GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: act, flux-source-controller, kubescape, opentelemetry-collector, teleport, ko, argo-events, go-discover, kaf, crossplane-provider-azure-sql, trivy-operator, mods, osv-scanner, opentofu, telegraf, kots, snyk-cli, tflint, docker, nfpm, guac, minio, buildah, helm, podma...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: cluster-api, tailscale, azure-service-operator-fips, chaos-mesh-fips, velero-plugin-for-gcp-fips, volcano-fips, node-problem-detector, kgateway, rancher-support-bundle-kit, temporal-server, vault-secrets-operator, osv-scanner, k9s-fips, k8s-agents-operator-fips,...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, tempo, amazon-cloudwatch-agent, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-family-aws, crossplane-provider-azure-authorization, crossplane-provider-aws-route53,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, tempo, amazon-cloudwatch-agent, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-family-aws, crossplane-provider-azure-authorization, crossplane-provider-aws-route53,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, dfc, flux-source-controller, azuredisk-csi, knative-client, kubernetes-ingress-defaultbackend, manifest-tool, node-feature-discovery, aws-load-balancer-controller, timestamp-authority, cloud-sql-proxy, cloudprober, custom-pod-autoscaler,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, langfuse, rabbitmq-messaging-topology-operator, maru, crossplane-provider-family-aws, swagger, bento, manifest-tool, azurefile-csi, falco-no-driver, spqr, crossplane-provider-azure-sql, cluster-api-gcp-controller, dbmate,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, rabbitmq-messaging-topology-operator, maru, crossplane-provider-family-aws, swagger, bento, manifest-tool, azurefile-csi, falco-no-driver, spqr, crossplane-provider-azure-sql, cluster-api-gcp-controller, dbmate, opensearch-k8s-operator,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, timescaledb-tune, manifest-tool, kubecolor, custom-pod-autoscaler, crossplane-provider-aws-sns, gcp-compute-persistent-disk-csi-driver, capslock, db-operator, git-sync, helm-docs, juicefs, minio, terraform-provider-pagerduty,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, wireguard-go, argo-workflows, cert-exporter, kyverno-policy-reporter, fq, aws-flb-firehose, prometheus-alertmanager, kaf, task, aws-load-balancer-controller, helm-push, timoni, nri-mysql, src, cadvisor, php-fpmexporter, ip-masq-agent, ytt,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, wireguard-go, argo-workflows, cert-exporter, kyverno-policy-reporter, fq, aws-flb-firehose, prometheus-alertmanager, kaf, task, aws-load-balancer-controller, helm-push, timoni, nri-mysql, src, cadvisor, php-fpmexporter, ip-masq-agent, ytt,...