GO-2026-6095 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dax-fips, crossplane-provider-aws-inspector, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-azure-servicefabric, crossplane-provider-azure-storage, crossplane-provider-aws-codeartifact-fips, crossplane-provider-aws-amp,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: cilium, argo-workflows, cluster-api-azure-controller-fips, knative-eventing, coder-fips, nerdctl-fips, vault-fips, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-azure-servicefabric, kube-conformance, helmfile, deck-fips, splunk-otel-collector,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-consul, tigera-operator, argo-events, local-path-provisioner, litestream, dbmate, istio, percona-server-mongodb-operator, kube-vip, sftpgo-plugin-auth, aactl, descheduler, amazon-cloudwatch-agent-operator, crossplane-provider-family-azure,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-events, istio, loki, aactl, crossplane-provider-family-azure, nfpm, chisel, cosign, sealed-secrets, glab, cloud-provider-aws, dagger, flux, guac, melange, snyk-cli, chezmoi, zot, pulumi-language-dotnet, vault-benchmark, gomplate, prometheus-operator, fulcio,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: hydra, nats-top, local-path-provisioner, rancher-telemetry, litestream, dbmate, percona-server-mongodb-operator, sftpgo-plugin-auth, aactl, descheduler, amazon-cloudwatch-agent-operator, terraform-provider-time, wgcf, chisel, crossplane-provider-sql,...

CLEANSTART-2026-EG54450 Security fixes in crossplane-provider-aws 2.3.0-r0

Package crossplane-provider-aws version 2.3.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: fleet-server, harbor-scanner-trivy, knative-eventing, nerdctl-fips, crossplane-provider-aws-cognitoidentity-fips, mcp-grafana, splunk-otel-collector, kvm-device-plugin, task, newrelic-k8s-metrics-adapter-fips, kubernetes-dashboard-metrics-scraper, neuvector-fips,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: tigera-operator, dbmate, aactl, kubernetes-csi-external-attacher, juicefs-csi-driver, kapp, secrets-store-csi-driver-provider-gcp, rancher-system-upgrade-controller, secrets-store-csi-driver-provider-azure, lvm-driver, multus-cni, container-object-storage-interface,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: fleet-server, cilium, vault-fips, nerdctl-fips, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-azure-servicefabric, k6-fips, kubernetes-csi-external-snapshotter-fips, cri-tools, step, crossplane-provider-azure-storage, step-issuer-fips, external-dn...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter-fips, argo-workflows, logstash-exporter-fips, terraform-docs, harbor-scanner-trivy, age, aws-ebs-csi-driver, nri-mongodb, go-licenses, cri-tools, request-1279, step, nri-jmx, step-issuer-fips, kaniko, task, prometheus-node-exporter,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, crossplane-provider-azure, aactl, crossplane-provider-family-azure, apisix-ingress-controller, aws-load-balancer-controller, cosign, rclone, dynamic-localpv-provisioner, nri-prometheus, secrets-store-csi-driver-provider-gcp,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: flux, argo-workflows, crossplane, scorecard, crossplane-provider-aws-cloudformation, vexctl, crossplane-provider-aws-ec2, slsa-verifier, rclone, crossplane-provider-aws-cloudfront, crossplane-provider-aws-elasticache, actions-runner-controller, aactl, falcoctl-fips,...