GO-2026-5052 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, cert-manager, splunk-otel-collector, goreleaser, grafana, crossplane-provider-azure-storage, telegraf, gobuster, x509-certificate-exporter, nfpm, nuclei, crossplane-provider-azure-managedidentity, crossplane-provider-azure-authorization,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: promxy, grafana-rollout-operator, rekor, kubescape, trino, kube-vip, act, conjur-cli, cert-manager-webhook-pdns, envconsul, spire-server, witness, nri-couchbase, kots, actions-runner-controller, lazydocker, bento, trufflehog, snyk-cli, crossplane-provider-aws-ec2,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: rekor, kubescape, cilium-cli, ferretdb, flux-source-controller, spire-server, kots, actions-runner-controller, flux-helm-controller, eksctl, memcached-exporter, caddy, oauth2-proxy, flux-image-reflector-controller, libssh, cfssl,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: promxy, kube-vip, cilium-cli, witness, flux-source-controller, flux-notification-controller, trufflehog, docker-compose, terraform-provider-acme, envoy-ratelimit, tigera-operator, guac, melange, steampipe, kubernetes-csi-driver-nfs, coredns, step-ca, zot,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: kubescape, act, cilium-cli, witness, crossplane-provider-aws-iam, flux-source-controller, spire-server, flux-notification-controller, kots, eksctl, caddy, snyk-cli, crossplane-provider-aws-ec2, docker-compose, terraform-provider-acme, wolfictl,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cert-manager-cmctl, fluxcd-kustomize-mutating-webhook, helm-set-status, cilium-cli, conjur-cli, crossplane-provider-aws-iam, ferretdb, spire-server, http-echo, nri-couchbase, flux-notification-controller, mc, thanos-operator,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kube-vip, cilium-cli, flux-source-controller, http-echo, flux-notification-controller, hugo-extended, docker-compose, envoy-ratelimit, guac, melange, tailscale, newrelic-nri-statsd, step-ca, kaf, gke-gcloud-auth-plugin, nri-mongodb, zot,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: gh, rekor, terragrunt, kubescape, crossplane-provider-azure, flux-source-controller, k3s, opentelemetry-collector-contrib, spire-server, vexctl, flux-notification-controller, kubernetes-event-exporter, actions-runner-controller, gitsign, flux-helm-controller,...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: cilium-cli, flux-source-controller, http-echo, flux-notification-controller, hugo-extended, docker-compose, envoy-ratelimit, guac, melange, tailscale, newrelic-nri-statsd, step-ca, kaf, gke-gcloud-auth-plugin, nri-mongodb, zot, kyverno-policy-reporter-kyverno-plugin,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kubescape, act, cilium-cli, witness, flux-source-controller, spire-server, flux-notification-controller, kots, eksctl, caddy, snyk-cli, wolfictl, flux-image-automation-controller, guac, external-secrets-operator, melange, pulumi-language-yaml, steampipe,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-notificationhubs, prometheus-adapter, conftest, ory-kratos-fips, crossplane-provider-aws-elasticsearch-fips, perses, cert-manager-csi-driver, kubernetes-dns-node-cache, tailscale, amazon-eks-ami-fips, hydra-fips, kro, secrets-store-csi-drive...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: aws-otel-collector, crossplane-provider-aws-iam, crossplane-provider-aws-kinesis, crossplane-provider-aws-lambda, grafana-alloy, crossplane-provider-aws-ec2, crossplane-provider-aws-cloudfront, crossplane-provider-azure-managedidentity, tempo,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, crossplane-provider-aws-iam, crossplane-provider-aws-kinesis, crossplane-provider-aws-lambda, grafana-alloy, crossplane-provider-aws-ec2, crossplane-provider-aws-cloudfront, crossplane-provider-azure-managedidentity, tempo,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: promxy, cert-manager-cmctl, kube-vip, cilium-cli, witness, flux-source-controller, grafana-image-renderer, http-echo, flux-notification-controller, lazydocker, docker-compose, terraform-provider-acme, envoy-ratelimit, guac, kubernetes-csi-driver-nfs, tailscale,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cilium-cli, http-echo, flux-notification-controller, guac, steampipe, kubernetes-csi-driver-nfs, newrelic-nri-statsd, gke-gcloud-auth-plugin, nri-mongodb, kyverno-policy-reporter-kyverno-plugin, wazero, wave, kubernetes-release, apache-exporter,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cert-manager-cmctl, fluxcd-kustomize-mutating-webhook, helm-set-status, cilium-cli, conjur-cli, crossplane-provider-aws-iam, ferretdb, spire-server, http-echo, nri-couchbase, flux-notification-controller, mc, thanos-operator,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cert-manager-cmctl, fluxcd-kustomize-mutating-webhook, helm-set-status, cilium-cli, conjur-cli, crossplane-provider-aws-iam, ferretdb, spire-server, flux-notification-controller, mc, thanos-operator, actions-runner-controller, bento, eksctl,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: hello-world-golang, render-template, ferretdb, http-echo, nri-couchbase, secrets-store-csi-driver-provider-gcp, thanos-operator, actions-runner-controller, flux-helm-controller, eksctl, ytt, esbuild, caddy, memcached-exporter, flux-image-reflector-controller,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: hello-world-golang, render-template, ferretdb, http-echo, nri-couchbase, secrets-store-csi-driver-provider-gcp, thanos-operator, actions-runner-controller, flux-helm-controller, eksctl, ytt, esbuild, caddy, memcached-exporter, flux-image-reflector-controller,...