CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: cloudbeat, k9s, conftest, wolfictl, crossplane-provider-terraform, zarf-fips, kubescape, k9s-fips, kubescape-server, cg, trivy-operator, cloudbeat-fips, terragrunt, task-fips, kubescape-server-fips, chainctl-fips, xeol, xeol-fips, trivy, grype-fips, grype,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: cloudbeat, k9s, conftest, wolfictl, crossplane-provider-terraform, zarf-fips, kubescape, k9s-fips, kubescape-server, cg, trivy-operator, cloudbeat-fips, terragrunt, task-fips, kubescape-server-fips, chainctl-fips, xeol, xeol-fips, trivy, grype-fips, grype,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: cloudbeat, image-factory, ory-kratos, zarf-fips, ratify-fips, kubescape, temporal, seaweedfs-operator-fips, consul-k8s, apko, slsa-verifier, spire-server-fips, spicedb, kyverno-policy-reporter-plugins-kyverno, skopeo-fips, traefik, vault-secrets-webhook,...

CLEANSTART-2026-QJ92322 Security fixes for CVE-2025-15558, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.0.2-r0, 2.0.2-r1

Multiple security vulnerabilities affect the crossplane package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, grafana-alloy-fips, grafana-alloy, kyverno, gitaly-fips, nuclei, kubevela, kubevela-fips, argo-workflows-fips, gitlab-runner, apko, grype, grype-fips, cerbos-fips, gitea-fips, trivy-operator-fips...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, grafana-alloy-fips, grafana-alloy, kyverno, gitaly-fips, nuclei, kubevela, kubevela-fips, argo-workflows-fips, gitlab-runner, apko, grype, grype-fips, cerbos-fips, gitea-fips, trivy-operator-fips...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, grafana-alloy-fips, grafana-alloy, kyverno, gitaly-fips, nuclei, kubevela, kubevela-fips, argo-workflows-fips, gitlab-runner, apko, grype, grype-fips, cerbos-fips, gitea-fips, trivy-operator-fips...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: gitlab-runner, pulumi-kubernetes-operator, gitea, trivy-operator, apko, wolfictl, kubescape, argo-workflows, snyk-cli, teleport, dagger, src-fingerprint, witness, pulumi-language-yaml, flux-source-controller, gomplate, syft, flux, grafana-alloy, gitaly, skaffold, zar...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: gitlab-runner, pulumi-kubernetes-operator, gitea, trivy-operator, apko, wolfictl, kubescape, argo-workflows, snyk-cli, teleport, dagger, src-fingerprint, witness, pulumi-language-yaml, flux-source-controller, gomplate, syft, flux, grafana-alloy, gitaly, skaffold, zar...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: gitlab-runner, pulumi-kubernetes-operator, gitea, trivy-operator, apko, wolfictl, kubescape, argo-workflows, snyk-cli, teleport, dagger, src-fingerprint, witness, pulumi-language-yaml, flux-source-controller, gomplate, syft, flux, grafana-alloy, gitaly, skaffold, zar...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: gitlab-runner, pulumi-kubernetes-operator, gitea, trivy-operator, apko, wolfictl, kubescape, argo-workflows, snyk-cli, teleport, dagger, src-fingerprint, witness, pulumi-language-yaml, flux-source-controller, gomplate, syft, flux, grafana-alloy, gitaly, skaffold, zar...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, aws-otel-collector, datadog-agent, crossplane-provider-aws-kinesis, crossplane-provider-aws-memorydb, crossplane-provider-azure-storage, crossplane-provider-family-aws, crossplane-provider-aws-route53, crossplane-provider-aws-cloudfront,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, aws-otel-collector, datadog-agent, crossplane-provider-aws-kinesis, crossplane-provider-aws-memorydb, crossplane-provider-azure-storage, crossplane-provider-family-aws, crossplane-provider-aws-route53, crossplane-provider-aws-cloudfront,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecs-fips, amazon-cloudwatch-agent, crossplane-provider-aws-cloudfront, grafana-alloy-fips, crossplane-provider-keycloak-fips, grafana-alloy, nuclei, crossplane-provider-azure-authorization, crossplane-provider-aws-cloudfront-fips,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecs-fips, amazon-cloudwatch-agent, crossplane-provider-aws-cloudfront, grafana-alloy-fips, crossplane-provider-keycloak-fips, grafana-alloy, nuclei, crossplane-provider-azure-authorization, crossplane-provider-aws-cloudfront-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: cloudbeat, k6-operator-fips, net-kourier-fips, ratify-fips, kubescape, portieris-fips, rabbitmq-cluster-operator, kubernetes-csi-driver-nfs-fips, mc, chaos-mesh-fips, contour-fips, kubernetes-csi-external-resizer-fips, crossplane-provider-kubernetes,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: cloudbeat, k6-operator-fips, net-kourier-fips, kubescape, kubernetes-csi-driver-nfs-fips, mc, chaos-mesh-fips, contour-fips, kubernetes-csi-external-resizer-fips, crossplane-provider-kubernetes, crossplane-provider-aws-cloudfront-fips, prometheus-stackdriver-exporter...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, pulumi-kubernetes-operator, crossplane-provider-aws-sns, gitea, crossplane-provider-aws-kinesis, crossplane-provider-azure-storage, aactl, helm-push, crossplane-provider-aws-route53, src-fingerprint, crossplane-provider-aws-cloudfront, hel...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, pulumi-kubernetes-operator, crossplane-provider-aws-sns, gitea, crossplane-provider-aws-kinesis, crossplane-provider-azure-storage, aactl, helm-push, crossplane-provider-aws-route53, src-fingerprint, crossplane-provider-aws-cloudfront, hel...