GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: apko, mapotf, flux-fips, cerbos, flux-image-automation-controller, rancher-fleet-fips, src-fingerprint, flux, kubevela-fips, kaniko, pulumi, pulumi-language-dotnet, argocd-image-updater-fips, coder, cloudbeat-fips, packer-fips, gitlab-runner-fips, skaffold,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: apko, mapotf, flux-fips, cerbos, flux-image-automation-controller, rancher-fleet-fips, src-fingerprint, flux, kubevela-fips, kaniko, pulumi, pulumi-language-dotnet, argocd-image-updater-fips, coder, cloudbeat-fips, packer-fips, gitlab-runner-fips, skaffold,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: apko, mapotf, flux-fips, cerbos, flux-image-automation-controller, rancher-fleet-fips, src-fingerprint, flux, kubevela-fips, kaniko, pulumi, pulumi-language-dotnet, argocd-image-updater-fips, coder, cloudbeat-fips, packer-fips, gitlab-runner-fips, skaffold,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: apko, mapotf, flux-fips, cerbos, flux-image-automation-controller, rancher-fleet-fips, src-fingerprint, flux, kubevela-fips, kaniko, pulumi, pulumi-language-dotnet, argocd-image-updater-fips, coder, cloudbeat-fips, packer-fips, gitlab-runner-fips, skaffold,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: gitaly, teleport, kargo, trufflehog, act, zarf, argo-events, kaniko, argo-workflows, k9s, pulumi-kubernetes-operator, pulumi-language-yaml, witness, kubevela, argo-cd, argocd-image-updater, xeol, tfsec, goreleaser, crossplane, terragrunt, zot, pulumi-language-dotnet,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: apko, mapotf, flux-fips, cerbos, flux-image-automation-controller, rancher-fleet-fips, src-fingerprint, flux, kubevela-fips, kaniko, pulumi, pulumi-language-dotnet, argocd-image-updater-fips, flux-source-controller, coder, cloudbeat-fips, packer-fips,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: teleport, zarf, ko, vexctl, buildkitd, zot, goreleaser, crossplane, neuvector-sigstore-interface, flux-source-controller, tekton-chains, rekor, tflint, docker-compose, gh, aactl, kyverno, kubescape, trivy-operator, gitlab-runner, skaffold, docker-cli-buildx, dagger,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: image-factory-fips, flux-source-controller-fips, cosign, flux-source-controller, cloudbeat-fips, gitlab-runner-fips, skaffold, chainloop-control-plane, neuvector-sigstore-interface, crossplane-fips, neuvector-sigstore-interface-fips, zarf-fips, ko-fips, tekton-chains...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: teleport, prometheus, stakater-reloader, gitlab-pages, aws-efs-csi-driver, metacontroller, tekton-chains, caddy, kube-fluentd-operator, juicefs, distribution, tkn, k3d, sops, kubo, secrets-store-csi-driver-provider-azure, cortex, rancher-system-agent, migrate,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: apko, mapotf, flux-fips, cerbos, flux-image-automation-controller, rancher-fleet-fips, src-fingerprint, flux, kubevela-fips, kaniko, pulumi, flux-source-controller-fips, pulumi-language-dotnet, argocd-image-updater-fips, flux-source-controller, cloudbeat-fips,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: cadence-fips, flux-image-automation-controller, yunikorn-k8shim, crossplane-provider-gitlab-fips, cert-manager-cmctl-fips, crossplane-provider-azure-streamanalytics, aws-efs-csi-driver-fips, flux, kubernetes-csi-external-snapshotter, crossplane-provider-aws-ec2,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: cadence-fips, flux-image-automation-controller, yunikorn-k8shim, crossplane-provider-gitlab-fips, cert-manager-cmctl-fips, crossplane-provider-azure-streamanalytics, aws-efs-csi-driver-fips, flux, kubernetes-csi-external-snapshotter, crossplane-provider-aws-ec2,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: teleport, zarf, ko, vexctl, witness, buildkitd, zot, goreleaser, crossplane, neuvector-sigstore-interface, flux-source-controller, tekton-chains, tflint, gh, aactl, kyverno, kubescape, trivy-operator, skaffold, sigstore-scaffolding, docker-cli-buildx, slsa-verifier,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: teleport, zarf, ko, vexctl, witness, buildkitd, zot, goreleaser, crossplane, neuvector-sigstore-interface, flux-source-controller, tekton-chains, tflint, gh, aactl, kyverno, kubescape, trivy-operator, skaffold, sigstore-scaffolding, docker-cli-buildx, slsa-verifier,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: vt-cli, dataplaneapi, nri-kafka, prometheus, stakater-reloader, gitlab-pages, terraform-provider-azuread, aws-efs-csi-driver, fscrypt, metacontroller, caddy, rancher-telemetry, kube-fluentd-operator, kubescape, tkn, k3d, node-problem-detector,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: verticadb-operator, newrelic-infrastructure-agent, envoy-ratelimit, certificate-transparency, knative-operator, dataplaneapi, terraform-provider-azapi, timoni, witness, dbmate, spqr, eksctl, prometheus, mesosphere-vsphere-csi, terraform-provider-sendgrid, oauth2-prox...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: kubescape, kubescape-server-fips, task, k9s, syft-fips, opentofu, kubescape-server, terraform, chainctl, kots, packer, conftest, tfsec, zot, xeol-fips, cg, trivy-fips, steampipe, cloudbeat-fips, packer-fips, syft, xeol, cloudbeat, tflint-fips, snyk-cli, grype-fips,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: kubescape, kubescape-server-fips, task, k9s, syft-fips, opentofu, kubescape-server, terraform, chainctl, kots, packer, conftest, tfsec, zot, xeol-fips, cg, trivy-fips, steampipe, cloudbeat-fips, packer-fips, syft, xeol, cloudbeat, tflint-fips, snyk-cli, grype-fips,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: apko, cerbos, oauth2-proxy-fips, weaviate, seaweedfs-rocksdb-fips, grpcurl-fips, kaniko, pulumi, flux-source-controller-fips, splunk-otel-collector, rancher, loki-fips, flux-source-controller, gitlab-runner-fips, commercial-expanso-edge, spiffe-helper-fips,...

CLEANSTART-2026-QJ92322 Security fixes for CVE-2025-15558, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.0.2-r0, 2.0.2-r1

Multiple security vulnerabilities affect the crossplane package. These issues are resolved in later releases. See references for individual vulnerability details...