CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, crossplane-provider-kubernetes-fips, crossplane-provider-aws-emrserverless-fips, cluster-api, external-secrets-operator, gitlab-kas, crossplane-provider-aws-cloudfront, terraform, slsa-verifier, crossplane-provider-aws-ssm,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: tflint, ko, docker, gh, teleport, neuvector-sigstore-interface, sigstore-scaffolding, kyverno, tekton-chains, buildkitd, policy-controller, trivy-operator, skaffold, aactl, zot, zarf, flux-source-controller, kubescape, gitsign, slsa-verifier, goreleaser, crossplane,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: tflint, ko, docker, gh, teleport, neuvector-sigstore-interface, sigstore-scaffolding, kyverno, tekton-chains, buildkitd, policy-controller, trivy-operator, skaffold, aactl, zot, zarf, flux-source-controller, kubescape, gitsign, slsa-verifier, goreleaser, crossplane,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: incert, nerdctl, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, aws-efs-csi-driver, flux-notification-controller, aws-sigv4-proxy, cerbos, k8ssandra-client, chisel, chartmuseum, neuvector-dbgen, trivy, doppler-kubernetes-operator, nuclei, redpanda,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kargo, kubescape-operator, descheduler, filebrowser, nerdctl, karpenter, kine, amazon-cloudwatch-agent-operator, pulumi-language-java, newrelic-infrastructure-agent, flux-image-reflector-controller, terraform-provider-pagerduty, spqr, volume-modifier-for-k8s, cue,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform, task, snyk-cli, steampipe, terragrunt-fips, trivy-operator, conftest, trivy, xeol-fips, terraform-fips, cloudbeat-fips, grype-db, terragrunt, xeol, opentofu-fips, task-fips, tflint-fips, chainctl-fips, syft-fips, kubescape, grype,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform, task, snyk-cli, steampipe, terragrunt-fips, trivy-operator, conftest, trivy, xeol-fips, terraform-fips, cloudbeat-fips, grype-db, terragrunt, xeol, opentofu-fips, task-fips, tflint-fips, chainctl-fips, syft-fips, kubescape, grype,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: dkron-fips, keda-fips, temporal, external-secrets-operator, gotrue-fips, gitlab-kas, crossplane, dagger, cosign-fips, livekit-server-fips, seaweedfs-rocksdb-fips, slsa-verifier, grpc-health-probe, commercial-chainloop-backend, ko-fips, packer-fips,...

CLEANSTART-2026-QJ92322 Security fixes for CVE-2025-15558, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.0.2-r0, 2.0.2-r1

Multiple security vulnerabilities affect the crossplane package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, flux-source-controller-fips, commercial-chainloop-cli, osv-scanne...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, flux-source-controller-fips, commercial-chainloop-cli, osv-scanne...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, flux-source-controller-fips, commercial-chainloop-cli, osv-scanne...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, crossplane-provider-azure-authorization, crossplane-provider-aws-iam, crossplane-provider-aws-cloudformation, crossplane-provider-aws-route53, grafana-alloy, amazon-cloudwatch-agent, crossplane-provider-aws-sns,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, crossplane-provider-azure-authorization, crossplane-provider-aws-iam, crossplane-provider-aws-cloudformation, crossplane-provider-aws-route53, grafana-alloy, amazon-cloudwatch-agent, crossplane-provider-aws-sns,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, crossplane-provider-aws-acm-fips, crossplane-provider-aws-ec2, crossplane-provider-aws-sns, crossplane-provider-aws-servicediscovery-fips, crossplane-provider-aws-elbv2, crossplane-provider-aws-cloudformation, grafana-alloy-fips,...