k6 vulnerabilities (openSUSE)

2 vulnerabilities.

• k6 openSUSE gRPC-Go has an authorization bypass via missing leading slash in :path CVE-2026-33186 Public exploitFix available 9.1 CriticalMarch 18, 2026
• k6 openSUSE Excessive resource consumption when printing error string for host certificate validation in crypto/x509 CVE-2025-61729 Fix available 7.5 HighDecember 2, 2025