GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, falcoctl, crossplane-provider-aws-cloudformation, crossplane-provider-sql, crossplane-provider-aws-s3, src, terraform-provider-google, harbor-registry, dapr, cortex, kubernetes-csi-node-driver-registrar, guac, steampipe,...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, falcoctl, crossplane-provider-aws-cloudformation, crossplane-provider-sql, crossplane-provider-aws-s3, src, terraform-provider-google, harbor-registry, dapr, cortex, kubernetes-csi-node-driver-registrar, guac, steampipe,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-transcribe, cluster-api, argo-cd, crossplane-provider-aws-bedrockagent-fips, crossplane-provider-aws-cloudtrail, tempo-fips, crossplane-provider-aws-lightsail,...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-transcribe, cluster-api, argo-cd, crossplane-provider-aws-bedrockagent-fips, crossplane-provider-aws-cloudtrail, tempo-fips, crossplane-provider-aws-lightsail,...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, falcoctl, crossplane-provider-aws-cloudformation, crossplane-provider-sql, crossplane-provider-aws-s3, volume-modifier-for-k8s, src, terraform-provider-google, harbor-registry, dapr, kubernetes-csi-livenessprobe, cortex,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, falcoctl, crossplane-provider-aws-cloudformation, crossplane-provider-sql, crossplane-provider-aws-s3, volume-modifier-for-k8s, src, terraform-provider-google, harbor-registry, dapr, kubernetes-csi-livenessprobe, cortex,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cert-exporter, terraform-provider-google, kubeflow, sriov-network-device-plugin-fips, opa, cluster-proportional-autoscaler-fips, kyverno-notation-aws, skaffold, sigstore-scaffolding-fips, smarter-device-manager, step-issuer,...

GO-2024-2883 vulnerabilities

Vulnerabilities for packages: cortex, timestamp-authority, grafana-mimir, fulcio, prometheus-alertmanager, rekor...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dagger, opentelemetry-collector-contrib, minio, kubernetes-csi-external-provisioner, opa, smarter-device-manager, step-ca, step, zot, rqlite, fulcio, cert-manager-cmctl, k8sgpt-operator, spicedb, k3s, pulumi-language-dotnet, kube-rbac-proxy, gomplate, hubble-ui,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-source-controller, opentelemetry-collector-contrib, step-ca, trino, step, argo-events, falcoctl, flux-kustomize-controller, zot, fulcio, up, flyte, bank-vaults, thanos, wal-g, flux, boring-registry, hugo-extended, velero, harbor-registry,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-source-controller, opentelemetry-collector-contrib, step-ca, argo-events, falcoctl, flux-kustomize-controller, zot, src-fingerprint, vexctl, fulcio, bank-vaults, rabbitmq-messaging-topology-operator, k3s, flux, gomplate, gitsign, kargo, skopeo, snyk-cli,...

CLEANSTART-2026-SP48916 Security fixes in grafana-mimir-fips 3.0.5-r1

Package grafana-mimir-fips version 3.0.5-r1 fixes 12 vulnerabilities: ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58, CVE-2026-39883, CVE-2026-39882, CVE-2026-27140...

CLEANSTART-2026-RY66554 Security fixes in grafana-mimir-fips 3.0.4-r1

Package grafana-mimir-fips version 3.0.4-r1 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-JG10359 Security fixes in grafana-mimir 3.0.2-r0

Package grafana-mimir version 3.0.2-r0 fixes 9 vulnerabilities: CVE-2025-68121, ghsa-9h8m-3fm2-qjrq, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679...

CLEANSTART-2026-PI73299 Security fixes in grafana-mimir 3.0.2-r1

Package grafana-mimir version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QD77000 Security fixes in grafana-mimir-fips 3.0.2-r0

Package grafana-mimir-fips version 3.0.2-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2025-68121, CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-PK62931 Security fixes in grafana-mimir-fips 3.0.2-r1

Package grafana-mimir-fips version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator-fips, flagger-fips, crossplane-provider-azure-streamanalytics, agentbeat-fips, rancher-support-bundle-kit, blob-csi-fips, cluster-api-gcp-controller-fips, cluster-api-fips, kube-logging-operator-fips, spicedb, zarf-fips, cluster-api, neuvector,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator-fips, flagger-fips, crossplane-provider-azure-streamanalytics, agentbeat-fips, rancher-support-bundle-kit, blob-csi-fips, cluster-api-gcp-controller-fips, cluster-api-fips, kube-logging-operator-fips, spicedb, zarf-fips, cluster-api, neuvector,...

CLEANSTART-2026-CY26398 Security fixes for CVE-2026-34986, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-w8rr-5gcm-pp58, ghsa-xmrv-pmrh-hhx2 applied in versions: 3.0.5-r0, 3.0.6-r0

Multiple security vulnerabilities affect the grafana-mimir-fips package. These issues are resolved in later releases. See references for individual vulnerability details...