GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tkn, kubernetes, spire-server, flux-image-automation-controller, prometheus-operator, kubernetes-dashboard, crossplane-provider-azure-sql, step-kms-plugin, crossplane-provider-azure-authorization, hcloud, openbao, snyk-cli, crossplane-provider-azure-managedidentity,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, stunnerd, trufflehog-fips, crossplane-provider-azure-resources, crossplane-provider-azure-operationsmanagement, kubernetes-csi-external-snapshotter, go-sqlcmd, crossplane-provider-aws-cloudformation, trufflehog, google-osconfig-agent,...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, datadog-agent, crossplane-provider-aws-lambda, telegraf, aws-otel-collector, crossplane-provider-azure-sql, crossplane-provider-azure-authorization, crossplane-provider-aws-s3, crossplane-provider-keycloak,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, datadog-agent, crossplane-provider-aws-lambda, telegraf, aws-otel-collector, crossplane-provider-azure-sql, crossplane-provider-azure-authorization, crossplane-provider-aws-s3, crossplane-provider-keycloak,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: thanos, mesosphere-vsphere-csi, tailscale, secrets-store-csi-driver-provider-azure, aws-privateca-issuer, yunikorn-k8shim, mountpoint-s3-csi-driver, cfssl, bank-vaults, haproxy-ingress, openbao-k8s, step-kms-plugin, helm-operator, knative-client, regclient,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi, aws-privateca-issuer, nri-nginx, yunikorn-k8shim, mountpoint-s3-csi-driver, cfssl, bank-vaults, openbao-k8s, step-kms-plugin, helm-operator, protoc-gen-go, git-credential-oauth, rabbitmq-default-user-credential-updater, spqr,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, nri-postgresql, secrets-store-csi-driver-provider-aws, headlamp, local-path-provisioner, mesosphere-vsphere-csi, kor, aws-privateca-issuer, dockerize, nri-nginx, flux-image-automation-controller, mountpoint-s3-csi-driver, cfssl,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, nri-postgresql, secrets-store-csi-driver-provider-aws, headlamp, local-path-provisioner, mesosphere-vsphere-csi, kor, aws-privateca-issuer, dockerize, spire-server, flux-image-automation-controller, mountpoint-s3-csi-driver,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: thanos, secrets-store-csi-driver-provider-aws, aws-flb-firehose, datadog-agent, local-path-provisioner, secrets-store-csi-driver-provider-azure, crossplane-provider-azure, tailscale, kor, nri-nginx, dockerize, flux-image-automation-controller, prometheus-operator,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: thanos, secrets-store-csi-driver-provider-aws, aws-flb-firehose, datadog-agent, local-path-provisioner, secrets-store-csi-driver-provider-azure, crossplane-provider-azure, tailscale, kor, nri-nginx, dockerize, flux-image-automation-controller, prometheus-operator,...