GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: istio, flux-source-controller, apko, scorecard, kubernetes-dashboard, knative-serving, splunk-otel-collector, terraform-provider-azurerm, zot, gitlab-kas, gitlab-runner, cluster-api-azure-controller, flux-kustomize-controller, cilium, external-dns, cilium-cli,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: compgencompare, cluster-api-fips, terraform-mcp-server, beats-fips, chainctl, crossplane-provider-azure-storagecache, kubernetes-csi-external-resizer, cephcsi-fips, neuvector-fips, cri-tools, go-discover, flux-helm-controller, snyk-cli,...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, tempo, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent, crossplane-provider-aws-iam, crossplane-provider-aws-ec2, crossplane-provider-family-aws, crossplane-provider-aws-cloudfront, crossplane-provider-aws-dynamodb,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: aws-otel-collector, tempo, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent, crossplane-provider-aws-iam, crossplane-provider-aws-ec2, crossplane-provider-family-aws, crossplane-provider-aws-cloudfront, crossplane-provider-aws-dynamodb,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tempo, dive, cilium-certgen, custom-pod-autoscaler, tigera-operator, mc, tailscale, aws-signer-notation-plugin, maru, nri-mysql, kor, litefs, chart-testing, crossplane-provider-aws-eks, spire-controller-manager, nfs-subdir-external-provisioner...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, ratify, custom-pod-autoscaler, doppler-kubernetes-operator, kubernetes-csi-node-driver-registrar, kuberay-operator, manifest-tool, scorecard, spegel, mc, kubernetes-dashboard, kserve-modelmesh-serving, cortex,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, ratify, custom-pod-autoscaler, doppler-kubernetes-operator, kubernetes-csi-node-driver-registrar, kuberay-operator, manifest-tool, scorecard, spegel, mc, kubernetes-dashboard, kserve-modelmesh-serving, cortex,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: petname, custom-pod-autoscaler, mc, aws-signer-notation-plugin, maru, kor, litefs, chart-testing, spire-controller-manager, nfs-subdir-external-provisioner, octo-sts, kubernetes-csi-external-resizer, wave, kubernetes-dashboard-metrics-scraper, external-dns, fzf, wgcf...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway, petname, prometheus-adapter, dive, doppler-kubernetes-operator, kuberay-operator, scorecard, velero, protoc-gen-go-grpc, kubernetes-dashboard, cortex, tailscale, nri-mysql, yam, go-bindata, kor, litefs, secrets-store-csi-driver-provider-azure,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway, petname, prometheus-adapter, dive, doppler-kubernetes-operator, kuberay-operator, scorecard, velero, protoc-gen-go-grpc, kubernetes-dashboard, cortex, tailscale, nri-mysql, yam, go-bindata, kor, litefs, secrets-store-csi-driver-provider-azure,...