GO-2026-5052 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, grafana, splunk-otel-collector, crossplane-provider-azure-storage, nuclei, telegraf, cert-manager, crossplane-provider-azure-authorization, crossplane-provider-azure-managedidentity, goreleaser, x509-certificate-exporter, gobuster,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: conftest, hubble, aws-efs-csi-driver, karpenter, omnibump, percona-server-mongodb-operator, kubernetes-csi-livenessprobe, src, opa-envoy, cluster-api-helm-controller, datadog-agent, cluster-api, authservice, dgraph, flux-kustomize-controller, kubernetes-event-exporte...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: conftest, nats-server, hugo, nats, k8sgpt, src, certificate-transparency, dgraph, flux-kustomize-controller, kubernetes-event-exporter, nsc, terragrunt, gitness, kubeflow-pipelines, git-lfs, scorecard, prometheus-alertmanager, terraform, apko, fulcio,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi, velero-plugin-for-csi, openbao, hubble, certificate-transparency, gcsfuse, dgraph, flux-kustomize-controller, kubernetes-event-exporter, kiali, amazon-cloudwatch-agent, dbmate, undock, scorecard, terraform, loki, apko, harbor,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi, openbao, k8sgpt, src, external-dns, datadog-agent, flux-kustomize-controller, gitlab-runner, terraform-provider-acme, terragrunt, pulumi-language-dotnet, docker-compose, mods, mattermost, scorecard, dagger, policy-controller, loki, apko,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: conftest, aws-sigv4-proxy, aws-privateca-issuer, hubble, yunikorn-k8shim, percona-server-mongodb-operator, src, kubernetes-csi-livenessprobe, langfuse, external-dns, flux-kustomize-controller, authservice, kubernetes-event-exporter, sonobuoy, gitlab-runner,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-csi, hubble, nats, certificate-transparency, supercronic, gcsfuse, dgraph, flux-kustomize-controller, kubernetes-event-exporter, nsc, dbmate, wire-go, mods, scorecard, terraform, apko, aws-flb-kinesis, terraform-docs, docker-cli,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3s, timestamp-authority, buildkitd, pulumi, ksops, crossplane-provider-azure-managedidentity, grafana-mimir, crossplane-provider-azure, kargo, gomplate, flux-kustomize-controller, gitsign, kubernetes-event-exporter, flux-notification-controller,...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-csi, hubble, nats, certificate-transparency, supercronic, gcsfuse, dgraph, flux-kustomize-controller, kubernetes-event-exporter, nsc, wire-go, mods, scorecard, terraform, apko, kubernetes-csi-external-resizer, aws-flb-kinesis, terraform-docs,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: openbao, k8sgpt, external-dns, datadog-agent, flux-kustomize-controller, gitlab-runner, terragrunt, pulumi-language-dotnet, docker-machine-driver-harvester, mods, mattermost, scorecard, dagger, policy-controller, loki, apko, fulcio, flux-image-automation-controller,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: redpanda-operator, gitlab-rails-ce-fips, nrdot-collector-k8s, prometheus-alertmanager-fips, agentbeat-fips, grafana-pyroscope, kuberay-operator-fips, argo-rollouts, kubernetes-csi-external-attacher, crossplane-provider-azure-authorization,...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: telegraf, tempo, crossplane-provider-aws-lambda, crossplane-provider-aws-cloudfront, crossplane-provider-azure-managedidentity, crossplane-provider-aws-rds, crossplane-provider-family-aws, datadog-agent, crossplane-provider-aws-cloudformation,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: telegraf, tempo, crossplane-provider-aws-lambda, crossplane-provider-aws-cloudfront, crossplane-provider-azure-managedidentity, crossplane-provider-aws-rds, crossplane-provider-family-aws, datadog-agent, crossplane-provider-aws-cloudformation,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi, openbao, hubble, nats, certificate-transparency, incert, supercronic, langfuse, gcsfuse, karma, dgraph, flux-kustomize-controller, kubernetes-event-exporter, nsc, kiali, dbmate, mods, scorecard, terraform, kubernetes-csi-external-resizer,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: conftest, aws-sigv4-proxy, aws-privateca-issuer, hubble, yunikorn-k8shim, percona-server-mongodb-operator, src, kubernetes-csi-livenessprobe, langfuse, external-dns, flux-kustomize-controller, authservice, kubernetes-event-exporter, sonobuoy, gitlab-runner,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: hubble, langfuse, flux-kustomize-controller, kubernetes-event-exporter, dbmate, wire-go, mods, undock, scorecard, terraform, kubernetes-csi-external-resizer, aws-flb-kinesis, terraform-docs, aws-eks-pod-identity-agent, cluster-autoscaler, gitleaks, src-fingerprint,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: conftest, aws-sigv4-proxy, aws-privateca-issuer, hubble, yunikorn-k8shim, percona-server-mongodb-operator, src, kubernetes-csi-livenessprobe, external-dns, flux-kustomize-controller, authservice, kubernetes-event-exporter, sonobuoy, gitlab-runner,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nats-server, nats, aws-efs-csi-driver, k8sgpt, src, oras, kubernetes-csi-livenessprobe, supercronic, gcsfuse, kubebuilder, chartmuseum, go-bindata, wazero, dgraph, sonobuoy, kubernetes-event-exporter, doppler-kubernetes-operator, kube-logging-operator,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nats-server, nats, aws-efs-csi-driver, k8sgpt, src, oras, kubernetes-csi-livenessprobe, supercronic, gcsfuse, kubebuilder, chartmuseum, go-bindata, wazero, dgraph, sonobuoy, kubernetes-event-exporter, doppler-kubernetes-operator, kube-logging-operator,...