GO-2026-6095 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecs-fips, crossplane-provider-aws-cloud9, crossplane-provider-aws-dms, crossplane-provider-aws-secretsmanager, crossplane-provider-aws-medialive, crossplane-provider-aws-ecr-fips, hugo, crossplane-provider-aws-amp-fips,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, crossplane-provider-aws-ecs-fips, cluster-api-helm-controller-fips, azure-aad-pod-identity-mic, kube-fluentd-operator, gatus, crossplane-provider-aws-secretsmanager, gitlab-operator-fips, etcd, crossplane-provider-aws-ecr-fips, kubernetes-fips,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: slsa-verifier, knative-eventing, vcluster, flyte, migrate, jaeger-operator, controller-gen, nri-haproxy, nfs-subdir-external-provisioner, azure-workload-identity-webhook, rook, rancher-webhook, envconsul, cloud-provider-azure, kuberay-operator, cis-operator,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, nfpm, fulcio, splunk-otel-collector, syft, kubernetes-dashboard, terraform-provider-acme, terraform-provider-azurerm, crossplane-provider-azure-storage, crossplane-provider-azure-sql, crossplane-provider-aws-sqs,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, metacontroller, kubernetes-csi-external-resizer, ghaudit, opencost, hey, nri-haproxy, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, local-static-provisioner, lvm-driver, ytt,...

CLEANSTART-2026-EG54450 Security fixes in crossplane-provider-aws 2.3.0-r0

Package crossplane-provider-aws version 2.3.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecs-fips, cluster-api-helm-controller-fips, gatus, crossplane-provider-aws-secretsmanager, crossplane-provider-aws-medialive, haproxy-ingress-fips, spicedb-operator, filebrowser, karma, crossplane-provider-aws-ecr-fips, kubernetes-fips, witnes...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, opencost, hey, velero-plugin-for-csi, kubernetes-dashboard, envconsul, kuberay-operator, kube-fluentd-operator, nova, trufflehog, tekton-chains, crossplane-provider-aws-route53, aws-s3-controller, harbor, cilium, grafana-rollout-operator,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, crossplane-provider-aws-ecs-fips, volcano, cert-manager-openshift-routes-fips, gatus, crossplane-provider-aws-secretsmanager, haproxy-ingress-fips, gitlab-operator-fips, etcd, crossplane-provider-aws-ecr-fips, kserve, net-kourier, beats,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, supercronic, azure-aad-pod-identity-mic, k8ssandra-operator-fips, kube-fluentd-operator, volume-modifier-for-k8s, prometheus-mysqld-exporter, mc-fips, jsonnet-bundler, etcd, s5cmd, prometheus-elasticsearch-exporter-fips, trivy-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, metacontroller, kubernetes-csi-external-resizer, fulcio, nfs-subdir-external-provisioner, ollama, rook, syft, kubernetes-dashboard, buf, kuberay-operator, supercronic, kube-fluentd-operator, kubernetes-dashboard-metrics-scraper,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign, crossplane-provider-aws-kms, crossplane-provider-aws-lambda, actions-runner-controller, crossplane-provider-aws-sns, tkn, crossplane-provider-aws, crossplane-provider-aws-firehose, crossplane-provider-aws-dynamodb, melange, scorecard,...