GO-2026-5052 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, x509-certificate-exporter, nfpm, nuclei, external-secrets-operator, telegraf, crossplane-provider-azure-authorization, goreleaser, grafana, gobuster, cert-manager, splunk-otel-collector, crossplane-provider-azure-managedidentity,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: buf, kyverno-policy-reporter, helm-push, terraform-docs, kubeflow-katib, gobuster, kubescape, libssh2, trivy, ko, dex, terraform-provider-azurerm, gomplate, terragrunt, hugo, amass, fulcio, melange, crossplane-provider-azure-authorization, kube-fluentd-operator,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, dbmate, cluster-api, harbor-registry, k9s, helm-push, delve, terraform-docs, crossplane-provider-aws-kinesis, kubeflow-katib, newrelic-nri-kube-events, nri-prometheus, zarf, migrate, coredns, kubescape, omnibump, osv-scanner,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: azure-service-operator, kyverno-policy-reporter, gatekeeper, zarf, kubescape, crossplane-provider-aws-cloudformation, trivy, tekton-pipelines, ko, rancher-machine, jaeger, sftpgo-plugin-kms, kube-arangodb, contour, docker-cli-buildx, loki, cert-manager, witness,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, k9s, crossplane-provider-aws-kinesis, zarf, go-discover, kubescape, external-dns, osv-scanner, ksops, crossplane-provider-aws-cloudformation, trivy, gitlab-kas, chisel, ko, teleport, rancher-machine, terraform-provider-azurerm,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, nri-f5, cluster-api-gcp-controller, azure-service-operator, dbmate, harbor-registry, gatekeeper, cloud-provider-vsphere, terraform-docs, crossplane-provider-aws-kinesis, kubeflow-katib, ytt, gobuster, osv-scanner, external-dns,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, aws-flb-firehose, kyverno-policy-reporter, shfmt, nri-prometheus, zarf, kubescape, crossplane-provider-aws-cloudformation, trivy, kube-logging-operator, ko, mockery, mockgen, stakater-reloader, kube-fluentd-operator, aws-flb-cloudwatch,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, crossplane-provider-azure-sql, rook, tkn, zarf, sigstore-scaffolding, rekor, k3d, kubescape, flux-image-reflector-controller, pulumi-kubernetes-operator, ksops, crossplane-provider-azure, flux-helm-controller, sops,...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, aws-flb-firehose, kyverno-policy-reporter, shfmt, nri-prometheus, zarf, kubescape, crossplane-provider-aws-cloudformation, trivy, kube-logging-operator, ko, stakater-reloader, kube-fluentd-operator, aws-flb-cloudwatch, dagdotdev, cfssl,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: k9s, zarf, go-discover, kubescape, external-dns, osv-scanner, ksops, trivy, gitlab-kas, chisel, ko, teleport, rancher-machine, terraform-provider-azurerm, gomplate, gitlab-runner, istio, terragrunt, fulcio, buildah, knative-serving, melange, containerd,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, knative-kafka-broker, external-secrets-fips, cloud-provider-aws-fips, tempo, fleet-server, grafana-mimir, tempo-fips, gotrue, xeol-fips, crossplane-provider-aws-rds, go-sqlcmd, gitlab-rails-ce-fips, zot, amazon-cloudwatch-agent-fips,...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, crossplane-provider-aws-elasticache, crossplane-provider-azure-sql, crossplane-provider-aws-dynamodb, crossplane-provider-aws-sqs, tempo, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, aws-otel-collector,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, crossplane-provider-aws-elasticache, crossplane-provider-azure-sql, crossplane-provider-aws-dynamodb, crossplane-provider-aws-sqs, tempo, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, aws-otel-collector,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: azure-service-operator, aws-load-balancer-controller, aws-flb-firehose, kyverno-policy-reporter, nri-prometheus, crossplane-provider-aws-cloudformation, kube-logging-operator, ko, metrics-agent, rancher-machine, sftpgo-plugin-kms, mockery, stakater-reloader,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, nri-f5, cluster-api-gcp-controller, azure-service-operator, dbmate, harbor-registry, gatekeeper, cloud-provider-vsphere, terraform-docs, crossplane-provider-aws-kinesis, kubeflow-katib, ytt, gobuster, osv-scanner, external-dns,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: azure-service-operator, gatekeeper, crossplane-provider-aws-cloudformation, kube-logging-operator, kubelet-csr-approver, rancher-machine, jaeger, sftpgo-plugin-kms, mockgen, stakater-reloader, aws-flb-cloudwatch, cfssl, bento, kubeflow, xeol, dask-gateway,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, cluster-api-gcp-controller, azure-service-operator, dbmate, harbor-registry, gatekeeper, cloud-provider-vsphere, terraform-docs, crossplane-provider-aws-kinesis, kubeflow-katib, ytt, gobuster, osv-scanner, external-dns, ghaudit,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-f5, aws-load-balancer-controller, aws-flb-firehose, kyverno-policy-reporter, helm-push, delve, terraform-docs, shfmt, kubeflow-katib, ytt, nri-prometheus, gobuster, nri-nginx, kubernetes-csi-external-provisioner, kube-logging-operator, prometheus-pushgateway,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-f5, aws-load-balancer-controller, aws-flb-firehose, kyverno-policy-reporter, helm-push, delve, terraform-docs, shfmt, kubeflow-katib, ytt, nri-prometheus, gobuster, nri-nginx, kubernetes-csi-external-provisioner, kube-logging-operator, prometheus-pushgateway,...