CLEANSTART-2026-MO12071 Security fixes in grafana-agent-operator 0.44.8-r0

Package grafana-agent-operator version 0.44.8-r0 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3control, ld-relay-fips, crossplane-provider-kubernetes-fips, art, dkron-fips, google-cloud-otel-ops-collector, crossplane-provider-aws-emrserverless-fips, keda-fips, perses-fips, cluster-api, temporal, external-secrets-operator,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, crossplane-provider-kubernetes-fips, crossplane-provider-aws-emrserverless-fips, cluster-api, external-secrets-operator, gitlab-kas, crossplane-provider-aws-cloudfront, terraform, slsa-verifier, crossplane-provider-aws-ssm,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: kargo, nerdctl, amazon-cloudwatch-agent-operator, node-problem-detector, flux-image-reflector-controller, src, litestream, rclone, crossplane-provider-aws-lambda, gitlab-pages, kubernetes-csi-driver-nfs, aws-efs-csi-driver, aactl, cloudflared,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kargo, kubescape-operator, descheduler, filebrowser, nerdctl, karpenter, kine, amazon-cloudwatch-agent-operator, pulumi-language-java, newrelic-infrastructure-agent, flux-image-reflector-controller, terraform-provider-pagerduty, spqr, volume-modifier-for-k8s, cue,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: polaris-fips, secrets-store-csi-driver-provider-aws-fips, prometheus-nats-exporter, crossplane-provider-kubernetes-fips, metrics-agent-fips, git-sync-fips, google-cloud-otel-ops-collector, prometheus-redis-exporter, keda-fips, pulumi-language-yaml,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, crossplane-provider-kubernetes-fips, dkron-fips, google-cloud-otel-ops-collector, keda-fips, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, cluster-api, external-secrets-operator,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: kubescape-operator, descheduler, grafana-operator, nerdctl, sbom-convert, kine, amazon-cloudwatch-agent-operator, postgres-operator, sealed-secrets, terraform-provider-pagerduty, kor, headlamp, kubeflow-pipelines, nats-top, spqr, src, litestream,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: nerdctl, mockgen, kor, spqr, litestream, sops, flux-notification-controller, aws-sigv4-proxy, nri-nagios, chisel, doppler-kubernetes-operator, gogatekeeper, crossplane-provider-family-aws, aws-flb-cloudwatch, nri-haproxy, go-licenses, rancher-system-upgrade-controlle...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, incert, nerdctl, spqr, litestream, dagdotdev, flux-notification-controller, nri-nagios, kube-rbac-proxy, chartmuseum, neuvector-dbgen, trivy, doppler-kubernetes-operator, kubevela, fq, aws-flb-cloudwatch, nri-haproxy, kubernetes...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, incert, nerdctl, spqr, litestream, dagdotdev, flux-notification-controller, nri-nagios, kube-rbac-proxy, chartmuseum, neuvector-dbgen, trivy, doppler-kubernetes-operator, kubevela, fq, aws-flb-cloudwatch, nri-haproxy, kubernetes...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: kargo, filebrowser, docker, kine, amazon-cloudwatch-agent-operator, flux-image-reflector-controller, grafana-alloy, pulumi, secrets-store-csi-driver-provider-azure, rclone, opentelemetry-collector-contrib, sftpgo-plugin-pubsub, sops, flux-notification-controller,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, prometheus-redis-exporter, pulumi-language-yaml, shfmt, prometheus-elasticsearch-exporter-fips, go-md2man, cosign-fips, crossplane-provider-azure, opa, cass-operator-fips-no-pvc-delete, aws-flb-kinesis-fips, ko-fips,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, kargo, kafkaexporter, descheduler, filebrowser, hugo-extended, docker, nerdctl, kine, amazon-cloudwatch-agent-operator, pulumi-language-java, flux-image-reflector-controller, postgres-operator, age, grafana-alloy, pulumi, spqr,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux, hugo-extended, timestamp-authority, rook, sigstore-scaffolding, guac, flux-image-reflector-controller, flux-kustomize-controller, step-ca, step, pulumi, up, tekton-chains, secrets-store-csi-driver-provider-azure, buildkitd, rclone, policy-controller,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, prometheus-redis-exporter, shfmt, prometheus-elasticsearch-exporter-fips, fq, temporal, nri-nginx, dagger, cosign-fips, go-md2man, crossplane-provider-azure, opa, terraform, kube-vip-fips, slsa-verifier, cass-operator-fips-no-pvc-delete,...