Linux · openSUSE Leap · Security advisory · July 30, 2026

OPENSUSE-SU-2026:21483-1: govulncheck-vulndb security update

OPENSUSE-SU-2026:21483-1, released July 30, 2026, fixes 1,726 CVEs in govulncheck-vulndb (version 0.0.20260723T184607-160000.1.1). 2 of them are being exploited (CVE-2025-8110); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV
CVEs closed
1,726
29 rated Critical
Exploited
2
CVE-2025-8110
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.8025
99th percentile

Priority of the 1,726 CVEs

Patch now 2 Urgent 29 High 129 Routine 1,566

Fixed package versions

ProductReleaseFixed in
govulncheck-vulndbopensuse-leap 16.00.0.20260723T184607-160000.1.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2025-8110 govulncheck-vulndb: GO-2025-4225 GHSA-mq8m-42gh-wq7rn/a 0.8025 KEVExploited
Patch now CVE-2026-33634 govulncheck-vulndb: GO-2026-4919 GHSA-69fq-xp46-6x23n/a 0.6043 KEVExploited
Urgent CVE-2025-44005 govulncheck-vulndb: GO-2025-4180 GHSA-h8cp-697h-8c8pn/a 0.0909 None reported
Urgent CVE-2026-48749 incus: Incus is a system container and virtual machine manager9.9 0.0078 None reported
Urgent CVE-2026-48750 incus: Incus is a system container and virtual machine manager9.9 0.0078 None reported
Urgent CVE-2026-48752 incus: Incus is a system container and virtual machine manager9.9 0.0078 None reported
Urgent CVE-2026-48755 incus: Incus is a system container and virtual machine manager9.9 0.0078 None reported
Urgent CVE-2026-48769 incus: Incus is a system container and virtual machine manager9.9 0.0078 None reported
Urgent CVE-2026-48753 incus: Incus is a system container and virtual machine manager9.9 0.0073 None reported
Urgent CVE-2026-48751 incus: Incus is a system container and virtual machine manager9.9 0.0068 None reported
Urgent CVE-2026-27140 Code execution vulnerability in SWIG code generation in cmd/go9.8 0.0067 None reported
Urgent CVE-2025-62878 Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern9.9 0.0064 None reported
Urgent CVE-2026-33815 cosign: memory-safety vulnerability (bsc#1261811).9.8 0.0063 None reported
Urgent CVE-2026-27590 caddy: Caddy is an extensible server platform that uses TLS by default9.8 0.0061 None reported
Urgent CVE-2026-33816 govulncheck-vulndb: GO-2026-4772 GHSA-9jj7-4m8r-rfcm9.8 0.0058 None reported
Urgent CVE-2026-46595 Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh10.0 0.0056 None reported
Urgent CVE-2026-27143 Missing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 0.0055 None reported
Urgent CVE-2026-33747 docker.io: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner9.8 0.0051 None reported
Urgent CVE-2026-33897 incus: Incus is a system container and virtual machine manager9.9 0.0049 None reported
Urgent CVE-2026-30852 govulncheck-vulndb: GO-2026-4644 GHSA-m2w3-8f23-hxxfn/a 0.0047 None reported
Urgent CVE-2026-33945 incus: Incus is a system container and virtual machine manager9.6 0.0046 None reported
Urgent CVE-2026-41070 govulncheck-vulndb: GO-2026-4963 GHSA-246w-jgmq-88fg10.0 0.0044 None reported
Urgent CVE-2026-27587 caddy: Caddy is an extensible server platform that uses TLS by default9.1 0.0043 None reported
Urgent CVE-2026-27588 caddy: Caddy is an extensible server platform that uses TLS by default9.1 0.0043 None reported
Urgent CVE-2026-53492 govulncheck-vulndb: GO-2026-5064 GHSA-33vj-92qq-66hc9.6 0.0035 None reported
Showing 1 to 25 of 1,726 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.