CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: authservice, grpc-health-probe, opentofu, policy-controller, crane, kor, kubewatch, lazygit, fscrypt, sriov-network-device-plugin, ingress-nginx-controller, argo-workflows, rancher, nri-mssql, buf, ctop, pguser, crossplane-provider-azure-authorization, direnv, rook,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: authservice, grpc-health-probe, opentofu, eksctl, policy-controller, tofu-controller, crossplane-provider-azure-storage, goreleaser, kpt, snyk-cli, envoy-ratelimit, docker-credential-gcr, memcached-exporter, fscrypt, nerdctl, cluster-autoscaler,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: terragrunt-fips, conftest, terraform, steampipe, task, terragrunt, trivy-fips, chainctl, crossplane-provider-terraform, k9s, xeol, kubescape-server, zarf-fips, grype-fips, conftest-fips, snyk-cli, kots, cloudbeat-fips, packer-fips, k9s-fips, cg, trivy-operator-fips,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: terragrunt-fips, conftest, terraform, steampipe, task, terragrunt, trivy-fips, chainctl, crossplane-provider-terraform, k9s, xeol, kubescape-server, zarf-fips, grype-fips, conftest-fips, snyk-cli, kots, cloudbeat-fips, packer-fips, k9s-fips, cg, trivy-operator-fips,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: spire-controller-manager-fips, peerdb-flow, flux-kustomize-controller-fips, kyverno-policy-reporter-fips, spicedb, terraform-provider-acme-fips, neuvector-scanner-fips, rancher-agent, podman-fips, trillian-fips, grafana-mimir, loki-fips, azcopy,...

CLEANSTART-2026-QJ92322 Security fixes for CVE-2025-15558, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.0.2-r0, 2.0.2-r1

Multiple security vulnerabilities affect the crossplane package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: guac, gitlab-rails-ce, gitea, scorecard, src-fingerprint-fips, chainctl, chezmoi, kaniko, melange, kots, crossplane, k9s-fips, livekit-cli, gitaly-fips, argo-workflows-fips, grafana, cerbos-fips, flux, pulumi-language-yaml, syft-fips, kyverno, rancher-fleet,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: guac, gitlab-rails-ce, gitea, scorecard, src-fingerprint-fips, chainctl, chezmoi, kaniko, melange, kots, crossplane, k9s-fips, livekit-cli, gitaly-fips, argo-workflows-fips, grafana, cerbos-fips, flux, pulumi-language-yaml, syft-fips, kyverno, rancher-fleet,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: guac, gitlab-rails-ce, gitea, scorecard, src-fingerprint-fips, chainctl, chezmoi, kaniko, melange, kots, crossplane, k9s-fips, livekit-cli, gitaly-fips, argo-workflows-fips, grafana, cerbos-fips, flux, pulumi-language-yaml, syft-fips, kyverno, rancher-fleet,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: grafana-alloy, pulumi-language-dotnet, argo-cd, kyverno, chezmoi, osv-scanner, steampipe, snyk-cli, gomplate, nuclei, trivy, dagger, gitaly, wolfictl, crossplane, witness, argo-workflows, argo-events, k9s, trufflehog, zot, kargo, teleport, argocd-image-updater,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: grafana-alloy, pulumi-language-dotnet, argo-cd, kyverno, chezmoi, osv-scanner, steampipe, snyk-cli, gomplate, nuclei, trivy, dagger, gitaly, wolfictl, crossplane, witness, argo-workflows, argo-events, k9s, trufflehog, zot, kargo, teleport, argocd-image-updater,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: grafana-alloy, pulumi-language-dotnet, argo-cd, kyverno, chezmoi, osv-scanner, steampipe, snyk-cli, gomplate, nuclei, trivy, dagger, gitaly, wolfictl, crossplane, witness, argo-workflows, argo-events, k9s, trufflehog, zot, kargo, teleport, argocd-image-updater,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: grafana-alloy, pulumi-language-dotnet, argo-cd, kyverno, chezmoi, osv-scanner, steampipe, snyk-cli, gomplate, nuclei, trivy, dagger, gitaly, wolfictl, crossplane, witness, argo-workflows, argo-events, k9s, trufflehog, zot, kargo, teleport, argocd-image-updater,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, grafana-alloy, crossplane-provider-aws-memorydb, crossplane-provider-aws-s3, crossplane-provider-aws-kms, crossplane-provider-azure-storage, crossplane-provider-aws-rds, crossplane-provider-aws-firehose, crossplane-provider-aws-sns,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, grafana-alloy, crossplane-provider-aws-memorydb, crossplane-provider-aws-s3, crossplane-provider-aws-kms, crossplane-provider-azure-storage, crossplane-provider-aws-rds, crossplane-provider-aws-firehose, crossplane-provider-aws-sns,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms-fips, crossplane-provider-aws-sns, crossplane-provider-aws-kms, crossplane-provider-aws-sqs, aws-otel-collector, crossplane-provider-aws-efs-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-family-aws-fips,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms-fips, crossplane-provider-aws-sns, crossplane-provider-aws-kms, crossplane-provider-aws-sqs, aws-otel-collector, crossplane-provider-aws-efs-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-family-aws-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: spire-controller-manager-fips, peerdb-flow, flux-kustomize-controller-fips, yunikorn-k8shim, fuse-overlayfs-snapshotter, kyverno-policy-reporter-fips, prometheus-node-exporter, longhorn-instance-manager-fips, gitlab-rails-ce, spicedb, otel-cli,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: spire-controller-manager-fips, peerdb-flow, flux-kustomize-controller-fips, yunikorn-k8shim, fuse-overlayfs-snapshotter, kyverno-policy-reporter-fips, prometheus-node-exporter, kuberlr, gitlab-rails-ce, longhorn-instance-manager-fips, nri-redis-fips,...