CVE-2026-54428 vulnerabilities

Vulnerabilities for packages: apicurio-registry, nrjmx, druid, opensearch, cloudwatch-exporter, cassandra-reaper, akhq, thingsboard...

GHSA-V3JC-474W-2WM6 vulnerabilities

Vulnerabilities for packages: apicurio-registry, nrjmx, druid, opensearch, cloudwatch-exporter, cassandra-reaper, akhq, thingsboard...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: vault, amazon-cloudwatch-agent-operator-fips, pulumi, prometheus, promxy-fips, amazon-cloudwatch-agent-operator, promxy...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: argo-events, grafana-alloy, splunk-otel-collector, jitsucom-bulker, opentelemetry-collector-contrib, amazon-cloudwatch-agent, cluster-api-aws-controller, sqlexporter, bento...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: karma, aws-otel-collector, trillian, istio, fluent-bit-plugin-loki, prometheus, prometheus-pushgateway, grafana, minio-operator, opentelemetry-collector, k8sgpt, minio, tempo, certificate-transparency, mc, loki, jaeger, keda, datadog-agent, splunk-otel-collector,...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: kargo, grafana-alloy, kubeflow-pipelines, splunk-otel-collector, opentelemetry-collector-contrib, tempo, nats, argo-rollouts, amazon-cloudwatch-agent, opentelemetry-collector, k8sgpt, argo-workflows...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: kubevela, promxy, rancher-agent, k3s, pulumi, amazon-cloudwatch-agent-operator...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy, amazon-cloudwatch-agent-operator, pulumi...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, render-template, docker-cli, aws-otel-collector, flux, spark-operator, undock, timescaledb-tune, eksctl, cerbos, rancher-system-agent, k8sgpt, kubernetes-dashboard-web, dive, gcsfuse, rabbitmq-messaging-topology-operator, aactl, fulci...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

PT-2026-69305

Name of the Vulnerable Software and Affected Versions lmammino oidc-authorizer versions prior to 0.4.1 Description The Lambda Authorizer component contains an issue where raw Authorization header values and complete bearer tokens or JWTs are logged on authentication failure paths, potentially...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3844 (ALAS-2026-3844)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300069.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3844 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject...

CLEANSTART-2026-ZO12938 Security fixes in amazon-cloudwatch-agent-fips 1.300066.1-r1

Package amazon-cloudwatch-agent-fips version 1.300066.1-r1 fixes 20 vulnerabilities: CVE-2026-39824, CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: neo4j, zipkin, celeborn, cloudwatch-exporter, apache-activemq-artemis, infinispan, tez, druid, opensearch, strimzi-kafka-operator, thingsboard, apache-nifi, kserve-modelmesh, apache-pulsar, flyway, wavefront-proxy, logstash, apicurio-registry,...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: neo4j, zipkin, celeborn, cloudwatch-exporter, apache-activemq-artemis, infinispan, tez, druid, opensearch, strimzi-kafka-operator, thingsboard, apache-nifi, kserve-modelmesh, apache-pulsar, flyway, wavefront-proxy, logstash, apicurio-registry,...

GHSA-6CQP-G7GG-8HR5 vulnerabilities

Vulnerabilities for packages: neo4j, zipkin, celeborn, cloudwatch-exporter, apache-activemq-artemis, infinispan, tez, druid, opensearch, strimzi-kafka-operator, thingsboard, apache-nifi, kserve-modelmesh, apache-pulsar, flyway, wavefront-proxy, logstash, apicurio-registry,...

GHSA-6JQX-86GH-F27W vulnerabilities

Vulnerabilities for packages: neo4j, zipkin, celeborn, cloudwatch-exporter, apache-activemq-artemis, infinispan, tez, druid, opensearch, strimzi-kafka-operator, thingsboard, apache-nifi, kserve-modelmesh, apache-pulsar, flyway, wavefront-proxy, logstash, apicurio-registry,...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: neo4j, zipkin, celeborn, cloudwatch-exporter, apache-activemq-artemis, infinispan, tez, druid, opensearch, strimzi-kafka-operator, thingsboard, apache-nifi, kserve-modelmesh, apache-pulsar, flyway, wavefront-proxy, logstash, apicurio-registry,...

GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: neo4j, zipkin, celeborn, cloudwatch-exporter, apache-activemq-artemis, infinispan, tez, druid, opensearch, strimzi-kafka-operator, thingsboard, apache-nifi, kserve-modelmesh, apache-pulsar, flyway, wavefront-proxy, logstash, apicurio-registry,...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: neo4j, zipkin, celeborn, cloudwatch-exporter, apache-activemq-artemis, infinispan, tez, druid, opensearch, strimzi-kafka-operator, thingsboard, apache-nifi, kserve-modelmesh, apache-pulsar, flyway, wavefront-proxy, logstash, apicurio-registry,...