GO-2026-6508 vulnerabilities

Vulnerabilities for packages: caddy, tempo, datadog-agent, grafana, grafana-mimir, distribution, kots, opentofu, zot, falcosidekick, aws-otel-collector, mcp-grafana, grafana-alloy, harbor-registry, fluent-bit-plugin-loki, loki, amazon-cloudwatch-agent, grafana-pyroscope, pulumi-kubernetes-operato...

GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: opa-envoy, terraform-provider-sendgrid, k8ssandra-operator, crossplane-provider-aws-sns, sqlexporter, argo-rollouts, dex, flyte, cert-manager-csi-driver, kubernetes-csi-external-snapshotter, fluent-bit-plugin-loki, juicefs-csi-driver, cass-operator, mc,...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: opa-envoy, terraform-provider-sendgrid, k8ssandra-operator, crossplane-provider-aws-sns, sqlexporter, argo-rollouts, dex, flyte, cert-manager-csi-driver, kubernetes-csi-external-snapshotter, fluent-bit-plugin-loki, juicefs-csi-driver, cass-operator, mc,...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elastictranscoder-fips, aactl, crossplane-provider-aws-qldb, crossplane-provider-aws-cloudwatch-fips, kubernetes-csi-external-attacher, helmfile, juicefs-csi-driver, percona-xtradb-cluster-operator-fips, lvm-driver, crossplane-provider-aws-ssm...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elastictranscoder-fips, aactl, crossplane-provider-aws-qldb, crossplane-provider-aws-cloudwatch-fips, kubernetes-csi-external-attacher, helmfile, juicefs-csi-driver, percona-xtradb-cluster-operator-fips, lvm-driver, crossplane-provider-aws-ssm...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k8ssandra-operator, crossplane-provider-aws-sns, argo-rollouts, dex, flyte, cert-manager-csi-driver, kubernetes-csi-external-snapshotter, fluent-bit-plugin-loki, juicefs-csi-driver, mc, secrets-store-csi-driver-provider-azure, kube-vip,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k8ssandra-operator, crossplane-provider-aws-sns, argo-rollouts, dex, flyte, cert-manager-csi-driver, kubernetes-csi-external-snapshotter, fluent-bit-plugin-loki, juicefs-csi-driver, mc, secrets-store-csi-driver-provider-azure, kube-vip,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: smarter-device-manager-fips, caddy, kubeflow-pipelines, opa, pulumi-language-java, skaffold, kyverno-notation-aws-fips, sigstore-scaffolding-fips, cert-exporter, flux-image-reflector-controller-fips, kube-bench-fips, kubeflow, nfs-subdir-external-provisioner,...

GO-2024-2883 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, rekor, fulcio, cortex, timestamp-authority, grafana-mimir...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k3d, minio, pulumi-language-dotnet, cilium-cli, ferretdb, kubernetes-csi-external-provisioner, k8sgpt-operator, ksops, opa, osv-scanner, gomplate, step-ca, grafana-mimir, kwok, step, hubble-ui, kots, dex, terragrunt, vcluster, terraform-docs, conftest,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: tkn, thanos, nuclei, flux-source-controller, airflow, ksops, sqlpad, falcoctl, tekton-chains, step-ca, up, cortex, cosign, restic, prometheus-operator, grafana-mimir, velero, step, buildkitd, flux, pulumi, terragrunt, boring-registry, opentelemetry-collector, zarf,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3d, flux-image-automation-controller, tkn, gh, nuclei, slsa-verifier, crossplane-provider-azure, flux-source-controller, ksops, terraform-provider-azurerm, falcoctl, tekton-chains, gomplate, src-fingerprint, crossplane-provider-azure-sql, cosign, step-ca,...

CLEANSTART-2026-JG10359 Security fixes in grafana-mimir 3.0.2-r0

Package grafana-mimir version 3.0.2-r0 fixes 9 vulnerabilities: CVE-2025-68121, ghsa-9h8m-3fm2-qjrq, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679...

CLEANSTART-2026-SP48916 Security fixes in grafana-mimir-fips 3.0.5-r1

Package grafana-mimir-fips version 3.0.5-r1 fixes 12 vulnerabilities: ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58, CVE-2026-39883, CVE-2026-39882, CVE-2026-27140...

CLEANSTART-2026-RY66554 Security fixes in grafana-mimir-fips 3.0.4-r1

Package grafana-mimir-fips version 3.0.4-r1 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-QD77000 Security fixes in grafana-mimir-fips 3.0.2-r0

Package grafana-mimir-fips version 3.0.2-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2025-68121, CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-PK62931 Security fixes in grafana-mimir-fips 3.0.2-r1

Package grafana-mimir-fips version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-PI73299 Security fixes in grafana-mimir 3.0.2-r1

Package grafana-mimir version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: cloudprober-fips, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, dbmate, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl, knative-net-istio-fips, crossplane-provider-aws-cloudwatch-fips, apm-server-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: cloudprober-fips, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, dbmate, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl, knative-net-istio-fips, crossplane-provider-aws-cloudwatch-fips, apm-server-fips,...