GO-2026-5052 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-azure-managedidentity, splunk-otel-collector, goreleaser, nuclei, crossplane-provider-family-azure, nfpm, x509-certificate-exporter, crossplane-provider-azure-sql, telegraf, gobuster, crossplane-provider-azure-storage,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, cluster-api, victoriametrics-cluster, nri-kubernetes, datadog-agent, osv-scanner, nova, kubernetes-event-exporter, src, pulumi-language-java, redpanda, kubescape-operator, containerd, cloud-provider-aws,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: nri-kafka, dockerize, flux-source-controller, cosign, kubernetes-event-exporter, src, ko, scorecard, temporal-server, k3d, bank-vaults, dex, memcached-exporter, hugo, sops, docker-credential-acr-env, cadvisor, gitness, kubeflow, src-fingerprint, nsc, terraform,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, envoy-ratelimit, flux-source-controller, velero, datadog-agent, terraform-provider-azapi, lvm-driver, redpanda, spire-controller-manager, containerd, cloud-provider-aws, scorecard, kube-vip-cloud-provider, hubble, grpcurl, bank-vaults...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-source-controller, datadog-agent, terraform-provider-azapi, osv-scanner, cosign, src, ko, pulumi-language-java, wolfictl, containerd, cloud-provider-aws, teleport, hcloud, scorecard, gitlab-pages, zarf, buildah, falco-no-driver, pulumi-kubernetes-operator, minio...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, dockerize, rabbitmq-messaging-topology-operator, osv-scanner, cosign, kubernetes-event-exporter, src, lvm-driver, kor, lazygit, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, cloud-provider-aws...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, victoriametrics-cluster, flux-source-controller, velero, lazygit, scorecard, rook, hubble, grpcurl, bank-vaults, hugo, trino, spegel, cadvisor, gitness, neuvector-scanner, speedtest-go, dask-gateway, crossplane-provider-aws-kinesis, delve,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, pulumi, rekor, flux-source-controller, gh, falcoctl, cosign, ksops, kubernetes-event-exporter, neuvector-sigstore-interface, opentelemetry-collector-contrib, step-ca, gomplate, flux-image-reflector-controller, slsa-verifier, aact...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, flux-source-controller, velero, lazygit, scorecard, hubble, grpcurl, bank-vaults, hugo, spegel, cadvisor, gitness, neuvector-scanner, speedtest-go, dask-gateway, crossplane-provider-aws-kinesis, delve, protoc-gen-go-grpc, trivy, postgres-operator, q,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-source-controller, datadog-agent, osv-scanner, cosign, ko, pulumi-language-java, wolfictl, containerd, cloud-provider-aws, teleport, hcloud, scorecard, zarf, buildah, falco-no-driver, pulumi-kubernetes-operator, minio, loki, sops, rancher, wal-g,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: jobset-fips, crossplane-provider-aws-cloudtrail-fips, aws-otel-collector-fips, crossplane-provider-aws-sns-fips, keda-fips, authentik-fips, crossplane-provider-keycloak-fips, crossplane-provider-aws-cloudfront, crossplane-provider-gcp-beta-container, dagdotdev,...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: grafana-alloy, datadog-agent, crossplane-provider-aws-elasticache, crossplane-provider-aws-iam, crossplane-provider-aws-firehose, crossplane-provider-aws-ec2, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, nuclei, tempo,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: grafana-alloy, datadog-agent, crossplane-provider-aws-elasticache, crossplane-provider-aws-iam, crossplane-provider-aws-firehose, crossplane-provider-aws-ec2, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, nuclei, tempo,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, envoy-ratelimit, victoriametrics-cluster, flux-source-controller, terraform-provider-azapi, lvm-driver, mariadb-operator, spire-controller-manager, containerd, cloud-provider-aws, scorecard, kube-vip-cloud-provider, hubble, grpcurl,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, lvm-driver, lazygit, spire-controller-manager, cloud-provider-aws, scorecard, kube-vip-cloud-provider, hubble, grpcurl, bank-vaults, fixuid, licenseclassifier, spegel, cargobump, gitness, db-operator,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, dockerize, rabbitmq-messaging-topology-operator, osv-scanner, cosign, kubernetes-event-exporter, src, lvm-driver, kor, lazygit, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, cloud-provider-aws...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, dockerize, rabbitmq-messaging-topology-operator, osv-scanner, cosign, kubernetes-event-exporter, src, lvm-driver, kor, lazygit, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, cloud-provider-aws...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-kafka, dockerize, envoy-ratelimit, velero, kubernetes-event-exporter, src, shfmt, pulumi-language-java, kor, lazygit, doppler-kubernetes-operator, wazero, kyverno-policy-reporter-kyverno-plugin, configmap-reload, scorecard, cert-exporter, temporal-server, k3d,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-kafka, dockerize, envoy-ratelimit, velero, kubernetes-event-exporter, src, shfmt, pulumi-language-java, kor, lazygit, doppler-kubernetes-operator, wazero, kyverno-policy-reporter-kyverno-plugin, configmap-reload, scorecard, cert-exporter, temporal-server, k3d,...