CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, crossplane-provider-azure-sql, rke2-runtime-fips, tetragon, image-factory-fips, db-operator-fips, crossplane-provider-aws-athena-fips, k3d, external-secrets-fips, vertical-pod-autoscaler-fips, etcd-fips, gitlab-operator, hubble, beats,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: tflint, vexctl, flux-source-controller, goreleaser, aactl, gh, neuvector-sigstore-interface, spire-server, buildkitd, gitsign, sigstore-scaffolding, ratify, tkn, falcoctl, skaffold, crossplane, policy-controller, witness, docker, kyverno-notation-aws, zot, cosign,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: tflint, vexctl, flux-source-controller, goreleaser, aactl, gh, neuvector-sigstore-interface, spire-server, buildkitd, gitsign, sigstore-scaffolding, ratify, tkn, falcoctl, skaffold, crossplane, policy-controller, witness, docker, kyverno-notation-aws, zot, cosign,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: rancher, nuclei, spire-controller-manager, knative-serving, kyverno-policy-reporter-kyverno-plugin, vault-env, custom-pod-autoscaler-operator, hugo-extended, dask-gateway, local-path-provisioner, dataplaneapi, nerdctl, kubernetes-dashboard-auth, helm,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: bento, rancher, emissary, swagger, minio-object-browser, vexctl, yunikorn-k8shim, gatus, terraform-provider-aws, goreleaser, aactl, coredns, nuclei, grafana-agent-operator, spire-controller-manager, knative-serving, trillian, kyverno-policy-reporter-kyverno-plugin,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: kubescape, grype-fips, chainctl, chainctl-fips, opentofu, trivy-operator, opentofu-fips, packer-fips, task-fips, steampipe, k9s-fips, trivy-operator-fips, trivy-fips, cg, cloudbeat-fips, cloudbeat, conftest, crossplane-provider-terraform-fips, xeol, k9s, syft,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: kubescape, grype-fips, chainctl, chainctl-fips, opentofu, trivy-operator, opentofu-fips, packer-fips, task-fips, steampipe, k9s-fips, trivy-operator-fips, trivy-fips, cg, cloudbeat-fips, cloudbeat, conftest, crossplane-provider-terraform-fips, xeol, k9s, syft,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, trillian, chainctl-fips, amazon-ssm-agent, minio, caddy, chainloop-control-plane-fips, sigstore-scaffolding, conftest, kyverno-policy-reporter-fips, goreleaser, image-factory-fips, rabbitmq-messaging-topology-operator, chainloop-cli,...

CLEANSTART-2026-QJ92322 Security fixes for CVE-2025-15558, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.0.2-r0, 2.0.2-r1

Multiple security vulnerabilities affect the crossplane package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: chezmoi, chainctl-fips, flux-source-controller, amazon-ssm-agent, witness, src-fingerprint, skaffold, steampipe, k9s-fips, trivy-operator-fips, cloudbeat-fips, xeol, kubescape-server, skaffold-fips, gitlab-runner-fips, crossplane-fips, guac, argo-workflows-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: chezmoi, chainctl-fips, flux-source-controller, amazon-ssm-agent, witness, src-fingerprint, skaffold, steampipe, k9s-fips, trivy-operator-fips, cloudbeat-fips, xeol, kubescape-server, skaffold-fips, gitlab-runner-fips, crossplane-fips, guac, argo-workflows-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: chezmoi, chainctl-fips, flux-source-controller, amazon-ssm-agent, witness, src-fingerprint, skaffold, steampipe, k9s-fips, trivy-operator-fips, cloudbeat-fips, xeol, kubescape-server, skaffold-fips, gitlab-runner-fips, crossplane-fips, guac, argo-workflows-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, gitaly, wolfictl, bom, grafana-alloy, osv-scanner, flux-source-controller, tfsec, gitea, guac, nuclei, melange, steampipe, kots, scorecard, dagger, kargo, gitsign, external-secrets-operator, argocd-image-updater, argo-events, chezmoi...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, gitaly, wolfictl, bom, grafana-alloy, osv-scanner, flux-source-controller, tfsec, gitea, guac, nuclei, melange, steampipe, kots, scorecard, dagger, kargo, gitsign, external-secrets-operator, argocd-image-updater, argo-events, chezmoi...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, gitaly, wolfictl, bom, grafana-alloy, osv-scanner, flux-source-controller, tfsec, gitea, guac, nuclei, melange, steampipe, kots, scorecard, dagger, kargo, gitsign, external-secrets-operator, argocd-image-updater, argo-events, chezmoi...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, gitaly, wolfictl, bom, grafana-alloy, osv-scanner, flux-source-controller, tfsec, gitea, guac, nuclei, melange, steampipe, kots, scorecard, dagger, kargo, gitsign, external-secrets-operator, argocd-image-updater, argo-events, chezmoi...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-family-aws, grafana-alloy, crossplane-provider-azure-managedidentity, nuclei, crossplane-provider-aws-sns, aws-otel-collector, crossplane-provider-azure-storage, telegraf, crossplane-provider-aws-firehose, tempo,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-family-aws, grafana-alloy, crossplane-provider-azure-managedidentity, nuclei, crossplane-provider-aws-sns, aws-otel-collector, crossplane-provider-azure-storage, telegraf, crossplane-provider-aws-firehose, tempo,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elbv2, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, crossplane-provider-azure-storage, crossplane-provider-aws-memorydb, crossplane-provider-aws-dynamodb-fips, elastic-agent, crossplane-provider-aws-rolesanywhere,...