GO-2024-2978 vulnerabilities

Vulnerabilities for packages: tflint, osv-scanner, cloudnative-pg, k8sgpt-operator, kargo, dbmate, kubernetes-csi-external-provisioner, terraform-provider-google, ksops, restic, kubernetes-csi-driver-hostpath, guac, sops, terraform-docs, opa, grpc-health-probe, dex, kaniko, melange, k3d, ferretdb...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, py3-azure-identity, py3-cassandra-medusa, secrets-store-csi-driver-provider-azure, druid, flyte, ksops, guac, restic, sops, sqlpad, sigstore-scaffolding, chezmoi, fulcio, prometheus-operator, velero, bank-vaults, timestamp-authority, step-c...

CLEANSTART-2026-HN48536 Security fixes in grafana-agent-operator 0.44.3-r1

Package grafana-agent-operator version 0.44.3-r1 fixes 6 vulnerabilities: CVE-2026-39828, ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv, ghsa-x527-x647-q7gg...

CLEANSTART-2026-MO12071 Security fixes in grafana-agent-operator 0.44.8-r0

Package grafana-agent-operator version 0.44.8-r0 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-netapp, crossplane-provider-aws-cloudwatch, influxd, docker-fips, skopeo, k8ssandra-client, consul-k8s-fips, src, trident-fips, kubedock, kubedock-fips, crossplane-provider-aws-elasticsearch, grafana-pyroscope, osv-scanner,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, buildah, helm-set-status, step-issuer, temporal-ui-server, terraform-provider-kubernetes, timoni, runc, azure-service-operator, gatus, k8sgpt-operator, kubernetes-dashboard-auth, vault-env, seaweedfs, smarter-device-manager,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, falcosidekick-fips, skaffold, skopeo, confluent-common-docker, kubescape, q, cortex-fips, multus-cni-fips, kube-state-metrics-fips, wave, src, aws-flb-cloudwatch-fips, dockerize, helm-operator-fips, wgcf, osv-scanner,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: buildah, kubeflow, step-issuer, temporal-ui-server, sbomqs, k9s, src, kubernetes-dashboard-auth, terraform-provider-google, crossplane-provider-aws, seaweedfs, vault-k8s, crossplane-provider-aws-ec2, kube-vip, k3d, prometheus-operator, wgcf, go-discover,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, py3-azure-identity, py3-cassandra-medusa, secrets-store-csi-driver-provider-azure, druid, flyte, ksops, guac, restic, sops, sqlpad, sigstore-scaffolding, chezmoi, fulcio, prometheus-operator, velero, bank-vaults, timestamp-authority, step-c...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, falcosidekick-fips, skaffold, terragrunt, aws-flb-cloudwatch, prometheus-operator, skopeo, confluent-common-docker, kubescape, q, cortex-fips, multus-cni-fips, kube-state-metrics-fips, wave, src, aws-flb-cloudwatch-fips,...