Follow security updates for vulnerabilities detected and patched in Minimus images.
CVE | Origin Package | Affected Images | severity | Exploitability | status | Detected | Last Update |
|---|---|---|---|---|---|---|---|
| CVE-2026-39833 | vela-core-fips-1.10 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-53488 | vela-core-fips-1.10 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-53488 | vela-core-1.11 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-33186 | vela-core-1.11 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-53488 | vela-core-fips-1.11 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-59873 | trigger-dev | critical | - | Fixed | Jul 21, 2026 | Jul 27, 2026 | |
| CVE-2026-53488 | vela-core-1.10 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39831 | vela-core-1.10 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39834 | vela-core-fips-1.11 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| GHSA-r277-6w6q-xmqw | vela-core-fips-1.11 | - | critical | - | Pending upstream fix | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39834 | vela-core-1.11 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39834 | vela-core-fips-1.10 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39831 | vela-core-fips-1.11 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39831 | vela-core-fips-1.10 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-33186 | vela-core-fips-1.10 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39833 | vela-core-fips-1.11 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-33186 | vela-core-fips-1.11 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39831 | vela-core-1.11 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| GHSA-r277-6w6q-xmqw | vela-core-1.11 | - | critical | - | Pending upstream fix | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39833 | vela-core-1.10 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39834 | vela-core-1.10 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39833 | vela-core-1.11 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| GHSA-r277-6w6q-xmqw | vela-core-1.10 | - | critical | - | Pending upstream fix | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39834 | srenix-fips | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-33186 | vela-core-1.10 | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39831 | srenix | - | critical | - | Pending upstream fix | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39833 | srenix-fips | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39833 | srenix | - | critical | - | Pending upstream fix | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39834 | srenix | - | critical | - | Pending upstream fix | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39831 | srenix-fips | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2023-0687 | glibc-2.34 | - | critical | - | Unaffected | Jul 21, 2026 | Jul 27, 2026 |
| CVE-2026-39833 | tofu-controller-runner-fips | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39831 | tofu-controller-runner-fips | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39834 | tofu-controller-runner-fips | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39834 | tofu-controller-runner | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39833 | tofu-controller-runner | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-39831 | tofu-controller-runner | - | critical | - | Fixed | Jul 26, 2026 | Jul 27, 2026 |
| CVE-2026-53488 | vela-cli-fips-1.10 | - | critical | - | Fixed | Jul 23, 2026 | Jul 26, 2026 |
| GHSA-r277-6w6q-xmqw | vela-core-fips-1.10 | - | critical | - | Under review | Jul 26, 2026 | Jul 26, 2026 |
| GHSA-r277-6w6q-xmqw | vela-cli-fips-1.11 | critical | - | Pending upstream fix | Jul 25, 2026 | Jul 26, 2026 |