GO-2026-6095 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-macie2-fips, crossplane-provider-aws-securityhub, crossplane-provider-aws-kafkaconnect, crossplane-provider-family-aws-fips, crossplane-provider-aws-athena, crossplane-provider-aws-cloudwatchevents,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-macie2-fips, timestamp-authority, hubble-ui-backend-fips, crossplane-provider-aws-kafkaconnect, longhorn-manager-fips, crossplane-provider-family-aws-fips, seaweedfs-rocksdb, rke2-runtime, keda, kubernetes-csi-node-driver-registrar-fips,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, crossplane-provider-aws-sns, ksops, coredns, cloud-provider-azure, neuvector-dbgen, act, controller-gen, atlantis, nri-prometheus, redpanda, terraform-provider-grafana, speedtest-go, gomplate, kyverno, spqr, chisel, grafana-alloy,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, ksops, act, flux-notification-controller, atlantis, prometheus-operator, nerdctl, gomplate, chezmoi, kyverno, chisel, syft, crossplane-provider-aws-cloudwatchlogs, terraform-provider-acme, spire-server, podman, steampipe, dagger,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, crossplane-provider-aws-sns, headlamp, ksops, kubelet-csr-approver, flux-notification-controller, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, x509-certificate-exporter, crossplane-provider-aws-cloudwatchlogs,...

CLEANSTART-2026-EG54450 Security fixes in crossplane-provider-aws 2.3.0-r0

Package crossplane-provider-aws version 2.3.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: ocm-cli-fips, trivy-k8s-wrapper, minc, nats-server-fips, task, kine, crossplane-provider-aws-athena, gendesk, s5cmd-fips, deck-fips, rqlite, crossplane-provider-aws-ssm, crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-sagemaker-fips,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: headlamp, cloud-provider-azure, atlantis, gomplate, kubevela, consul-k8s, steampipe, kubernetes, cilium-cli, fulcio, conjur-cli, external-dns, aws-flb-cloudwatch, harbor, metacontroller, witness, openbao, ingress-nginx-controller, step-issuer, kwok, pdfcpu,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, longhorn-manager-fips, crossplane-provider-family-aws-fips, metallb, kubernetes-csi-node-driver-registrar-fips, go-discover, crossplane-provider-aws-athena, trident-fips, crossplane-provider-aws-cloudwatchevents,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kubescape, bazelisk, timestamp-authority, ytt, hubble-ui-backend-fips, trillian-fips, mockery, dockerize-fips, metallb, secrets-store-csi-driver-provider-azure, wait-for-port, task, octo-sts, request-1279, harbor-scanner-trivy,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, crossplane-provider-aws-sns, terraform-provider-aws, nri-prometheus, envoy-ratelimit, flux-notification-controller, atlantis, prometheus-operator, restic, nerdctl, gomplate, syft, crossplane-provider-aws-cloudwatchlogs,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-route53, kubescape, gitsign, pulumi-language-java, skaffold, actions-runner-controller, crossplane, crossplane-provider-aws-cloudwatchlogs, wolfictl, gomplate, crossplane-provider-aws-rds, slsa-verifier,...