GO-2026-4406 vulnerabilities

Vulnerabilities for packages: chainctl, dagdotdev, amazon-ssm-agent, cg...

GO-2026-5422 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-ssm-agent-fips...

GO-2026-5497 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-ssm-agent-fips...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana-operator, aws-ebs-csi-driver, flux-operator, flux-notification-controller, victoriametrics-cluster-fips, dkron, flux-source-controller, victorialogs, victorialogs-fips, flux-image-reflector-controller, loki-fips, flux-source-watcher,...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, prometheus, amazon-cloudwatch-agent-operator-fips, pulumi, promxy, vault, promxy-fips...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, pulumi, rancher-agent, kubevela, promxy...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: karma, trillian, keda, fluent-bit-plugin-loki, amazon-cloudwatch-agent-operator, prometheus, loki, datadog-agent, jaeger, mc, splunk-otel-collector, prometheus-operator, metrics-server, node-problem-detector, aws-otel-collector, minio, grafana, k8sgpt, istio,...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: pulumi, amazon-cloudwatch-agent-operator, promxy...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubeflow-pipelines, opentelemetry-collector-contrib, nats, kargo, grafana-alloy, amazon-cloudwatch-agent, argo-workflows, opentelemetry-collector, splunk-otel-collector, argo-rollouts...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, jitsucom-bulker, splunk-otel-collector, grafana-alloy, sqlexporter, amazon-cloudwatch-agent, bento, cluster-api-aws-controller, argo-events...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: wal-g, undock, kuberlr, kubernetes-csi-external-health-monitor, nats-server-config-reloader, prometheus, kubeflow-katib, kubernetes-dashboard, cluster-api-helm-controller, rclone, trivy, headlamp, lazydocker, kapp-controller, kubernetes-csi-driver-nfs, emissary,...

CVE-2026-12743: Improper Neutralization of Special Elements used in an SQL Command

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

CLEANSTART-2026-DH17348 Security fixes in amazon-k8s-cni-fips 1.22.3-r1

Package amazon-k8s-cni-fips version 1.22.3-r1 fixes 1 vulnerabilities: ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-OQ69181 Security fixes in amazon-cloudwatch-agent 1.300065.0-r1

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-85850

Package amazon-k8s-cni-fips version 1.22.3-r1 fixes 1 vulnerabilities: ghsa-p77j-4mvh-x3m3...

PT-2026-85983

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-19643

An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862...

CVE-2026-19642

An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version...

EUVD-2026-57420

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...