GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy, pulumi, prometheus, vault, amazon-cloudwatch-agent-operator-fips, promxy-fips, amazon-cloudwatch-agent-operator...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, tempo, grafana-alloy, opentelemetry-collector, kubeflow-pipelines, argo-rollouts, opentelemetry-collector-contrib, k8sgpt, argo-workflows, kargo, splunk-otel-collector, nats...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, argo-events, sqlexporter, grafana-alloy, jitsucom-bulker, opentelemetry-collector-contrib, splunk-otel-collector, bento, cluster-api-aws-controller...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: karma, fluent-bit-plugin-loki, certificate-transparency, grafana, opentelemetry-collector, mc, jaeger, datadog-agent, tempo, metrics-server, trillian, prometheus, prometheus-pushgateway, minio, keda, minio-operator, aws-otel-collector, k8sgpt, istio,...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: pulumi, promxy, amazon-cloudwatch-agent-operator...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: k3s, pulumi, rancher-agent, kubevela, promxy, amazon-cloudwatch-agent-operator...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: helm-set-status, argo-events, cni-plugins, glow, kapp, rabbitmq-default-user-credential-updater, tempo, dive, guac, pluto, ipfs-cluster, nri-apache, falcoctl, yunikorn-k8shim, wgcf, kor, fzf, kubernetes-csi-driver-hostpath, emissary, dex, headlamp, render-template,...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3844 (ALAS-2026-3844)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300069.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3844 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: bank-vaults, rclone-fips, seaweedfs-operator-fips, commercial-expanso-edge, gcp-compute-persistent-disk-csi-driver-fips, crossplane-provider-gcp, fulcio-fips, trivy-fips, verticadb-operator-fips, tkn-fips, kine, authentik, crossplane-provider-aws-ec2-fips, hubble,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3389 (ALAS-2026-3389)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300067.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3389 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

Important: amazon-cloudwatch-agent

Issue Overview: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in the Go compiler cmd/compile. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption in programs compiled with...

CLEANSTART-2026-MJ26242 Security fixes for CVE-2026-41602, ghsa-wf45-q9ch-q8gh applied in versions: 1.300066.1-r0

Multiple security vulnerabilities affect the amazon-cloudwatch-agent-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GA28186 Security fixes for CVE-2026-41602 applied in versions: 1.300066.1-r0

Security vulnerability affects the amazon-cloudwatch-agent package. This issue is resolved in later releases. See references for vulnerability details...

OPENSUSE-SU-2026:10699-1 amazon-cloudwatch-agent-1.300066.1-1.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-38516

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, argo-events, crossplane-provider-aws-kms, kapp, datadog-agent, tetragon, crossplane-provider-aws-iam, ipfs-cluster, aws-efs-csi-driver, crossplane-provider-aws-cloudfront, grafana-agent-operator, crossplane-provider-aws-rds, db-operator,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3248 (ALAS-2026-3248)

"The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3248 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, newrelic-infra-operator, nodetaint, bank-vaults, prometheus-bind-exporter, rclone-fips, mods, git-credential-oauth, kubernetes-dashboard-auth-fips, seaweedfs-operator-fips, commercial-expanso-edge, kubernetes-ingress-defaultbackend,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, datadog-agent-fips, crossplane-provider-gcp, crossplane-provider-aws-s3-fips, crossplane-provider-aws-elbv2, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elbv2-fips, crossplane-provider-aws-ec2-fips,...