GO-2026-6095 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-codeguruprofiler, crossplane-provider-aws-keyspaces, crossplane-provider-aws-autoscaling-fips, crossplane-provider-aws-lakeformation-fips, crossplane-provider-aws-waf, crossplane-provider-keycloak, crossplane-provider-aws-cur-fips,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, logstash, timestamp-authority-fips, crossplane-provider-aws-autoscaling-fips, karpenter, trivy-fips, cilium, kubernetes-csi-external-provisioner-fips, redka, kpt, azure-service-operator, crossplane-provider-aws-cognitoidp, knative-eventing-fips,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: hubble, libnvidia-container, vault-k8s, nova, kubernetes, litestream, crossplane, prometheus-adapter, steampipe, rancher, victoriametrics-cluster, newrelic-nri-kube-events, helm-push, sftpgo-plugin-pubsub, guac, sigstore-scaffolding, trino, aws-efs-csi-driver,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: syft, nuclei, kubernetes, steampipe, rancher, gitlab-kas, guac, openbao, tkn, datadog-agent, k9s, terraform-provider-azapi, k8sgpt, prometheus-operator, pulumi-language-yaml, tw, sealed-secrets, rancher-machine, cluster-api-azure-controller,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: hubble, pvc-autoresizer, cert-manager-cmctl, kustomize, tfsec, vault-k8s, litestream, steampipe, falcosidekick, metacontroller, dkron, sftpgo-plugin-pubsub, aws-eks-pod-identity-agent, yunikorn-k8shim, guac, docker-credential-ecr-login, ytt, minio-object-browser, kub...

CLEANSTART-2026-EG54450 Security fixes in crossplane-provider-aws 2.3.0-r0

Package crossplane-provider-aws version 2.3.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: chartmuseum, kube-logging-operator, packer, cluster-api-helm-controller, ops-agent, azurefile-csi, crossplane-provider-aws-cur-fips, seaweedfs, kpt, postgres-operator-fips, crossplane-provider-aws-redshift-fips, crossplane-provider-aws-cloudformation, chronyexporter,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, libnvidia-container, kpt, victoriametrics-cluster, rke2-cloud-provider, metacontroller, trino, rancher-system-upgrade-controller, prometheus-operator, rook, flux-notification-controller, verticadb-operator, runc, argo-rollouts, influx,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: chartmuseum, crossplane-provider-aws-autoscaling-fips, cilium, kubevirt-cdi-controller-fips, kargo, crossplane-provider-aws-cloudformation, crossplane-provider-aws-cognitoidp, crossplane-provider-aws-dynamodb, kubernetes-event-exporter, crossplane-provider-aws-elb,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: chartmuseum, wire-go, kube-logging-operator, timestamp-authority-fips, fuse-overlayfs-snapshotter, karpenter, trivy-fips, cilium, local-static-provisioner, kargo, redka, request-1279, kpt, postgres-operator-fips, src-fingerprint, gomplate, libnvidia-container,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: hubble, syft, kustomize, vault-k8s, nuclei, kubernetes, crossplane, kpt, prometheus-adapter, timestamp-authority, falcosidekick, newrelic-nri-kube-events, metacontroller, helm-push, newrelic-infrastructure-agent, guac, sigstore-scaffolding, tkn, aws-efs-csi-driver,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudfront, spire-server, rclone, policy-controller, crossplane-provider-aws-firehose, crossplane, terraform-provider-google, pulumi-kubernetes-operator, pulumi-language-java, crossplane-provider-family-aws,...