GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, helm, go-discover, spire-server, vault-benchmark, eksctl, chezmoi, ko, prometheus, gitlab-kas, kargo, istio, docker-cli-buildx, external-dns, external-secrets-operator, telegraf, pulumi-language-yaml, grype, gitlab-runner,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-opensearch-fips, crossplane-provider-sql, aws-otel-collector, rke2-cloud-provider-fips, crossplane-provider-aws-sesv2-fips, crossplane-provider-aws-cloudwatch-fips, gomplate, temporal, harbor-cli, longhorn-manager-fips, datadog-agent-fips,...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, crossplane-provider-keycloak, crossplane-provider-azure-managedidentity, crossplane-provider-aws-route53, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudformation, crossplane-provider-aws-lambda,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, crossplane-provider-keycloak, crossplane-provider-azure-managedidentity, crossplane-provider-aws-route53, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudformation, crossplane-provider-aws-lambda,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: nri-mongodb, helm, sftpgo, hey, percona-server-mongodb-operator, controller-gen, chezmoi, kind, ko, kubernetes-csi-driver-nfs, kubernetes-dashboard-api, prometheus, crossplane-provider-aws-firehose, gitlab-kas, terraform-provider-random, external-dns, task,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: s5cmd, azure-workload-identity-webhook, rabbitmq-cluster-operator, sftpgo-plugin-geoipfilter, nri-jmx, sonobuoy, timescaledb-parallel-copy, spire-server, newrelic-fluent-bit-output, gitleaks, vault-benchmark, docker-credential-ecr-login, hey, eksctl,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: s5cmd, nri-haproxy, nri-mongodb, azure-workload-identity-webhook, rabbitmq-cluster-operator, sftpgo-plugin-geoipfilter, sonobuoy, timescaledb-parallel-copy, spire-server, newrelic-fluent-bit-output, gitleaks, vault-benchmark, docker-credential-ecr-login, hey, eksctl,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: nri-mongodb, rabbitmq-cluster-operator, hey, percona-server-mongodb-operator, kubernetes-csi-driver-nfs, prometheus, kubernetes-dashboard-api, crossplane-provider-aws-firehose, external-dns, crossplane-provider-aws-ec2, sftpgo-plugin-pubsub, openbao-k8s, scorecard,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: s5cmd, nri-haproxy, nri-mongodb, rabbitmq-cluster-operator, helm, sonobuoy, yq, thanos, secrets-store-csi-driver-provider-gcp, docker-cli, newrelic-fluent-bit-output, rqlite, docker-credential-ecr-login, hey, controller-gen, eksctl, kind, lazygit, golangci-lint,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: s5cmd, nri-haproxy, nri-mongodb, rabbitmq-cluster-operator, helm, sonobuoy, yq, thanos, secrets-store-csi-driver-provider-gcp, docker-cli, newrelic-fluent-bit-output, rqlite, docker-credential-ecr-login, hey, controller-gen, eksctl, kind, lazygit, golangci-lint,...