GHSA-75PG-WVH3-34JR vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatch-fips, crossplane-provider-aws-oam-fips, crossplane-provider-aws-dlm, crossplane-provider-aws-mediapackage, crossplane-provider-aws-neptune, falco-no-driver, crossplane-provider-aws-ram-fips, rclone, crossplane-provider-aws-devicefar...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatch-fips, crossplane-provider-aws-oam-fips, crossplane-provider-aws-dlm, crossplane-provider-aws-mediapackage, crossplane-provider-aws-neptune, crossplane-provider-aws-ram-fips, crossplane-provider-azure-network,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatch-fips, crossplane-provider-aws-oam-fips, crossplane-provider-aws-dlm, crossplane-provider-aws-mediapackage, crossplane-provider-aws-neptune, crossplane-provider-aws-ram-fips, crossplane-provider-azure-network,...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-elasticache, crossplane-provider-azure-storage, crossplane-provider-aws-eks, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-azure-authorization, kubevela,...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-elasticache, crossplane-provider-azure-storage, crossplane-provider-aws-eks, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-azure-authorization, kubevela,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-elasticache, crossplane-provider-azure-storage, crossplane-provider-aws-eks, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-azure-authorization, kubevela,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-elasticache, crossplane-provider-azure-storage, crossplane-provider-aws-eks, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-azure-authorization, kubevela,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-elasticache, crossplane-provider-azure-storage, crossplane-provider-aws-eks, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-azure-authorization, kubevela,...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-elasticache, crossplane-provider-azure-storage, crossplane-provider-aws-eks, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-azure-authorization, kubevela,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: zarf, rclone, grafana, k8s-device-plugin, kyverno-policy-reporter-ui, juicefs, filebrowser, step, terragrunt, ingress-nginx-controller, kube-arangodb, rancher, atlantis, kyverno-policy-reporter, cert-manager-webhook-pdns, opencost, loki, falco-no-driver, cloudprober,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: zarf, rclone, grafana, k8s-device-plugin, kyverno-policy-reporter-ui, juicefs, filebrowser, step, terragrunt, ingress-nginx-controller, kube-arangodb, rancher, atlantis, kyverno-policy-reporter, cert-manager-webhook-pdns, opencost, loki, falco-no-driver, cloudprober,...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: gitness, tkn-fips, cloudflared, step-issuer, rclone, telegraf, tkn, karma, rclone-fips, dapr-fips, dapr, gogatekeeper, buf, caddy, step-ca-fips, kyverno-policy-reporter-ui, step-fips, step-issuer-fips, step, kyverno-policy-reporter-ui-fips, sftpgo, step-ca, caddy-fip...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: sftpgo, karma, step-ca, step-issuer, gogatekeeper, rclone, buf, kyverno-policy-reporter-ui, step, caddy, cloudflared, gitness, tkn...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: sftpgo, karma, step-ca, step-issuer, gogatekeeper, rclone, buf, kyverno-policy-reporter-ui, step, caddy, cloudflared, gitness, tkn...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: helm-push, opentofu, kargo, cluster-api-helm-controller, xeol, k9s, kyverno-notation-aws, k8sgpt, manifest-tool, helm-mapkubeapis, flux-helm-controller, gitness, helm-set-status, kube-arangodb, rancher-helm, maru, cert-manager-cmctl...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: helm-push, opentofu, kargo, cluster-api-helm-controller, xeol, k9s, kyverno-notation-aws, k8sgpt, manifest-tool, helm-mapkubeapis, flux-helm-controller, gitness, helm-set-status, kube-arangodb, rancher-helm, maru, cert-manager-cmctl...

CVE-2026-85731 vulnerabilities

Vulnerabilities for packages: helm-push, opentofu, kargo, cluster-api-helm-controller, xeol, k9s, kyverno-notation-aws, k8sgpt, manifest-tool, helm-mapkubeapis, flux-helm-controller, gitness, helm-set-status, kube-arangodb, rancher-helm, maru, cert-manager-cmctl...

GHSA-H7VF-4X9W-H99V vulnerabilities

Vulnerabilities for packages: helm-push, opentofu, kargo, cluster-api-helm-controller, xeol, k9s, kyverno-notation-aws, k8sgpt, manifest-tool, helm-mapkubeapis, flux-helm-controller, gitness, helm-set-status, kube-arangodb, rancher-helm, maru, cert-manager-cmctl...

CVE-2026-85732 vulnerabilities

Vulnerabilities for packages: helm-push, opentofu, kargo, cluster-api-helm-controller, xeol, k9s, kyverno-notation-aws, k8sgpt, manifest-tool, helm-mapkubeapis, flux-helm-controller, gitness, helm-set-status, kube-arangodb, rancher-helm, maru, cert-manager-cmctl...

CLEANSTART-2026-TN85120 Security fix for CVE-2026-35172 applied in: gitness 3.0.1-r1, gitness 3.1.1-r1, gitness 3.2.0-r1, gitness 3.3.0-r2, lvm-driver 1.7.0-r1

CVE-2026-35172 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...