GO-2026-6095 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-configservice-fips, crossplane-provider-aws-rum-fips, crossplane-provider-aws-connect-fips, crossplane-provider-aws-cloudwatch, crossplane-provider-aws-transcribe, crossplane-provider-aws-s3control, crossplane-provider-aws-mediapackage-fips,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: vitess, cilium-certgen, crossplane-provider-aws-cloudwatch, juicefs, seaweedfs-rocksdb-fips, act, prometheus-elasticsearch-exporter, crossplane-provider-aws-s3control, crossplane-provider-aws-mediapackage-fips, kubernetes-csi-node-driver-registrar-fips, conftest,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: flux, kubescape-operator, kubernetes-csi-livenessprobe, continuity, fuse-overlayfs-snapshotter, sigstore-scaffolding, helm-push, kapp-controller, amazon-cloudwatch-agent-operator, kyverno, opa, litefs, tofu-controller, datadog-agent, tetragon, nri-haproxy, flannel,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux, crossplane-provider-aws-eks, kyverno, cosign, datadog-agent, cilium-cli, act, cluster-api-azure-controller, gitea, docker-cli-buildx, go-discover, crossplane-provider-aws-cloudfront, trivy-operator, tflint, argo-cd, crossplane-provider-aws-elasticache,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, pguser, amass, kapp-controller, amazon-cloudwatch-agent-operator, hey, cosign, git-lfs, clickhouse-operator, kubernetes-csi-external-resizer, blobfuse2, litefs, restic,...

CLEANSTART-2026-EG54450 Security fixes in crossplane-provider-aws 2.3.0-r0

Package crossplane-provider-aws version 2.3.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-trivy-fips, vault-k8s-fips, cilium-certgen, crossplane-function-go-templating-fips, crossplane-provider-aws-connect-fips, crossplane-provider-aws-cloudwatch, verticadb-operator, k3d, deck, prometheus-elasticsearch-exporter,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, clickhouse-operator, blobfuse2, incert, flannel, cilium-cli, crossplane-provider-aws-cloudfront, pdfcpu, nri-nginx, cilium, timoni, vcluster, vertical-pod-autoscaler, mariadb-operator, atlantis, kubernetes-dashboard, apache-exporter,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-trivy-fips, crossplane-provider-aws-cloudwatch, juicefs, k3d, act, gitlab-operator, cluster-api-provider-vsphere, kubernetes-csi-node-driver-registrar-fips, fleet-server, skopeo-fips, step-fips, ucd, external-dns, envoy-ratelimit-fips,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: vault-k8s-fips, crossplane-provider-aws, influx, k3d, dockerize-fips, prometheus-elasticsearch-exporter, pombump, delve, s5cmd, vcluster, conftest, kind, docker-credential-acr-env, weaviate, step-fips, dex-k8s-authenticator, secrets-store-csi-driver, gitsign,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: flux, timestamp-authority, kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, sigstore-scaffolding, crossplane-provider-aws-eks, helm-push, rclone, amass, weaviate, kubernetes-csi-external-resizer, cosign, litefs, restic, kpt, kubernetes-dns-node-cache,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: skaffold, crossplane-provider-aws-sqs, flux-kustomize-controller, crossplane-provider-aws-cloudformation, crossplane-provider-aws-kms, crossplane-provider-aws-dynamodb, flux-notification-controller, terraform-provider-google, crossplane-provider-aws, sops, grype,...