GO-2026-4405 vulnerabilities

Vulnerabilities for packages: dagdotdev, cg, amazon-ssm-agent, chainctl...

GO-2026-5497 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent-fips, dagdotdev...

GO-2026-5422 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent-fips, dagdotdev...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: nova-fips, stakater-reloader, victoriametrics, pgwatch, podinfo, flux-notification-controller, cluster-autoscaler-fips, flux-image-automation-controller, librechat, flux-source-watcher, aws-load-balancer-controller-fips, flux-fips, victorialogs, metacontroller, dkron...

GO-2026-4406 vulnerabilities

Vulnerabilities for packages: dagdotdev, cg, amazon-ssm-agent, chainctl...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy, pulumi, promxy-fips, vault, amazon-cloudwatch-agent-operator-fips, prometheus, amazon-cloudwatch-agent-operator...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, opentelemetry-collector-contrib, sqlexporter, argo-events, amazon-cloudwatch-agent, cluster-api-aws-controller, grafana-alloy, jitsucom-bulker, bento...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: jaeger, keda, datadog-agent, tempo, loki, fluent-bit-plugin-loki, minio, trillian, node-problem-detector, k8sgpt, istio, mc, prometheus-pushgateway, amazon-cloudwatch-agent-operator, karma, minio-operator, aws-otel-collector, grafana, splunk-otel-collector, prometheu...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, opentelemetry-collector-contrib, k8sgpt, argo-workflows, kubeflow-pipelines, opentelemetry-collector, amazon-cloudwatch-agent, kargo, grafana-alloy, argo-rollouts, nats...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, promxy, pulumi...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, rancher-agent, pulumi, promxy, k3s, kubevela...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nri-apache, terraform-mcp-server, controller-gen, wait-for-port, tkn, libnvidia-container, k8sgpt, kapp, ip-masq-agent, k8sgateway, tflint, k3s, kubernetes-dashboard-auth, opa, yunikorn-k8shim, cluster-api-provider-vsphere, rancher-system-agent,...

CVE-2026-12743: Improper Neutralization of Special Elements used in an SQL Command

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CLEANSTART-2026-DH17348 Security fixes in amazon-k8s-cni-fips 1.22.3-r1

Package amazon-k8s-cni-fips version 1.22.3-r1 fixes 1 vulnerabilities: ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

CLEANSTART-2026-OQ69181 Security fixes in amazon-cloudwatch-agent 1.300065.0-r1

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-85983

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-85850

Package amazon-k8s-cni-fips version 1.22.3-r1 fixes 1 vulnerabilities: ghsa-p77j-4mvh-x3m3...

EUVD-2026-57420

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...

CVE-2026-19311

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...