5321 CVE-2026-28744 GHSA-cc8w-r4qh-3v65\n * GO-2026-5322 CVE-2026-55170 GHSA-cf98-j28v-49v6\n * GO-2026-5323 CVE-2026-46612 GHSA-chf8-4hv6-8pg6\n * GO-2026-5324 CVE-2026-42595 GHSA-chwh-f6gm-r836\n * GO-2026-5325 CVE-2026-6340 GHSA-cjm8-jxpw-g43m\n * GO-2026-5326 CVE-2026-44327 GHSA-cmpj-2x3g-m7g3\n * GO-2026-5328 GHSA-cp79-9mwr-wr49\n * GO-2026-5329 CVE-2026-40303 GHSA-cpf9-ph2j-ccr9\n * GO-2026-5330 CVE-2026-48154 GHSA-cpwg-x64r-rgwg\n * GO-2026-5331 CVE-2026-35037 GHSA-cqgf-f4x7-g6wc\n * GO-2026-5332 CVE-2025-41117 GHSA-cqp7-wf4c-3xgc\n * GO-2026-5333 CVE-2026-44884 GHSA-cqpq-2fgr-8mvc\n * GO-2026-5334 CVE-2026-20706 GHSA-cr4g-f395-h25h\n * GO-2026-5335 CVE-2026-45803 GHSA-crc3-h8v6-qh57\n * GO-2026-5337 CVE-2026-41068 GHSA-cvq5-hhx3-f99p\n * GO-2026-5338 CVE-2026-50195 GHSA-cvxm-645q-p574\n * GO-2026-5339 CVE-2026-47701 GHSA-cxh2-4639-vmc5\n * GO-2026-5340 CVE-2026-42461 GHSA-cxx3-hr75-4q96\n * GO-2026-5341 CVE-2026-34454 GHSA-f24x-5g9q-753f\n * GO-2026-5343 CVE-2026-48496 GHSA-f2r5-5m7w-p5cx\n * GO-2026-5344 CVE-2026-46703 GHSA-f396-4rp4-7v2j\n * GO-2026-5345 CVE-2026-45046 GHSA-f3jg-756w-gm35\n * GO-2026-5347 CVE-2026-48709 GHSA-f637-w7p2-m7fx\n * GO-2026-5348 CVE-2026-42560 GHSA-f6qq-3m3h-4g42\n * GO-2026-5349 CVE-2026-44325 GHSA-f8qv-7x5w-qr48\n * GO-2026-5350 CVE-2026-25726 GHSA-f8xp-wvcx-p6f4\n * GO-2026-5351 CVE-2026-41323 GHSA-f9g8-6ppc-pqq4\n * GO-2026-5352 CVE-2026-55828 GHSA-f9m7-vc86-p6jj\n * GO-2026-5353 GHSA-fc67-c4hg-q653\n * GO-2026-5354 GHSA-fcmh-qfxc-w685\n * GO-2026-5355 CVE-2026-11769 GHSA-fcw4-wwqm-m8cf\n * GO-2026-5356 CVE-2026-40242 GHSA-ff24-4prj-gpmj\n * GO-2026-5357 CVE-2026-34585 GHSA-ff66-236v-p4fg\n * GO-2026-5358 CVE-2026-24899 GHSA-ffg9-j72f-j6xm\n * GO-2026-5359 CVE-2026-28377 GHSA-ffqx-q65f-36jf\n * GO-2026-5360 CVE-2026-27656 GHSA-fg35-5rf6-qg3g\n * GO-2026-5361 CVE-2026-6970 GHSA-fg3j-5w9g-hmg7\n * GO-2026-5362 CVE-2026-35597 GHSA-fgfv-pv97-6cmj\n * GO-2026-5363 CVE-2026-41413 GHSA-fgw5-hp8f-xfhc\n * GO-2026-5364 CVE-2026-40946 GHSA-fhvp-9hcj-6m33\n * GO-2026-5365 CVE-2026-22555 GHSA-fhx7-m96w-mv29\n * GO-2026-5366 CVE-2026-45683 GHSA-fjq3-ffvr-vm46\n * GO-2026-5367 CVE-2026-54319 GHSA-fjv8-j4p5-cr9m\n * GO-2026-5369 CVE-2026-8634 GHSA-fm77-94qm-4894\n * GO-2026-5370 CVE-2026-45148 GHSA-fmh9-gpqh-g53g\n * GO-2026-5371 GHSA-fmqp-4wfc-w3v7\n * GO-2026-5372 CVE-2026-35458 GHSA-fmwg-qcqh-m992\n * GO-2026-5373 CVE-2026-53999 GHSA-fp5j-4fj2-4jvq\n * GO-2026-5374 CVE-2026-41485 GHSA-fpjq-c37h-cqcv\n * GO-2026-5375 GHSA-fpw6-hrg5-q5x5\n * GO-2026-5376 CVE-2026-45713 GHSA-fpxj-m5q8-fphw\n * GO-2026-5377 CVE-2026-42876 GHSA-fq7h-9x26-6j22\n * GO-2026-5378 CVE-2026-46680 GHSA-fqw6-gf59-qr4w\n * GO-2026-5379 CVE-2026-49343 GHSA-fw38-pc54-jvx9\n * GO-2026-5381 CVE-2026-44903 GHSA-fw8g-cg8f-9j28\n * GO-2026-5382 GHSA-fwg7-53p4-g33c\n * GO-2026-5383 CVE-2026-44542 GHSA-fwj3-42wh-8673\n * GO-2026-5384 CVE-2026-41647 GHSA-fwj8-62r8-8p8m\n * GO-2026-5385 CVE-2026-45728 GHSA-fwqx-8365-9983\n * GO-2026-5386 CVE-2026-8779 GHSA-fxvj-wqv2-xgcq\n * GO-2026-5387 CVE-2026-52805 GHSA-g2f5-gjr4-qjvm\n * GO-2026-5388 CVE-2026-34969 GHSA-g2qj-prgh-4g9r\n * GO-2026-5389 CVE-2026-44522 GHSA-g49p-4qxj-88v3\n * GO-2026-5390 GHSA-g53w-w6mj-hrpp\n * GO-2026-5391 CVE-2026-55669 GHSA-g5h5-m4hm-xjrr\n * GO-2026-5392 CVE-2026-46695 GHSA-g6ww-w5j2-r7x3\n * GO-2026-5393 CVE-2026-4274 GHSA-g7fp-cqj5-x8hf\n * GO-2026-5394 CVE-2026-35392 GHSA-g8mv-vp7j-qp64\n * GO-2026-5395 CVE-2026-42597 GHSA-g924-cjx7-2rjw\n * GO-2026-5396 CVE-2026-40246 GHSA-g9cw-qwhf-24jp\n * GO-2026-5397 CVE-2026-40195 GHSA-gc7j-g665-rxr9\n * GO-2026-5398 CVE-2024-53412 GHSA-ggmw-mjhv-75rm\n * GO-2026-5399 GHSA-ghmh-jhmj-wcmf\n * GO-2026-5400 CVE-2026-41520 GHSA-gj49-89wh-h4gj\n * GO-2026-5401 CVE-2026-46430 GHSA-gj84-924c-48fx\n * GO-2026-5402 CVE-2026-45371 GHSA-gmmv-4cc5-wr9r\n * GO-2026-5403 CVE-2026-6634 GHSA-gqp3-hfc3-8q54\n * GO-2026-5404 CVE-2026-4286 GHSA-gvg4-jhmr-6j23\n * GO-2026-5405 CVE-2026-4370 GHSA-gvrj-cjch-728p\n * GO-2026-5406 CVE-2026-55636 GHSA-gwxr-7h77-7777\n * GO-2026-5407 CVE-2026-40249 GHSA-gx38-8h33-pmxr\n * GO-2026-5409 CVE-2026-33380 GHSA-gxcp-jjxh-rwp4\n * GO-2026-5411 CVE-2026-54093 GHSA-gxjx-7m74-hcq8\n * GO-2026-5412 CVE-2026-42221 GHSA-h27v-ph7w-m9fp\n * GO-2026-5413 GHSA-h5fq-653g-gxrm\n * GO-2026-5414 CVE-2026-34828 GHSA-h5j9-cvrw-v5qh\n * GO-2026-5415 CVE-2026-39414 GHSA-h749-fxx7-pwpg\n * GO-2026-5416 GHSA-h829-5cg7-6hff\n * GO-2026-5417 CVE-2026-33489 GHSA-h8mm-c463-wjq3\n * GO-2026-5418 CVE-2026-45738 GHSA-h98r-wv3h-fr38\n * GO-2026-5419 CVE-2026-40109 GHSA-h9cx-xjg6-5v2w\n * GO-2026-5420 GHSA-h9mw-h4qc-f5jf\n * GO-2026-5421 CVE-2026-33414 GHSA-hc8w-h2mf-hp59\n * GO-2026-5422 CVE-2026-42575 GHSA-hcwr-pq9g-rq3m\n * GO-2026-5423 CVE-2026-55689 GHSA-hcxc-wf8j-23hv\n * GO-2026-5424 CVE-2026-52879 GHSA-hf2g-6j7h-98wg\n * GO-2026-5425 GHSA-hfc8-w5f4-3x6m\n * GO-2026-5428 CVE-2026-35596 GHSA-hj5c-mhh2-g7jq\n * GO-2026-5429 CVE-2026-41894 GHSA-hjh7-r5w8-5872\n * GO-2026-5430 CVE-2026-47203 GHSA-hjj4-hfjm-fmrj\n * GO-2026-5431 GHSA-hm2h-wwwh-g49x\n * GO-2026-5432 CVE-2026-4273 GHSA-hqpj-f3jh-29vx\n * GO-2026-5433 CVE-2026-42283 GHSA-hqwm-7x7x-8379\n * GO-2026-5434 CVE-2026-39901 GHSA-hqxq-hwqf-wg83\n * GO-2026-5436 CVE-2026-47252 GHSA-hrj8-hjv8-mgwc\n * GO-2026-5437 CVE-2026-41145 GHSA-hv4r-mvr4-25vw\n * GO-2026-5438 CVE-2026-6290 GHSA-hv5g-26jg-pc45\n * GO-2026-5439 CVE-2026-47124 GHSA-hvv7-hfrh-7gxj\n * GO-2026-5440 CVE-2026-46431 GHSA-hw27-4v2q-5qff\n * GO-2026-5441 GHSA-hw5x-4r37-72w7\n * GO-2026-5442 CVE-2026-4053 GHSA-hw87-6jcq-9f8q\n * GO-2026-5443 CVE-2026-44829 GHSA-hwc4-gmrw-5222\n * GO-2026-5444 CVE-2026-39972 GHSA-hwr4-mq23-wcv5\n * GO-2026-5445 CVE-2026-7474 GHSA-hx53-77qj-8663\n * GO-2026-5446 CVE-2026-45709 GHSA-j3fj-qppj-fmmc\n * GO-2026-5447 CVE-2026-44322 GHSA-j59f-x285-69jx\n * GO-2026-5448 CVE-2026-25779 GHSA-j5r2-4c8j-xc3m\n * GO-2026-5449 CVE-2026-44985 GHSA-j643-x8pv-8m67\n * GO-2026-5450 CVE-2026-6383 GHSA-j6cv-3w8p-vrg8\n * GO-2026-5451 CVE-2025-68152 GHSA-j6f6-jp3p-53mw\n * GO-2026-5453 CVE-2026-44424 GHSA-j72x-xfwg-783f\n * GO-2026-5454 CVE-2026-4054 GHSA-j76w-p754-g2w7\n * GO-2026-5455 CVE-2026-24000 GHSA-j8h8-75h3-jg53\n * GO-2026-5456 CVE-2026-45685 GHSA-j8p6-96vp-f3r9\n * GO-2026-5457 CVE-2026-48050 GHSA-j93g-rp6m-j32m\n * GO-2026-5458 CVE-2026-54091 GHSA-j9jx-hp4c-ghhh\n * GO-2026-5459 CVE-2026-47253 GHSA-j9rx-rppg-6hh4\n * GO-2026-5460 CVE-2026-48126 GHSA-jc3j-x6pg-4hmv\n * GO-2026-5461 CVE-2026-46403 GHSA-jc6w-wmfc-fh33\n * GO-2026-5462 CVE-2026-42294 GHSA-jcc8-g2q4-9fxq\n * GO-2026-5464 GHSA-jf2q-463c-6f52\n * GO-2026-5465 CVE-2026-40091 GHSA-jf4f-rr2c-9m58\n * GO-2026-5467 GHSA-jfwg-rxf3-p7r9\n * GO-2026-5468 CVE-2026-35393 GHSA-jg56-wf8x-qrv5\n * GO-2026-5469 CVE-2026-34581 GHSA-jgfx-74g2-9r6g\n * GO-2026-5470 CVE-2026-40248 GHSA-jgq2-qv8v-5cmj\n * GO-2026-5472 CVE-2026-47680 GHSA-jjrm-hr5f-673x\n * GO-2026-5473 CVE-2026-41645 GHSA-jm34-66cf-qpvr\n * GO-2026-5474 CVE-2026-6334 GHSA-jp3f-x449-4q75\n * GO-2026-5475 CVE-2026-47262 GHSA-jpcc-p29g-p8mq\n * GO-2026-5476 CVE-2026-47125 GHSA-jpjh-jm2p-39hh\n * GO-2026-5477 CVE-2026-52798 GHSA-jq8v-rmf6-65jw\n * GO-2026-5478 CVE-2026-44324 GHSA-jqfc-gwj5-3w63\n * GO-2026-5479 CVE-2026-40883 GHSA-jrq5-hg6x-j6g3\n * GO-2026-5480 CVE-2026-44883 GHSA-jvp4-q659-95mj\n * GO-2026-5481 CVE-2026-35585 GHSA-jvpw-637p-h3pw\n * GO-2026-5482 CVE-2026-40343 GHSA-jwch-w7wh-gqjm\n * GO-2026-5483 CVE-2026-34972 GHSA-jwvj-g8pc-cx45\n * GO-2026-5484 CVE-2026-3495 GHSA-jx93-pf6x-874r\n * GO-2026-5485 GHSA-m23h-6mwm-39m8\n * GO-2026-5487 CVE-2026-3605 GHSA-m2w4-8ggf-rj47\n * GO-2026-5489 CVE-2026-2325 GHSA-m3p3-8frq-q7qh\n * GO-2026-5491 CVE-2026-46377 GHSA-m5j3-4634-c2vq\n * GO-2026-5493 CVE-2026-46378 GHSA-m6xr-fvfg-5g64\n * GO-2026-5494 CVE-2026-6343 GHSA-m79q-8qf5-v622\n * GO-2026-5495 CVE-2026-28741 GHSA-m7cf-4gh2-v4qg\n * GO-2026-5497 CVE-2026-42576 GHSA-m7hm-vm4x-28jf\n * GO-2026-5499 CVE-2026-45730 GHSA-m8xg-8xg9-mxhm\n * GO-2026-5500 CVE-2026-55185 GHSA-m999-j542-5w3r\n * GO-2026-5501 CVE-2025-41118 GHSA-m9hq-h476-h2g8\n * GO-2026-5502 CVE-2026-44474 GHSA-mc29-hmx6-856q\n * GO-2026-5505 CVE-2026-44882 GHSA-mgq6-4x29-88r3\n * GO-2026-5507 CVE-2026-3590 GHSA-mh4x-rmrx-3hp4\n * GO-2026-5508 GHSA-mhc4-qq83-fmrr\n * GO-2026-5509 CVE-2026-5467 GHSA-mj24-pqx2-6788\n * GO-2026-5510 CVE-2026-26231 GHSA-mm7c-rhg6-qr4r\n * GO-2026-5511 GHSA-mmpx-jh39-wrv6\n * GO-2026-5512 CVE-2026-3115 GHSA-mpc7-mm28-f6wq\n * GO-2026-5514 CVE-2026-46668 GHSA-mqcf-gqvg-rmhm\n * GO-2026-5515 CVE-2026-48031 GHSA-mqq6-462x-jxmm\n * GO-2026-5517 CVE-2026-55775 GHSA-mwr2-wmgp-crj6\n * GO-2026-5519 GHSA-mxg3-432p-mr72\n * GO-2026-5520 CVE-2026-46356 GHSA-mxmp-wr3w-rvqx\n * GO-2026-5521 CVE-2026-42222 GHSA-mxqh-q9h6-v8pq\n * GO-2026-5522 CVE-2026-27769 GHSA-mxxh-fmjq-j6x4\n * GO-2026-5523 CVE-2026-47735 GHSA-p2j4-c4g6-rpf5\n * GO-2026-5524 CVE-2026-25773 GHSA-p32q-v29x-wq9r\n * GO-2026-5526 CVE-2026-40264 GHSA-p49j-v9wc-wg57\n * GO-2026-5527 CVE-2026-42183 GHSA-p4gq-3vxj-f4jq\n * GO-2026-5528 CVE-2026-21728 GHSA-p4r4-xvrq-gvmc\n * GO-2026-5530 CVE-2026-40265 GHSA-p5w6-75f9-cc2p\n * GO-2026-5531 GHSA-p64j-f4x9-wq66\n * GO-2026-5533 CVE-2026-55882 GHSA-p749-9w62-w533\n * GO-2026-5534 CVE-2026-45327 GHSA-p7c4-8x34-8j8f\n * GO-2026-5535 CVE-2026-5469 GHSA-p8c7-hjc4-gwf8\n * GO-2026-5536 CVE-2026-52799 GHSA-p9f5-h3rx-j5qw\n * GO-2026-5537 CVE-2026-44328 GHSA-p9mg-74mg-cwwr\n * GO-2026-5538 CVE-2025-71261 GHSA-pgh9-mpwc-8jjf\n * GO-2026-5539 CVE-2026-45678 GHSA-pgvv-q3wf-mm9m\n * GO-2026-5540 CVE-2026-39846 GHSA-phhp-9rm9-6gr2\n * GO-2026-5541 GHSA-pj6q-4vq4-r8cg\n * GO-2026-5544 CVE-2026-42602 GHSA-pjv4-3c63-699f\n * GO-2026-5545 CVE-2026-52797 GHSA-pm6v-2h4w-4rp2\n * GO-2026-5546 CVE-2026-40945 GHSA-pm7q-rjjx-979p\n * GO-2026-5547 GHSA-pmwq-pjrm-6p5r\n * GO-2026-5549 CVE-2026-40910 GHSA-pq96-pwvg-vrr9\n * GO-2026-5550 CVE-2025-52490 GHSA-pqhp-4xfc-hjgq\n * GO-2026-5551 CVE-2026-39087 GHSA-pqhx-w72w-m393\n * GO-2026-5552 CVE-2026-53541 GHSA-prj9-97mp-mwh2\n * GO-2026-5553 GHSA-prxj-3gcv-cqrh\n * GO-2026-5554 CVE-2026-44475 GHSA-pwfh-mqp3-pqwj\n * GO-2026-5555 CVE-2026-44349 GHSA-pwqg-q8pg-pp6r\n * GO-2026-5556 CVE-2026-52800 GHSA-pwx3-qcgw-vh7h\n * GO-2026-5557 CVE-2026-41571 GHSA-pxf8-6wqm-r6hh\n * GO-2026-5558 GHSA-pxh5-6rrc-8rjv\n * GO-2026-5559 CVE-2026-41059 GHSA-pxq7-h93f-9jrg\n * GO-2026-5560 CVE-2026-43644 GHSA-q23m-vm9r-5745\n * GO-2026-5561 CVE-2026-45627 GHSA-q2pj-8v84-9mh5\n * GO-2026-5562 CVE-2026-29051 GHSA-q2pw-xx38-p64j\n * GO-2026-5563 CVE-2026-41326 GHSA-q49m-57vm-c8cc\n * GO-2026-5564 CVE-2026-4740 GHSA-q4gv-pjmh-c735\n * GO-2026-5565 CVE-2026-42223 GHSA-q4w7-56hr-83rm\n * GO-2026-5567 CVE-2026-44523 GHSA-q6mh-rqwh-g786\n * GO-2026-5568 CVE-2026-55686 GHSA-q6r4-3wmg-fwcq\n * GO-2026-5571 GHSA-q7j3-v8qv-22vq\n * GO-2026-5572 CVE-2026-40281 GHSA-q7r4-hc83-hf2q\n * GO-2026-5573 CVE-2026-45760 GHSA-q8ch-jx67-q52x\n * GO-2026-5574 CVE-2026-46358 GHSA-q8cj-789h-vg24\n * GO-2026-5575 CVE-2026-40868 GHSA-q93q-v844-jrqp\n * GO-2026-5577 CVE-2026-44245 GHSA-q98m-7w8c-w388\n * GO-2026-5578 CVE-2026-5724 GHSA-q98v-9f9w-f49q\n * GO-2026-5579 CVE-2026-34992 GHSA-qcmw-8mm4-4p28\n * GO-2026-5580 CVE-2026-52806 GHSA-qf6p-p7ww-cwr9\n * GO-2026-5581 CVE-2026-44473 GHSA-qfxw-v8qx-vj3v\n * GO-2026-5582 CVE-2026-35602 GHSA-qh78-rvg3-cv54\n * GO-2026-5583 CVE-2026-33190 GHSA-qhmp-q7xh-99rh\n * GO-2026-5584 CVE-2026-22872 GHSA-qjjm-7j9w-pw72\n * GO-2026-5586 CVE-2026-47726 GHSA-qm33-p5p9-f8vg\n * GO-2026-5587 GHSA-qmwh-9m9c-h36m\n * GO-2026-5588 CVE-2026-38651 GHSA-qpv2-rwc8-c993\n * GO-2026-5589 CVE-2026-42574 GHSA-qq3r-w4hj-gjp6\n * GO-2026-5590 CVE-2026-45152 GHSA-qqq4-5773-pmw5\n * GO-2026-5591 CVE-2026-48777 GHSA-qqqm-5547-774x\n * GO-2026-5594 GHSA-qr4g-8hrp-c4rw\n * GO-2026-5598 CVE-2026-54324 GHSA-qwxf-2m7m-2m3x\n * GO-2026-5599 CVE-2026-45711 GHSA-qx5x-85p8-vg4j\n * GO-2026-5600 CVE-2026-54322 GHSA-qxvm-pcfm-qc39\n * GO-2026-5601 CVE-2026-11401 GHSA-r236-5pc3-3qcp\n * GO-2026-5602 CVE-2026-34984 GHSA-r2pg-r6h7-crf3\n * GO-2026-5603 GHSA-r2x7-427f-rq69\n * GO-2026-5604 CVE-2026-55887 GHSA-r2xf-7jw5-pjg6\n * GO-2026-5605 CVE-2026-42594 GHSA-r33j-c622-r6qp\n * GO-2026-5607 CVE-2026-44430 GHSA-r48c-v28r-pf6v\n * GO-2026-5608 CVE-2026-35599 GHSA-r4fg-73rc-hhh7\n * GO-2026-5609 CVE-2026-39396 GHSA-r65v-xgwc-g56j\n * GO-2026-5610 CVE-2026-45681 GHSA-r6c9-g6q5-qrf9\n * GO-2026-5611 CVE-2026-33467 GHSA-r727-5pf6-47r2\n * GO-2026-5612 CVE-2026-40197 GHSA-r7w7-mmxr-47r9\n * GO-2026-5613 CVE-2026-41136 GHSA-r99v-75p9-xqm5\n * GO-2026-5614 GHSA-rc6v-5rmx-w5mv\n * GO-2026-5615 GHSA-rf84-wr5g-m3rp\n * GO-2026-5616 CVE-2026-42882 GHSA-rfgq-wgg8-662p\n * GO-2026-5617 CVE-2026-42306 GHSA-rg2x-37c3-w2rh\n * GO-2026-5618 CVE-2026-45737 GHSA-rg3g-4rw9-gqrp\n * GO-2026-5619 CVE-2025-70950 GHSA-rg3p-p27c-2f39\n * GO-2026-5620 CVE-2026-44594 GHSA-rg65-45m7-hq57\n * GO-2026-5621 CVE-2026-4789 GHSA-rggm-jjmc-3394\n * GO-2026-5622 CVE-2026-53489 GHSA-rgh6-rfwx-v388\n * GO-2026-5623 GHSA-rgj7-vg8v-j4wr\n * GO-2026-5624 GHSA-rh99-wc69-c255\n * GO-2026-5625 CVE-2026-42091 GHSA-rhf7-wvw3-vjvm\n * GO-2026-5626 GHSA-rj4g-rqgh-rx9h\n * GO-2026-5627 CVE-2026-42591 GHSA-rm4c-xj6x-49mw\n * GO-2026-5628 CVE-2026-52878 GHSA-rm5c-5x2p-48wr\n * GO-2026-5629 CVE-2026-27659 GHSA-rmhw-c3xr-m3xx\n * GO-2026-5631 GHSA-rp7v-4384-hfrp\n * GO-2026-5632 CVE-2026-42571 GHSA-rpfr-x88x-xwcw\n * GO-2026-5633 CVE-2026-44881 GHSA-rpgq-m5fp-32wr\n * GO-2026-5634 CVE-2026-27806 GHSA-rphv-h674-5hp2\n * GO-2026-5635 CVE-2026-48058 GHSA-rqfj-vv8r-xhqc\n * GO-2026-5636 CVE-2026-42589 GHSA-rqgh-gxv4-6657\n * GO-2026-5637 CVE-2026-44429 GHSA-rqv2-m695-f8j4\n * GO-2026-5638 CVE-2026-44210 GHSA-rr59-xxvx-96qr\n * GO-2026-5639 CVE-2026-44848 GHSA-rrmm-9v76-h3p4\n * GO-2026-5640 CVE-2026-41422 GHSA-rw2c-8rfq-gwfv\n * GO-2026-5641 CVE-2026-44982 GHSA-rw47-hm26-6wr7\n * GO-2026-5642 CVE-2026-44330 GHSA-rwww-x45w-p52w\n * GO-2026-5644 CVE-2026-34448 GHSA-rx4h-526q-4458\n * GO-2026-5645 CVE-2026-47120 GHSA-rxf6-wjh4-jfj6\n * GO-2026-5646 GHSA-rxmp-8h9v-56cx\n * GO-2026-5647 CVE-2026-44319 GHSA-rxrq-fv76-26pr\n * GO-2026-5648 CVE-2026-44671 GHSA-rxvx-hhpj-q6px\n * GO-2026-5649 CVE-2026-45087 GHSA-v25v-m36w-jp4h\n * GO-2026-5650 CVE-2026-40103 GHSA-v479-vf79-mg83\n * GO-2026-5651 CVE-2026-3637 GHSA-v549-xx3c-6pc8\n * GO-2026-5652 CVE-2026-42339 GHSA-v5c3-6wvc-pc2q\n * GO-2026-5653 GHSA-v5mh-h5hx-7v92\n * GO-2026-5654 CVE-2026-40481 GHSA-v7xq-3wx6-fqc2\n * GO-2026-5656 CVE-2026-44514 GHSA-v8j7-hp7c-738f\n * GO-2026-5657 CVE-2026-45808 GHSA-v8v8-cm84-m686\n * GO-2026-5658 CVE-2026-44427 GHSA-v8vw-gw5j-w7m6\n * GO-2026-5659 CVE-2026-35604 GHSA-v9w4-gm2x-6rvf\n * GO-2026-5661 CVE-2026-52807 GHSA-vcm5-gvmp-78mp\n * GO-2026-5662 CVE-2026-40179 GHSA-vffh-x6r8-xx99\n * GO-2026-5663 CVE-2026-3114 GHSA-vhgh-g7x8-4rx8\n * GO-2026-5664 GHSA-vjgj-42f6-7997\n * GO-2026-5667 CVE-2026-35579 GHSA-vp29-5652-4fw9\n * GO-2026-5668 CVE-2026-41568 GHSA-vp62-88p7-qqf5\n * GO-2026-5669 CVE-2026-45742 GHSA-vp73-vjw8-8f32\n * GO-2026-5670 CVE-2026-28736 GHSA-vph7-r229-qxpf\n * GO-2026-5671 CVE-2026-6333 GHSA-vqp5-2mrp-qqxg\n * GO-2026-5672 CVE-2026-49397 GHSA-vrmh-5mmx-hjwx\n * GO-2026-5673 CVE-2026-42082 GHSA-vrrx-58h3-prmh\n * GO-2026-5674 CVE-2026-42186 GHSA-vv66-6rp4-wr4f\n * GO-2026-5677 CVE-2026-45684 GHSA-vvmg-8mjr-g6q3\n * GO-2026-5678 GHSA-vw82-7fv8-r6gp\n * GO-2026-5679 CVE-2026-40318 GHSA-vw86-c94w-v3x4\n * GO-2026-5680 CVE-2026-44426 GHSA-vwx9-7qcf-gg7f\n * GO-2026-5682 CVE-2026-46370 GHSA-vxm7-9x8v-8gm4\n * GO-2026-5683 CVE-2026-44544 GHSA-vxvc-cg7j-rwqj\n * GO-2026-5685 CVE-2026-47249 GHSA-w342-mj6g-v9c4\n * GO-2026-5686 CVE-2026-52880 GHSA-w4c6-7r69-w7j9\n * GO-2026-5687 CVE-2026-46717 GHSA-w4g9-mxgg-j532\n * GO-2026-5688 CVE-2026-55187 GHSA-w4mc-hhc6-xp28\n * GO-2026-5689 CVE-2026-45712 GHSA-w4vj-r5pg-3722\n * GO-2026-5690 CVE-2026-55701 GHSA-w5cv-pw74-4rxc\n * GO-2026-5691 CVE-2026-54092 GHSA-w5fm-68j4-fpc4\n * GO-2026-5692 CVE-2026-5412 GHSA-w5fq-8965-c969\n * GO-2026-5694 CVE-2026-39395 GHSA-w6c6-c85g-mmv6\n * GO-2026-5695 CVE-2026-25119 GHSA-w6j9-vw59-27wv\n * GO-2026-5696 CVE-2026-40263 GHSA-w6m9-39cv-2fwp\n * GO-2026-5697 CVE-2026-5468 GHSA-w799-7525-rpr6\n * GO-2026-5698 CVE-2026-47723 GHSA-w7w5-5gcp-38rw\n * GO-2026-5701 GHSA-w8jj-cwmc-wgq2\n * GO-2026-5702 CVE-2026-40107 GHSA-w95v-4h65-j455\n * GO-2026-5703 CVE-2026-8462 GHSA-wc3v-3457-c8cm\n * GO-2026-5704 CVE-2026-35036 GHSA-wc4h-2348-jc3p\n * GO-2026-5705 GHSA-wcmj-x466-56mm\n * GO-2026-5706 CVE-2026-11718 GHSA-wcpr-6g7x-p44r\n * GO-2026-5708 CVE-2026-33381 GHSA-wfhv-mj62-f5xh\n * GO-2026-5709 GHSA-wfqx-gjrf-g28r\n * GO-2026-5710 CVE-2026-42151 GHSA-wg65-39gg-5wfj\n * GO-2026-5712 CVE-2026-52810 GHSA-wmfg-5p4h-5fw3\n * GO-2026-5714 CVE-2026-45676 GHSA-wp73-mwgf-4jq9\n * GO-2026-5715 CVE-2026-47215 GHSA-wqcr-7rf3-f64m\n * GO-2026-5716 CVE-2026-42541 GHSA-wqcw-g35j-j578\n * GO-2026-5717 CVE-2026-44320 GHSA-wqfh-gq79-j8mf\n * GO-2026-5718 CVE-2026-8052 GHSA-wqwc-x3rc-2xw6\n * GO-2026-5719 CVE-2026-44015 GHSA-wr32-99hh-6f35\n * GO-2026-5720 CVE-2026-44316 GHSA-wr8j-6chw-gm6p\n * GO-2026-5721 CVE-2026-24791 GHSA-wrr5-99h5-gq57\n * GO-2026-5722 CVE-2026-40245 GHSA-wrwh-rpq4-87hf\n * GO-2026-5723 CVE-2026-42875 GHSA-wv26-88m5-6h59\n * GO-2026-5724 CVE-2026-52801 GHSA-wv27-2vqp-j7g5\n * GO-2026-5725 CVE-2026-45726 GHSA-wv8c-6mx2-xf4j\n * GO-2026-5726 CVE-2026-28732 GHSA-wvcv-9xpm-7mqc\n * GO-2026-5727 CVE-2026-6345 GHSA-wvgv-4fc3-2rcp\n * GO-2026-5728 CVE-2026-40189 GHSA-wvhv-qcqf-f3cx\n * GO-2026-5729 CVE-2026-54321 GHSA-ww63-pv5x-vfc8\n * GO-2026-5731 CVE-2026-44317 GHSA-wwqh-7jm5-gj7w\n * GO-2026-5732 GHSA-wxg7-w2v3-w38g\n * GO-2026-5733 CVE-2026-33031 GHSA-x234-x5vq-cc2v\n * GO-2026-5734 CVE-2026-21388 GHSA-x274-8qfc-hrgf\n * GO-2026-5735 CVE-2026-32885 GHSA-x2xq-qhjf-5mvg\n * GO-2026-5737 GHSA-x3f4-v83f-7wp2\n * GO-2026-5738 CVE-2026-41246 GHSA-x4mj-7f9g-29h4\n * GO-2026-5739 CVE-2026-46371 GHSA-x4qr-qw6h-wvxq\n * GO-2026-5741 CVE-2026-40247 GHSA-x5r2-r74c-3w28\n * GO-2026-5742 CVE-2026-41684 GHSA-x5r6-jr56-89pv\n * GO-2026-5744 CVE-2026-26062 GHSA-x67p-9m2r-fxqv\n * GO-2026-5745 GHSA-x845-2f78-7v36\n * GO-2026-5747 CVE-2026-34528 GHSA-x8jc-jvqm-pm3f\n * GO-2026-5751 CVE-2026-42297 GHSA-xchc-cqwg-g76q\n * GO-2026-5752 CVE-2026-48020 GHSA-xf64-8mw2-4gr2\n * GO-2026-5753 CVE-2026-41432 GHSA-xff3-5c9p-2mr4\n * GO-2026-5754 CVE-2026-34530 GHSA-xfqj-3vmx-63wv\n * GO-2026-5755 CVE-2026-10720 GHSA-xg3j-c7q4-f9ph\n * GO-2026-5756 CVE-2026-47703 GHSA-xgx4-4h9w-53pv\n * GO-2026-5757 CVE-2026-42600 GHSA-xh8f-g2qw-gcm7\n * GO-2026-5758 CVE-2026-53488 GHSA-xhf5-7wjv-pqxp\n * GO-2026-5759 GHSA-xhj4-g6w8-2xjw\n * GO-2026-5760 CVE-2026-41174 GHSA-xhjw-95fp-8vgq\n * GO-2026-5763 CVE-2026-39984 GHSA-xm5m-wgh2-rrg3\n * GO-2026-5765 CVE-2026-52814 GHSA-xp79-5mx3-jx52\n * GO-2026-5766 CVE-2026-5199 GHSA-xpg8-3hhp-p7w8\n * GO-2026-5767 CVE-2026-4531 GHSA-xq44-64rg-8g3h\n * GO-2026-5768 CVE-2026-55672 GHSA-xqxv-4jc2-x56x\n * GO-2026-5769 CVE-2026-6339 GHSA-xvcx-mgpc-5xh3\n * GO-2026-5770 CVE-2026-34762 GHSA-xw45-cc32-442f\n * GO-2026-5771 CVE-2026-34742 GHSA-xw59-hvm2-8pj6\n * GO-2026-5772 CVE-2026-45721 GHSA-xwcr-wm99-g9jc\n * GO-2026-5773 CVE-2026-52802 GHSA-xxhq-69mf-w8cr\n * GO-2026-5776 GHSA-r4v7-6wcg-ghj5\n- Update to version 0.0.20260616T235518 2026-06-16T23:55:18Z.\n * GO-2026-5041 CVE-2026-44981 GHSA-273h-gvwr-c3qj\n * GO-2026-5042 CVE-2026-47243 GHSA-2gv2-cffp-j227\n * GO-2026-5043 CVE-2026-30963 GHSA-2ww6-hf35-mfjm\n * GO-2026-5049 CVE-2026-47725 GHSA-273q-qgh5-wrj6\n * GO-2026-5054 CVE-2026-48113 GHSA-24fp-5v3p-rvpw\n * GO-2026-5055 CVE-2026-54094 GHSA-239w-m3h6-ch8v\n- Update to version 0.0.20260602T213947 2026-06-02T21:39:47Z.\n * GO-2026-4960 CVE-2026-39386 GHSA-2gw9-c2r2-f5qf\n * GO-2026-5031 CVE-2026-42500\n * GO-2026-5032 CVE-2026-46599\n * GO-2026-5037 CVE-2026-27145\n * GO-2026-5038 CVE-2026-42504\n * GO-2026-5039 CVE-2026-42507\n- Update to version 0.0.20260526T224918 2026-05-26T22:49:18Z.\n * GO-2026-4945 CVE-2026-34986 GHSA-78h2-9frx-2jm8\n * GO-2026-4958 CVE-2026-35469 GHSA-pc3f-x583-g7j2\n * GO-2026-4985 CVE-2026-39882 GHSA-w8rr-5gcm-pp58\n * GO-2026-5002 CVE-2026-23998 GHSA-2rc4-7jc6-qffh\n * GO-2026-5024 CVE-2026-39824\n * GO-2026-5025 CVE-2026-42506\n * GO-2026-5026 CVE-2026-39821\n * GO-2026-5027 CVE-2026-42502\n * GO-2026-5028 CVE-2026-25680\n * GO-2026-5029 CVE-2026-25681\n * GO-2026-5030 CVE-2026-27136\n- Update to version 0.0.20260522T020834 2026-05-22T02:08:34Z.\n * GO-2025-3548 CVE-2024-12886 GHSA-v464-r2r9-www7\n * GO-2026-4951 CVE-2026-35601 GHSA-2g7h-7rqr-9p4r\n * GO-2026-4952 CVE-2026-35595 GHSA-2vq4-854f-5c72\n * GO-2026-4953 CVE-2026-40188 GHSA-2943-crp8-38xx\n * GO-2026-4963 CVE-2026-41070 GHSA-246w-jgmq-88fg\n * GO-2026-4964 CVE-2026-41176 GHSA-25qr-6mpr-f7qx\n * GO-2026-4965 CVE-2026-41646 GHSA-29rg-wmcw-hpf4\n * GO-2026-4966 CVE-2026-41644 GHSA-29v9-frvh-c426\n * GO-2026-4967 CVE-2026-42072 GHSA-2hp7-65r3-wv54\n * GO-2026-4969 CVE-2026-32934 GHSA-2wpx-qpw2-g5h5\n * GO-2026-4983 GHSA-28xx-pppm-vqff\n * GO-2026-4988 CVE-2026-42300 GHSA-2g9v-7mr5-fgjg\n * GO-2026-4989 GHSA-2ccx-cjjh-r2j8\n * GO-2026-4990 CVE-2026-42592 GHSA-2pmr-289p-44r3\n * GO-2026-4991 GHSA-258c-965c-p3hc\n * GO-2026-4992 CVE-2026-44670 GHSA-2h64-c999-c9r6\n * GO-2026-4993 CVE-2026-44588 GHSA-25rp-h46x-2hjm\n * GO-2026-4994 CVE-2026-44318 GHSA-27ph-8q4f-h7m7\n * GO-2026-4995 CVE-2026-44329 GHSA-3258-qmv8-frp3\n * GO-2026-4996 CVE-2025-2786 GHSA-28gr-56hr-prp6\n * GO-2026-4997 CVE-2026-6863 GHSA-2v93-vp82-cjv8\n * GO-2026-4999 CVE-2026-45090 GHSA-2g4x-fq3j-cgq4\n * GO-2026-5001 CVE-2026-45375 GHSA-27qc-m5gf-jv5r\n * GO-2026-5005 CVE-2026-39833\n * GO-2026-5006 CVE-2026-39832\n * GO-2026-5008 CVE-2026-45781 GHSA-2v5f-5r6w-p67r\n * GO-2026-5009 CVE-2026-45695 GHSA-2q4c-3mrw-63c3\n * GO-2026-5010 GHSA-3278-c88v-xrh4\n * GO-2026-5013 CVE-2026-46597\n * GO-2026-5014 CVE-2026-39828\n * GO-2026-5015 CVE-2026-39835\n * GO-2026-5016 CVE-2026-39827\n * GO-2026-5017 CVE-2026-39830\n * GO-2026-5018 CVE-2026-39829\n * GO-2026-5019 CVE-2026-39831\n * GO-2026-5020 CVE-2026-39834\n * GO-2026-5021 CVE-2026-42508\n * GO-2026-5023 CVE-2026-46595\n * GO-2026-5033 CVE-2026-46598\n- Update to version 0.0.20260507T192140 2026-05-07T19:21:40Z.\n * GO-2026-4918 CVE-2026-33814\n * GO-2026-4971 CVE-2026-39836\n * GO-2026-4976 CVE-2026-39825\n * GO-2026-4977 CVE-2026-42499\n * GO-2026-4978 CVE-2026-39819\n * GO-2026-4979 CVE-2026-39817\n * GO-2026-4980 CVE-2026-39826\n * GO-2026-4981 CVE-2026-33811\n * GO-2026-4982 CVE-2026-39823\n * GO-2026-4984 CVE-2026-42501\n * GO-2026-4986 CVE-2026-39820\n- Update to version 0.0.20260421T185951 2026-04-21T18:59:51Z.\n * GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m\n * GO-2025-3993 CVE-2025-59531 GHSA-f9gq-prrc-hrhc\n * GO-2025-3996 CVE-2025-59537 GHSA-wp4p-9pxh-cgx2\n * GO-2026-4514 CVE-2026-32285 GHSA-6g7g-w4f8-9c9x\n * GO-2026-4771 CVE-2026-33815 GHSA-xgrm-4fwx-7qm8\n * GO-2026-4772 CVE-2026-33816 GHSA-9jj7-4m8r-rfcm\n * GO-2026-4962 CVE-2026-33812\n- Update to version 0.0.20260416T222113 2026-04-16T22:21:13Z.\n * GO-2025-3503 CVE-2025-22870 GHSA-qxp5-gwg8-xv66\n * GO-2026-4727 CVE-2026-26246 GHSA-44mv-jq72-gj49\n * GO-2026-4736 CVE-2026-30405 GHSA-4p9m-8gc4-rw2h\n * GO-2026-4738 CVE-2026-32761 GHSA-68j5-4m99-w9w9\n * GO-2026-4771 CVE-2026-33815\n * GO-2026-4772 CVE-2026-33816\n * GO-2026-4789 CVE-2026-26933 GHSA-27qj-9gvp-8rh9\n * GO-2026-4790 CVE-2026-26931 GHSA-5vrw-qjxw-89r5\n * GO-2026-4806 CVE-2026-33413 GHSA-q8m4-xhhv-38mg\n * GO-2026-4808 CVE-2026-33343 GHSA-rfx7-8w68-q57q\n * GO-2026-4815 CVE-2026-33809 GHSA-44p7-9xx4-hf2g\n * GO-2026-4864 CVE-2026-32282\n * GO-2026-4865 CVE-2026-32289\n * GO-2026-4866 CVE-2026-33810\n * GO-2026-4867 CVE-2026-27144\n * GO-2026-4868 CVE-2026-27143\n * GO-2026-4869 CVE-2026-32288\n * GO-2026-4870 CVE-2026-32283\n * GO-2026-4871 CVE-2026-27140\n * GO-2026-4879 CVE-2026-33898 GHSA-453r-g2pg-cxxq\n * GO-2026-4881 CVE-2026-33897 GHSA-83xr-5xxr-mh92\n * GO-2026-4882 CVE-2026-33542 GHSA-p8mm-23gg-jc9r\n * GO-2026-4884 CVE-2026-33945 GHSA-q4q8-7f2j-9h9f\n * GO-2026-4885 CVE-2026-33711 GHSA-q9vp-3wcg-8p4x\n * GO-2026-4886 CVE-2026-33743 GHSA-vg76-xmhg-j5x3\n * GO-2026-4909 CVE-2026-33762 GHSA-gm2x-2g9h-ccm8\n * GO-2026-4910 CVE-2026-34165 GHSA-jhf3-xxhw-2wpp\n * GO-2026-4920 CVE-2026-34940 GHSA-324q-cwx9-7crr\n * GO-2026-4923 CVE-2026-33817 GHSA-6jwv-w5xf-7j27\n * GO-2026-4924 CVE-2025-68153 GHSA-245v-p8fj-vwm2\n * GO-2026-4946 CVE-2026-32281\n * GO-2026-4947 CVE-2026-32280\n- Update to version 0.0.20260402T184258 2026-04-02T18:42:58Z.\n * GO-2026-4518 CVE-2026-32286 GHSA-jqcq-xjh3-6g23\n * GO-2026-4753 CVE-2026-33487 GHSA-479m-364c-43vc\n * GO-2026-4760 GHSA-hwqm-qvj9-4jr2\n * GO-2026-4762 CVE-2026-33186 GHSA-p77j-4mvh-x3m3\n * GO-2026-4764 GHSA-pcgw-qcv5-h8ch\n * GO-2026-4858 CVE-2026-33747 GHSA-4c29-8rgm-jvjj\n * GO-2026-4859 CVE-2026-33748 GHSA-4vrq-3vrq-g6gg\n * GO-2026-4863 GHSA-g9ww-x58f-9g6m\n * GO-2026-4872 CVE-2026-33907 GHSA-55q8-2gwx-29pc\n * GO-2026-4873 CVE-2026-33906 GHSA-87j9-m7x6-hvw2\n * GO-2026-4874 CVE-2026-33904 GHSA-9h59-p45g-445h\n * GO-2026-4875 CVE-2026-33903 GHSA-f2f3-9cx3-wcmf\n * GO-2026-4876 GHSA-prh4-vhfh-24mj\n * GO-2026-4880 CVE-2026-32695 GHSA-67jx-r9pv-98rj\n * GO-2026-4883 CVE-2026-33997 GHSA-pxq6-2prw-chj9\n * GO-2026-4887 CVE-2026-34040 GHSA-x744-4wpc-v9h2\n * GO-2026-4888 CVE-2026-26060 GHSA-3458-r943-hmx4\n * GO-2026-4889 CVE-2026-26061 GHSA-99hj-44vg-hfcp\n * GO-2026-4890 CVE-2026-34042 GHSA-x34h-54cw-9825\n * GO-2026-4891 CVE-2026-34041 GHSA-xmgr-9pqc-h5vw\n * GO-2026-4892 CVE-2026-29180 GHSA-m2h6-4xpq-qw3m\n * GO-2026-4893 CVE-2026-33433 GHSA-qr99-7898-vr7c\n * GO-2026-4894 CVE-2026-32241 GHSA-vchx-5pr6-ffx2\n * GO-2026-4896 CVE-2026-34204 GHSA-3rh2-v3gr-35p9\n * GO-2026-4897 GHSA-46wh-3698-f2cx\n * GO-2026-4899 GHSA-c279-989m-238f\n * GO-2026-4901 CVE-2026-33030 GHSA-5hf2-vhj6-gj9m\n * GO-2026-4902 CVE-2026-33029 GHSA-cp8r-8jvw-v3qg\n * GO-2026-4903 CVE-2026-33026 GHSA-fhh2-gg7w-gwpq\n * GO-2026-4904 CVE-2026-33032 GHSA-h6c2-x2m2-mwhf\n * GO-2026-4905 CVE-2026-27018 GHSA-jjwv-57xh-xr6r\n * GO-2026-4906 CVE-2026-33028 GHSA-m468-xcm6-fxg4\n * GO-2026-4907 CVE-2026-33027 GHSA-m8p8-53vf-8357\n * GO-2026-4911 CVE-2026-33990 GHSA-x2f5-332j-9xwq\n * GO-2026-4912 CVE-2026-34389 GHSA-4f9r-x588-pp2h\n * GO-2026-4913 CVE-2026-34386 GHSA-9p23-p2m4-2r4m\n * GO-2026-4914 CVE-2026-34385 GHSA-v895-833r-8c45\n * GO-2026-4915 CVE-2026-34388 GHSA-w254-4hp5-7cvv\n * GO-2026-4916 CVE-2026-26233 GHSA-247x-7qw8-fp98\n * GO-2026-4919 CVE-2026-33634 GHSA-69fq-xp46-6x23\n- Update to version 0.0.20260326T203309 2026-03-26T20:33:09Z.\n * GO-2026-4513 CVE-2026-32284\n * GO-2026-4514 CVE-2026-32285\n * GO-2026-4518 CVE-2026-32286\n * GO-2026-4526 CVE-2026-32287\n * GO-2026-4700 CVE-2026-32704 GHSA-4j3x-hhg2-fm2x\n * GO-2026-4701 CVE-2026-32720 GHSA-7x23-j8gv-v54x\n * GO-2026-4702 CVE-2026-32301 GHSA-j77h-rr39-c552\n * GO-2026-4703 GHSA-q926-c743-49qj\n * GO-2026-4704 CVE-2026-32606 GHSA-wj2j-qwcf-cfcc\n * GO-2026-4705 CVE-2026-32747 GHSA-h5vh-m7fg-w5h6\n * GO-2026-4706 CVE-2026-32751 GHSA-qr46-rcv3-4hq3\n * GO-2026-4707 CVE-2026-32749 GHSA-qvvf-q994-x79v\n * GO-2026-4708 CVE-2026-32750 GHSA-rjhh-m223-9qqv\n * GO-2026-4709 CVE-2026-32815 GHSA-xp2m-98x8-rpj6\n * GO-2026-4710 CVE-2026-32760 GHSA-5gg9-5g7w-hm73\n * GO-2026-4711 CVE-2026-32758 GHSA-9f3r-2vgw-m8xp\n * GO-2026-4712 CVE-2026-32771 GHSA-f7cq-gvh6-qr25\n * GO-2026-4713 CVE-2026-32759 GHSA-ffx7-75gc-jg7c\n * GO-2026-4714 CVE-2026-32737 GHSA-fgm3-q9r5-43v9\n * GO-2026-4715 CVE-2026-32769 GHSA-hxm7-9q36-c77f\n * GO-2026-4716 CVE-2026-32767 GHSA-j7wh-x834-p3r7\n * GO-2026-4717 CVE-2026-32828 GHSA-j94x-8wcp-x7hm\n * GO-2026-4718 CVE-2026-32768 GHSA-mw24-f3xh-j3qv\n * GO-2026-4719 CVE-2026-32805 GHSA-p799-g7vv-f279\n * GO-2026-4721 CVE-2026-32940 GHSA-4mx9-3c2h-hwhg\n * GO-2026-4722 CVE-2026-32938 GHSA-fq2j-j8hc-8vw8\n * GO-2026-4723 CVE-2026-32941 GHSA-97vp-pwqj-46qc\n * GO-2026-4724 CVE-2026-32254 GHSA-phqm-jgc3-qf8g\n * GO-2026-4725 CVE-2026-25783 GHSA-2v3w-6g35-5f9v\n * GO-2026-4726 CVE-2026-2456 GHSA-34g8-9fpp-46ch\n * GO-2026-4728 CVE-2026-32953 GHSA-4w7r-3222-8h6v\n * GO-2026-4729 CVE-2026-2458 GHSA-679f-wmrg-qf57\n * GO-2026-4731 CVE-2026-24458 GHSA-m5rv-56xx-hfc6\n * GO-2026-4732 CVE-2026-2457 GHSA-ph22-fw5m-w2q9\n * GO-2026-4733 CVE-2026-25780 GHSA-xv2p-wchj-qjhp\n * GO-2026-4734 CVE-2026-2578 GHSA-3rhr-jr63-hwq5\n * GO-2026-4735 CVE-2026-2463 GHSA-fx49-m253-27jj\n * GO-2026-4737 GHSA-594f-3595-c47v\n * GO-2026-4740 GHSA-h9q6-hc68-35rp\n * GO-2026-4742 CVE-2026-32811 GHSA-r8x2-fhmf-6mxp\n * GO-2026-4743 CVE-2026-33066 GHSA-4663-4mpg-879v\n * GO-2026-4744 CVE-2026-21386 GHSA-5mr9-crcg-8wh2\n * GO-2026-4745 CVE-2026-24692 GHSA-cwfj-642j-gfh4\n * GO-2026-4746 CVE-2026-2455 GHSA-gqv7-j2j8-qmwq\n * GO-2026-4747 CVE-2026-33067 GHSA-mvpm-v6q4-m2pf\n * GO-2026-4748 CVE-2026-33081 GHSA-qwxp-6qf9-wr4m\n * GO-2026-4749 CVE-2026-4265 GHSA-xpvf-6qcc-9jqc\n * GO-2026-4750 CVE-2026-32937 GHSA-6g43-577r-wf4x\n * GO-2026-4751 CVE-2026-33132 GHSA-g2pf-ww5m-2r9m\n * GO-2026-4752 CVE-2026-33203 GHSA-3g9h-9hp4-654v\n * GO-2026-4754 CVE-2026-33063 GHSA-4jrw-92fg-4jwx\n * GO-2026-4755 CVE-2026-33192 GHSA-5rvc-5cwx-g5x8\n * GO-2026-4756 CVE-2026-33062 GHSA-7c47-xr7q-p6hg\n * GO-2026-4757 CVE-2026-33064 GHSA-7g27-v5wj-jr75\n * GO-2026-4758 CVE-2026-33065 GHSA-958m-gxmc-mccm\n * GO-2026-4759 CVE-2026-33221 GHSA-g9f6-9775-hffm\n * GO-2026-4763 CVE-2026-33191 GHSA-p9hg-pq3q-v9gv\n * GO-2026-4765 GHSA-vccx-p757-pv6h\n * GO-2026-4766 CVE-2026-33194 GHSA-vm69-h85x-8p85\n * GO-2026-4768 CVE-2026-33320 GHSA-4fcp-jxh7-23x8\n * GO-2026-4769 CVE-2026-32691 GHSA-gfgr-6hrj-85ww\n * GO-2026-4770 GHSA-q382-vc8q-7jhj\n * GO-2026-4773 CVE-2026-33252 GHSA-89xv-2j6f-qhc8\n * GO-2026-4774 CVE-2026-30924 GHSA-h8vw-ph9r-xpch\n * GO-2026-4775 CVE-2026-30836 GHSA-q4r8-xm5f-56gw\n * GO-2026-4776 CVE-2026-33283 GHSA-3366-gw57-fcm5\n * GO-2026-4777 CVE-2026-32693 GHSA-439w-v2p7-pggc\n * GO-2026-4778 CVE-2026-32694 GHSA-5cj2-rqqf-hx9p\n * GO-2026-4779 CVE-2026-33322 GHSA-5cx5-wh4m-82fh\n * GO-2026-4780 CVE-2026-33282 GHSA-826q-wrq4-p23x\n * GO-2026-4781 CVE-2026-32692 GHSA-89x7-5m5m-mcmm\n * GO-2026-4782 CVE-2026-2461 GHSA-hf8w-x9h5-5gf9\n * GO-2026-4783 CVE-2026-33281 GHSA-q669-4gmv-g8mf\n * GO-2026-4784 CVE-2026-2476 GHSA-4ppj-6chv-5pgc\n * GO-2026-4785 CVE-2026-33344 GHSA-ph8x-4jfv-v9v8\n * GO-2026-4786 CVE-2026-22545 GHSA-rv67-7w2g-7976\n * GO-2026-4788 CVE-2026-33353 GHSA-xgxp-f695-6vrp\n * GO-2026-4791 CVE-2026-29794 GHSA-m547-hp4w-j6jx\n * GO-2026-4792 CVE-2026-32595 GHSA-g3hg-j4jv-cwfr\n * GO-2026-4793 CVE-2026-32305 GHSA-wvvq-wgcr-9q48\n * GO-2026-4794 CVE-2026-33315 GHSA-47cr-f226-r4pq\n * GO-2026-4795 CVE-2026-33312 GHSA-564f-wx8x-878h\n * GO-2026-4796 CVE-2026-4342 GHSA-f53h-mxv9-cp98\n * GO-2026-4797 CVE-2026-33313 GHSA-mr3j-p26x-72x4\n * GO-2026-4798 CVE-2026-33316 GHSA-vq4q-79hh-q767\n * GO-2026-4799 CVE-2026-33496 GHSA-4mq7-pvjg-xp2r\n * GO-2026-4800 CVE-2026-33505 GHSA-c38g-mx2c-9wf2\n * GO-2026-4801 CVE-2026-33503 GHSA-hgx2-28f8-6g2r\n * GO-2026-4802 CVE-2026-33476 GHSA-hhgj-gg9h-rjp7\n * GO-2026-4803 CVE-2026-33419 GHSA-jv87-32hw-hh99\n * GO-2026-4804 CVE-2026-33494 GHSA-p224-6x5r-fjpm\n * GO-2026-4805 CVE-2026-33473 GHSA-p747-qc5p-773r\n * GO-2026-4807 CVE-2026-33504 GHSA-r9w3-57w2-gch2\n * GO-2026-4809 CVE-2026-33481 GHSA-rjcw-vg7j-m9rc\n * GO-2026-4810 CVE-2026-33495 GHSA-vhr5-ggp3-qq85\n * GO-2026-4811 CVE-2026-33474 GHSA-wc83-79hj-hpmq\n * GO-2026-4812 CVE-2026-26304 GHSA-4pmx-622h-x359\n * GO-2026-4813 CVE-2026-32879 GHSA-5353-f8fq-65vc\n * GO-2026-4814 CVE-2026-30886 GHSA-f35r-v9x5-r8mc\n * GO-2026-4815 CVE-2026-33809\n * GO-2026-4816 CVE-2026-3864 GHSA-2mjq-54qg-7w6j\n * GO-2026-4817 CVE-2026-33528 GHSA-4753-cmc8-8j9v\n * GO-2026-4818 CVE-2026-33525 GHSA-gmfg-3v4q-9qr4\n * GO-2026-4820 GHSA-7789-65hx-f26w\n * GO-2026-4821 CVE-2026-33621 GHSA-j65m-hv65-r264\n * GO-2026-4822 CVE-2026-33620 GHSA-mrqc-3276-74f8\n * GO-2026-4823 CVE-2026-33623 GHSA-p8mm-644p-phmh\n * GO-2026-4824 CVE-2026-33622 GHSA-w5pc-m664-r62v\n * GO-2026-4825 CVE-2026-33619 GHSA-xqq2-4j46-vwp7\n * GO-2026-4826 CVE-2026-33249 GHSA-8m2x-3m6q-6w8j\n * GO-2026-4827 CVE-2026-33247 GHSA-x6g4-f6q3-fqvv\n * GO-2026-4828 CVE-2026-33248 GHSA-3f24-pcvm-5jqc\n * GO-2026-4829 CVE-2026-29785 GHSA-52jh-2xxh-pwh6\n * GO-2026-4830 CVE-2026-33246 GHSA-55h8-8g96-x4hj\n * GO-2026-4831 CVE-2026-33219 GHSA-8r68-gvr4-jh7j\n * GO-2026-4832 CVE-2026-33222 GHSA-9983-vrx2-fg9c\n * GO-2026-4833 CVE-2026-33215 GHSA-fcjp-h8cc-6879\n * GO-2026-4834 CVE-2026-33217 GHSA-jxxm-27vp-c3m5\n * GO-2026-4835 CVE-2026-33223 GHSA-pwx7-fx9r-hr4h\n * GO-2026-4836 CVE-2026-33216 GHSA-v722-jcv5-w7mc\n * GO-2026-4837 CVE-2026-33218 GHSA-vprv-35vv-q339\n * GO-2026-4838 CVE-2026-33638 GHSA-m983-7426-5hrj\n * GO-2026-4841 CVE-2026-27889 GHSA-pq2q-rcw4-3hr6\n * GO-2026-4842 CVE-2026-33669 GHSA-34xj-66v3-6j83\n * GO-2026-4843 CVE-2026-33670 GHSA-xmw9-6r43-x9ww\n * GO-2026-4844 CVE-2026-33529 GHSA-7pq3-326h-f8q9\n * GO-2026-4845 CVE-2026-4404 GHSA-hj7x-hmf2-hc2p\n * GO-2026-4846 CVE-2026-33677 GHSA-7c2g-p23p-4jg3\n * GO-2026-4847 CVE-2026-33676 GHSA-8cmm-j6c4-rr8v\n * GO-2026-4848 CVE-2026-33680 GHSA-8hp8-9fhr-pfm9\n * GO-2026-4849 CVE-2026-33668 GHSA-94xm-jj8x-3cr4\n * GO-2026-4850 CVE-2026-33700 GHSA-f95f-77jx-fcjc\n * GO-2026-4851 CVE-2026-33675 GHSA-g66v-54v9-52pr\n * GO-2026-4852 CVE-2026-33679 GHSA-g9xj-752q-xh63\n * GO-2026-4853 CVE-2026-33678 GHSA-jfmm-mjcp-8wq2\n * GO-2026-4854 CVE-2026-24516 GHSA-fh3m-562m-w4f6\n * GO-2026-4855 GHSA-2pv8-4c52-mf8j\n * GO-2026-4856 CVE-2026-33726 GHSA-hxv8-4j4r-cqgv\n * GO-2026-4857 CVE-2026-33729 GHSA-h6c8-cww8-35hf\n * GO-2026-4860 CVE-2026-33757 GHSA-7q7g-x6vg-xpc3\n * GO-2026-4861 CVE-2019-8400 GHSA-7v6r-w4r6-mhch\n * GO-2026-4862 CVE-2026-33758 GHSA-cpj3-3r2f-xj59\n- Update to version 0.0.20260317T205859 2026-03-17T20:58:59Z.\n * GO-2026-4360 CVE-2026-0528 GHSA-w2gr-585j-r428\n * GO-2026-4513\n * GO-2026-4514\n * GO-2026-4518\n * GO-2026-4526\n * GO-2026-4549 CVE-2026-24005 GHSA-9fj4-3849-rv9g\n * GO-2026-4550 CVE-2026-1229 GHSA-q9hv-hpm4-hj6x\n * GO-2026-4551 CVE-2026-27575 GHSA-3ccg-x393-96v8\n * GO-2026-4552 CVE-2026-27116 GHSA-4qgr-4h56-8895\n * GO-2026-4553 CVE-2026-27616 GHSA-7jp5-298q-jg98\n * GO-2026-4554 CVE-2026-27730 GHSA-p2v6-84h2-5x4r\n * GO-2026-4556 CVE-2026-27819 GHSA-42wg-38gx-85rh\n * GO-2026-4557 CVE-2026-26186 GHSA-49xw-vfc4-7p43\n * GO-2026-4558 CVE-2026-27808 GHSA-mpf7-p9x7-96r3\n * GO-2026-4560 CVE-2026-27465 GHSA-2v6m-6xw3-6467\n * GO-2026-4561 CVE-2026-25963 GHSA-5jvp-m9h4-253h\n * GO-2026-4562 CVE-2026-27900 GHSA-5rc7-2jj6-mp64\n * GO-2026-4563 CVE-2026-24004 GHSA-9pm7-6g36-6j78\n * GO-2026-4564 CVE-2026-23999 GHSA-ppwx-5jq7-px2w\n * GO-2026-4565 CVE-2026-22728 GHSA-465p-v42x-3fmj\n * GO-2026-4566 CVE-2026-27899 GHSA-5rmx-256w-8mj9\n * GO-2026-4567 CVE-2026-27965 GHSA-8g8j-r87h-p36x\n * GO-2026-4568 GHSA-gj6x-q8rh-wj6x\n * GO-2026-4569 CVE-2026-27896 GHSA-wvj2-96wp-fq3f\n * GO-2026-4570 CVE-2026-27969 GHSA-r492-hjgh-c9gw\n * GO-2026-4571 CVE-2026-27734 GHSA-phwh-4f42-gwf3\n * GO-2026-4572 CVE-2026-27946 GHSA-282g-fhmx-xf54\n * GO-2026-4573 CVE-2026-27840 GHSA-6mq3-xmgp-pjm5\n * GO-2026-4574 CVE-2026-27945 GHSA-7777-fhq9-592v\n * GO-2026-4575 CVE-2026-28268 GHSA-rfjg-6m84-crj2\n * GO-2026-4576 CVE-2026-28280 GHSA-4rv8-5cmm-2r22\n * GO-2026-4577 CVE-2026-28407 GHSA-945p-3jhm-6rcp\n * GO-2026-4578 CVE-2025-14443 GHSA-gxvv-45f6-3ch8\n * GO-2026-4579 CVE-2026-28279 GHSA-rchw-322g-f7rm\n * GO-2026-4580 CVE-2026-28406 GHSA-6rxq-q92g-4rmf\n * GO-2026-4581 GHSA-xfx2-prg5-jq3g\n * GO-2026-4583 GHSA-54p8-x2m9-c593\n * GO-2026-4584 CVE-2026-28342 GHSA-pc8g-78pf-4xrp\n * GO-2026-4585 CVE-2026-28492 GHSA-mr74-928f-rw69\n * GO-2026-4586 CVE-2026-28789 GHSA-45m3-398w-m2m9\n * GO-2026-4587 CVE-2026-28790 GHSA-4fqm-6fmh-82mq\n * GO-2026-4588 CVE-2026-29049 GHSA-7rp8-r62p-q6wc\n * GO-2026-4589 CVE-2021-25320 GHSA-gqf8-rvrh-g7w6\n * GO-2026-4590 GHSA-hwm2-4ph6-w6m5\n * GO-2026-4591 CVE-2025-62879 GHSA-wj3p-5h3x-c74q\n * GO-2026-4592 CVE-2026-29073 GHSA-jqwg-75qf-vmf9\n * GO-2026-4593 CVE-2026-26998 GHSA-fw45-f5q2-2p4x\n * GO-2026-4594 CVE-2026-26999 GHSA-xw98-5q62-jx94\n * GO-2026-4595 CVE-2026-3351 GHSA-crmg-9m86-636r\n * GO-2026-4596 CVE-2026-29183 GHSA-6865-qjcf-286f\n * GO-2026-4597 CVE-2026-29054 GHSA-92mv-8f8w-wq52\n * GO-2026-4598 CVE-2026-29042 GHSA-95fj-3w7g-4r27\n * GO-2026-4599 CVE-2026-27137\n * GO-2026-4600 CVE-2026-27138\n * GO-2026-4601 CVE-2026-25679\n * GO-2026-4602 CVE-2026-27139\n * GO-2026-4603 CVE-2026-27142\n * GO-2026-4604 CVE-2026-29193 GHSA-25rw-g6ff-fmg8\n * GO-2026-4605 CVE-2026-29192 GHSA-6rx5-m2rc-hmf7\n * GO-2026-4606 CVE-2026-29188 GHSA-79pf-vx4x-7jmm\n * GO-2026-4607 CVE-2026-29191 GHSA-pr34-2v5x-6qjq\n * GO-2026-4608 CVE-2026-29771 GHSA-rhr9-hgcm-x289\n * GO-2026-4609 CVE-2026-29781 GHSA-hx52-cv84-jr5v\n * GO-2026-4610 CVE-2025-15558 GHSA-p436-gjf2-799p\n * GO-2026-4612 CVE-2026-28683 GHSA-3c22-5j5m-4jq7\n * GO-2026-4613 CVE-2026-28682 GHSA-c36c-7pc2-f2ph\n * GO-2026-4614 CVE-2026-27944 GHSA-g9w5-qffc-6762\n * GO-2026-4615 CVE-2026-29060 GHSA-m2hx-wjxc-9fp4\n * GO-2026-4616 CVE-2026-25921 GHSA-cj4v-437j-jq4c\n * GO-2026-4617 CVE-2026-26194 GHSA-v9vm-r24h-6rqm\n * GO-2026-4618 CVE-2026-26195 GHSA-vgvf-m4fw-938j\n * GO-2026-4619 CVE-2026-26196 GHSA-x9p5-w45c-7ffc\n * GO-2026-4620 CVE-2026-26022 GHSA-xrcr-gmf5-2r8j\n * GO-2026-4621 GHSA-fwhj-785h-43hh\n * GO-2026-4622 CVE-2026-30223 GHSA-g962-2j28-3cg9\n * GO-2026-4623 CVE-2026-30224 GHSA-gq2m-77hf-vwgh\n * GO-2026-4624 CVE-2026-29084 GHSA-hcff-qv74-7hr4\n * GO-2026-4625 CVE-2026-30225 GHSA-p443-p7w5-2f7f\n * GO-2026-4626 CVE-2026-29061 GHSA-q658-hfpg-35qc\n * GO-2026-4627 CVE-2026-26276 GHSA-vgjm-2cpf-4g7c\n * GO-2026-4628 CVE-2026-30247 GHSA-595m-wc8g-6qgc\n * GO-2026-4629 CVE-2026-30233 GHSA-jf73-858c-54pg\n * GO-2026-4630 CVE-2026-26017 GHSA-c9v3-4pv7-87pr\n * GO-2026-4631 CVE-2026-30834 GHSA-rw8p-c6hf-q3pg\n * GO-2026-4634 CVE-2026-30832 GHSA-3fvx-xrxq-8jvv\n * GO-2026-4635 CVE-2026-26018 GHSA-h75p-j8xm-m278\n * GO-2026-4636 CVE-2026-29064 GHSA-hcm4-6hpj-vghm\n * GO-2026-4637 CVE-2026-30859 GHSA-2f4c-vrjq-rcgv\n * GO-2026-4638 CVE-2026-30856 GHSA-67q9-58vj-32qx\n * GO-2026-4639 CVE-2026-30851 GHSA-7r4p-vjf4-gxv4\n * GO-2026-4640 CVE-2026-30857 GHSA-8rf9-c59g-f82f\n * GO-2026-4641 CVE-2026-30860 GHSA-8w32-6mrw-q5wv\n * GO-2026-4642 CVE-2026-30855 GHSA-ccj6-79j6-cq5q\n * GO-2026-4643 CVE-2026-30858 GHSA-h6gw-8f77-mmmp\n * GO-2026-4644 CVE-2026-30852 GHSA-m2w3-8f23-hxxf\n * GO-2026-4645 CVE-2026-30861 GHSA-r55h-3rwj-hcmg\n * GO-2026-4646 CVE-2026-30869 GHSA-2h2p-mvfx-868w\n * GO-2026-4647 GHSA-qr2g-p6q7-w82m\n * GO-2026-4651 CVE-2026-29196 GHSA-4hgg-c4rr-6h7f\n * GO-2026-4652 CVE-2026-29773 GHSA-6r7f-3fwq-hq74\n * GO-2026-4653 CVE-2026-28512 GHSA-9h33-g3ww-mqff\n * GO-2026-4654 CVE-2026-29195 GHSA-ch3w-9456-38v3\n * GO-2026-4655 CVE-2026-29194 GHSA-hmqr-wjmj-376c\n * GO-2026-4656 CVE-2026-28513 GHSA-qh6q-598w-w6m2\n * GO-2026-4658 CVE-2026-30926 GHSA-f9cq-v43p-v523\n * GO-2026-4659 CVE-2026-30933 GHSA-525j-95gf-766f\n * GO-2026-4660 CVE-2026-30934 GHSA-r633-fcgp-m532\n * GO-2026-4661 GHSA-xv8g-fj9h-6gmv\n * GO-2026-4667 CVE-2026-31807 GHSA-5hc8-qmg8-pw27\n * GO-2026-4668 CVE-2026-31801 GHSA-85jx-fm8m-x8c6\n * GO-2026-4669 CVE-2026-31809 GHSA-pmc9-f5qr-2pcr\n * GO-2026-4670 CVE-2026-31817 GHSA-364q-w7vh-vhpc\n * GO-2026-4671 CVE-2026-31959 GHSA-7q3q-5px6-4c5p\n * GO-2026-4672 CVE-2026-31960 GHSA-g32c-4pvp-769g\n * GO-2026-4673 GHSA-j443-wcqq-xprh\n * GO-2026-4674 CVE-2026-31866 GHSA-rmrf-g9r3-73pm\n * GO-2026-4675 CVE-2026-31961 GHSA-xj69-m9qq-8m94\n * GO-2026-4677 GHSA-54gx-3cgr-7mfm\n * GO-2026-4678 CVE-2026-28229 GHSA-56px-hm34-xqj5\n * GO-2026-4679 CVE-2026-29777 GHSA-8q2w-wr49-whqj\n * GO-2026-4680 CVE-2026-31863 GHSA-vv3h-7qwr-722v\n * GO-2026-4681 CVE-2026-31892 GHSA-3wf5-g532-rcrr\n * GO-2026-4683 CVE-2026-32102 GHSA-228v-wc5r-j8m7\n * GO-2026-4684 GHSA-4hjq-9h5c-252j\n * GO-2026-4685 CVE-2026-32110 GHSA-56cv-c5p2-j2wg\n * GO-2026-4686 CVE-2026-32136 GHSA-5fg6-wrq4-w5gh\n * GO-2026-4687 GHSA-xx6g-43w2-9g6g\n * GO-2026-4688 CVE-2026-32246 GHSA-3q28-qjrv-qr39\n * GO-2026-4689 CVE-2026-32245 GHSA-xg2q-62g2-cvcm\n * GO-2026-4690 CVE-2026-2808 GHSA-cpfq-66p2-336j\n * GO-2026-4691 CVE-2026-32320 GHSA-j478-p7vq-3347\n * GO-2026-4692 CVE-2026-32319 GHSA-m9pm-w3gv-c68f\n * GO-2026-4693 CVE-2026-31886 GHSA-m4q3-457p-hh2x\n * GO-2026-4694 CVE-2026-32614 GHSA-5xxp-2vrj-x855\n * GO-2026-4695 CVE-2026-30961 GHSA-45vh-rpc8-hxpp\n * GO-2026-4696 CVE-2026-30943 GHSA-j6jp-78w8-34x6\n * GO-2026-4697 CVE-2026-30915 GHSA-m83q-5wr4-4gfp\n * GO-2026-4698 CVE-2026-30955 GHSA-qwc6-vc2v-2ggj\n * GO-2026-4699 CVE-2026-30914 GHSA-x8qh-7475-c5mp\n- Update to version 0.0.20260226T182644 2026-02-26T18:26:44Z.\n * GO-2025-4259 CVE-2025-13767 GHSA-fmqf-pmcm-8cx9\n * GO-2025-4260 CVE-2025-64641 GHSA-vww6-79rv-3j4x\n * GO-2026-4282 CVE-2017-18873 GHSA-x6mw-hf2j-vqpc\n * GO-2026-4305 CVE-2017-18903 GHSA-fcwg-45jh-5qhf\n * GO-2026-4325 CVE-2025-14822 GHSA-9r42-rhw3-2222\n * GO-2026-4326 CVE-2025-14435 GHSA-mx8m-v8qm-xwr8\n * GO-2026-4332 CVE-2026-23644 GHSA-2657-3c98-63jq\n * GO-2026-4348 CVE-2026-23991 GHSA-846p-jg2w-w324\n * GO-2026-4349 CVE-2026-23992 GHSA-fphv-w9fq-2525\n * GO-2026-4377 CVE-2026-24686 GHSA-jqc5-w2xx-5vq4\n * GO-2026-4410 CVE-2026-25140 GHSA-f4w5-5xv9-85f6\n * GO-2026-4502 CVE-2026-25766 GHSA-pgvm-wxw2-hrv9\n * GO-2026-4534 CVE-2026-25899 GHSA-2mr3-m5q5-wgp6\n * GO-2026-4535 CVE-2026-27585 GHSA-4xrr-hq4w-6vf4\n * GO-2026-4536 CVE-2026-27590 GHSA-5r3v-vc8m-m96g\n * GO-2026-4537 CVE-2026-27589 GHSA-879p-475x-rqh2\n * GO-2026-4538 CVE-2026-27587 GHSA-g7pc-pc7g-h8jh\n * GO-2026-4539 CVE-2026-27586 GHSA-hffm-g8v7-wrv7\n * GO-2026-4540 CVE-2026-25891 GHSA-m3c2-496v-cw3v\n * GO-2026-4541 CVE-2026-27588 GHSA-x76f-jf84-rqj8\n * GO-2026-4543 CVE-2026-25882 GHSA-mrq8-rjmw-wpq3\n * GO-2026-4559 CVE-2026-27141\n- Update to version 0.0.20260225T230704 2026-02-25T23:07:04Z.\n * GO-2026-4358 CVE-2026-24137 GHSA-fcv2-xgw5-pqxf\n * GO-2026-4361 GHSA-c32p-wcqj-j677\n * GO-2026-4394 CVE-2026-24051 GHSA-9h8m-3fm2-qjrq\n * GO-2026-4399 CVE-2026-25518 GHSA-gx3x-vq4p-mhhv\n * GO-2026-4507 CVE-2026-26314 GHSA-2gjw-fg97-vg3r\n * GO-2026-4508 CVE-2026-26313 GHSA-689v-6xwf-5jf3\n * GO-2026-4509 CVE-2026-27017 GHSA-7m29-f4hw-g2vx\n * GO-2026-4511 CVE-2026-26315 GHSA-m6j8-rg6r-7mv8\n * GO-2026-4512 CVE-2026-26995 GHSA-rrxv-pmq9-x67r\n * GO-2026-4531 CVE-2026-25591 GHSA-w6x6-9fp7-fqm4\n * GO-2026-4532 CVE-2026-25802 GHSA-299v-8pq9-5gjq\n * GO-2026-4533 CVE-2026-27571 GHSA-qrvq-68c2-7grw\n * GO-2026-4542 CVE-2026-27598 GHSA-6v48-fcq6-ff23\n * GO-2026-4545 CVE-2025-50180 GHSA-3c9r-837r-qqm4\n * GO-2026-4546 CVE-2026-27611 GHSA-8vrh-3pm2-v4v6\n * GO-2026-4547 CVE-2026-27626 GHSA-49gm-hh7w-wfvf\n * GO-2026-4548 GHSA-2phg-qgmm-r638\n- Update to version 0.0.20260223T182315 2026-02-23T18:23:15Z.\n * GO-2026-4392 CVE-2026-24845 GHSA-9m43-p3cx-w8j5\n * GO-2026-4434 CVE-2023-43635 GHSA-4jvr-vj2c-8q37\n * GO-2026-4435 CVE-2023-43636 GHSA-5h7v-g49c-h887\n * GO-2026-4436 CVE-2023-43637 GHSA-g7vp-j25f-h34p\n * GO-2026-4442 GHSA-x9p2-77v6-6vhf\n * GO-2026-4444 CVE-2026-23989 GHSA-9j2f-3rj3-wgpg\n * GO-2026-4445 CVE-2026-25760 GHSA-2286-hxv5-cmp2\n * GO-2026-4446 CVE-2026-24851 GHSA-jq9f-gm9w-rwm9\n * GO-2026-4447 GHSA-vf5j-r2hw-2hrw\n * GO-2026-4448 CVE-2025-64111 GHSA-gg64-xxr9-qhjp\n * GO-2026-4449 CVE-2025-64175 GHSA-p6x6-9mx6-26wj\n * GO-2026-4450 CVE-2026-23632 GHSA-5qhx-gwfj-6jqr\n * GO-2026-4451 CVE-2026-22592 GHSA-cr88-6mqm-4g57\n * GO-2026-4452 CVE-2026-24135 GHSA-jp7c-wj6q-3qf2\n * GO-2026-4453 CVE-2026-23633 GHSA-mrph-w4hh-gx3g\n * GO-2026-4454 GHSA-26gq-grmh-6xm6\n * GO-2026-4455 CVE-2025-70963 GHSA-9f8m-9547-2gqm\n * GO-2026-4456 CVE-2025-13523 GHSA-ffx7-34p2-vm3w\n * GO-2026-4457 CVE-2025-65852 GHSA-rjv5-9px2-fqw6\n * GO-2026-4458 CVE-2026-25793 GHSA-69x3-g4r3-p962\n * GO-2026-4459 CVE-2017-18907 GHSA-42x9-rr3c-gr59\n * GO-2026-4460 CVE-2017-18918 GHSA-5ghq-28r7-qwfj\n * GO-2026-4461 CVE-2026-25804 GHSA-86x4-wp9f-wrr9\n * GO-2026-4462 CVE-2017-18915 GHSA-hxxj-8phw-74vw\n * GO-2026-4463 CVE-2017-18917 GHSA-jxc4-w54c-qv5r\n * GO-2026-4464 CVE-2017-18911 GHSA-m462-mqw4-2c8m\n * GO-2026-4465 GHSA-vhvq-fv9f-wh4q\n * GO-2026-4466 CVE-2026-25791 GHSA-wxrw-gvg8-fqjp\n * GO-2026-4467 CVE-2017-18916 GHSA-x33g-375j-jhf7\n * GO-2026-4471 CVE-2025-66630 GHSA-68rr-p4fp-j59v\n * GO-2026-4473 CVE-2026-25934 GHSA-37cx-329c-33x3\n * GO-2026-4474 CVE-2026-25890 GHSA-4mh3-h929-w968\n * GO-2026-4475 CVE-2026-25889 GHSA-hxw8-4h9j-hq2r\n * GO-2026-4476 CVE-2017-18908 GHSA-34cx-hvm4-vx7j\n * GO-2026-4477 CVE-2017-18906 GHSA-fpcr-4rr5-hpcp\n * GO-2026-4478 CVE-2017-18909 GHSA-r6j5-fqx9-7qv9\n * GO-2026-4479 CVE-2026-26014 GHSA-9f3f-wv7r-qc8r\n * GO-2026-4480 CVE-2026-25935 GHSA-m4g2-2q66-vc9v\n * GO-2026-4481 CVE-2026-26190 GHSA-7ppg-37fh-vcr6\n * GO-2026-4483 CVE-2026-21438 GHSA-2f2x-8mwp-p2gc\n * GO-2026-4484 CVE-2026-25949 GHSA-89p3-4642-cr2w\n * GO-2026-4485 CVE-2026-21434 GHSA-g6x7-jq8p-6q9q\n * GO-2026-4486 CVE-2026-24895 GHSA-g966-83w7-6w38\n * GO-2026-4487 CVE-2017-18912 GHSA-m2ch-x2q7-2284\n * GO-2026-4488 CVE-2026-21435 GHSA-px4r-g4p3-hhqv\n * GO-2026-4489 CVE-2026-24894 GHSA-r3xh-3r3w-47gp\n * GO-2026-4490 CVE-2025-67860 GHSA-3c9m-gq32-g4jx\n * GO-2026-4491 CVE-2026-26055 GHSA-965m-v4cc-6334\n * GO-2026-4493 CVE-2026-26056 GHSA-wj8p-jj64-h7ff\n * GO-2026-4494 CVE-2026-26187 GHSA-699m-4v95-rmpm\n * GO-2026-4495 CVE-2026-20796 GHSA-2xf7-hmf6-p64j\n * GO-2026-4496 CVE-2026-22892 GHSA-9pj7-jh2r-87g8\n * GO-2026-4497 GHSA-hr7j-63v7-vj7g\n * GO-2026-4498 CVE-2026-25232 GHSA-2c6v-8r3v-gh6p\n * GO-2026-4499 CVE-2026-25229 GHSA-cv22-72px-f4gh\n * GO-2026-4500 CVE-2026-25242 GHSA-fc3h-92p8-h36f\n * GO-2026-4501 CVE-2026-25120 GHSA-jj5m-h57j-5gv7\n * GO-2026-4503 CVE-2026-26958\n * GO-2026-4504 CVE-2026-26201 GHSA-f5p9-j34q-pwcc\n * GO-2026-4505 CVE-2026-26957 GHSA-wgm6-9rvv-3438\n * GO-2026-4506 CVE-2026-26205 GHSA-9f29-v6mm-pw6w\n * GO-2026-4515 CVE-2026-27111 GHSA-5vvm-67pj-72g4\n * GO-2026-4516 CVE-2026-27112 GHSA-7g9x-cp9g-92mr\n * GO-2026-4517 CVE-2026-24834 GHSA-wwj6-vghv-5p64\n * GO-2026-4519 CVE-2026-0997 GHSA-2phx-frhf-xr55\n * GO-2026-4520 CVE-2026-0999 GHSA-3c9r-7f29-qp32\n * GO-2026-4521 CVE-2025-14350 GHSA-57cc-2pf4-mhmx\n * GO-2026-4522 CVE-2026-26963 GHSA-5r23-prx4-mqg3\n * GO-2026-4523 CVE-2025-14573 GHSA-cgjg-p2m2-qm4p\n * GO-2026-4524 CVE-2025-13821 GHSA-pp9j-pf5c-659x\n * GO-2026-4525 CVE-2026-0998 GHSA-w65c-fvp5-fvc5\n * GO-2026-4527 GHSA-6qr9-g2xw-cw92\n * GO-2026-4528 GHSA-j9wf-6r2x-hqmx\n * GO-2026-4529 CVE-2026-24122 GHSA-wfqv-66vq-46rm\n * GO-2026-4530 GHSA-gv8r-9rw9-9697\n- Update to version 0.0.20260205T172317 2026-02-05T17:23:17Z.\n * GO-2026-4337 CVE-2025-68121\n * GO-2026-4357 CVE-2026-23954 GHSA-7f67-crqm-jgh7\n * GO-2026-4359 CVE-2026-23953 GHSA-x6jc-phwx-hp32\n * GO-2026-4395 CVE-2026-25499 GHSA-gwch-7m8v-7544\n * GO-2026-4396 CVE-2026-25059 GHSA-qmj2-8r24-xxcq\n * GO-2026-4397 CVE-2026-25060 GHSA-wf93-3ghh-h389\n * GO-2026-4398 GHSA-grh9-37g7-53mj\n * GO-2026-4403 CVE-2025-22873\n * GO-2026-4404 CVE-2025-70849 GHSA-mw8w-q3f7-2v85\n * GO-2026-4405 CVE-2026-25121 GHSA-5g94-c2wx-8pxw\n * GO-2026-4406 CVE-2026-25122 GHSA-6p9p-q6wh-9j89\n * GO-2026-4407 CVE-2026-24843 GHSA-qxx2-7h4c-83f4\n * GO-2026-4408 CVE-2026-24844 GHSA-vqqr-rmpc-hhg2\n * GO-2026-4409 CVE-2026-25145 GHSA-2w4f-9fgg-q2v9\n * GO-2026-4411 CVE-2026-25579 GHSA-hrr4-3wgr-68x3\n * GO-2026-4412 CVE-2026-25143 GHSA-rf4g-89h5-crcr\n * GO-2026-4413 CVE-2026-25578 GHSA-rh3r-8pxm-hg4w\n * GO-2026-4414 CVE-2026-25160 GHSA-8jmm-3xwx-w974\n * GO-2026-4415 CVE-2026-25161 GHSA-x4q4-7phh-42j9\n * GO-2026-4416 CVE-2026-25538 GHSA-8wpc-j9q9-j5m2\n * GO-2026-4417 CVE-2026-24514 GHSA-2pf9-vr92-6h3v\n * GO-2026-4418 CVE-2023-43631 GHSA-3mq9-xhgq-r7gj\n * GO-2026-4419 CVE-2026-24513 GHSA-4g2f-xcph-2335\n * GO-2026-4421 CVE-2026-24735 GHSA-5w5r-8xc6-2xhw\n * GO-2026-4422 CVE-2023-43632 GHSA-6jp5-grgh-jw42\n * GO-2026-4423 CVE-2026-1580 GHSA-9h3p-52vh-959w\n * GO-2026-4425 CVE-2025-62878 GHSA-jr3w-9vfr-c746\n * GO-2026-4426 CVE-2026-24512 GHSA-jx8c-56mg-h6vp\n * GO-2026-4428 CVE-2023-43633 GHSA-4c4v-42hc-72p6\n * GO-2026-4430 CVE-2023-43630 GHSA-phcg-h58r-gmcq\n * GO-2026-4432 CVE-2023-43634 GHSA-wc42-fcjp-v8vq\n * GO-2026-4433 CVE-2025-61732\n * GO-2026-4440 CVE-2025-47911\n * GO-2026-4441 CVE-2025-58190\n- Update to version 0.0.20260204T190754 2026-02-04T19:07:54Z.\n * GO-2026-4324 CVE-2026-23645 GHSA-pcjq-j3mq-jv5j\n * GO-2026-4327 CVE-2026-23742 GHSA-cc8m-98fm-rc9g\n * GO-2026-4329 CVE-2026-21696 GHSA-2497-gp99-2m74\n * GO-2026-4330 CVE-2026-22822 GHSA-77v3-r3jw-j2v2\n * GO-2026-4331 CVE-2025-69199 GHSA-8w7m-w749-rx98\n * GO-2026-4333 CVE-2026-23829 GHSA-54wq-72mp-cq7c\n * GO-2026-4334 CVE-2026-23517 GHSA-4r5r-ccr6-q6f6\n * GO-2026-4335 CVE-2026-23518 GHSA-63m5-974w-448v\n * GO-2026-4336 CVE-2026-22808 GHSA-gfpw-jgvr-cw4j\n * GO-2026-4343 CVE-2026-23847 GHSA-w836-5gpm-7r93\n * GO-2026-4344 CVE-2026-23849 GHSA-43mm-m3h2-3prc\n * GO-2026-4345 CVE-2026-23845 GHSA-6jxm-fv7w-rw5j\n * GO-2026-4346 CVE-2026-23851 GHSA-94c7-g2fj-7682\n * GO-2026-4347 CVE-2026-23850 GHSA-cv54-7wv7-qxcw\n * GO-2026-4350 CVE-2026-23960 GHSA-cv78-6m8q-ph82\n * GO-2026-4351 CVE-2026-23990 GHSA-4xh5-jcj2-ch8q\n * GO-2026-4352 GHSA-r92c-9c7f-3pj8\n * GO-2026-4353 CVE-2026-24058 GHSA-pchf-49fh-w34r\n * GO-2026-4354 CVE-2026-23831 GHSA-273p-m2cw-6833\n * GO-2026-4355 CVE-2026-24117 GHSA-4c4x-jm2x-pf9j\n * GO-2026-4356 CVE-2026-24124 GHSA-j8hf-cp34-g4j7\n * GO-2026-4362 CVE-2026-20800 GHSA-2vgv-hgv4-22mh\n * GO-2026-4363 CVE-2026-20897 GHSA-393c-qgvj-3xph\n * GO-2026-4364 CVE-2026-20912 GHSA-4xx9-vc8v-87hv\n * GO-2026-4365 CVE-2026-0798 GHSA-8fwc-qjw5-rvgp\n * GO-2026-4366 CVE-2026-20888 GHSA-9cgq-wp42-4rpq\n * GO-2026-4367 CVE-2026-20736 GHSA-hgr3-x44x-33hx\n * GO-2026-4368 CVE-2026-20883 GHSA-j8xr-c56q-m8jj\n * GO-2026-4369 CVE-2026-20904 GHSA-qqgv-v353-cv8p\n * GO-2026-4370 CVE-2026-20750 GHSA-rw22-5hhq-pfpf\n * GO-2026-4378 CVE-2026-24470 GHSA-mxxc-p822-2hx9\n * GO-2026-4379 CVE-2026-24738 GHSA-j49h-6577-5xwq\n * GO-2026-4380 CVE-2026-24740 GHSA-m855-r557-5rc5\n * GO-2026-4381 CVE-2026-22039 GHSA-8p9x-46gm-qfx2\n * GO-2026-4382 CVE-2026-23881 GHSA-r2rj-wwm5-x6mq\n * GO-2026-4384 CVE-2025-14525 GHSA-25mh-hp8x-cgrv\n * GO-2026-4385 CVE-2026-24748 GHSA-w5wv-wvrp-v5m5\n * GO-2026-4386 GHSA-f72r-2h5j-7639\n * GO-2026-4387 GHSA-c4jr-5q7w-f6r9\n * GO-2026-4388 CVE-2026-1237 GHSA-j477-6vpg-6c8x\n * GO-2026-4390 CVE-2025-69820 GHSA-73jg-4qh6-3f4g\n * GO-2026-4391 CVE-2026-24846 GHSA-923j-vrcg-hxwh\n * GO-2026-4393 CVE-2025-67601 GHSA-mc24-7m59-4q5p\n- Update to version 0.0.20260128T190828 2026-01-28T19:08:28Z.\n * GO-2026-4338 CVE-2025-68119 CVE-2025-68119\n * GO-2026-4339 CVE-2025-61731 CVE-2025-61731\n * GO-2026-4340 CVE-2025-61730 CVE-2025-61730\n * GO-2026-4341 CVE-2025-61726 CVE-2025-61726\n * GO-2026-4342 CVE-2025-61728 CVE-2025-61728\n- Update to version 0.0.20260123T022811 2026-01-23T02:28:11Z.\n * GO-2025-3764 CVE-2024-44905 GHSA-6xp3-p59p-q4fj\n * GO-2025-4188 CVE-2025-65637 GHSA-4f99-4q7p-p3gh\n * GO-2025-4252 CVE-2025-68383 GHSA-2mj3-6grc-px38\n * GO-2025-4253 CVE-2025-68388 GHSA-fj69-23m4-ccvv\n * GO-2026-4310 CVE-2026-22689 GHSA-524m-q5m7-79mm\n * GO-2026-4311 CVE-2026-22772 GHSA-59jp-pj84-45mr\n * GO-2026-4312 CVE-2026-22771 GHSA-xrwg-mqj6-6m22\n * GO-2026-4313 CVE-2026-22786 GHSA-3558-j79f-vvm6\n * GO-2026-4314 CVE-2026-22868 GHSA-mq3p-rrmp-79jg\n * GO-2026-4315 CVE-2026-22862 GHSA-mr7q-c9w9-wh4h\n * GO-2026-4316 GHSA-mqqf-5wvp-8fh8\n * GO-2026-4317 CVE-2017-18892 GHSA-wj5w-qghh-gvqp\n * GO-2026-4318 CVE-2025-66292 GHSA-vh2x-fw87-4fxq\n * GO-2026-4319 CVE-2026-23511 GHSA-pvm5-9frx-264r\n * GO-2026-4320 CVE-2026-23520 GHSA-gjqq-6r35-w3r8\n * GO-2026-4321 CVE-2025-68671 GHSA-f2ph-gc9m-q55f\n * GO-2026-4322 CVE-2026-22045 GHSA-cwjm-3f7h-9hwq\n- Update to version 0.0.20260114T191543 2026-01-14T19:15:43Z.\n * GO-2025-4248 CVE-2025-62690 GHSA-q66g-q98c-q454\n * GO-2025-4251 CVE-2025-63389 GHSA-f6mr-38g8-39rg\n * GO-2026-4273 CVE-2025-14987 GHSA-hmhp-gh8m-c8xp\n- Update to version 0.0.20260113T164240 2026-01-13T16:42:40Z.\n * GO-2025-4269 CVE-2025-15107 GHSA-43h9-hc38-qph5\n * GO-2025-4272 CVE-2025-14986 GHSA-p2gr-hm8g-q772\n * GO-2026-4274 CVE-2025-69413 GHSA-pc73-rj2c-wvf9\n * GO-2026-4275 CVE-2025-14273 GHSA-qvmc-92vg-6r35\n * GO-2026-4277 CVE-2026-21483 GHSA-jmr4-p576-v565\n * GO-2026-4278 CVE-2024-6717 GHSA-5mqx-rpxv-mvxj\n * GO-2026-4279 GHSA-4c5f-9mj4-m247\n * GO-2026-4280 GHSA-hjr9-wj7v-7hv8\n * GO-2026-4281 CVE-2025-62877 GHSA-6g8q-hp2j-gvwv\n * GO-2026-4283 CVE-2025-68954 GHSA-8c39-xppg-479c\n * GO-2026-4284 CVE-2026-21859 GHSA-8v65-47jx-7mfr\n * GO-2026-4285 GHSA-gg4x-fgg2-h9w9\n * GO-2026-4286 CVE-2026-0650 GHSA-rwp9-5g7q-73q3\n * GO-2026-4287 CVE-2026-21885 GHSA-xwh2-742g-w3wp\n * GO-2026-4289 CVE-2025-68151 GHSA-527x-5wrf-22m2\n * GO-2026-4290 CVE-2026-22253 GHSA-6jm8-x3g6-r33j\n * GO-2026-4292 CVE-2026-22688 GHSA-78h3-63c4-5fqc\n * GO-2026-4293 CVE-2026-22687 GHSA-pcwc-3fw3-8cqv\n * GO-2026-4295 CVE-2017-18895 GHSA-h742-xx59-r9pq\n * GO-2026-4296 CVE-2017-18893 GHSA-887v-xh2x-47cm\n * GO-2026-4297 CVE-2017-18894 GHSA-gg42-mwr6-p82c\n * GO-2026-4298 CVE-2017-18891 GHSA-vrh2-rprg-rgc6\n * GO-2026-4299 CVE-2017-18896 GHSA-63wg-qmrv-7q66\n * GO-2026-4300 CVE-2017-18898 GHSA-9589-mq83-f749\n * GO-2026-4301 CVE-2017-18897 GHSA-f7c3-7vp3-44p6\n * GO-2026-4302 CVE-2017-18904 GHSA-8pff-p3gx-w4jf\n * GO-2026-4303 CVE-2017-18900 GHSA-8q4v-35v6-g8wr\n * GO-2026-4304 CVE-2017-18901 GHSA-c253-8hr4-r8v9\n * GO-2026-4306 CVE-2017-18905 GHSA-g24c-fx4v-xg9w\n * GO-2026-4308 CVE-2025-60538 GHSA-mw8h-g64c-rxv4\n * GO-2026-4309 CVE-2026-22703 GHSA-whqx-f9j3-ch6m\n- Update to version 0.0.20251230T014957 2025-12-30T01:49:57Z.\n * GO-2025-4249 CVE-2025-68120 CVE-2025-68120\n * GO-2025-4254 CVE-2025-62190 GHSA-gmx5-frv9-9m9f\n * GO-2025-4255 CVE-2025-12689 GHSA-j5vq-62gr-8v3r\n * GO-2025-4256 CVE-2025-13324 GHSA-x3r8-2hmh-89f5\n * GO-2025-4257 CVE-2025-68476 GHSA-c4p6-qg4m-9jmr\n * GO-2025-4258 CVE-2025-68938 GHSA-cm54-pfmc-xrwx\n * GO-2025-4261 CVE-2025-68939 GHSA-263q-5cv3-xq9g\n * GO-2025-4262 CVE-2025-68945 GHSA-7xq4-mwcp-q8fx\n * GO-2025-4263 CVE-2025-68942 GHSA-898p-hh3p-hf9r\n * GO-2025-4264 CVE-2025-68944 GHSA-f85h-c7m6-cfpm\n * GO-2025-4265 CVE-2025-68946 GHSA-hq57-c72x-4774\n * GO-2025-4266 CVE-2025-68943 GHSA-jhx5-4vr4-f327\n * GO-2025-4267 CVE-2025-68940 GHSA-rrcw-5rjv-vj26\n * GO-2025-4268 CVE-2025-68941 GHSA-xfq3-qj7j-4565\n- Update to version 0.0.20251222T181535 2025-12-22T18:15:35Z.\n * GO-2025-4241 CVE-2025-11393 GHSA-cc8c-28gj-px38\n * GO-2025-4242 CVE-2025-13888 GHSA-pcqx-8qww-7f4v\n * GO-2025-4243 GHSA-wh6m-h6f4-rjf4\n * GO-2025-4244 CVE-2025-68274 GHSA-c623-f998-8hhv\n * GO-2025-4245 CVE-2025-68156 GHSA-cfpf-hrx2-8rv6\n * GO-2025-4247 CVE-2025-13352 GHSA-jf5h-xfw4-p8gp\n * GO-2025-4250 CVE-2025-14764 GHSA-3g75-q268-r9r6\n- Update to version 0.0.20251216T193914 2025-12-16T19:39:14Z.\n * GO-2025-4239 CVE-2025-68113 GHSA-6gvq-jcmp-8959\n * GO-2025-4240 CVE-2025-13281 GHSA-r6j8-c6r2-37rr\n- Update to version 0.0.20251216T162327 2025-12-16T16:23:27Z.\n * GO-2024-3036 CVE-2024-41265 GHSA-vw7g-3cc7-7rmh\n * GO-2024-3057 CVE-2024-41260 GHSA-9v35-4xcr-w9ph\n * GO-2025-3437 GHSA-274v-mgcv-cm8j\n * GO-2025-3465 CVE-2025-0426 GHSA-jgfp-53c3-624w\n * GO-2025-3829 CVE-2025-54410 GHSA-4vq8-7jfc-9cvp\n * GO-2025-4116 CVE-2025-47913\n * GO-2025-4122 CVE-2025-11777 GHSA-mqcj-8c2g-h97q\n * GO-2025-4178 CVE-2025-13870 GHSA-58w6-w55x-6wq8\n- Update to version 0.0.20251215T203741 2025-12-15T20:37:41Z.\n * GO-2025-4136 CVE-2025-64708 GHSA-ch7q-53v8-73pc\n * GO-2025-4137 CVE-2025-64521 GHSA-xr73-jq5p-ch8r\n * GO-2025-4148 CVE-2017-18874 GHSA-8qg8-c7mw-6fj7\n * GO-2025-4154 CVE-2025-62155 GHSA-9f46-w24h-69w4\n * GO-2025-4161 CVE-2025-65942 GHSA-66jq-2c23-2xh5\n * GO-2025-4162 CVE-2025-60633 GHSA-3j9f-7w24-pcqg\n * GO-2025-4167 CVE-2025-64715 GHSA-38pp-6gcp-rqvm\n * GO-2025-4168 CVE-2025-12419 GHSA-3x39-62h4-f8j6\n * GO-2025-4169 CVE-2025-12559 GHSA-4g87-9x45-cx2h\n * GO-2025-4170 CVE-2025-12421 GHSA-mp6x-97xj-9x62\n * GO-2025-4173 CVE-2025-10543 GHSA-32fw-gq77-f2f2\n * GO-2025-4191 CVE-2017-18878 GHSA-h564-6gc2-fcc6\n * GO-2025-4199 CVE-2017-18887 GHSA-35c4-5qfp-wxj6\n * GO-2025-4200 CVE-2017-18885 GHSA-g78f-6xq7-rrhq\n * GO-2025-4201 CVE-2017-18889 GHSA-jp57-4x34-5v94\n * GO-2025-4202 CVE-2017-18890 GHSA-m497-hq5x-6jcv\n * GO-2025-4203 CVE-2017-18888 GHSA-v2vm-hq26-5jv6\n * GO-2025-4204 CVE-2017-18886 GHSA-wvjg-33p9-938h\n * GO-2025-4205 CVE-2025-66491 GHSA-7vww-mvcr-x6vj\n * GO-2025-4206 CVE-2025-66490 GHSA-gm3x-23wp-hc2c\n * GO-2025-4207 CVE-2025-66508 GHSA-7cqv-qcq2-r765\n * GO-2025-4208 CVE-2025-66565 GHSA-m98w-cqp3-qcqr\n * GO-2025-4209 CVE-2025-66507 GHSA-qmg5-v42x-qqhq\n * GO-2025-4210 CVE-2025-67494 GHSA-7wfc-4796-gmg5\n * GO-2025-4211 GHSA-m6wq-66p2-c8pc\n * GO-2025-4212 GHSA-pfrf-9r5f-73f5\n * GO-2025-4213 CVE-2025-67495 GHSA-v959-qxv6-6f8p\n * GO-2025-4214 GHSA-4rmq-mc2c-r495\n * GO-2025-4215 CVE-2025-65796 GHSA-8jcj-g9f4-qx42\n * GO-2025-4216 CVE-2025-65798 GHSA-8p44-g572-557h\n * GO-2025-4217 CVE-2025-65795 GHSA-mg56-wc4q-rw4w\n * GO-2025-4218 CVE-2025-65799 GHSA-qgjp-5g5x-vhq2\n * GO-2025-4219 GHSA-4r66-7rcv-x46x\n * GO-2025-4220 CVE-2025-65797 GHSA-99m2-qwx6-2w6f\n * GO-2025-4221 CVE-2025-67488 GHSA-gqfv-g4v7-m366\n * GO-2025-4222 CVE-2025-67499 GHSA-jv3w-x3r3-g6rm\n * GO-2025-4223 CVE-2025-66626 GHSA-xrqc-7xgx-c9vh\n * GO-2025-4224 GHSA-mjcp-gpgx-ggcg\n * GO-2025-4225 CVE-2025-8110 GHSA-mq8m-42gh-wq7r\n * GO-2025-4226 CVE-2025-67713 GHSA-wqv2-4wpg-8hc9\n * GO-2025-4227 CVE-2025-67717 GHSA-f4cf-9rvr-2rcx\n * GO-2025-4228 CVE-2025-65754 GHSA-8jqm-8qm3-qgqm\n * GO-2025-4229 CVE-2025-34410 GHSA-rpr2-4hqj-hc4q\n * GO-2025-4230 CVE-2025-34430 GHSA-5xpq-2vmc-5cqp\n * GO-2025-4231 CVE-2025-34429 GHSA-wrvc-x3wf-j5f5\n * GO-2025-4232 CVE-2025-67508 GHSA-fw33-qpx7-rhx2\n * GO-2025-4233 CVE-2025-64702 GHSA-g754-hx8w-x2g6\n * GO-2025-4235 CVE-2025-66001 GHSA-4jj9-cgqc-x9h5\n * GO-2025-4236 GHSA-4jmp-x7mh-rgmr\n * GO-2025-4237 CVE-2025-67818 GHSA-7v39-2hx7-7c43\n * GO-2025-4238 CVE-2025-67819 GHSA-hmmh-292h-3364\n- Update to version 0.0.20251209T172047 2025-12-09T17:20:47Z.\n * GO-2025-4006 CVE-2025-61725 CVE-2025-61725\n * GO-2025-4176 CVE-2025-65105 GHSA-j3rw-fx6g-q46j\n * GO-2025-4177 CVE-2025-64750 GHSA-wwrx-w7c9-rf87\n * GO-2025-4179 CVE-2025-64443 GHSA-46gc-mwh4-cc5r\n * GO-2025-4180 CVE-2025-44005 GHSA-h8cp-697h-8c8p\n * GO-2025-4181 CVE-2025-66406 GHSA-j7c9-79x7-8hpr\n * GO-2025-4182 CVE-2025-66411 GHSA-jf75-p25m-pw74\n * GO-2025-4183 CVE-2017-18870 GHSA-9j9j-mm2r-9rfm\n * GO-2025-4184 CVE-2017-18871 GHSA-jc6w-8r7f-vmp5\n * GO-2025-4185 CVE-2017-18902 GHSA-jwfv-5hwq-f97r\n * GO-2025-4186 CVE-2017-18875 GHSA-9rr5-q43r-ccv4\n * GO-2025-4187 CVE-2017-18876 GHSA-hjqh-j6rj-gh8q\n * GO-2025-4189 CVE-2017-18879 GHSA-498j-wxww-j897\n * GO-2025-4190 CVE-2017-18877 GHSA-9x8x-w6g5-hx4w\n * GO-2025-4192 CVE-2025-66564 GHSA-4qg8-fj49-pxjh\n * GO-2025-4193 CVE-2025-66506 GHSA-f83f-xpx7-ffpw\n * GO-2025-4197 CVE-2017-18884 GHSA-876j-jfqf-m7j7\n * GO-2025-4198 CVE-2017-18883 GHSA-w8cc-3h7q-jhc3\n- Update to version 0.0.20251203T174324 2025-12-03T17:43:24Z.\n * GO-2025-4155 CVE-2025-61729 CVE-2025-61729\n * GO-2025-4163 CVE-2025-60638 GHSA-f2hj-vpp9-6vm2\n * GO-2025-4164 CVE-2025-60632 GHSA-vgq7-9r5r-j9v3\n * GO-2025-4171 CVE-2025-66410 GHSA-jrhg-82w2-vvj7\n * GO-2025-4172 CVE-2025-12756 GHSA-p6gj-jc38-x2m7\n * GO-2025-4174 CVE-2025-13353 GHSA-69jw-4jj8-fcxm\n * GO-2025-4175 CVE-2025-61727\n- Update to version 0.0.20251125T181218 2025-11-25T18:12:18Z.\n * GO-2025-4133 CVE-2025-55074 GHSA-9hh7-6558-qfp2\n * GO-2025-4138 CVE-2025-65025 GHSA-h3mw-4f23-gwpw\n * GO-2025-4139 CVE-2025-65026 GHSA-hcpf-qv9m-vfgp\n * GO-2025-4146 CVE-2018-21258 GHSA-5mh6-p63g-3mv5\n * GO-2025-4147 GHSA-6xvf-4vh9-mw47\n * GO-2025-4149 CVE-2025-13425 GHSA-f786-75f3-74xj\n * GO-2025-4150 CVE-2025-64751 GHSA-2c64-vmv2-hgfc\n * GO-2025-4151 CVE-2025-65111 GHSA-9m7r-g8hg-x3vr\n * GO-2025-4152 CVE-2025-13357 GHSA-gmm6-j2g5-r52m\n * GO-2025-4153 CVE-2025-41115 GHSA-w62r-7c53-fmc5\n * GO-2025-4156 CVE-2025-64761 GHSA-7ff4-jw48-3436\n * GO-2025-4157 GHSA-2fcv-qww3-9v6h\n * GO-2025-4158 GHSA-rj4j-2jph-gg43\n * GO-2025-4159 GHSA-xq4h-wqm2-668w\n * GO-2025-4160 CVE-2025-65965 GHSA-6gxw-85q2-q646\n- Update to version 0.0.20251120T220319 2025-11-20T22:03:19Z.\n * GO-2023-2331 CVE-2023-47108 GHSA-8pgv-569h-w5rw\n * GO-2024-2587 CVE-2022-45786 GHSA-6p5q-h963-pwwf\n * GO-2025-3770 GHSA-vrw8-fxc6-2r93\n * GO-2025-4007 CVE-2025-58187 CVE-2025-58187\n * GO-2025-4134 CVE-2025-58181 GHSA-j5w8-q4qc-rx2x\n * GO-2025-4135 CVE-2025-47914 GHSA-f6x5-jh6r-wrfv\n- Update to version 0.0.20251118T154415 2025-11-18T15:44:15Z.\n * GO-2025-4025 GHSA-hrhf-2vcr-ghch\n * GO-2025-4090 CVE-2025-64179 GHSA-h238-5mwf-8xw8\n * GO-2025-4091 CVE-2025-64178 GHSA-xc93-q32j-cpcg\n * GO-2025-4093 CVE-2025-64171 GHSA-gf93-xccm-5g6j\n * GO-2025-4094 CVE-2025-64323 GHSA-4766-x535-jw3r\n * GO-2025-4095 GHSA-5pmx-7r6r-wfqq\n * GO-2025-4096 CVE-2025-31133 GHSA-9493-h29p-rfm2\n * GO-2025-4097 CVE-2025-52565 GHSA-qw9x-cqr3-wc7r\n * GO-2025-4098 CVE-2025-52881 GHSA-cgrx-mc8f-2prm\n * GO-2025-4099 CVE-2025-64431 GHSA-cpf4-pmr4-w6cx\n * GO-2025-4100 CVE-2024-25621 GHSA-pwhc-rpq9-4c8w\n * GO-2025-4101 GHSA-w2jf-268q-mrvh\n * GO-2025-4102 CVE-2025-64437 GHSA-2r4r-5x78-mvqf\n * GO-2025-4103 CVE-2025-64432 GHSA-38jw-g2qx-4286\n * GO-2025-4104 CVE-2025-64436 GHSA-7xgm-5prm-v5gc\n * GO-2025-4105 CVE-2025-64435 GHSA-9m94-w2vq-hcf9\n * GO-2025-4106 CVE-2025-64494 GHSA-fv2r-r8mp-pg48\n * GO-2025-4107 CVE-2025-64434 GHSA-ggp9-c99x-54gp\n * GO-2025-4108 CVE-2025-64329 GHSA-m6hq-p25p-ffr2\n * GO-2025-4109 CVE-2025-64433 GHSA-qw6q-3pgr-5cwq\n * GO-2025-4110 CVE-2025-64324 GHSA-46xp-26xh-hpqh\n * GO-2025-4111 CVE-2025-64522 GHSA-vwq2-jx9q-9h9f\n * GO-2025-4112 CVE-2025-64186 GHSA-88h9-77c7-p6w4\n * GO-2025-4113 CVE-2025-64484 GHSA-vjrc-mh2v-45x6\n * GO-2025-4114 CVE-2025-64513 GHSA-mhjq-8c7m-3f7p\n * GO-2025-4115 CVE-2025-64507 GHSA-56mx-8g9f-5crf\n * GO-2025-4117 CVE-2025-64523 GHSA-6cqf-cfhv-659g\n * GO-2025-4118 GHSA-6jqf-mv7m-3q7p\n * GO-2025-4119 GHSA-7wq2-32h4-9hc9\n * GO-2025-4120 CVE-2025-64529 GHSA-pm3x-jrhh-qcr7\n * GO-2025-4121 GHSA-3g2j-vm47-x4mj\n * GO-2025-4123 CVE-2025-63811 GHSA-9mj6-hxhv-w67j\n * GO-2025-4124 CVE-2025-64717 GHSA-j4g7-v4m4-77px\n * GO-2025-4125 CVE-2025-2843 GHSA-mj6p-p843-x5wc\n * GO-2025-4126 CVE-2025-11776 GHSA-j6gg-r5jc-47cm\n * GO-2025-4127 CVE-2024-21635 GHSA-mr34-8733-grr2\n * GO-2025-4128 CVE-2025-55070 GHSA-xpg8-8xpv-948p\n * GO-2025-4129 CVE-2025-55073 GHSA-ff85-qw3h-g9vp\n * GO-2025-4130 CVE-2025-11794 GHSA-mqp8-pgg5-7x7m\n * GO-2025-4131 CVE-2025-41436 GHSA-x3hx-ch7p-8xgg\n- Update to version 0.0.20251113T211203 2025-11-13T21:12:03Z.\n- Update to version 0.0.20251105T184115 2025-11-05T18:41:15Z.\n * GO-2025-3987 CVE-2025-10954 GHSA-fmjh-f678-cv3x\n * GO-2025-3988 CVE-2025-59937 GHSA-wpwj-69cm-q9c5\n * GO-2025-3999 CVE-2025-54289 GHSA-3g72-chj4-2228\n * GO-2025-4000 CVE-2025-54293 GHSA-472f-vmf2-pr3h\n * GO-2025-4001 CVE-2025-54288 GHSA-7232-97c6-j525\n * GO-2025-4002 CVE-2025-54290 GHSA-p3x5-mvmp-5f35\n * GO-2025-4003 CVE-2025-54286 GHSA-p8hw-rfjg-689h\n * GO-2025-4004 CVE-2025-54287 GHSA-w2hg-2v4p-vmh6\n * GO-2025-4005 CVE-2025-54291 GHSA-xch9-h8qw-85c7\n * GO-2025-4017 CVE-2025-59530 GHSA-47m2-4cr7-mhcw\n * GO-2025-4020 CVE-2025-11579 GHSA-rwvp-r38j-9rgg\n * GO-2025-4021 CVE-2025-59836 GHSA-4p3p-cr38-v5xp\n * GO-2025-4022 CVE-2025-61688 GHSA-77r9-w39m-9xh5\n * GO-2025-4023 CVE-2025-62156 GHSA-p84v-gxvw-73pf\n * GO-2025-4024 CVE-2025-62157 GHSA-c2hv-4pfj-mm2r\n * GO-2025-4026 CVE-2025-61524 GHSA-5m9m-j5p7-m7f9\n * GO-2025-4027 GHSA-fr8m-434r-g3xp\n * GO-2025-4028 CVE-2025-62375 GHSA-72c7-4g63-hpw5\n * GO-2025-4029 CVE-2025-41410 GHSA-3q4q-wqm6-hvf3\n * GO-2025-4030 CVE-2025-10545 GHSA-424h-xj87-m937\n * GO-2025-4031 CVE-2025-41443 GHSA-7cr3-38jm-6p45\n * GO-2025-4032 CVE-2025-58073 GHSA-6q7m-p8cc-998r\n * GO-2025-4033 CVE-2025-61581 GHSA-9m49-p2j3-c6xm\n * GO-2025-4034 CVE-2025-62506 GHSA-jjjj-jwhf-8rgr\n * GO-2025-4035 CVE-2025-58075 GHSA-r6qj-894f-5hr2\n * GO-2025-4036 CVE-2025-54499 GHSA-xr3w-rmvj-f6m7\n * GO-2025-4038 CVE-2025-26625 GHSA-6pvw-g552-53c5\n * GO-2025-4039 CVE-2025-59043 GHSA-g46h-2rq9-gw5m\n * GO-2025-4040 CVE-2025-10678 GHSA-g3j4-58mp-3x25\n * GO-2025-4041 GHSA-8pfh-j44r-f654\n * GO-2025-4042 CVE-2025-54469 GHSA-c8g6-qrwh-m3vp\n * GO-2025-4043 CVE-2025-54471 GHSA-h773-7gf7-9m2x\n * GO-2025-4044 CVE-2025-54470 GHSA-qqj3-g7mx-5p4w\n * GO-2025-4045 CVE-2016-11063 GHSA-cffj-7w5c-jqjh\n * GO-2025-4046 CVE-2016-11067 GHSA-ffcc-qr2v-3qmv\n * GO-2025-4047 CVE-2016-11066 GHSA-r93j-3mmp-px57\n * GO-2025-4048 CVE-2016-11068 GHSA-7vmw-6c7h-rrrv\n * GO-2025-4049 CVE-2025-62513 GHSA-ghfh-fmx4-26h8\n * GO-2025-4050 CVE-2016-11070 GHSA-h8qw-xqm9-q66j\n * GO-2025-4051 CVE-2016-11069 GHSA-qrf6-h5fc-7m96\n * GO-2025-4052 CVE-2025-62705 GHSA-rc54-2g2c-g36g\n * GO-2025-4053 CVE-2016-11079 GHSA-2j9c-76pp-xc5q\n * GO-2025-4054 CVE-2016-11076 GHSA-379p-37xc-q963\n * GO-2025-4055 CVE-2016-11072 GHSA-43m6-wvc8-2m7j\n * GO-2025-4056 CVE-2016-11073 GHSA-9jrx-fgrm-96qh\n * GO-2025-4057 CVE-2016-11078 GHSA-9w4v-9c99-hv7r\n * GO-2025-4058 CVE-2016-11071 GHSA-h3qg-w9j5-wh3m\n * GO-2025-4059 CVE-2016-11074 GHSA-j26g-95ph-2mwv\n * GO-2025-4060 CVE-2016-11077 GHSA-mj8v-773w-5qhj\n * GO-2025-4061 CVE-2016-11075 GHSA-q3g9-hgrx-hwhx\n * GO-2025-4062 CVE-2016-11081 GHSA-5q37-9874-qxcw\n * GO-2025-4063 CVE-2016-11080 GHSA-g3f3-p9rc-775p\n * GO-2025-4064 CVE-2016-11082 GHSA-m78r-2x6w-qqjp\n * GO-2025-4065 CVE-2016-11083 GHSA-rm24-25xm-9454\n * GO-2025-4066 CVE-2016-11084 GHSA-vw57-55f8-c73q\n * GO-2025-4067 CVE-2025-59048 GHSA-jp7h-4f3c-9rc7\n * GO-2025-4068 CVE-2025-62820 GHSA-x6fh-7qmf-69xh\n * GO-2025-4070 CVE-2025-11621 GHSA-9g4h-h484-3578\n * GO-2025-4071 CVE-2025-12044 GHSA-vp5w-xcfc-73wf\n * GO-2025-4072 CVE-2025-62714 GHSA-5qjg-9mjh-4r92\n * GO-2025-4073 CVE-2023-32199 GHSA-j4vr-pcmw-hx59\n * GO-2025-4074 CVE-2024-58269 GHSA-mw39-9qc2-f7mg\n * GO-2025-4075 CVE-2017-18872 GHSA-hgrp-fgm8-56g8\n * GO-2025-4076 CVE-2025-58356 GHSA-hq76-6gh2-5g4q\n * GO-2025-4077 CVE-2025-62725 GHSA-gv8h-7v7w-r22q\n * GO-2025-4078 GHSA-f5p4-p5q5-jv3h\n * GO-2025-4079 CVE-2025-27093 GHSA-q8j9-34qf-7vq7\n * GO-2025-4081 CVE-2025-11374 GHSA-7g3r-8c6v-hfmr\n * GO-2025-4082 CVE-2025-11375 GHSA-qh7p-pfq3-677h\n * GO-2025-4083 CVE-2025-64103 GHSA-cfjq-28r2-4jv5\n * GO-2025-4084 CVE-2025-64101 GHSA-mwmh-7px9-4c23\n * GO-2025-4085 CVE-2025-64102 GHSA-xrw9-r35x-x878\n * GO-2025-4086 GHSA-cf57-c578-7jvv\n * GO-2025-4087 GHSA-fj2x-735w-74vq\n * GO-2025-4088 CVE-2025-61141 GHSA-f9f4-5859-29mf\n- Update to version 0.0.20251029T215107 2025-10-29T21:51:07Z.\n * GO-2025-4008 CVE-2025-58189 CVE-2025-58189\n * GO-2025-4009 CVE-2025-61723 CVE-2025-61723\n * GO-2025-4010 CVE-2025-47912 CVE-2025-47912\n * GO-2025-4011 CVE-2025-58185 CVE-2025-58185\n * GO-2025-4012 CVE-2025-58186 CVE-2025-58186\n * GO-2025-4013 CVE-2025-58188 CVE-2025-58188\n * GO-2025-4014 CVE-2025-58183 CVE-2025-58183\n * GO-2025-4015 CVE-2025-61724 CVE-2025-61724\n- Update to version 0.0.20251023T162509 2025-10-23T16:25:09Z.\n * GO-2025-3979 CVE-2025-59824 GHSA-hqrf-67pm-wgfq\n * GO-2025-3981 CVE-2025-59823 GHSA-227x-7mh8-3cf6\n * GO-2025-3982 CVE-2025-54468 GHSA-mjcp-rj3c-36fr\n * GO-2025-3983 CVE-2024-58260 GHSA-q82v-h4rq-5c86\n * GO-2025-3984 CVE-2024-58267 GHSA-v3vj-5868-2ch2\n * GO-2025-3985 GHSA-q6hv-wcjr-wp8h\n * GO-2025-3986 CVE-2025-59163 GHSA-6q9c-m9fr-865m\n * GO-2025-3989 CVE-2025-59941 GHSA-7pq9-rf9p-wcrf\n * GO-2025-3990 CVE-2025-59942 GHSA-g99p-47x7-mq88\n * GO-2025-3991 CVE-2025-59956 GHSA-w64r-2g3w-w8w4\n * GO-2025-3992 CVE-2025-23266 GHSA-vmg3-7v43-9g23\n * GO-2025-3994 CVE-2025-55191 GHSA-g88p-r42r-ppp9\n * GO-2025-3995 CVE-2025-59538 GHSA-gpx4-37g2-c8pv\n * GO-2025-3997 CVE-2025-61595 GHSA-qwvm-wqq8-8j69\n * GO-2025-3998 CVE-2025-23267 GHSA-67jc-hmvg-q4c7\n * GO-2025-4018 CVE-2025-61926 GHSA-33f4-mjch-7fpr\n * GO-2025-4019 GHSA-xc79-566c-j4qx\n- Update to version 0.0.20250924T192141 2025-09-24T19:21:41Z.\n * GO-2025-3962 CVE-2025-59341 GHSA-49pv-gwxp-532r\n * GO-2025-3963 CVE-2025-59348 GHSA-2qgr-gfvj-qpcr\n * GO-2025-3964 CVE-2025-59349 GHSA-8425-8r2f-mrv6\n * GO-2025-3965 CVE-2025-59345 GHSA-89vc-vf32-ch59\n * GO-2025-3966 CVE-2025-59347 GHSA-98x5-jw98-6c97\n * GO-2025-3967 CVE-2025-59342 GHSA-g2h5-cvvr-7gmw\n * GO-2025-3968 CVE-2025-59346 GHSA-g2rq-jv54-wcpr\n * GO-2025-3969 CVE-2025-59353 GHSA-255v-qv84-29p5\n * GO-2025-3970 CVE-2025-59351 GHSA-4mhv-8rh3-4ghw\n * GO-2025-3971 CVE-2025-59352 GHSA-79hx-3fp8-hj66\n * GO-2025-3972 CVE-2025-59350 GHSA-c2fc-9q9c-5486\n * GO-2025-3973 CVE-2025-59354 GHSA-hx2h-vjw2-8r54\n * GO-2025-3974 CVE-2025-59410 GHSA-mcvp-rpgg-9273\n * GO-2025-3976 CVE-2025-10630 GHSA-g4rr-88fc-26fj\n * GO-2025-3977 CVE-2025-9079 GHSA-qx3f-6vq3-8j8m\n * GO-2025-3978 CVE-2025-9081 GHSA-f72g-52v7-mg3p\n- Update to version 0.0.20250922T204835 2025-09-22T20:48:35Z.\n * GO-2025-3955 CVE-2025-47910 CVE-2025-47910\n- Update to version 0.0.20250918T182144 2025-09-18T18:21:44Z.\n * GO-2025-3915 CVE-2025-5187 GHSA-4x4m-3c2p-qppc\n * GO-2025-3956 CVE-2025-47906 CVE-2025-47906\n- Update to version 0.0.20250917T170349 2025-09-17T17:03:49Z.\n * GO-2025-3922 CVE-2025-58058 GHSA-jc7w-c686-c4v9\n * GO-2025-3926 CVE-2025-58158 GHSA-w469-hj2f-jpr5\n * GO-2025-3929 CVE-2025-58157 GHSA-9fvj-xqr2-xwg8\n * GO-2025-3938 CVE-2025-58437 GHSA-j6xf-jwrj-v5qp\n * GO-2025-3939 CVE-2025-7445 GHSA-rcw7-pqfp-735x\n * GO-2025-3940 CVE-2025-58445 GHSA-xh7v-965r-23f7\n * GO-2025-3941 CVE-2025-58450 GHSA-p46v-f2x8-qp98\n * GO-2025-3942 CVE-2025-58063 GHSA-93mf-426m-g6x9\n * GO-2025-3943 CVE-2025-58430 GHSA-rf24-wg77-gq7w\n * GO-2025-3944 CVE-2025-54123 GHSA-r4h8-hfp2-ggmf\n * GO-2025-3945 CVE-2025-54376 GHSA-jxmr-2h4q-rhxp\n * GO-2025-3949 CVE-2025-59361 GHSA-2gcv-3qpf-c5qr\n * GO-2025-3950 CVE-2025-9076 GHSA-3vcm-c42p-3hhf\n * GO-2025-3951 CVE-2025-59358 GHSA-2gg8-85m5-8r2p\n * GO-2025-3952 CVE-2025-59359 GHSA-369h-6j28-wwcg\n * GO-2025-3953 CVE-2025-8396 GHSA-p768-c3pr-6459\n * GO-2025-3954 CVE-2025-59360 GHSA-xv9f-728h-9jgv\n * GO-2025-3958 CVE-2025-9072 GHSA-69j8-prx2-vx98\n * GO-2025-3959 CVE-2025-9078 GHSA-9p92-x77w-9fw2\n * GO-2025-3960 CVE-2025-9084 GHSA-hm95-jx66-g2gh\n * GO-2025-3961 CVE-2025-4953 GHSA-m68q-4hqr-mc6f\n- Update to version 0.0.20250908T141310 2025-09-08T14:13:10Z.\n * GO-2025-3916 CVE-2025-51667 GHSA-f2m2-4q6r-cwc4\n * GO-2025-3917 CVE-2025-53884 GHSA-8ff6-pc43-jwv3\n * GO-2025-3918 CVE-2025-8077 GHSA-8pxw-9c75-6w56\n * GO-2025-3919 CVE-2025-54467 GHSA-w54x-xfxg-4gxq\n * GO-2025-3920 GHSA-vxg3-w9rv-rhr2\n * GO-2025-3921 GHSA-3rw9-wmc8-8948\n * GO-2025-3923 CVE-2024-58259 GHSA-4h45-jpvh-6p5j\n * GO-2025-3924 CVE-2025-6203 GHSA-8f82-53h8-2p34\n * GO-2025-3925 GHSA-v2ch-c8v8-fgr7\n * GO-2025-3927 CVE-2024-52284 GHSA-6h9x-9j5v-7w9h\n * GO-2025-3930 CVE-2025-58355 GHSA-33pr-m977-5w97\n * GO-2025-3934 CVE-2025-55190 GHSA-786q-9hcg-v9ff\n * GO-2025-3935 CVE-2025-9566 GHSA-wp3j-xq48-xpjw\n * GO-2025-3936 CVE-2025-56760 GHSA-78j5-8vq7-jxv5\n * GO-2025-3937 CVE-2025-56761 GHSA-cgrg-86m5-xm4w\n- Update to version 0.0.20250829T154226 2025-08-29T15:42:26Z.\n * GO-2025-3884\n * GO-2025-3892\n * GO-2025-3893\n * GO-2025-3894\n * GO-2025-3895\n * GO-2025-3896\n * GO-2025-3897\n * GO-2025-3900\n * GO-2025-3901\n * GO-2025-3902\n * GO-2025-3903\n * GO-2025-3904\n * GO-2025-3905\n * GO-2025-3906\n * GO-2025-3907\n * GO-2025-3909\n * GO-2025-3910\n * GO-2025-3911\n * GO-2025-3912\n * GO-2025-3913\n- Update to version 0.0.20250820T174735 2025-08-20T17:47:35Z.\n * GO-2025-3783 CVE-2025-52894 GHSA-prpj-rchp-9j5h\n- Update to version 0.0.20250818T190335 2025-08-18T19:03:35Z.\n * GO-2023-2385 CVE-2023-26154 GHSA-5844-q3fc-56rh\n * GO-2025-3861 CVE-2025-48731 GHSA-cmpr-8prq-w5p5\n * GO-2025-3862 CVE-2025-49221 GHSA-rfg4-2m63-fw2q\n * GO-2025-3863 CVE-2025-44001 GHSA-vpcr-fqpc-386h\n * GO-2025-3864 CVE-2025-53857 GHSA-42m6-5vm7-fjv2\n * GO-2025-3865 CVE-2025-44004 GHSA-6ff3-jgxh-vffj\n * GO-2025-3866 CVE-2025-54463 GHSA-gjpm-6w34-ppvf\n * GO-2025-3867 CVE-2025-54458 GHSA-j66h-xhpr-7q5g\n * GO-2025-3868 CVE-2025-8285 GHSA-qjrx-j8wm-xf83\n * GO-2025-3869 CVE-2025-53910 GHSA-v6c8-g53h-mc2h\n * GO-2025-3870 CVE-2025-52931 GHSA-vc77-c2hx-h5x2\n * GO-2025-3871 CVE-2025-53514 GHSA-w92j-c6gr-hj8r\n * GO-2025-3872 CVE-2025-54525 GHSA-3cg3-3mmr-w8hj\n * GO-2025-3873 GHSA-jhmr-57cj-q6g9\n * GO-2025-3874 GHSA-q355-h244-969h\n * GO-2025-3875 CVE-2025-54478 GHSA-qpjq-c5hr-7925\n * GO-2025-3885 CVE-2025-55196 GHSA-fcxq-v2r3-cc8h\n * GO-2025-3886 CVE-2025-50946 GHSA-p3qf-84rg-jxfc\n * GO-2025-3887 CVE-2025-55199 GHSA-9h84-qmv7-982p\n * GO-2025-3888 CVE-2025-55198 GHSA-f9f8-9pmf-xv68\n * GO-2025-3891 CVE-2025-9039 GHSA-wm7x-ww72-r77q\n","status":"published","published":"2026-07-30T09:09:47Z","modified":"2026-07-31T18:24:10.643528544Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21824-1","title":"Security update for containerized-data-importer1.65","description":"This update for containerized-data-importer1.65 fixes the following issues:\n\n- CVE-2025-22869: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322).\n- CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238699).\n- CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during\n  DOM construction (bsc#1241838).\n- CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents\n  (bsc#1251495).\n- CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or\n  (bsc#1253506).\n- CVE-2025-47914: non validated message size can cause a panic due to an out of bounds read (bsc#1253967).\n- CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory (bsc#1248946).\n- CVE-2025-58181: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253784).\n- CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially\n  crafted input (bsc#1251689).\n- CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues\n  when parsing HTML files (bsc#1267176).\n- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-\n  header (bsc#1260295).\n- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE\n  (bsc#1265799).\n- CVE-2026-34986: github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of\n  service (bsc#1262952).\n- CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service\n  (bsc#1262269).\n- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation\n  bypass and privilege escalation (bsc#1266639).\n- CVE-2026-39827,CVE-2026-39828,CVE-2026-39829,CVE-2026-39830,CVE-2026-39831,CVE-2026-39832,CVE-2026-39833,\n  CVE-2026-39834,CVE-2026-39835,CVE-2026-42508,CVE-2026-46595,CVE-2026-46597,\n  CVE-2026-46598: multiple issues in golang.org/x/crypto/ssh (bsc#1266179).\n- CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS\n  via oversized inputs (bsc#1276687).\n- CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272064).\n- CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the\n  crypto/ssh library (bsc#1278621).\n- CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization\n  policies via mixed-case or canonical-case header matches (bsc#1279315).\n- CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279234).\n","status":"published","published":"2026-09-09T15:12:11Z","modified":"2026-09-12T18:23:08.1084477Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2025:03289-1","title":"Security update for govulncheck-vulndb","description":"This update for govulncheck-vulndb fixes the following issues:\n\n- Update to version 0.0.20250918T182144 2025-09-18T18:21:44Z (jsc#PED-11136).\n\n  Go CVE Numbering Authority IDs added or updated with aliases:\n  * GO-2025-3915 CVE-2025-5187 GHSA-4x4m-3c2p-qppc\n  * GO-2025-3956 CVE-2025-47906 CVE-2025-47906\n\n- Update to version 0.0.20250917T170349 2025-09-17T17:03:49Z (jsc#PED-11136).\n\n  Go CVE Numbering Authority IDs added or updated with aliases:\n  * GO-2025-3922 CVE-2025-58058 GHSA-jc7w-c686-c4v9\n  * GO-2025-3926 CVE-2025-58158 GHSA-w469-hj2f-jpr5\n  * GO-2025-3929 CVE-2025-58157 GHSA-9fvj-xqr2-xwg8\n  * GO-2025-3938 CVE-2025-58437 GHSA-j6xf-jwrj-v5qp\n  * GO-2025-3939 CVE-2025-7445 GHSA-rcw7-pqfp-735x\n  * GO-2025-3940 CVE-2025-58445 GHSA-xh7v-965r-23f7\n  * GO-2025-3941 CVE-2025-58450 GHSA-p46v-f2x8-qp98\n  * GO-2025-3942 CVE-2025-58063 GHSA-93mf-426m-g6x9\n  * GO-2025-3943 CVE-2025-58430 GHSA-rf24-wg77-gq7w\n  * GO-2025-3944 CVE-2025-54123 GHSA-r4h8-hfp2-ggmf\n  * GO-2025-3945 CVE-2025-54376 GHSA-jxmr-2h4q-rhxp\n  * GO-2025-3949 CVE-2025-59361 GHSA-2gcv-3qpf-c5qr\n  * GO-2025-3950 CVE-2025-9076 GHSA-3vcm-c42p-3hhf\n  * GO-2025-3951 CVE-2025-59358 GHSA-2gg8-85m5-8r2p\n  * GO-2025-3952 CVE-2025-59359 GHSA-369h-6j28-wwcg\n  * GO-2025-3953 CVE-2025-8396 GHSA-p768-c3pr-6459\n  * GO-2025-3954 CVE-2025-59360 GHSA-xv9f-728h-9jgv\n  * GO-2025-3958 CVE-2025-9072 GHSA-69j8-prx2-vx98\n  * GO-2025-3959 CVE-2025-9078 GHSA-9p92-x77w-9fw2\n  * GO-2025-3960 CVE-2025-9084 GHSA-hm95-jx66-g2gh\n  * GO-2025-3961 CVE-2025-4953 GHSA-m68q-4hqr-mc6f\n\n- Update to version 0.0.20250908T141310 2025-09-08T14:13:10Z (jsc#PED-11136).\n\n  Go CVE Numbering Authority IDs added or updated with aliases:\n  * GO-2025-3916 CVE-2025-51667 GHSA-f2m2-4q6r-cwc4\n  * GO-2025-3917 CVE-2025-53884 GHSA-8ff6-pc43-jwv3\n  * GO-2025-3918 CVE-2025-8077 GHSA-8pxw-9c75-6w56\n  * GO-2025-3919 CVE-2025-54467 GHSA-w54x-xfxg-4gxq\n  * GO-2025-3920 GHSA-vxg3-w9rv-rhr2\n  * GO-2025-3921 GHSA-3rw9-wmc8-8948\n  * GO-2025-3923 CVE-2024-58259 GHSA-4h45-jpvh-6p5j\n  * GO-2025-3924 CVE-2025-6203 GHSA-8f82-53h8-2p34\n  * GO-2025-3925 GHSA-v2ch-c8v8-fgr7\n  * GO-2025-3927 CVE-2024-52284 GHSA-6h9x-9j5v-7w9h\n  * GO-2025-3930 CVE-2025-58355 GHSA-33pr-m977-5w97\n  * GO-2025-3934 CVE-2025-55190 GHSA-786q-9hcg-v9ff\n  * GO-2025-3935 CVE-2025-9566 GHSA-wp3j-xq48-xpjw\n  * GO-2025-3936 CVE-2025-56760 GHSA-78j5-8vq7-jxv5\n  * GO-2025-3937 CVE-2025-56761 GHSA-cgrg-86m5-xm4w\n","status":"published","published":"2025-09-22T10:16:10Z","modified":"2026-02-04T02:53:26.163882Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03448-1","title":"Security update for warewulf4","description":"This update for warewulf4 fixes the following issues:\n\nUpdate to version 4.6.4.\n\nSecurity issues fixed:\n\n- CVE-2025-58058: xz: excessive memory consuption when unpacking a large number of corrupted LZMA archives\n  (bsc#1248906).\n\nOther issues fixed:\n\n- Convert disk booleans from `wwbool` to `*bool` which allows bools in disk to be set to false via command\n  line (bsc#1248768).\n- Fix `wwctl` upgrade nodes to handle kernel argument lists (bsc#1227686, bsc#1227465).\n- Mark `slurm` as recommeneded in the `warewulf4-overlay-slurm` package (bsc#1246082).\n- Switch to `dnsmasq` as default DHCP and TFTP provider.\n\n- v4.6.4 release updates:\n  * Update NetworkManager Overlay\n    * Disable IPv4 in NetworkManager if no address or route is specified\n  * Fix(`wwctl`): create overlay edit `tempfile` in `tmpdir`\n  * Add default for systemd name for warewulf in `warewulf.conf`\n  * Atomic overlay file application in `wwclient`\n  * Simpler names for overlay methods\n  * Fix `warewulfd` API behavior when deleting distribution overlay\n\n- v4.6.3 release updates:\n  * IPv6 iPXE support\n  * Fix a race condition in `wwctl` overlay edit\n  * Fixed handling of comma-separated mount options in `fstab` and `ignition` overlays\n  * Move `reexec.Init()` to beginning of `wwctl`\n  * Added `warewuld` configure option\n  * Address copilot review from #1945\n  * Bugfix: cloning a site overlay when parent dir does not exist\n  * Clone to a site overlay when adding files in `wwapi`\n  * Consolidated `createOverlayFile` and `updateOverlayFile` to `addOverlayFile`\n  * Support for creating and updating overlay file in `wwapi`\n  * Only return overlay files that refer to a path within the overlay\n  * Add overlay file deletion support\n  * `DELETE /api/overlays/{id}?force=true` can delete overlays in use\n  * Restore idempotency of `PUT /api/nodes/{id}`\n  * Simplify overlay mtime API and add tests\n  * Add node overlay buildtime\n  * Improved `netplan` support\n  * Rebuild overlays for discovered nodes\n\n- v4.6.2 release updates:\n  * (preview) support for provisioning to local disk\n  \n- incoperated from v4.6.1:\n  * REST API, which is disabled in the default configuration\n","status":"published","published":"2025-10-02T07:14:58Z","modified":"2026-02-04T03:50:14.735924Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:21137-1","title":"Security update for alloy","description":"This update for alloy fixes the following issues:\n\n- CVE-2025-58058: Removed dependency on vulnerable github.com/ulikunitz/xz (bsc#1248960).\n- CVE-2025-11065: Fixed sensitive information leak in logs (bsc#1250621).\n","status":"published","published":"2025-11-20T17:15:36Z","modified":"2026-03-23T04:51:13.383293Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4121-1","title":"Security update for alloy","description":"This update for alloy fixes the following issues:\n\n- update to 1.11.3:\n- CVE-2025-58058: Fixed memory leaks in xz. (bsc#1248960)\n- CVE-2025-11065: Fixed sensitive Information leak in logs. (bsc#1250621)\n","status":"published","published":"2025-11-17T12:10:11Z","modified":"2026-03-23T04:50:22.64228Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2026:0383-1","title":"Security update for rekor","description":"This update for rekor fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2025-58058: Fixed github.com/ulikunitz/xz leaks memory (bsc#1248910)\n- CVE-2025-29923: Fixed potential out of order responses when `CLIENT SETINFO` \n  times out during connection establishment (bsc#1241153)\n\nOther fixes:\n\n- Update to version 1.4.3\n- Update to version 1.4.2\n- Update to version 1.4.1 (jsc#SLE-23476)\n","status":"published","published":"2026-02-04T12:46:28Z","modified":"2026-03-23T04:52:12.178518Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:4209-1","title":"Security update for containerized-data-importer","description":"This update for containerized-data-importer fixes the following issues:\n\n- CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory (bsc#1248946).\n- CVE-2026-25680: golang.org/x/net/html: denial of service when parsing arbitrary HTML (bsc#1267176).\n- CVE-2026-25681: golang.org/x/net/html: incorrect handling of character references in DOCTYPE nodes (bsc#1267176).\n- CVE-2026-27136: golang.org/x/net/html: duplicate attributes can cause XSS (bsc#1267176).\n- CVE-2026-42502: golang.org/x/net/html: incorrect handling of HTML elements in foreign content (bsc#1267176).\n- CVE-2026-42506: golang.org/x/net/html: incorrect handling of namespaced elements in foreign content (bsc#1267176).\n- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE\n  (bsc#1265799).\n- CVE-2026-34986: github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of\n  service (bsc#1262952).\n- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation\n  bypass and privilege escalation (bsc#1266639).\n- CVE-2026-39827: golang.org/x/crypto/ssh: newChannel leak after Reject() (bsc#1266179).\n- CVE-2026-39828: golang.org/x/crypto/ssh: bypass of certificate restrictions (bsc#1266179).\n- CVE-2026-39829: golang.org/x/crypto/ssh: pathological RSA/DSA parameters may cause DoS (bsc#1266179).\n- CVE-2026-39830: golang.org/x/crypto/ssh: client can cause server deadlock on unexpected responses (bsc#1266179).\n- CVE-2026-39831: golang.org/x/crypto/ssh: bypass of FIDO/U2F security keys physical interaction (bsc#1266179).\n- CVE-2026-39832: golang.org/x/crypto/ssh: remote agent constraint extensions dropped (bsc#1266179).\n- CVE-2026-39833: golang.org/x/crypto/ssh: lifetime without confirm constraint (bsc#1266179).\n- CVE-2026-39834: golang.org/x/crypto/ssh: infinite loop on large channel writes (bsc#1266179).\n- CVE-2026-39835: golang.org/x/crypto/ssh: server panic during CheckHostKey/Authenticate (bsc#1266179).\n- CVE-2026-42508: golang.org/x/crypto/ssh: failure to enforce @revoked status (bsc#1266179).\n- CVE-2026-46595: golang.org/x/crypto/ssh: VerifiedPublicKeyCallback permissions skip enforcement (bsc#1266179).\n- CVE-2026-46597: golang.org/x/crypto/ssh: byte arithmetic causes underflow and panic (bsc#1266179).\n- CVE-2026-46598: golang.org/x/crypto/ssh: pathological inputs can lead to client panic (bsc#1266179).\n- CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS\n  via oversized inputs (bsc#1276687).\n- CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272064).\n- CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1278621).\n- CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1278621).\n- CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1278621).\n","status":"published","published":"2026-09-16T11:50:36Z","modified":"2026-09-16T21:45:03.614373316Z","updated_at":"2026-11-02T15:54:05.392906Z"}]}}