CLEANSTART-2026-MO12071 Security fixes in grafana-agent-operator 0.44.8-r0

Package grafana-agent-operator version 0.44.8-r0 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, tkn-fips, crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-azure-storagesync, zarf-fips, promxy-fips, cert-manager-fips, velero-plugin-for-gcp, secrets-store-csi-driver-provider-azure,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: nerdctl, crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-azure-storagesync, promxy-fips, yunikorn-k8shim-fips, litestream, vertical-pod-autoscaler-fips, crossplane-provider-aws-backup-fips, crossplane-provider-aws-elb, aws-efs-csi-driver,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, podman, external-secrets-operator, crossplane-provider-aws-firehose, src, vault-env, crossplane-provider-aws-cloudformation, gitlab-kas, flux, eksctl, crossplane-provider-azure-managedidentity, crossplane-provider-azure-storage, rclone,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cilium-envoy, terraform-provider-sendgrid, external-secrets-operator, ingress-nginx-controller, pulumi-language-java, grafana-rollout-operator, coredns, trivy, newrelic-fluent-bit-output, wal-g, vault-env, prometheus-pushgateway, k8ssandra-operator, openbao,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: incert, tkn-fips, nerdctl, aws-flb-kinesis-fips, cert-exporter-fips, nri-couchbase-fips, mongodb-kubernetes-operator-fips, promxy-fips, yunikorn-k8shim-fips, kor, cert-manager-fips, spqr, prometheus-nats-exporter-fips, secrets-store-csi-driver-provider-azure,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, aws-flb-kinesis-fips, promxy-fips, yunikorn-k8shim-fips, spqr, secrets-store-csi-driver-provider-azure, certificate-transparency-fips, litestream, opentelemetry-collector-contrib, sops, terraform-provider-sendgrid-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, mongodb-kubernetes-operator, ingress-nginx-controller, local-static-provisioner, grafana-rollout-operator, spqr, openbao-k8s, pguser, azure-workload-identity-webhook, kubeflow, newrelic-fluent-bit-output, rancher-system-agent,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, mongodb-kubernetes-operator, jaeger, pguser, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, ghaudit, eksctl, helm-set-status, litefs, terraform-provider-pagerduty, lazygit, opensearch-k8s-operator, ip-masq-agent,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, ghaudit, flux, litefs, terraform-provider-pagerduty, opensearch-k8s-operator, ip-masq-agent, crossplane-provider-azure-sql, mailpit, zot, gobump, tkn, nri-redis, falco-exporter, nri-elasticsearch, cortex, tempo,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, ghaudit, flux, litefs, terraform-provider-pagerduty, opensearch-k8s-operator, ip-masq-agent, crossplane-provider-azure-sql, mailpit, zot, gobump, tkn, nri-redis, falco-exporter, nri-elasticsearch, cortex, tempo,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: gomplate, guac, wal-g, restic, openbao, docker, gitness, kine, flux, eksctl, crossplane-provider-azure-managedidentity, crossplane-provider-azure-storage, rclone, crossplane, sftpgo-plugin-pubsub, vexctl, crossplane-provider-family-azure, oauth2-proxy, boring-registr...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, aws-flb-kinesis-fips, cert-exporter-fips, spqr, secrets-store-csi-driver-provider-azure, certificate-transparency-fips, litestream, harbor-scanner-trivy-fips, vertical-pod-autoscaler-fips, sops, aws-efs-csi-driver,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, podman, terraform-provider-sendgrid, helm-push, pulumi-language-java, local-static-provisioner, nri-kafka, gomplate, openbao-k8s, cfssl, kubeflow, guac, crossplane-provider-family-aws, crossplane-provider-aws-firehose, src,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flyte, fluent-bit-plugin-loki, tkn, step, policy-controller, argo-events, cortex, grafana-agent-operator, guac, tempo, sops, trino, wal-g, restic, velero, opentelemetry-collector, buildkitd, falcoctl, up, flux-source-controller, rook, flux, rekor, k8sgpt, cosign, hug...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, tkn-fips, nerdctl, aws-flb-kinesis-fips, cert-exporter-fips, spqr, secrets-store-csi-driver-provider-azure, certificate-transparency-fips, litestream, harbor-scanner-trivy-fips, sops, dagdotdev, flux-notification-controller,...