GO-2026-5052 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, crossplane-provider-azure-authorization, crossplane-provider-azure-managedidentity, crossplane-provider-azure-storage, goreleaser, x509-certificate-exporter, gobuster, nuclei, telegraf, cert-manager, splunk-otel-collector, nfpm,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, dapr, helm-push, rancher-helm, prometheus, harbor-scanner-trivy, kubernetes-csi-external-provisioner, zarf, gogatekeeper, hubble-ui, pgpool2exporter, amazon-k8s-cni, newrelic-infra-operator, octo-sts, vault-benchmark, cluster-api, migrate,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: hugo, helm-push, cloudflared, grype, fulcio, crossplane-provider-azure-managedidentity, grpc-health-probe, bank-vaults, gomplate, src-fingerprint, amass, nerdctl, prometheus-adapter, gitness, skopeo, step, libssh, frp, kubernetes, memcached-exporter,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: helm-push, cloudflared, gitaly, kubernetes-csi-external-provisioner, velero, fulcio, amazon-k8s-cni, octo-sts, migrate, azcopy, smarter-device-manager, gomplate, prometheus-adapter, gitlab-runner, gitness, witness, tetragon, terraform-provider-kubernetes, vitess,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, podman, cloudflared, crossplane-provider-aws-iam, fscrypt, grype, prometheus, zarf, fulcio, vault-benchmark, pulumi-language-java, cilium, chezmoi, crossplane-provider-aws-cloudformation, crossplane-provider-azure-managedidentity,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: thanos-operator, k8sgateway, http-echo, nats-top, spegel, crossplane-provider-aws-iam, rancher-helm, kubernetes-csi-external-provisioner, gogatekeeper, hubble-ui, nri-rabbitmq, pgpool2exporter, octo-sts, newrelic-infra-operator, redis-operator, vault-benchmark, calic...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: thanos-operator, helm-push, cloudflared, kubernetes-csi-external-provisioner, velero, nri-rabbitmq, fulcio, octo-sts, azcopy, esbuild, stern, hey, gomplate, gke-gcloud-auth-plugin, smarter-device-manager, kyverno-policy-reporter-kyverno-plugin, litefs, rootlesskit,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, buildkitd, kargo, pulumi, guac, terragrunt, terraform, zarf, timestamp-authority, snyk-cli, step-ca, k3d, kubevela, fulcio, kubernetes-event-exporter, terraform-provider-azurerm, zot, flux-helm-controller, crossplane-provider-azure-sql,...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: thanos-operator, helm-push, cloudflared, kubernetes-csi-external-provisioner, velero, nri-rabbitmq, fulcio, esbuild, stern, hey, gomplate, gke-gcloud-auth-plugin, smarter-device-manager, kyverno-policy-reporter-kyverno-plugin, litefs, rootlesskit, prometheus-adapter,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argocd-image-updater, podman, fscrypt, grype, prometheus, zarf, fulcio, vault-benchmark, pulumi-language-java, cilium, chezmoi, crossplane-provider-azure-managedidentity, argo-cd, gomplate, nfpm, rootlesskit, age, nerdctl, gitlab-runner, witness, step, kubernetes,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver-fips, knative-operator, rke2-runtime-fips, crossplane-provider-azure-spring, opencost-fips, cloud-provider-azure-fips, ucd, seaweedfs-fips, gitaly-fips, tflint-fips, azure-service-operator, crossplane-provider-azure-streamanalytics, lazydocker,...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-family-aws, crossplane-provider-aws-memorydb, crossplane-provider-aws-iam, tempo, crossplane-provider-aws-lambda, crossplane-provider-aws-route53, crossplane-provider-aws-sns, crossplane-provider-aws-sqs,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-family-aws, crossplane-provider-aws-memorydb, crossplane-provider-aws-iam, tempo, crossplane-provider-aws-lambda, crossplane-provider-aws-route53, crossplane-provider-aws-sns, crossplane-provider-aws-sqs,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: thanos-operator, malcontent, nats-top, github-mcp-server, kubernetes-csi-external-provisioner, gogatekeeper, fulcio, octo-sts, infinispan-operator, migrate, azcopy, stern, hey, gomplate, gke-gcloud-auth-plugin, kyverno-policy-reporter-kyverno-plugin, litefs,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: thanos-operator, nats-top, kubernetes-csi-external-provisioner, gogatekeeper, nri-rabbitmq, octo-sts, azcopy, esbuild, confluent-cp-docker-utils, hey, gke-gcloud-auth-plugin, kyverno-policy-reporter-kyverno-plugin, litefs, gitlab-runner, gitness, tetragon,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: thanos-operator, k8sgateway, http-echo, nats-top, spegel, crossplane-provider-aws-iam, rancher-helm, kubernetes-csi-external-provisioner, gogatekeeper, hubble-ui, nri-rabbitmq, pgpool2exporter, octo-sts, newrelic-infra-operator, redis-operator, vault-benchmark, calic...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: thanos-operator, k8sgateway, nats-top, spegel, crossplane-provider-aws-iam, rancher-helm, kubernetes-csi-external-provisioner, gogatekeeper, hubble-ui, pgpool2exporter, redis-operator, octo-sts, newrelic-infra-operator, vault-benchmark, calico, redka, azcopy,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: thanos-operator, http-echo, helm-push, kwok, grype, kubernetes-csi-external-provisioner, shfmt, velero, hubble-ui, nri-rabbitmq, newrelic-infra-operator, pulumi-language-java, docker-cli, php-fpmexporter, esbuild, logstash-exporter, hey, gomplate,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: thanos-operator, http-echo, helm-push, kwok, grype, kubernetes-csi-external-provisioner, shfmt, velero, hubble-ui, nri-rabbitmq, newrelic-infra-operator, pulumi-language-java, docker-cli, php-fpmexporter, esbuild, logstash-exporter, hey, gomplate,...