GO-2026-5052 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, cert-manager, external-secrets-operator, crossplane-provider-azure-authorization, grafana, splunk-otel-collector, nfpm, goreleaser, telegraf, crossplane-provider-azure-managedidentity, x509-certificate-exporter,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, apko, crossplane-provider-azure-managedidentity, flux-kustomize-controller, caddy, scorecard, libssh2, grype, zot, buf, src, flux-source-controller, vault-k8s, slsa-verifier, ollama, oauth2-proxy, boring-registry, frp, k8sgpt, prometheus-alertmanager...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, cluster-api, crossplane-provider-aws-route53, ctop, terraform-provider-acme, kubo, tofu-controller, sftpgo-plugin-pubsub, docker-machine-driver-harvester, tekton-pipelines, kube-vip, chisel, crossplane-provider-azure-managedidentity, ksops,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, thanos, zarf, osv-scanner, flux-kustomize-controller, scorecard, flux-source-controller, crossplane-provider-sql, cluster-api-ipam-provider-in-cluster, gitlab-kas, slsa-verifier, terraform-provider-random, cluster-api-aws-controller,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, terraform-provider-acme, apko, go-discover, external-dns, prometheus-operator, chisel, crossplane-provider-azure-managedidentity, ksops, pulumi-language-yaml, zarf, osv-scanner, flux-kustomize-controller, crossplane-provider-aws-s3,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ctop, kuberlr, kubo, tofu-controller, sftpgo-plugin-pubsub, yace, external-dns, lvm-driver, chisel, ksops, osv-scanner, vale, flux-kustomize-controller, crossplane-provider-aws-s3, scorecard, blobfuse2, gke-gcloud-auth-plugin, kubernetes-replicator, rancher-telemetry...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-route53, yace, thanos, zarf, osv-scanner, flux-kustomize-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, vertical-pod-autoscaler, gops, lazygit, aws-flb-cloudwatch, logstash-exporter, nri-f5,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: glab, gitsign, crossplane-provider-azure-authorization, opentelemetry-collector, sigstore-scaffolding, argo-events, flux-notification-controller, fulcio, terraform-provider-azurerm, crossplane-provider-azure, crossplane-provider-azure-managedidentity, ksops, gomplate...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-route53, thanos, zarf, osv-scanner, flux-kustomize-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, vertical-pod-autoscaler, lazygit, aws-flb-cloudwatch, logstash-exporter, nri-f5, slsa-verifier,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: apko, docker-machine-driver-harvester, go-discover, external-dns, prometheus-operator, chisel, crossplane-provider-azure-managedidentity, ksops, pulumi-language-yaml, zarf, osv-scanner, flux-kustomize-controller, caddy, scorecard, containerd, grype, zot,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: beats-fips, restic-fips, crossplane-provider-family-gcp-config, k8s-image-swapper-fips, ingress-nginx-controller-fips, argo-rollouts-fips, cerbos-fips, external-secrets-operator-fips, crossplane-provider-azure-synapse, kubescape-server-fips, addon-resizer,...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-aws-eks, crossplane-provider-azure-authorization, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, crossplane-provider-aws-s3, crossplane-provider-aws-lambda, crossplane-provider-aws-sns,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-aws-eks, crossplane-provider-azure-authorization, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, crossplane-provider-aws-s3, crossplane-provider-aws-lambda, crossplane-provider-aws-sns,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, yace, thanos, osv-scanner, flux-kustomize-controller, aws-s3-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, gitlab-kas, logstash-exporter, aws-flb-cloudwatch,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: yace, chisel, osv-scanner, flux-kustomize-controller, scorecard, timescaledb-tune, ytt, crossplane-provider-sql, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, lazygit, aws-flb-cloudwatch, azure-ipam, nri-f5, slsa-verifier, ip-masq-agent, go-licenses,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: ctop, kuberlr, kubo, tofu-controller, sftpgo-plugin-pubsub, yace, external-dns, lvm-driver, chisel, ksops, osv-scanner, vale, flux-kustomize-controller, crossplane-provider-aws-s3, scorecard, blobfuse2, gke-gcloud-auth-plugin, kubernetes-replicator, rancher-telemetry...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: kuberlr, kubo, tofu-controller, sftpgo-plugin-pubsub, yace, external-dns, lvm-driver, chisel, ksops, osv-scanner, vale, flux-kustomize-controller, crossplane-provider-aws-s3, scorecard, blobfuse2, gke-gcloud-auth-plugin, kubernetes-replicator, rancher-telemetry,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, nri-discovery-kubernetes, ctop, kube-rbac-proxy, prometheus-operator, thanos, k8ssandra-operator, pulumi-language-yaml, caddy, kubevela, gke-gcloud-auth-plugin, regclient, grype, scorecard, kustomize, nri-mysql, q, src, ytt,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, nri-discovery-kubernetes, ctop, kube-rbac-proxy, prometheus-operator, thanos, k8ssandra-operator, pulumi-language-yaml, caddy, kubevela, gke-gcloud-auth-plugin, regclient, grype, scorecard, kustomize, nri-mysql, q, src, ytt,...