{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2022-1996 Authorization Bypass Through User-Controlled Key in emicklei/go-restful - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2022/msrc_cve-2022-1996.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Authorization Bypass Through User-Controlled Key in emicklei/go-restful",
    "tracking": {
      "current_release_date": "2026-02-18T14:53:30.000Z",
      "generator": {
        "date": "2026-02-21T10:36:33.500Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2022-1996",
      "initial_release_date": "2022-06-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-06-30T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2024-08-29T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Information published."
        },
        {
          "date": "2024-08-30T00:00:00.000Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Information published."
        },
        {
          "date": "2024-08-31T00:00:00.000Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Information published."
        },
        {
          "date": "2024-09-01T00:00:00.000Z",
          "legacy_version": "1.4",
          "number": "5",
          "summary": "Information published."
        },
        {
          "date": "2024-09-02T00:00:00.000Z",
          "legacy_version": "1.5",
          "number": "6",
          "summary": "Information published."
        },
        {
          "date": "2024-09-03T00:00:00.000Z",
          "legacy_version": "1.6",
          "number": "7",
          "summary": "Information published."
        },
        {
          "date": "2024-09-05T00:00:00.000Z",
          "legacy_version": "1.7",
          "number": "8",
          "summary": "Information published."
        },
        {
          "date": "2024-09-06T00:00:00.000Z",
          "legacy_version": "1.8",
          "number": "9",
          "summary": "Information published."
        },
        {
          "date": "2024-09-07T00:00:00.000Z",
          "legacy_version": "1.9",
          "number": "10",
          "summary": "Information published."
        },
        {
          "date": "2024-09-08T00:00:00.000Z",
          "legacy_version": "2",
          "number": "11",
          "summary": "Information published."
        },
        {
          "date": "2024-09-11T00:00:00.000Z",
          "legacy_version": "2.1",
          "number": "12",
          "summary": "Information published."
        },
        {
          "date": "2026-02-18T14:53:30.000Z",
          "legacy_version": "2.2",
          "number": "13",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "13"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 sriov-network-device-plugin 3.5.1-3",
                "product": {
                  "name": "\u003cazl3 sriov-network-device-plugin 3.5.1-3",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 sriov-network-device-plugin 3.5.1-3",
                "product": {
                  "name": "azl3 sriov-network-device-plugin 3.5.1-3",
                  "product_id": "20235"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 sriov-network-device-plugin 3.7.0-1",
                "product": {
                  "name": "\u003cazl3 sriov-network-device-plugin 3.7.0-1",
                  "product_id": "3"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 sriov-network-device-plugin 3.7.0-1",
                "product": {
                  "name": "azl3 sriov-network-device-plugin 3.7.0-1",
                  "product_id": "18528"
                }
              }
            ],
            "category": "product_name",
            "name": "sriov-network-device-plugin"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 keda 2.4.0-15",
                "product": {
                  "name": "\u003cazl3 keda 2.4.0-15",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 keda 2.4.0-15",
                "product": {
                  "name": "azl3 keda 2.4.0-15",
                  "product_id": "19877"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 keda 2.14.0-1",
                "product": {
                  "name": "\u003cazl3 keda 2.14.0-1",
                  "product_id": "4"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 keda 2.14.0-1",
                "product": {
                  "name": "azl3 keda 2.14.0-1",
                  "product_id": "17761"
                }
              }
            ],
            "category": "product_name",
            "name": "keda"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 sriov-network-device-plugin 3.5.1-3 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 sriov-network-device-plugin 3.5.1-3 as a component of Azure Linux 3.0",
          "product_id": "20235-17084"
        },
        "product_reference": "20235",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 keda 2.4.0-15 as a component of Azure Linux 3.0",
          "product_id": "17084-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 keda 2.4.0-15 as a component of Azure Linux 3.0",
          "product_id": "19877-17084"
        },
        "product_reference": "19877",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 keda 2.14.0-1 as a component of Azure Linux 3.0",
          "product_id": "17084-4"
        },
        "product_reference": "4",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 keda 2.14.0-1 as a component of Azure Linux 3.0",
          "product_id": "17761-17084"
        },
        "product_reference": "17761",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 sriov-network-device-plugin 3.7.0-1 as a component of Azure Linux 3.0",
          "product_id": "17084-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 sriov-network-device-plugin 3.7.0-1 as a component of Azure Linux 3.0",
          "product_id": "18528-17084"
        },
        "product_reference": "18528",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-1996",
      "cwe": {
        "id": "CWE-639",
        "name": "Authorization Bypass Through User-Controlled Key"
      },
      "notes": [
        {
          "category": "general",
          "text": "@huntrdev",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "20235-17084",
          "19877-17084",
          "17761-17084",
          "18528-17084"
        ],
        "known_affected": [
          "17084-1",
          "17084-2",
          "17084-4",
          "17084-3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2022-1996 Authorization Bypass Through User-Controlled Key in emicklei/go-restful - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2022/msrc_cve-2022-1996.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-06-30T07:00:00.000Z",
          "details": "3.7.0-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-1",
            "17084-3"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2024-06-30T07:00:00.000Z",
          "details": "2.14.0-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-2",
            "17084-4"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.1,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "17084-1",
            "17084-2",
            "17084-4",
            "17084-3"
          ]
        }
      ],
      "title": "Authorization Bypass Through User-Controlled Key in emicklei/go-restful"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for trivy",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for trivy fixes the following issues:\n\ntrivy was updated to version 0.30.4:\n\n* fix: remove the first arg when running as a plugin (#2595)\n* fix: k8s controlplaner scanning (#2593)\n* fix(vuln): GitLab report template (#2578)\n\nUpdate to version 0.30.3:\n\n* fix(server): use a new db worker for hot updates (#2581)\n* docs: add trivy with download-db-only flag to Air-Gapped Environment (#2583)\n* docs: split commands to download db for different versions of oras (#2582)\n* feat(report): export exitcode for license checks (#2564)\n* fix: cli can use lowercase for severities (#2565)\n* fix: allow subcommands with TRIVY_RUN_AS_PLUGIN (#2577)\n* fix: add missing types in TypeOSes and TypeLanguages in analyzer (#2569)\n* fix: enable some features of the wasm runtime (#2575)\n* fix(k8s): no error logged if trivy can\u0027t get docker image in kubernetes mode (#2521)\n* docs(sbom): improve sbom attestation documentation (#2566)\n\nUpdate to version 0.30.2:\n\n* fix(report): show the summary without results (#2548)\n* fix(cli): replace \u0027-\u0027 to \u0027_\u0027 for env vars (#2561)\n\nUpdate to version 0.30.1:\n\n* chore: remove a test repository (#2551)\n* fix(license): lazy loading of classifiers (#2547)\n* fix: CVE-2022-1996 in Trivy (#2499)\n* docs(sbom): add sbom attestation (#2527)\n* feat(rocky): set Rocky Linux 9 EOL (#2543)\n* docs: add attributes to the video tag to autoplay demo videos (#2538)\n* fix: yaml files with non-string chart name (#2534)\n* fix: skip dirs (#2530)\n* feat(repo): add support for branch, commit, \u0026 tag (#2494)\n* fix: remove auto configure environment variables via viper (#2526)\n\nUpdate to version 0.30.0:\n\n* fix: separating multiple licenses from one line in dpkg copyright files (#2508)\n* fix: change a capital letter for `plugin uninstall` subcommand (#2519)\n* fix: k8s hide empty report when scanning resource (#2517)\n* refactor: fix comments (#2516)\n* fix: scan vendor dir (#2515)\n* feat: Add support for license scanning (#2418)\n* chore: add owners for secret scanning (#2485)\n* fix: remove dependency-tree flag for image subcommand (#2492)\n* fix(k8s): add shorthand for k8s namespace flag (#2495)\n* docs: add information about using multiple servers to troubleshooting (#2498)\n* ci: add pushing canary build images to registries (#2428)\n* feat(dotnet): add support for .Net core .deps.json files (#2487)\n* feat(amazon): add support for 2022 version (#2429)\n* Type correction bitnami chart (#2415)\n* docs: add config file and update CLI references (#2489)\n* feat: add support for flag groups (#2488)\n* refactor: move from urfave/cli to spf13/cobra (#2458)\n* fix: Fix secrets output not containing file/lines (#2467)\n* fix: clear output with modules (#2478)\n* docs(cbl): distroless 1.0 supported (#2473)\n* fix: Fix example dockerfile rego policy (#2460)\n* fix(config): add helm to list of config analyzers (#2457)\n* feat: k8s resouces scan (#2395)\n* feat(sbom): add cyclonedx sbom scan (#2203)\n* docs: remove links to removed content (#2431)\n* ci: added rpm build for rhel 9 (#2437)\n* fix(secret): remove space from asymmetric private key (#2434)\n* test(integration): fix golden files for debian 9 (#2435)\n* fix(cli): fix version string in docs link when secret scanning is enabled (#2422)\n* refactor: move CycloneDX marshaling (#2420)\n* docs(nodejs): add docs about pnpm support (#2423)\n* docs: improve k8s usage documentation (#2425)\n* feat: Make secrets scanning output consistant (#2410)\n* ci: create canary build after main branch changes  (#1638)\n* fix(misconf): skip broken scans (#2396)\n* feat(nodejs): add pnpm support (#2414)\n* fix: Fix false positive for use of COS images (#2413)\n* eliminate nerdctl dependency (#2412)\n* Add EOL date for SUSE SLES 15.3, 15.4 and OpenSUSE 15.4 (#2403)\n* fix(go): no cast to lowercase go package names (#2401)\n* BREAKING(sbom): change \u0027trivy sbom\u0027 to scan SBOM (#2408)\n* fix(server): hot update the db from custom repository (#2406)\n* feat: added license parser for dpkg (#2381)\n* fix(misconf): Update defsec (v0.68.5) to fix docker rego duplicate key (#2400)\n* feat: extract stripe publishable and secret keys (#2392)\n* feat: rbac support k8s sub-command (#2339)\n* feat(ruby): drop platform strings from dependency versions bundled with bundler v2 (#2390)\n* docs: Updating README with new CLI command (#2359)\n* fix(misconf): Update defsec to v0.68.4 to resolve CF detection bug (#2383)\n* chore: add integration label and merge security label (#2316)\n\nUpdate to version 0.29.2:\n\n* chore: skip Visual Studio Code project folder (#2379)\n* fix(helm): handle charts with templated names (#2374)\n* docs: redirect operator docs to trivy-operator repo (#2372)\n* fix(secret): use secret result when determining Failed status (#2370)\n* try removing libdb-dev\n* run integration tests in fanal\n* use same testing images in fanal\n* feat(helm): add support for trivy dbRepository (#2345)\n* fix: Fix failing test due to deref lint issue\n* test: Fix broken test\n* fix: Fix makefile when no previous named ref is visible in a shallow clone\n* chore: Fix linting issues in fanal\n* refactor: Fix fanal import paths and remove dotfiles\n\nUpdate to version 0.29.1:\n\n* fix(report): add required fields to the SARIF template (#2341)\n* chore: fix spelling errors (#2352)\n* Omit Remediation if PrimaryURL is empty (#2006)\n* docs(repo): Link to installation documentation in readme shows 404 (#2348)\n* feat(alma): support for scanning of modular packages for AlmaLinux (#2347)\n\nUpdate to version 0.29.0:\n\n* fix(lang): fix dependency graph in client server mode (#2336)\n* feat: allow expiration date for .trivyignore entries (#2332)\n* feat(lang): add dependency origin graph (#1970)\n* docs: update nix installation info (#2331)\n* feat: add rbac scanning support (#2328)\n* refactor: move WordPress module to another repository (#2329)\n* ci: add support for ppc64le (#2281)\n* feat: add support for WASM modules (#2195)\n* feat(secret): show recommendation for slow scanning (#2051)\n* fix(flag): remove --clear-cache flag client mode (#2301)\n* fix(java): added check for looping for variable evaluation in pom file (#2322)\n* BREAKING(k8s): change CLI API (#2186)\n* feat(alpine): add Alpine Linux 3.16 (#2319)\n* ci: add `go mod tidy` check (#2314)\n* chore: run `go mod tidy` (#2313)\n* fix: do not exit if one resource is not found (#2311)\n* feat(cli): use stderr for all log messages (resolve #381) (#2289)\n* test: replace deprecated subcommand client in integration tests (#2308)\n* feat: add support for containerd (#2305)\n* fix(kubernetes): Support floats in manifest yaml (#2297)\n* docs(kubernetes): dead links (#2307)\n* chore: add license label (#2304)\n* feat(mariner): added support for CBL-Mariner Distroless v2.0 (#2293)\n* feat(helm): add pod annotations (#2272)\n* refactor: do not import defsec in fanal types package (#2292)\n* feat(report): Add misconfiguration support to ASFF report template (#2285)\n* test: use images in GHCR (#2275)\n* feat(helm): support pod annotations (#2265)\n* feat(misconf): Helm chart scanning (#2269)\n* docs: Update custom rego policy docs to reflect latest defsec/fanal changes (#2267)\n* fix: mask redis credentials when logging (#2264)\n* refactor: extract commands Runner interface (#2147)\n* docs: update operator release (#2263)\n* feat(redhat): added architecture check (#2172)\n* docs: updating links in the docs to work again (#2256)\n* docs: fix readme (#2251)\n* fix: fixed incorrect CycloneDX output format (#2255)\n* refactor(deps): move dependencies to package (#2189)\n* fix(report): change github format version to required (#2229)\n* docs: update readme (#2110)\n* docs: added information about choosing advisory database (#2212)\n* chore: update trivy-kubernetes (#2224)\n* docs: clarifying parts of the k8s docs and updating links (#2222)\n* fix(k8s): timeout error logging (#2179)\n* chore(deps): updated fanal after fix AsymmetricPrivateKeys (#2214)\n* feat(k8s): add --context flag (#2171)\n* fix(k8s): properly instantiate TableWriter (#2175)\n* test: fixed integration tests after updating testcontainers to v0.13.0 (#2208)\n* chore: update labels (#2197)\n* fix(report): fixed panic if all misconf reports were removed in filter (#2188)\n* feat(k8s): scan secrets (#2178)\n* feat(report): GitHub Dependency Snapshots support (#1522)\n* feat(db): added insecure skip tls verify to download trivy db (#2140)\n* fix(redhat): always use vulns with fixed version if there is one (#2165)\n* chore(redhat): Add support for Red Hat UBI 9. (#2183)\n* fix(k8s): update trivy-kubernetes (#2163)\n*  fix misconfig start line for code quality tpl (#2181)\n* fix: update docker/distribution from 2.8.0 to 2.8.1 (#2176)\n* docs(vuln): Include GitLab 15.0 integration (#2153)\n* docs: fix the operator version (#2167)\n* fix(k8s): summary report when when only vulns exit (#2146)\n* chore(deps): Update fanal to get defsec v0.58.2 (fixes false positives in ksv038) (#2156)\n* perf(misconf): Improve performance when scanning very large files (#2152)\n* docs(misconf): Update examples and docs to refer to builtin/defsec instead of appshield (#2150)\n* chore(deps): Update fanal (for less verbose code in misconf results) (#2151)\n* docs: fixed installation instruction for rhel/centos (#2143)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2022-10081",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_10081-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2022:10081-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HVVWQ7QWDT7GBZUAYXIWYZURAWKCEVQ/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2022:10081-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HVVWQ7QWDT7GBZUAYXIWYZURAWKCEVQ/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1996 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1996/"
      }
    ],
    "title": "Security update for trivy",
    "tracking": {
      "current_release_date": "2022-08-06T16:01:16Z",
      "generator": {
        "date": "2022-08-06T16:01:16Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2022:10081-1",
      "initial_release_date": "2022-08-06T16:01:16Z",
      "revision_history": [
        {
          "date": "2022-08-06T16:01:16Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.4-bp154.2.6.1.aarch64",
                "product": {
                  "name": "trivy-0.30.4-bp154.2.6.1.aarch64",
                  "product_id": "trivy-0.30.4-bp154.2.6.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.4-bp154.2.6.1.i586",
                "product": {
                  "name": "trivy-0.30.4-bp154.2.6.1.i586",
                  "product_id": "trivy-0.30.4-bp154.2.6.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.4-bp154.2.6.1.s390x",
                "product": {
                  "name": "trivy-0.30.4-bp154.2.6.1.s390x",
                  "product_id": "trivy-0.30.4-bp154.2.6.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.4-bp154.2.6.1.x86_64",
                "product": {
                  "name": "trivy-0.30.4-bp154.2.6.1.x86_64",
                  "product_id": "trivy-0.30.4-bp154.2.6.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Package Hub 15 SP4",
                "product": {
                  "name": "SUSE Package Hub 15 SP4",
                  "product_id": "SUSE Package Hub 15 SP4"
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.4",
                "product": {
                  "name": "openSUSE Leap 15.4",
                  "product_id": "openSUSE Leap 15.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp154.2.6.1.aarch64 as component of SUSE Package Hub 15 SP4",
          "product_id": "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.aarch64"
        },
        "product_reference": "trivy-0.30.4-bp154.2.6.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp154.2.6.1.i586 as component of SUSE Package Hub 15 SP4",
          "product_id": "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.i586"
        },
        "product_reference": "trivy-0.30.4-bp154.2.6.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp154.2.6.1.s390x as component of SUSE Package Hub 15 SP4",
          "product_id": "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.s390x"
        },
        "product_reference": "trivy-0.30.4-bp154.2.6.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp154.2.6.1.x86_64 as component of SUSE Package Hub 15 SP4",
          "product_id": "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.x86_64"
        },
        "product_reference": "trivy-0.30.4-bp154.2.6.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp154.2.6.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.aarch64"
        },
        "product_reference": "trivy-0.30.4-bp154.2.6.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp154.2.6.1.i586 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.i586"
        },
        "product_reference": "trivy-0.30.4-bp154.2.6.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp154.2.6.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.s390x"
        },
        "product_reference": "trivy-0.30.4-bp154.2.6.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp154.2.6.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.x86_64"
        },
        "product_reference": "trivy-0.30.4-bp154.2.6.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-1996",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1996"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.aarch64",
          "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.i586",
          "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.s390x",
          "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.x86_64",
          "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.aarch64",
          "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.i586",
          "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.s390x",
          "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1996",
          "url": "https://www.suse.com/security/cve/CVE-2022-1996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200528 for CVE-2022-1996",
          "url": "https://bugzilla.suse.com/1200528"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.aarch64",
            "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.i586",
            "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.s390x",
            "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.x86_64",
            "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.aarch64",
            "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.i586",
            "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.s390x",
            "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.aarch64",
            "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.i586",
            "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.s390x",
            "SUSE Package Hub 15 SP4:trivy-0.30.4-bp154.2.6.1.x86_64",
            "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.aarch64",
            "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.i586",
            "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.s390x",
            "openSUSE Leap 15.4:trivy-0.30.4-bp154.2.6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-08-06T16:01:16Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-1996"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for trivy",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for trivy fixes the following issues:\n\nUpdate to version 0.30.4:\n\n* fix: remove the first arg when running as a plugin (#2595)\n* fix: k8s controlplaner scanning (#2593)\n* fix(vuln): GitLab report template (#2578)\n\nUpdate to version 0.30.3:\n\n* fix(server): use a new db worker for hot updates (#2581)\n* docs: add trivy with download-db-only flag to Air-Gapped Environment (#2583)\n* docs: split commands to download db for different versions of oras (#2582)\n* feat(report): export exitcode for license checks (#2564)\n* fix: cli can use lowercase for severities (#2565)\n* fix: allow subcommands with TRIVY_RUN_AS_PLUGIN (#2577)\n* fix: add missing types in TypeOSes and TypeLanguages in analyzer (#2569)\n* fix: enable some features of the wasm runtime (#2575)\n* fix(k8s): no error logged if trivy can\u0027t get docker image in kubernetes mode (#2521)\n* docs(sbom): improve sbom attestation documentation (#2566)\n\nUpdate to version 0.30.2:\n\n* fix(report): show the summary without results (#2548)\n* fix(cli): replace \u0027-\u0027 to \u0027_\u0027 for env vars (#2561)\n\nUpdate to version 0.30.1:\n\n* chore: remove a test repository (#2551)\n* fix(license): lazy loading of classifiers (#2547)\n* fix: CVE-2022-1996 in Trivy (#2499)\n* docs(sbom): add sbom attestation (#2527)\n* feat(rocky): set Rocky Linux 9 EOL (#2543)\n* docs: add attributes to the video tag to autoplay demo videos (#2538)\n* fix: yaml files with non-string chart name (#2534)\n* fix: skip dirs (#2530)\n* feat(repo): add support for branch, commit, \u0026 tag (#2494)\n* fix: remove auto configure environment variables via viper (#2526)\n\nUpdate to version 0.30.0:\n\n* fix: separating multiple licenses from one line in dpkg copyright files (#2508)\n* fix: change a capital letter for `plugin uninstall` subcommand (#2519)\n* fix: k8s hide empty report when scanning resource (#2517)\n* refactor: fix comments (#2516)\n* fix: scan vendor dir (#2515)\n* feat: Add support for license scanning (#2418)\n* chore: add owners for secret scanning (#2485)\n* fix: remove dependency-tree flag for image subcommand (#2492)\n* fix(k8s): add shorthand for k8s namespace flag (#2495)\n* docs: add information about using multiple servers to troubleshooting (#2498)\n* ci: add pushing canary build images to registries (#2428)\n* feat(dotnet): add support for .Net core .deps.json files (#2487)\n* feat(amazon): add support for 2022 version (#2429)\n* Type correction bitnami chart (#2415)\n* docs: add config file and update CLI references (#2489)\n* feat: add support for flag groups (#2488)\n* refactor: move from urfave/cli to spf13/cobra (#2458)\n* fix: Fix secrets output not containing file/lines (#2467)\n* fix: clear output with modules (#2478)\n* docs(cbl): distroless 1.0 supported (#2473)\n* fix: Fix example dockerfile rego policy (#2460)\n* fix(config): add helm to list of config analyzers (#2457)\n* feat: k8s resouces scan (#2395)\n* feat(sbom): add cyclonedx sbom scan (#2203)\n* docs: remove links to removed content (#2431)\n* ci: added rpm build for rhel 9 (#2437)\n* fix(secret): remove space from asymmetric private key (#2434)\n* test(integration): fix golden files for debian 9 (#2435)\n* fix(cli): fix version string in docs link when secret scanning is enabled (#2422)\n* refactor: move CycloneDX marshaling (#2420)\n* docs(nodejs): add docs about pnpm support (#2423)\n* docs: improve k8s usage documentation (#2425)\n* feat: Make secrets scanning output consistant (#2410)\n* ci: create canary build after main branch changes  (#1638)\n* fix(misconf): skip broken scans (#2396)\n* feat(nodejs): add pnpm support (#2414)\n* fix: Fix false positive for use of COS images (#2413)\n* eliminate nerdctl dependency (#2412)\n* Add EOL date for SUSE SLES 15.3, 15.4 and OpenSUSE 15.4 (#2403)\n* fix(go): no cast to lowercase go package names (#2401)\n* BREAKING(sbom): change \u0027trivy sbom\u0027 to scan SBOM (#2408)\n* fix(server): hot update the db from custom repository (#2406)\n* feat: added license parser for dpkg (#2381)\n* fix(misconf): Update defsec (v0.68.5) to fix docker rego duplicate key (#2400)\n* feat: extract stripe publishable and secret keys (#2392)\n* feat: rbac support k8s sub-command (#2339)\n* feat(ruby): drop platform strings from dependency versions bundled with bundler v2 (#2390)\n* docs: Updating README with new CLI command (#2359)\n* fix(misconf): Update defsec to v0.68.4 to resolve CF detection bug (#2383)\n* chore: add integration label and merge security label (#2316)\n\nUpdate to version 0.29.2:\n\n* chore: skip Visual Studio Code project folder (#2379)\n* fix(helm): handle charts with templated names (#2374)\n* docs: redirect operator docs to trivy-operator repo (#2372)\n* fix(secret): use secret result when determining Failed status (#2370)\n* try removing libdb-dev\n* run integration tests in fanal\n* use same testing images in fanal\n* feat(helm): add support for trivy dbRepository (#2345)\n* fix: Fix failing test due to deref lint issue\n* test: Fix broken test\n* fix: Fix makefile when no previous named ref is visible in a shallow clone\n* chore: Fix linting issues in fanal\n* refactor: Fix fanal import paths and remove dotfiles\n\nUpdate to version 0.29.1:\n\n* fix(report): add required fields to the SARIF template (#2341)\n* chore: fix spelling errors (#2352)\n* Omit Remediation if PrimaryURL is empty (#2006)\n* docs(repo): Link to installation documentation in readme shows 404 (#2348)\n* feat(alma): support for scanning of modular packages for AlmaLinux (#2347)\n\nUpdate to version 0.29.0:\n\n* fix(lang): fix dependency graph in client server mode (#2336)\n* feat: allow expiration date for .trivyignore entries (#2332)\n* feat(lang): add dependency origin graph (#1970)\n* docs: update nix installation info (#2331)\n* feat: add rbac scanning support (#2328)\n* refactor: move WordPress module to another repository (#2329)\n* ci: add support for ppc64le (#2281)\n* feat: add support for WASM modules (#2195)\n* feat(secret): show recommendation for slow scanning (#2051)\n* fix(flag): remove --clear-cache flag client mode (#2301)\n* fix(java): added check for looping for variable evaluation in pom file (#2322)\n* BREAKING(k8s): change CLI API (#2186)\n* feat(alpine): add Alpine Linux 3.16 (#2319)\n* ci: add `go mod tidy` check (#2314)\n* chore: run `go mod tidy` (#2313)\n* fix: do not exit if one resource is not found (#2311)\n* feat(cli): use stderr for all log messages (resolve #381) (#2289)\n* test: replace deprecated subcommand client in integration tests (#2308)\n* feat: add support for containerd (#2305)\n* fix(kubernetes): Support floats in manifest yaml (#2297)\n* docs(kubernetes): dead links (#2307)\n* chore: add license label (#2304)\n* feat(mariner): added support for CBL-Mariner Distroless v2.0 (#2293)\n* feat(helm): add pod annotations (#2272)\n* refactor: do not import defsec in fanal types package (#2292)\n* feat(report): Add misconfiguration support to ASFF report template (#2285)\n* test: use images in GHCR (#2275)\n* feat(helm): support pod annotations (#2265)\n* feat(misconf): Helm chart scanning (#2269)\n* docs: Update custom rego policy docs to reflect latest defsec/fanal changes (#2267)\n* fix: mask redis credentials when logging (#2264)\n* refactor: extract commands Runner interface (#2147)\n* docs: update operator release (#2263)\n* feat(redhat): added architecture check (#2172)\n* docs: updating links in the docs to work again (#2256)\n* docs: fix readme (#2251)\n* fix: fixed incorrect CycloneDX output format (#2255)\n* refactor(deps): move dependencies to package (#2189)\n* fix(report): change github format version to required (#2229)\n* docs: update readme (#2110)\n* docs: added information about choosing advisory database (#2212)\n* chore: update trivy-kubernetes (#2224)\n* docs: clarifying parts of the k8s docs and updating links (#2222)\n* fix(k8s): timeout error logging (#2179)\n* chore(deps): updated fanal after fix AsymmetricPrivateKeys (#2214)\n* feat(k8s): add --context flag (#2171)\n* fix(k8s): properly instantiate TableWriter (#2175)\n* test: fixed integration tests after updating testcontainers to v0.13.0 (#2208)\n* chore: update labels (#2197)\n* fix(report): fixed panic if all misconf reports were removed in filter (#2188)\n* feat(k8s): scan secrets (#2178)\n* feat(report): GitHub Dependency Snapshots support (#1522)\n* feat(db): added insecure skip tls verify to download trivy db (#2140)\n* fix(redhat): always use vulns with fixed version if there is one (#2165)\n* chore(redhat): Add support for Red Hat UBI 9. (#2183)\n* fix(k8s): update trivy-kubernetes (#2163)\n*  fix misconfig start line for code quality tpl (#2181)\n* fix: update docker/distribution from 2.8.0 to 2.8.1 (#2176)\n* docs(vuln): Include GitLab 15.0 integration (#2153)\n* docs: fix the operator version (#2167)\n* fix(k8s): summary report when when only vulns exit (#2146)\n* chore(deps): Update fanal to get defsec v0.58.2 (fixes false positives in ksv038) (#2156)\n* perf(misconf): Improve performance when scanning very large files (#2152)\n* docs(misconf): Update examples and docs to refer to builtin/defsec instead of appshield (#2150)\n* chore(deps): Update fanal (for less verbose code in misconf results) (#2151)\n* docs: fixed installation instruction for rhel/centos (#2143)\n\nUpdate to version 0.28.0 (boo#1199760, CVE-2022-28946):\n\n* fix: remove Highlighted from json output (#2131)\n* fix: remove trivy-kubernetes replace (#2132)\n* docs: Add Operator docs under Kubernetes section (#2111)\n* fix(k8s): security-checks panic (#2127)\n* ci: added k8s scope (#2130)\n* docs: Update misconfig output in examples (#2128)\n* fix(misconf): Fix coloured output in Goland terminal (#2126)\n* docs(secret): Fix default value of --security-checks in docs (#2107)\n* refactor(report): move colorize function from trivy-db (#2122)\n* feat: k8s resource scanning (#2118)\n* chore: add CODEOWNERS (#2121)\n* feat(image): add `--server` option for remote scans (#1871)\n* refactor: k8s (#2116)\n* refactor: export useful APIs (#2108)\n* docs: fix k8s doc (#2114)\n* feat(kubernetes): Add report flag for summary (#2112)\n* fix: Remove problematic advanced rego policies (#2113)\n* feat(misconf): Add special output format for misconfigurations (#2100)\n* feat:  add k8s subcommand (#2065)\n* chore: fix make lint version (#2102)\n* fix(java): handle relative pom modules (#2101)\n* fix(misconf): Add missing links for non-rego misconfig results (#2094)\n* feat(misconf): Added fs.FS based scanning via latest defsec (#2084)\n* chore(os): updated fanal version and alpine distroless test (#2086)\n* feat(report): add support for SPDX (#2059)\n* chore: app version 0.27.0 (#2046)\n* fix(misconf): added to skip conf files if their scanning is not enabled (#2066)\n* docs(secret) fix rule path in docs (#2061)\n* docs: change from go.sum to go.mod (#2056)\n\nUpdate to version 0.27.1:\n\n* refactor(fs): scanner options (#2050)\n* feat(secret): truncate long line (#2052)\n* docs: fix a broken bullets (#2042)\n* feat(ubuntu): add 22.04 approx eol date (#2044)\n* docs: update installation.md (#2027)\n* docs: add Containerfile (#2032)\n\nUpdate to version 0.27.0:\n\n* fix(go): fixed panic to scan gomod without version (#2038)\n* docs(mariner): confirm it works with Mariner 2.0 VM (#2036)\n* feat(secret): support enable rules (#2035)\n* chore: app version 26.0 (#2030)\n* docs(secret): add a demo movie (#2031)\n* feat: support cache TTL in Redis (#2021)\n* fix(go): skip system installed binaries (#2028)\n* fix(go): check if go.sum is nil (#2029)\n* feat: add secret scanning (#1901)\n* chore: gh publish only with push the tag release (#2025)\n* fix(fs): ignore permission errors (#2022)\n* test(mod): using correct module inside test go.mod (#2020)\n* feat(server): re-add proxy support for client/server communications (#1995)\n* fix(report): truncate a description before escaping in ASFF template (#2004)\n* fix(cloudformation): correct margin removal for empty lines (#2002)\n* fix(template): correct check of old sarif template files (#2003)\n\nUpdate to version 0.26.0:\n\n* feat(alpine): warn mixing versions (#2000)\n* Update ASFF template (#1914)\n* chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)\n* test(go): add integration tests for gomod (#1989)\n* fix(python): fixed panic when scan .egg archive (#1992)\n* fix(go): set correct go modules type (#1990)\n* feat(alpine): support apk repositories (#1987)\n* docs: add CBL-Mariner (#1982)\n* docs(go): fix version (#1986)\n* feat(go): support go.mod in Go 1.17+ (#1985)\n* ci: fix URLs in the PR template (#1972)\n* ci: add semantic pull requests check (#1968)\n* docs(issue): added docs for wrong detection issues (#1961)\n\nUpdate to version 0.25.4:\n\n* docs: move CONTRIBUTING.md to docs (#1971)\n* refactor(table): use file name instead package path (#1966)\n* fix(sbom): add --db-repository (#1964)\n* feat(table): add PkgPath in table result (#1960)\n* fix(pom): merge multiple pom imports in a good manner (#1959)\n\nUpdate to version 0.25.3:\n\n* fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)\n* fix(misconf): update BurntSushi/toml for fix runtime error (#1948)\n* fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)\n* feat(jar): allow setting Maven Central URL using environment variable (#1939)\n* chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)\n* chore(chart): remove version comments (#1933)\n\nUpdate to version 0.25.2:\n\n* fix(downloadDB): add flag to server command (#1942)\n\nUpdate to version 0.25.1:\n\n* fix(misconf): update defsec to resolve panics (#1935)\n* docs: restructure the documentation (#1887)\n* Add trivy horizontal logo (#1932)\n* feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)\n\n- Buildrequire go1.18 as upstream says in go.mod\n\nUpdate to version 0.25.0:\n\n* docs(filter vulnerabilities): fix link (#1880)\n* feat(template) Add misconfigurations to gitlab codequality report (#1756)\n* fix(rpc): add PkgPath field to client / server mode (#1643)\n* fix(vulnerabilities): fixed trivy-db vulns (#1883)\n* feat(cache): remove temporary cache after filesystem scanning (#1868)\n* feat(sbom): add a dedicated sbom command (#1799)\n* feat(cyclonedx): add vulnerabilities (#1832)\n* fix(option): hide false warning about remote options (#1865)\n* feat(filesystem): scan in client/server mode (#1829)\n* refactor(template): remove unused test (#1861)\n* fix(cli): json format for trivy version (#1854)\n* docs: change URL for tfsec-checks (#1857)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2022-10094",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_10094-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2022:10094-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TFXT5GO737TPBRXIUOZS7A3WOJKWSJAX/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2022:10094-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TFXT5GO737TPBRXIUOZS7A3WOJKWSJAX/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199760",
        "url": "https://bugzilla.suse.com/1199760"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1996 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1996/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23648 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23648/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-28946 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-28946/"
      }
    ],
    "title": "Security update for trivy",
    "tracking": {
      "current_release_date": "2022-08-20T10:02:00Z",
      "generator": {
        "date": "2022-08-20T10:02:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2022:10094-1",
      "initial_release_date": "2022-08-20T10:02:00Z",
      "revision_history": [
        {
          "date": "2022-08-20T10:02:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.4-bp153.8.1.aarch64",
                "product": {
                  "name": "trivy-0.30.4-bp153.8.1.aarch64",
                  "product_id": "trivy-0.30.4-bp153.8.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.4-bp153.8.1.i586",
                "product": {
                  "name": "trivy-0.30.4-bp153.8.1.i586",
                  "product_id": "trivy-0.30.4-bp153.8.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.4-bp153.8.1.s390x",
                "product": {
                  "name": "trivy-0.30.4-bp153.8.1.s390x",
                  "product_id": "trivy-0.30.4-bp153.8.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.4-bp153.8.1.x86_64",
                "product": {
                  "name": "trivy-0.30.4-bp153.8.1.x86_64",
                  "product_id": "trivy-0.30.4-bp153.8.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Package Hub 15 SP3",
                "product": {
                  "name": "SUSE Package Hub 15 SP3",
                  "product_id": "SUSE Package Hub 15 SP3"
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp153.8.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.aarch64"
        },
        "product_reference": "trivy-0.30.4-bp153.8.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp153.8.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.i586"
        },
        "product_reference": "trivy-0.30.4-bp153.8.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp153.8.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.s390x"
        },
        "product_reference": "trivy-0.30.4-bp153.8.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp153.8.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.x86_64"
        },
        "product_reference": "trivy-0.30.4-bp153.8.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp153.8.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.aarch64"
        },
        "product_reference": "trivy-0.30.4-bp153.8.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp153.8.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.i586"
        },
        "product_reference": "trivy-0.30.4-bp153.8.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp153.8.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.s390x"
        },
        "product_reference": "trivy-0.30.4-bp153.8.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.4-bp153.8.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.x86_64"
        },
        "product_reference": "trivy-0.30.4-bp153.8.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-1996",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1996"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.aarch64",
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.i586",
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.s390x",
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.x86_64",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.aarch64",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.i586",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.s390x",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1996",
          "url": "https://www.suse.com/security/cve/CVE-2022-1996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200528 for CVE-2022-1996",
          "url": "https://bugzilla.suse.com/1200528"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.aarch64",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.i586",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.s390x",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.x86_64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.aarch64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.i586",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.s390x",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.aarch64",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.i586",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.s390x",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.x86_64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.aarch64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.i586",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.s390x",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-08-20T10:02:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-1996"
    },
    {
      "cve": "CVE-2022-23648",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23648"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd\u0027s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd\u0027s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.aarch64",
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.i586",
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.s390x",
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.x86_64",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.aarch64",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.i586",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.s390x",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23648",
          "url": "https://www.suse.com/security/cve/CVE-2022-23648"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196441 for CVE-2022-23648",
          "url": "https://bugzilla.suse.com/1196441"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.aarch64",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.i586",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.s390x",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.x86_64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.aarch64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.i586",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.s390x",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.aarch64",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.i586",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.s390x",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.x86_64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.aarch64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.i586",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.s390x",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-08-20T10:02:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-23648"
    },
    {
      "cve": "CVE-2022-28946",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-28946"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service (DoS) via triggering out-of-range memory access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.aarch64",
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.i586",
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.s390x",
          "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.x86_64",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.aarch64",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.i586",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.s390x",
          "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-28946",
          "url": "https://www.suse.com/security/cve/CVE-2022-28946"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199760 for CVE-2022-28946",
          "url": "https://bugzilla.suse.com/1199760"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.aarch64",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.i586",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.s390x",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.x86_64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.aarch64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.i586",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.s390x",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.aarch64",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.i586",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.s390x",
            "SUSE Package Hub 15 SP3:trivy-0.30.4-bp153.8.1.x86_64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.aarch64",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.i586",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.s390x",
            "openSUSE Leap 15.3:trivy-0.30.4-bp153.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-08-20T10:02:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-28946"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "trivy-0.30.2-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the trivy-0.30.2-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-12205",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12205-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1996 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1996/"
      }
    ],
    "title": "trivy-0.30.2-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:12205-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.2-1.1.aarch64",
                "product": {
                  "name": "trivy-0.30.2-1.1.aarch64",
                  "product_id": "trivy-0.30.2-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.2-1.1.ppc64le",
                "product": {
                  "name": "trivy-0.30.2-1.1.ppc64le",
                  "product_id": "trivy-0.30.2-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.2-1.1.s390x",
                "product": {
                  "name": "trivy-0.30.2-1.1.s390x",
                  "product_id": "trivy-0.30.2-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "trivy-0.30.2-1.1.x86_64",
                "product": {
                  "name": "trivy-0.30.2-1.1.x86_64",
                  "product_id": "trivy-0.30.2-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:trivy-0.30.2-1.1.aarch64"
        },
        "product_reference": "trivy-0.30.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:trivy-0.30.2-1.1.ppc64le"
        },
        "product_reference": "trivy-0.30.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:trivy-0.30.2-1.1.s390x"
        },
        "product_reference": "trivy-0.30.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trivy-0.30.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:trivy-0.30.2-1.1.x86_64"
        },
        "product_reference": "trivy-0.30.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-1996",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1996"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:trivy-0.30.2-1.1.aarch64",
          "openSUSE Tumbleweed:trivy-0.30.2-1.1.ppc64le",
          "openSUSE Tumbleweed:trivy-0.30.2-1.1.s390x",
          "openSUSE Tumbleweed:trivy-0.30.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1996",
          "url": "https://www.suse.com/security/cve/CVE-2022-1996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200528 for CVE-2022-1996",
          "url": "https://bugzilla.suse.com/1200528"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:trivy-0.30.2-1.1.aarch64",
            "openSUSE Tumbleweed:trivy-0.30.2-1.1.ppc64le",
            "openSUSE Tumbleweed:trivy-0.30.2-1.1.s390x",
            "openSUSE Tumbleweed:trivy-0.30.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:trivy-0.30.2-1.1.aarch64",
            "openSUSE Tumbleweed:trivy-0.30.2-1.1.ppc64le",
            "openSUSE Tumbleweed:trivy-0.30.2-1.1.s390x",
            "openSUSE Tumbleweed:trivy-0.30.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-1996"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "helm-3.9.3-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the helm-3.9.3-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-12252",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12252-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1996 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1996/"
      }
    ],
    "title": "helm-3.9.3-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:12252-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "helm-3.9.3-1.1.aarch64",
                "product": {
                  "name": "helm-3.9.3-1.1.aarch64",
                  "product_id": "helm-3.9.3-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "helm-bash-completion-3.9.3-1.1.aarch64",
                "product": {
                  "name": "helm-bash-completion-3.9.3-1.1.aarch64",
                  "product_id": "helm-bash-completion-3.9.3-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "helm-fish-completion-3.9.3-1.1.aarch64",
                "product": {
                  "name": "helm-fish-completion-3.9.3-1.1.aarch64",
                  "product_id": "helm-fish-completion-3.9.3-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "helm-zsh-completion-3.9.3-1.1.aarch64",
                "product": {
                  "name": "helm-zsh-completion-3.9.3-1.1.aarch64",
                  "product_id": "helm-zsh-completion-3.9.3-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "helm-3.9.3-1.1.ppc64le",
                "product": {
                  "name": "helm-3.9.3-1.1.ppc64le",
                  "product_id": "helm-3.9.3-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "helm-bash-completion-3.9.3-1.1.ppc64le",
                "product": {
                  "name": "helm-bash-completion-3.9.3-1.1.ppc64le",
                  "product_id": "helm-bash-completion-3.9.3-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "helm-fish-completion-3.9.3-1.1.ppc64le",
                "product": {
                  "name": "helm-fish-completion-3.9.3-1.1.ppc64le",
                  "product_id": "helm-fish-completion-3.9.3-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "helm-zsh-completion-3.9.3-1.1.ppc64le",
                "product": {
                  "name": "helm-zsh-completion-3.9.3-1.1.ppc64le",
                  "product_id": "helm-zsh-completion-3.9.3-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "helm-3.9.3-1.1.s390x",
                "product": {
                  "name": "helm-3.9.3-1.1.s390x",
                  "product_id": "helm-3.9.3-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "helm-bash-completion-3.9.3-1.1.s390x",
                "product": {
                  "name": "helm-bash-completion-3.9.3-1.1.s390x",
                  "product_id": "helm-bash-completion-3.9.3-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "helm-fish-completion-3.9.3-1.1.s390x",
                "product": {
                  "name": "helm-fish-completion-3.9.3-1.1.s390x",
                  "product_id": "helm-fish-completion-3.9.3-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "helm-zsh-completion-3.9.3-1.1.s390x",
                "product": {
                  "name": "helm-zsh-completion-3.9.3-1.1.s390x",
                  "product_id": "helm-zsh-completion-3.9.3-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "helm-3.9.3-1.1.x86_64",
                "product": {
                  "name": "helm-3.9.3-1.1.x86_64",
                  "product_id": "helm-3.9.3-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "helm-bash-completion-3.9.3-1.1.x86_64",
                "product": {
                  "name": "helm-bash-completion-3.9.3-1.1.x86_64",
                  "product_id": "helm-bash-completion-3.9.3-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "helm-fish-completion-3.9.3-1.1.x86_64",
                "product": {
                  "name": "helm-fish-completion-3.9.3-1.1.x86_64",
                  "product_id": "helm-fish-completion-3.9.3-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "helm-zsh-completion-3.9.3-1.1.x86_64",
                "product": {
                  "name": "helm-zsh-completion-3.9.3-1.1.x86_64",
                  "product_id": "helm-zsh-completion-3.9.3-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-3.9.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-3.9.3-1.1.aarch64"
        },
        "product_reference": "helm-3.9.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-3.9.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-3.9.3-1.1.ppc64le"
        },
        "product_reference": "helm-3.9.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-3.9.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-3.9.3-1.1.s390x"
        },
        "product_reference": "helm-3.9.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-3.9.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-3.9.3-1.1.x86_64"
        },
        "product_reference": "helm-3.9.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-bash-completion-3.9.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.aarch64"
        },
        "product_reference": "helm-bash-completion-3.9.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-bash-completion-3.9.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.ppc64le"
        },
        "product_reference": "helm-bash-completion-3.9.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-bash-completion-3.9.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.s390x"
        },
        "product_reference": "helm-bash-completion-3.9.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-bash-completion-3.9.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.x86_64"
        },
        "product_reference": "helm-bash-completion-3.9.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-fish-completion-3.9.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.aarch64"
        },
        "product_reference": "helm-fish-completion-3.9.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-fish-completion-3.9.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.ppc64le"
        },
        "product_reference": "helm-fish-completion-3.9.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-fish-completion-3.9.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.s390x"
        },
        "product_reference": "helm-fish-completion-3.9.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-fish-completion-3.9.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.x86_64"
        },
        "product_reference": "helm-fish-completion-3.9.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-zsh-completion-3.9.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.aarch64"
        },
        "product_reference": "helm-zsh-completion-3.9.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-zsh-completion-3.9.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.ppc64le"
        },
        "product_reference": "helm-zsh-completion-3.9.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-zsh-completion-3.9.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.s390x"
        },
        "product_reference": "helm-zsh-completion-3.9.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm-zsh-completion-3.9.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.x86_64"
        },
        "product_reference": "helm-zsh-completion-3.9.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-1996",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1996"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm-3.9.3-1.1.aarch64",
          "openSUSE Tumbleweed:helm-3.9.3-1.1.ppc64le",
          "openSUSE Tumbleweed:helm-3.9.3-1.1.s390x",
          "openSUSE Tumbleweed:helm-3.9.3-1.1.x86_64",
          "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.aarch64",
          "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.ppc64le",
          "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.s390x",
          "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.x86_64",
          "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.aarch64",
          "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.ppc64le",
          "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.s390x",
          "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.x86_64",
          "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.aarch64",
          "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.ppc64le",
          "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.s390x",
          "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1996",
          "url": "https://www.suse.com/security/cve/CVE-2022-1996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200528 for CVE-2022-1996",
          "url": "https://bugzilla.suse.com/1200528"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm-3.9.3-1.1.aarch64",
            "openSUSE Tumbleweed:helm-3.9.3-1.1.ppc64le",
            "openSUSE Tumbleweed:helm-3.9.3-1.1.s390x",
            "openSUSE Tumbleweed:helm-3.9.3-1.1.x86_64",
            "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.aarch64",
            "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.ppc64le",
            "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.s390x",
            "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.x86_64",
            "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.aarch64",
            "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.ppc64le",
            "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.s390x",
            "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.x86_64",
            "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.aarch64",
            "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.ppc64le",
            "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.s390x",
            "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm-3.9.3-1.1.aarch64",
            "openSUSE Tumbleweed:helm-3.9.3-1.1.ppc64le",
            "openSUSE Tumbleweed:helm-3.9.3-1.1.s390x",
            "openSUSE Tumbleweed:helm-3.9.3-1.1.x86_64",
            "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.aarch64",
            "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.ppc64le",
            "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.s390x",
            "openSUSE Tumbleweed:helm-bash-completion-3.9.3-1.1.x86_64",
            "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.aarch64",
            "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.ppc64le",
            "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.s390x",
            "openSUSE Tumbleweed:helm-fish-completion-3.9.3-1.1.x86_64",
            "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.aarch64",
            "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.ppc64le",
            "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.s390x",
            "openSUSE Tumbleweed:helm-zsh-completion-3.9.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-1996"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "containerd-1.7.17-2.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the containerd-1.7.17-2.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-14081",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14081-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1996 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1996/"
      }
    ],
    "title": "containerd-1.7.17-2.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-28T00:00:00Z",
      "generator": {
        "date": "2024-06-28T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:14081-1",
      "initial_release_date": "2024-06-28T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-28T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.7.17-2.1.aarch64",
                "product": {
                  "name": "containerd-1.7.17-2.1.aarch64",
                  "product_id": "containerd-1.7.17-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.7.17-2.1.aarch64",
                "product": {
                  "name": "containerd-ctr-1.7.17-2.1.aarch64",
                  "product_id": "containerd-ctr-1.7.17-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-devel-1.7.17-2.1.aarch64",
                "product": {
                  "name": "containerd-devel-1.7.17-2.1.aarch64",
                  "product_id": "containerd-devel-1.7.17-2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.7.17-2.1.ppc64le",
                "product": {
                  "name": "containerd-1.7.17-2.1.ppc64le",
                  "product_id": "containerd-1.7.17-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.7.17-2.1.ppc64le",
                "product": {
                  "name": "containerd-ctr-1.7.17-2.1.ppc64le",
                  "product_id": "containerd-ctr-1.7.17-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-devel-1.7.17-2.1.ppc64le",
                "product": {
                  "name": "containerd-devel-1.7.17-2.1.ppc64le",
                  "product_id": "containerd-devel-1.7.17-2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.7.17-2.1.s390x",
                "product": {
                  "name": "containerd-1.7.17-2.1.s390x",
                  "product_id": "containerd-1.7.17-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.7.17-2.1.s390x",
                "product": {
                  "name": "containerd-ctr-1.7.17-2.1.s390x",
                  "product_id": "containerd-ctr-1.7.17-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-devel-1.7.17-2.1.s390x",
                "product": {
                  "name": "containerd-devel-1.7.17-2.1.s390x",
                  "product_id": "containerd-devel-1.7.17-2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.7.17-2.1.x86_64",
                "product": {
                  "name": "containerd-1.7.17-2.1.x86_64",
                  "product_id": "containerd-1.7.17-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.7.17-2.1.x86_64",
                "product": {
                  "name": "containerd-ctr-1.7.17-2.1.x86_64",
                  "product_id": "containerd-ctr-1.7.17-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-devel-1.7.17-2.1.x86_64",
                "product": {
                  "name": "containerd-devel-1.7.17-2.1.x86_64",
                  "product_id": "containerd-devel-1.7.17-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.7.17-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-1.7.17-2.1.aarch64"
        },
        "product_reference": "containerd-1.7.17-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.7.17-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-1.7.17-2.1.ppc64le"
        },
        "product_reference": "containerd-1.7.17-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.7.17-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-1.7.17-2.1.s390x"
        },
        "product_reference": "containerd-1.7.17-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.7.17-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-1.7.17-2.1.x86_64"
        },
        "product_reference": "containerd-1.7.17-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.7.17-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.aarch64"
        },
        "product_reference": "containerd-ctr-1.7.17-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.7.17-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.ppc64le"
        },
        "product_reference": "containerd-ctr-1.7.17-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.7.17-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.s390x"
        },
        "product_reference": "containerd-ctr-1.7.17-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.7.17-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.x86_64"
        },
        "product_reference": "containerd-ctr-1.7.17-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-devel-1.7.17-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.aarch64"
        },
        "product_reference": "containerd-devel-1.7.17-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-devel-1.7.17-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.ppc64le"
        },
        "product_reference": "containerd-devel-1.7.17-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-devel-1.7.17-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.s390x"
        },
        "product_reference": "containerd-devel-1.7.17-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-devel-1.7.17-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.x86_64"
        },
        "product_reference": "containerd-devel-1.7.17-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-1996",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1996"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:containerd-1.7.17-2.1.aarch64",
          "openSUSE Tumbleweed:containerd-1.7.17-2.1.ppc64le",
          "openSUSE Tumbleweed:containerd-1.7.17-2.1.s390x",
          "openSUSE Tumbleweed:containerd-1.7.17-2.1.x86_64",
          "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.aarch64",
          "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.ppc64le",
          "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.s390x",
          "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.x86_64",
          "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.aarch64",
          "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.ppc64le",
          "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.s390x",
          "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1996",
          "url": "https://www.suse.com/security/cve/CVE-2022-1996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200528 for CVE-2022-1996",
          "url": "https://bugzilla.suse.com/1200528"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:containerd-1.7.17-2.1.aarch64",
            "openSUSE Tumbleweed:containerd-1.7.17-2.1.ppc64le",
            "openSUSE Tumbleweed:containerd-1.7.17-2.1.s390x",
            "openSUSE Tumbleweed:containerd-1.7.17-2.1.x86_64",
            "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.aarch64",
            "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.ppc64le",
            "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.s390x",
            "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.x86_64",
            "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.aarch64",
            "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.ppc64le",
            "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.s390x",
            "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:containerd-1.7.17-2.1.aarch64",
            "openSUSE Tumbleweed:containerd-1.7.17-2.1.ppc64le",
            "openSUSE Tumbleweed:containerd-1.7.17-2.1.s390x",
            "openSUSE Tumbleweed:containerd-1.7.17-2.1.x86_64",
            "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.aarch64",
            "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.ppc64le",
            "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.s390x",
            "openSUSE Tumbleweed:containerd-ctr-1.7.17-2.1.x86_64",
            "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.aarch64",
            "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.ppc64le",
            "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.s390x",
            "openSUSE Tumbleweed:containerd-devel-1.7.17-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-28T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-1996"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "helm3-3.19.2-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the helm3-3.19.2-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15779",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15779-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16873 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16873/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16874 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16874/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16875 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16875/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-21272 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-21272/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1996 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1996/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23524 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23524/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23525 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23525/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23526 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-36055 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-36055/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-25165 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-25165/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-25173 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-25173/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-25620 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-25620/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-26147 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-26147/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-45337 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-45337/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-45338 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-45338/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-22870 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-22870/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-22872 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-22872/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-47911 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-47911/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-53547 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-53547/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-58190 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-58190/"
      }
    ],
    "title": "helm3-3.19.2-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-11-28T00:00:00Z",
      "generator": {
        "date": "2025-11-28T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15779-1",
      "initial_release_date": "2025-11-28T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-11-28T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "helm3-3.19.2-1.1.aarch64",
                "product": {
                  "name": "helm3-3.19.2-1.1.aarch64",
                  "product_id": "helm3-3.19.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-bash-completion-3.19.2-1.1.aarch64",
                "product": {
                  "name": "helm3-bash-completion-3.19.2-1.1.aarch64",
                  "product_id": "helm3-bash-completion-3.19.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-fish-completion-3.19.2-1.1.aarch64",
                "product": {
                  "name": "helm3-fish-completion-3.19.2-1.1.aarch64",
                  "product_id": "helm3-fish-completion-3.19.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-zsh-completion-3.19.2-1.1.aarch64",
                "product": {
                  "name": "helm3-zsh-completion-3.19.2-1.1.aarch64",
                  "product_id": "helm3-zsh-completion-3.19.2-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "helm3-3.19.2-1.1.ppc64le",
                "product": {
                  "name": "helm3-3.19.2-1.1.ppc64le",
                  "product_id": "helm3-3.19.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-bash-completion-3.19.2-1.1.ppc64le",
                "product": {
                  "name": "helm3-bash-completion-3.19.2-1.1.ppc64le",
                  "product_id": "helm3-bash-completion-3.19.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-fish-completion-3.19.2-1.1.ppc64le",
                "product": {
                  "name": "helm3-fish-completion-3.19.2-1.1.ppc64le",
                  "product_id": "helm3-fish-completion-3.19.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-zsh-completion-3.19.2-1.1.ppc64le",
                "product": {
                  "name": "helm3-zsh-completion-3.19.2-1.1.ppc64le",
                  "product_id": "helm3-zsh-completion-3.19.2-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "helm3-3.19.2-1.1.s390x",
                "product": {
                  "name": "helm3-3.19.2-1.1.s390x",
                  "product_id": "helm3-3.19.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-bash-completion-3.19.2-1.1.s390x",
                "product": {
                  "name": "helm3-bash-completion-3.19.2-1.1.s390x",
                  "product_id": "helm3-bash-completion-3.19.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-fish-completion-3.19.2-1.1.s390x",
                "product": {
                  "name": "helm3-fish-completion-3.19.2-1.1.s390x",
                  "product_id": "helm3-fish-completion-3.19.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-zsh-completion-3.19.2-1.1.s390x",
                "product": {
                  "name": "helm3-zsh-completion-3.19.2-1.1.s390x",
                  "product_id": "helm3-zsh-completion-3.19.2-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "helm3-3.19.2-1.1.x86_64",
                "product": {
                  "name": "helm3-3.19.2-1.1.x86_64",
                  "product_id": "helm3-3.19.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-bash-completion-3.19.2-1.1.x86_64",
                "product": {
                  "name": "helm3-bash-completion-3.19.2-1.1.x86_64",
                  "product_id": "helm3-bash-completion-3.19.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-fish-completion-3.19.2-1.1.x86_64",
                "product": {
                  "name": "helm3-fish-completion-3.19.2-1.1.x86_64",
                  "product_id": "helm3-fish-completion-3.19.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "helm3-zsh-completion-3.19.2-1.1.x86_64",
                "product": {
                  "name": "helm3-zsh-completion-3.19.2-1.1.x86_64",
                  "product_id": "helm3-zsh-completion-3.19.2-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-3.19.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64"
        },
        "product_reference": "helm3-3.19.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-3.19.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le"
        },
        "product_reference": "helm3-3.19.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-3.19.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x"
        },
        "product_reference": "helm3-3.19.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-3.19.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64"
        },
        "product_reference": "helm3-3.19.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-bash-completion-3.19.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64"
        },
        "product_reference": "helm3-bash-completion-3.19.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-bash-completion-3.19.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le"
        },
        "product_reference": "helm3-bash-completion-3.19.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-bash-completion-3.19.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x"
        },
        "product_reference": "helm3-bash-completion-3.19.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-bash-completion-3.19.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64"
        },
        "product_reference": "helm3-bash-completion-3.19.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-fish-completion-3.19.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64"
        },
        "product_reference": "helm3-fish-completion-3.19.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-fish-completion-3.19.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le"
        },
        "product_reference": "helm3-fish-completion-3.19.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-fish-completion-3.19.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x"
        },
        "product_reference": "helm3-fish-completion-3.19.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-fish-completion-3.19.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64"
        },
        "product_reference": "helm3-fish-completion-3.19.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-zsh-completion-3.19.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64"
        },
        "product_reference": "helm3-zsh-completion-3.19.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-zsh-completion-3.19.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le"
        },
        "product_reference": "helm3-zsh-completion-3.19.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-zsh-completion-3.19.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x"
        },
        "product_reference": "helm3-zsh-completion-3.19.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "helm3-zsh-completion-3.19.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        },
        "product_reference": "helm3-zsh-completion-3.19.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-16873",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16873"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Go before 1.10.6 and 1.11.x before 1.11.3, the \"go get\" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly. Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). Using custom domains, it\u0027s possible to arrange things so that a Git repository is cloned to a folder named \".git\" by using a vanity import path that ends with \"/.git\". If the Git repository root contains a \"HEAD\" file, a \"config\" file, an \"objects\" directory, a \"refs\" directory, with some work to ensure the proper ordering of operations, \"go get -u\" can be tricked into considering the parent directory as a repository root, and running Git commands on it. That will use the \"config\" file in the original Git repository root for its configuration, and if that config file contains malicious commands, they will execute on the system running \"go get -u\".",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16873",
          "url": "https://www.suse.com/security/cve/CVE-2018-16873"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1118897 for CVE-2018-16873",
          "url": "https://bugzilla.suse.com/1118897"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1118898 for CVE-2018-16873",
          "url": "https://bugzilla.suse.com/1118898"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1118899 for CVE-2018-16873",
          "url": "https://bugzilla.suse.com/1118899"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-16873"
    },
    {
      "cve": "CVE-2018-16874",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16874"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Go before 1.10.6 and 1.11.x before 1.11.3, the \"go get\" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both \u0027{\u0027 and \u0027}\u0027 characters). Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). The attacker can cause an arbitrary filesystem write, which can lead to code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16874",
          "url": "https://www.suse.com/security/cve/CVE-2018-16874"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1118897 for CVE-2018-16874",
          "url": "https://bugzilla.suse.com/1118897"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1118898 for CVE-2018-16874",
          "url": "https://bugzilla.suse.com/1118898"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1118899 for CVE-2018-16874",
          "url": "https://bugzilla.suse.com/1118899"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16874"
    },
    {
      "cve": "CVE-2018-16875",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16875"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16875",
          "url": "https://www.suse.com/security/cve/CVE-2018-16875"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1118897 for CVE-2018-16875",
          "url": "https://bugzilla.suse.com/1118897"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1118898 for CVE-2018-16875",
          "url": "https://bugzilla.suse.com/1118898"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1118899 for CVE-2018-16875",
          "url": "https://bugzilla.suse.com/1118899"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16875"
    },
    {
      "cve": "CVE-2021-21272",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-21272"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In ORAS from version 0.4.0 and before version 0.9.0, there is a \"zip-slip\" vulnerability. The directory support feature allows the downloaded gzipped tarballs to be automatically extracted to the user-specified directory where the tarball can have symbolic links and hard links. A well-crafted tarball or tarballs allow malicious artifact providers linking, writing, or overwriting specific files on the host filesystem outside of the user-specified directory unexpectedly with the same permissions as the user who runs `oras pull`. Users of the affected versions are impacted if they are `oras` CLI users who runs `oras pull`, or if they are Go programs, which invoke `github.com/deislabs/oras/pkg/content.FileStore`. The problem has been fixed in version 0.9.0. For `oras` CLI users, there is no workarounds other than pulling from a trusted artifact provider. For `oras` package users, the workaround is to not use `github.com/deislabs/oras/pkg/content.FileStore`, and use other content stores instead, or pull from a trusted artifact provider.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-21272",
          "url": "https://www.suse.com/security/cve/CVE-2021-21272"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181419 for CVE-2021-21272",
          "url": "https://bugzilla.suse.com/1181419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-21272"
    },
    {
      "cve": "CVE-2022-1996",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1996"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1996",
          "url": "https://www.suse.com/security/cve/CVE-2022-1996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200528 for CVE-2022-1996",
          "url": "https://bugzilla.suse.com/1200528"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-1996"
    },
    {
      "cve": "CVE-2022-23524",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23524"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption, resulting in Denial of Service. Input to functions in the _strvals_ package can cause a stack overflow. In Go, a stack overflow cannot be recovered from. Applications that use functions from the _strvals_ package in the Helm SDK can have a Denial of Service attack when they use this package and it panics. This issue has been patched in 3.10.3. SDK users can validate strings supplied by users won\u0027t create large arrays causing significant memory usage before passing them to the _strvals_ functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23524",
          "url": "https://www.suse.com/security/cve/CVE-2022-23524"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1206467 for CVE-2022-23524",
          "url": "https://bugzilla.suse.com/1206467"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-23524"
    },
    {
      "cve": "CVE-2022-23525",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23525"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the _repo_package. The _repo_ package contains a handler that processes the index file of a repository. For example, the Helm client adds references to chart repositories where charts are managed. The _repo_ package parses the index file of the repository and loads it into structures Go can work with. Some index files can cause array data structures to be created causing a memory violation. Applications that use the _repo_ package in the Helm SDK to parse an index file can suffer a Denial of Service when that input causes a panic that cannot be recovered from. The Helm Client will panic with an index file that causes a memory violation panic. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been patched in 3.10.3. SDK users can validate index files that are correctly formatted before passing them to the _repo_ functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23525",
          "url": "https://www.suse.com/security/cve/CVE-2022-23525"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1206469 for CVE-2022-23525",
          "url": "https://bugzilla.suse.com/1206469"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2022-23525"
    },
    {
      "cve": "CVE-2022-23526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the_chartutil_ package that can cause a segmentation violation. The _chartutil_ package contains a parser that loads a JSON Schema validation file. For example, the Helm client when rendering a chart will validate its values with the schema file. The _chartutil_ package parses the schema file and loads it into structures Go can work with. Some schema files can cause array data structures to be created causing a memory violation. Applications that use the _chartutil_ package in the Helm SDK to parse a schema file can suffer a Denial of Service when that input causes a panic that cannot be recovered from. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been patched in 3.10.3. SDK users can validate schema files that are correctly formatted before passing them to the _chartutil_ functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23526",
          "url": "https://www.suse.com/security/cve/CVE-2022-23526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1206471 for CVE-2022-23526",
          "url": "https://bugzilla.suse.com/1206471"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2022-23526"
    },
    {
      "cve": "CVE-2022-36055",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-36055"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the _strvals_ package that can cause an out of memory panic. The _strvals_ package contains a parser that turns strings in to Go structures. The _strvals_ package converts these strings into structures Go can work with. Some string inputs can cause array data structures to be created causing an out of memory panic. Applications that use the _strvals_ package in the Helm SDK to parse user supplied input can suffer a Denial of Service when that input causes a panic that cannot be recovered from. The Helm Client will panic with input to `--set`, `--set-string`, and other value setting flags that causes an out of memory panic. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been resolved in 3.9.4. SDK users can validate strings supplied by users won\u0027t create large arrays causing significant memory usage before passing them to the _strvals_ functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-36055",
          "url": "https://www.suse.com/security/cve/CVE-2022-36055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203054 for CVE-2022-36055",
          "url": "https://bugzilla.suse.com/1203054"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-36055"
    },
    {
      "cve": "CVE-2023-25165",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-25165"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup happens when used with `helm install|upgrade|template` or when the Helm SDK is used to render a chart. Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. For example, a malicious chart could inject `getHostByName` into a chart in order to disclose values to a malicious DNS server. The issue has been fixed in Helm 3.11.1. Prior to using a chart with Helm verify the `getHostByName` function is not being used in a template to disclose any information you do not want passed to DNS servers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-25165",
          "url": "https://www.suse.com/security/cve/CVE-2023-25165"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1208083 for CVE-2023-25165",
          "url": "https://bugzilla.suse.com/1208083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-25165"
    },
    {
      "cve": "CVE-2023-25173",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-25173"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container. Downstream applications that use the containerd client library may be affected as well.\n\nThis bug has been fixed in containerd v1.6.18 and v.1.5.18. Users should update to these versions and recreate containers to resolve this issue. Users who rely on a downstream application that uses containerd\u0027s client library should check that application for a separate advisory and instructions. As a workaround, ensure that the `\"USER $USERNAME\"` Dockerfile instruction is not used. Instead, set the container entrypoint to a value similar to `ENTRYPOINT [\"su\", \"-\", \"user\"]` to allow `su` to properly set up supplementary groups.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-25173",
          "url": "https://www.suse.com/security/cve/CVE-2023-25173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1208426 for CVE-2023-25173",
          "url": "https://bugzilla.suse.com/1208426"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215588 for CVE-2023-25173",
          "url": "https://bugzilla.suse.com/1215588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-25173"
    },
    {
      "cve": "CVE-2024-25620",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-25620"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the `Chart.yaml` file includes a relative path change, the chart would be saved outside its expected directory based on the changes in the relative path. The validation and linting did not detect the path changes in the name. This issue has been resolved in Helm v3.14.1. Users unable to upgrade should check all charts used by Helm for path changes in their name as found in the `Chart.yaml` file. This includes dependencies.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-25620",
          "url": "https://www.suse.com/security/cve/CVE-2024-25620"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219969 for CVE-2024-25620",
          "url": "https://bugzilla.suse.com/1219969"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-25620"
    },
    {
      "cve": "CVE-2024-26147",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-26147"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either an `index.yaml` file or a plugins `plugin.yaml` file were missing all metadata a panic would occur in Helm. In the Helm SDK, this is found when using the `LoadIndexFile` or `DownloadIndexFile` functions in the `repo` package or the `LoadDir` function in the `plugin` package. For the Helm client this impacts functions around adding a repository and all Helm functions if a malicious plugin is added as Helm inspects all known plugins on each invocation. This issue has been resolved in Helm v3.14.2. If a malicious plugin has been added which is causing all Helm client commands to panic, the malicious plugin can be manually removed from the filesystem. If using Helm SDK versions prior to 3.14.2, calls to affected functions can use `recover` to catch the panic.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-26147",
          "url": "https://www.suse.com/security/cve/CVE-2024-26147"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1220207 for CVE-2024-26147",
          "url": "https://bugzilla.suse.com/1220207"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-26147"
    },
    {
      "cve": "CVE-2024-45337",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-45337"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that \"A call to this function does not guarantee that the key offered is in fact used to authenticate.\" Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make security relevant determinations based on it once the connection is established, may make incorrect assumptions. For example, an attacker may send public keys A and B, and then authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B for which the attacker does not actually control the private key. Since this API is widely misused, as a partial mitigation golang.org/x/cry...@v0.31.0 enforces the property that, when successfully authenticating via public key, the last key passed to ServerConfig.PublicKeyCallback will be the key used to authenticate the connection. PublicKeyCallback will now be called multiple times with the same key, if necessary. Note that the client may still not control the last key passed to PublicKeyCallback if the connection is then authenticated with a different method, such as PasswordCallback, KeyboardInteractiveCallback, or NoClientAuth. Users should be using the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt instead of referencing external state. Once the connection is established the state corresponding to the successful authentication attempt can be retrieved via the ServerConn.Permissions field. Note that some third-party libraries misuse the Permissions type by sharing it across authentication attempts; users of third-party libraries should refer to the relevant projects for guidance.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-45337",
          "url": "https://www.suse.com/security/cve/CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1234482 for CVE-2024-45337",
          "url": "https://bugzilla.suse.com/1234482"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-45337"
    },
    {
      "cve": "CVE-2024-45338",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-45338"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-45338",
          "url": "https://www.suse.com/security/cve/CVE-2024-45338"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1234794 for CVE-2024-45338",
          "url": "https://bugzilla.suse.com/1234794"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-45338"
    },
    {
      "cve": "CVE-2025-22870",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-22870"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to \"*.example.com\", a request to \"[::1%25.example.com]:80` will incorrectly match and not be proxied.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-22870",
          "url": "https://www.suse.com/security/cve/CVE-2025-22870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1238572 for CVE-2025-22870",
          "url": "https://bugzilla.suse.com/1238572"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1238611 for CVE-2025-22870",
          "url": "https://bugzilla.suse.com/1238611"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-22870"
    },
    {
      "cve": "CVE-2025-22872",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-22872"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. \u003cmath\u003e, \u003csvg\u003e, etc contexts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-22872",
          "url": "https://www.suse.com/security/cve/CVE-2025-22872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1241710 for CVE-2025-22872",
          "url": "https://bugzilla.suse.com/1241710"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-22872"
    },
    {
      "cve": "CVE-2025-47911",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-47911"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-47911",
          "url": "https://www.suse.com/security/cve/CVE-2025-47911"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251308 for CVE-2025-47911",
          "url": "https://bugzilla.suse.com/1251308"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-47911"
    },
    {
      "cve": "CVE-2025-53547",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-53547"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock file can lead to local code execution when dependencies are updated. Fields in a Chart.yaml file, that are carried over to a Chart.lock file when dependencies are updated and this file is written, can be crafted in a way that can cause execution if that same content were in a file that is executed (e.g., a bash.rc file or shell script). If the Chart.lock file is symlinked to one of these files updating dependencies will write the lock file content to the symlinked file. This can lead to unwanted execution. Helm warns of the symlinked file but did not stop execution due to symlinking. This issue has been resolved in Helm v3.18.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-53547",
          "url": "https://www.suse.com/security/cve/CVE-2025-53547"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246150 for CVE-2025-53547",
          "url": "https://bugzilla.suse.com/1246150"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-53547"
    },
    {
      "cve": "CVE-2025-58190",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-58190"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
          "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-58190",
          "url": "https://www.suse.com/security/cve/CVE-2025-58190"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251309 for CVE-2025-58190",
          "url": "https://bugzilla.suse.com/1251309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-bash-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-fish-completion-3.19.2-1.1.x86_64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.aarch64",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.ppc64le",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.s390x",
            "openSUSE Tumbleweed:helm3-zsh-completion-3.19.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-58190"
    }
  ]
}