GO-2026-5052 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-family-azure, crossplane-provider-azure-authorization, gobuster, external-secrets-operator, nfpm, telegraf, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, nuclei, splunk-otel-collector, x509-certificate-exporter...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, crossplane-provider-aws-kms, harbor-registry, cloudnative-pg, gogatekeeper, dask-gateway, cluster-api-helm-controller, frp, docker-cli-buildx, crossplane-provider-aws-firehose, step-ca, grafana-operator, argocd-image-updater,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, eksctl, weaviate, buildkitd, frp, kaf, step-ca, cortex, cfssl, terragrunt, ko, gobuster, certificate-transparency, rekor, kube-fluentd-operator, dgraph, melange, flux-kustomize-controller, spire-server, terraform-provider-azurerm, vexctl,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, buildkitd, spire-controller-manager, cloud-provider-vsphere, dapr, terraform-provider-grafana, crossplane-provider-aws-lambda, cloud-sql-proxy, emissary, grafana-agent-operator, kubernetes-csi-external-snapshotter, kubernetes-dns-node-cache,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, eksctl, crossplane-provider-aws-eks, gitea, buildkitd, kaf, docker-cli-buildx, crossplane-provider-aws-firehose, argocd-image-updater, gitlab-pages, terragrunt, ko, prometheus, syft, crossplane-provider-aws-cloudfront,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, grpcurl, eksctl, harbor-registry, gogatekeeper, nri-mongodb, dask-gateway, frp, kuberlr, crossplane-provider-aws-firehose, kubernetes-dashboard-metrics-scraper, grafana-operator, spire-controller-manager, docker-credential-gcr,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, minify, dask-gateway, buildkitd, helm-docs, cfssl, dive, yace, crossplane-provider-aws-lambda, grafana-agent-operator, mockery, kubernetes-dns-node-cache, timestamp-authority, prometheus-alertmanager, docker, gitsign, skopeo, minio-operator,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, zot, k3s, kargo, aactl, buildkitd, zarf, nuclei, step-ca, goreleaser, pulumi, crossplane-provider-azure-storage, snyk-cli, opentelemetry-collector-contrib, grafana-mimir, kubescape, flux, crossplane-provider-azure-authorization, src-fingerprint,...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, minify, dask-gateway, buildkitd, cfssl, dive, crossplane-provider-aws-lambda, grafana-agent-operator, kubernetes-dns-node-cache, timestamp-authority, prometheus-alertmanager, gitsign, skopeo, newrelic-nri-kube-events,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: eksctl, gitea, buildkitd, kaf, docker-cli-buildx, argocd-image-updater, terragrunt, ko, prometheus, syft, fscrypt, rancher-machine, osv-scanner, external-secrets-operator, kine, melange, flux-kustomize-controller, spire-server, step-kms-plugin, teleport,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter-fips, crossplane-provider-aws-kms-fips, crossplane-provider-aws-cloudfront, crossplane-provider-aws-opensearch-fips, addon-resizer, kube-mgmt, crossplane-provider-aws-vpc-fips, drone-fips, eck-operator-fips, plugin-barman-cloud,...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-aws-eks, crossplane-provider-aws-sns, datadog-agent, crossplane-provider-aws-ec2, nuclei, crossplane-provider-aws-elasticache, crossplane-provider-aws-firehose, crossplane-provider-azure-storage,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-aws-eks, crossplane-provider-aws-sns, datadog-agent, crossplane-provider-aws-ec2, nuclei, crossplane-provider-aws-elasticache, crossplane-provider-aws-firehose, crossplane-provider-azure-storage,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, dask-gateway, kuberlr, spire-controller-manager, cloud-provider-vsphere, cfssl, dive, dapr, yace, terraform-provider-grafana, crossplane-provider-aws-lambda, cloud-sql-proxy, timescaledb-parallel-copy, rancher-telemetry,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: ipfs-cluster, grpcurl, eksctl, harbor-registry, gogatekeeper, nri-mongodb, dask-gateway, frp, kuberlr, crossplane-provider-aws-firehose, kubernetes-dashboard-metrics-scraper, grafana-operator, spire-controller-manager, docker-credential-gcr,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, dask-gateway, kuberlr, spire-controller-manager, helm-docs, cloud-provider-vsphere, cfssl, yace, crossplane-provider-aws-lambda, timescaledb-parallel-copy, rancher-telemetry, kubernetes-dns-node-cache, cluster-api-gcp-controller, docker,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, grpcurl, eksctl, harbor-registry, gogatekeeper, dask-gateway, frp, kuberlr, crossplane-provider-aws-firehose, kubernetes-dashboard-metrics-scraper, grafana-operator, spire-controller-manager, docker-credential-gcr, kyverno-policy-reporter-kyverno-plugin...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: grpcurl, mage, eksctl, nri-cassandra, nri-mongodb, dask-gateway, buildkitd, kaf, nri-memcached, vite, kubernetes-dashboard-metrics-scraper, grafana-operator, docker-credential-gcr, kyverno-policy-reporter-kyverno-plugin, kubernetes-csi-external-resizer, cortex,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: grpcurl, mage, eksctl, nri-cassandra, nri-mongodb, dask-gateway, buildkitd, kaf, nri-memcached, vite, kubernetes-dashboard-metrics-scraper, grafana-operator, docker-credential-gcr, kyverno-policy-reporter-kyverno-plugin, kubernetes-csi-external-resizer, cortex,...