GO-2024-2947 vulnerabilities

Vulnerabilities for packages: glab, rabbitmq-messaging-topology-operator, crossplane-provider-azure-authorization, flux-source-controller, kubernetes-event-exporter, goreleaser, pulumi-kubernetes-operator, slsa-verifier, vexctl, sigstore-scaffolding, flux-image-automation-controller,...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: glab, goreleaser, mc, crossplane-provider-aws-kms, kube-state-metrics, cert-exporter, pulumi, kubernetes-dashboard, nri-kafka, cri-tools, crossplane-provider-aws-iam, nri-mongodb, crossplane-provider-aws-route53, flux-helm-controller, flux-image-reflector-controller,...

CLEANSTART-2026-IB33850 Security fixes in crossplane-provider-keycloak-fips 2.21.1-r1

Package crossplane-provider-keycloak-fips version 2.21.1-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-jpcw-4wr7-c3vq...

CLEANSTART-2026-ZA01366 Security fixes in crossplane-provider-keycloak 2.22.1-r2

Package crossplane-provider-keycloak version 2.22.1-r2 fixes 2 vulnerabilities: CVE-2026-56852, CVE-2026-5160...

CLEANSTART-2026-FB06164 Security fixes in crossplane-provider-keycloak-fips 2.22.1-r1

Package crossplane-provider-keycloak-fips version 2.22.1-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-PP70979 Security fixes in crossplane-provider-sql-fips 0.15.0-r3

Package crossplane-provider-sql-fips version 0.15.0-r3 fixes 18 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: airflow, openstack-nova-2026.1, openstack-nova-2025.1, mcp-atlassian, apache-beam-python-3.11-sdk, open-webui, apache-beam-python-3.13-sdk, barman, openstack-keystone-2026.1, openstack-glance-2026.1, synapse, openstack-horizon-2025.1, in-toto, awx, request-1276,...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: airflow, openstack-nova-2026.1, openstack-nova-2025.1, mcp-atlassian, apache-beam-python-3.11-sdk, open-webui, apache-beam-python-3.13-sdk, barman, openstack-keystone-2026.1, openstack-glance-2026.1, synapse, openstack-horizon-2025.1, in-toto, awx, request-1276,...

CLEANSTART-2026-FD79405 Security fixes in crossplane 2.0.2-r0

Package crossplane version 2.0.2-r0 fixes 2 vulnerabilities: CVE-2025-61732, CVE-2025-68121...

CLEANSTART-2026-NC02398 Security fixes in crossplane-provider-sql-fips 0.13.0-r1

Package crossplane-provider-sql-fips version 0.13.0-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32289, CVE-2026-32282, CVE-2026-27140, CVE-2026-32288...

CLEANSTART-2026-EV47067 Security fixes in crossplane-provider-sql 0.13.0-r0

Package crossplane-provider-sql version 0.13.0-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-AE01714 Security fixes in crossplane-provider-sql-fips 0.13.0-r0

Package crossplane-provider-sql-fips version 0.13.0-r0 fixes 2 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv...

CLEANSTART-2026-EG54450 Security fixes in crossplane-provider-aws 2.3.0-r0

Package crossplane-provider-aws version 2.3.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

PT-2026-85870

Package crossplane-provider-sql version 0.13.0-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

PT-2026-85811

Package crossplane-provider-sql-fips version 0.13.0-r0 fixes 2 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: external-secrets-operator, tetragon, apisix-ingress-controller, kubeflow-pipelines, kubernetes, gitlab-kas, kyverno, cass-operator, cloud-provider-gcp-cloud-controller-manager, kube-metrics-adapter, cluster-api-azure-controller, kube-vip-cloud-provider,...

GHSA-RJWR-M7QX-3FJR vulnerabilities

Vulnerabilities for packages: crossplane-fips, crossplane...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: trivy, image-factory, zarf-fips, tflint, kyverno, teleport, tflint-fips, cloudbeat, falcoctl, kyverno-notation-aws-fips, kyverno-fips, ratify, spire-server-fips, neuvector-sigstore-interface, trivy-operator, trivy-operator-fips, kubescape-server, zarf, tekton-chains,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: trivy, image-factory, zarf-fips, tflint, kyverno, teleport, tflint-fips, cloudbeat, falcoctl, kyverno-notation-aws-fips, kyverno-fips, ratify, spire-server-fips, neuvector-sigstore-interface, trivy-operator, trivy-operator-fips, kubescape-server, zarf, tekton-chains,...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: tflint, trivy, kyverno, trivy-operator, zarf, crossplane, aactl, policy-controller, tekton-chains, kubescape, kyverno-notation-aws, neuvector-sigstore-interface, ratify, falcoctl, tkn, gitsign...