cve-2026-42945-scan

cve-2026-42945-scan Static scanner for NGINX configuration files that detects the rewrite/set pattern associated with CVE-2026-42945. The scanner parses NGINX configs with crossplane, walks location blocks, and prints every location that looks affected in this format: //xxx.conf: - location XXXXX...

CLEANSTART-2026-ZW70000 Security fix for GHSA-mh2q-q3fh-2475 applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, step-ca-fips 0.30.2-r1, prometheus-operator 0.89.0-r1, litestream 0.5.14-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, node-problem-detector 1.35.2-r1, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, argo-events 1.6.3-r1, kube-logging-operator 6.4.0-r1, kaniko 1.24.0-r2, prometheus-operator 0.88.1-r0, kubernetes-csi-livenessprobe-fips 2.17.0-r2, modelmesh-runtime-adapter 0.12.0-r2

GHSA-mh2q-q3fh-2475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OP23814 Versions of the package github

Security vulnerability affects the crossplane-provider-keycloak-fips package. Versions of the package github...

GHSA-75PG-WVH3-34JR vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, minio, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-cloud9-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-gcp-beta-compute-fips,...

GHSA-75PG-WVH3-34JR vulnerabilities

Vulnerabilities for packages: kine, crossplane-provider-azure-storage, hydra, kots, k8s-device-plugin, zot, crossplane-provider-aws-eks, rclone, crossplane-provider-aws-ec2, minio, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, vale, wuzz, grafana-pyroscope, hubble, snyk-cli, glab,...

CVE-2026-78661 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, minio, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-cloud9-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-gcp-beta-compute-fips,...

GO-2026-6860 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, minio, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-cloud9-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-gcp-beta-compute-fips,...

GO-2026-6686 vulnerabilities

Vulnerabilities for packages: ctop-fips, packer, cloudbeat, eks-distro-fips, umoci, chaos-mesh, dagger, k3s, crossplane-function-kcl-fips, amazon-ecs-agent-fips, kubevirt-cdi-uploadserver-fips, chaos-mesh-fips, xeol-fips, newrelic-infrastructure-agent-fips, docker-fips, zarf-fips, scorecard,...

GHSA-74VM-87HJ-R66F vulnerabilities

Vulnerabilities for packages: crossplane-provider-grafana, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-grafana-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-aws-autoscaling-fips, crossplane-provider-aws-opensearchserverless-fips,...

CVE-2026-100349 vulnerabilities

Vulnerabilities for packages: crossplane-provider-grafana, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-grafana-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-aws-autoscaling-fips, crossplane-provider-aws-opensearchserverless-fips,...

GHSA-VRCC-3CH7-HPPW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

CVE-2026-100353 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

CVE-2026-100354 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

GHSA-G8CF-RCJF-C8CF vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

GHSA-RJ39-CV6W-8WV7 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...