GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: headlamp, cloud-provider-azure, ipfs-cluster, gomplate, spqr, kubevela, consul-k8s, steampipe, kubernetes, cilium-cli, fulcio, external-dns, ferretdb, harbor, witness, openbao, step-issuer, kwok, gitlab-runner, litestream, flux-kustomize-controller, tkn, gitsign,...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: headlamp, cloud-provider-azure, ipfs-cluster, gomplate, spqr, kubevela, consul-k8s, steampipe, kubernetes, cilium-cli, fulcio, external-dns, ferretdb, harbor, witness, openbao, step-issuer, kwok, gitlab-runner, litestream, flux-kustomize-controller, tkn, gitsign,...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: opentelemetry-go-instrumentation-fips, task, crossplane-provider-aws-athena, crossplane-provider-aws-ssm, steampipe, crossplane-provider-aws-guardduty-fips, gitlab-operator, crossplane-provider-aws-sagemaker-fips, crossplane-provider-aws-devicefarm-fips,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: opentelemetry-go-instrumentation-fips, task, crossplane-provider-aws-athena, crossplane-provider-aws-ssm, steampipe, crossplane-provider-aws-guardduty-fips, gitlab-operator, crossplane-provider-aws-sagemaker-fips, crossplane-provider-aws-devicefarm-fips,...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: headlamp, cloud-provider-azure, ipfs-cluster, gomplate, kubevela, consul-k8s, steampipe, kubernetes, cilium-cli, fulcio, external-dns, ferretdb, harbor, witness, openbao, step-issuer, kwok, gitlab-runner, litestream, eksctl, flux-kustomize-controller, tkn, gitsign,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: headlamp, cloud-provider-azure, ipfs-cluster, gomplate, kubevela, consul-k8s, steampipe, kubernetes, cilium-cli, fulcio, external-dns, ferretdb, harbor, witness, openbao, step-issuer, kwok, gitlab-runner, litestream, eksctl, flux-kustomize-controller, tkn, gitsign,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, kyverno, skaffold, pulumi-language-java, kubeflow, kube-bench-fips, portieris-fips, kubeflow-pipelines, step-issuer-fips, cluster-proportional-autoscaler, opa-fips-envoy, spark-operator-fips, kubeflow-fips, dgraph,...

GO-2024-2883 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, timestamp-authority, cortex, grafana-mimir, fulcio, rekor...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k3d, ksops, kargo, pulumi-language-dotnet, step, terragrunt, opentelemetry-collector-contrib, dex, spegel, restic, smarter-device-manager, cert-manager-cmctl, gomplate, grafana-mimir, sigstore-scaffolding, minio, spicedb, spire-server,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: ksops, step, terragrunt, sqlpad, opentelemetry-collector-contrib, fluent-bit-plugin-loki, nuclei, prometheus-operator, restic, airflow, flux, chezmoi, grafana-mimir, velero, falcoctl, harbor-registry, sigstore-scaffolding, spire-server, wal-g, opentelemetry-collector...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3d, ksops, kargo, terragrunt, flux-notification-controller, opentelemetry-collector-contrib, nuclei, flux, gomplate, actions-runner-controller, skopeo, grafana-mimir, falcoctl, kubevela, sigstore-scaffolding, aactl, spire-server, crossplane-provider-azure,...

CLEANSTART-2026-SP48916 Security fixes in grafana-mimir-fips 3.0.5-r1

Package grafana-mimir-fips version 3.0.5-r1 fixes 12 vulnerabilities: ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58, CVE-2026-39883, CVE-2026-39882, CVE-2026-27140...

CLEANSTART-2026-JG10359 Security fixes in grafana-mimir 3.0.2-r0

Package grafana-mimir version 3.0.2-r0 fixes 9 vulnerabilities: CVE-2025-68121, ghsa-9h8m-3fm2-qjrq, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679...

CLEANSTART-2026-RY66554 Security fixes in grafana-mimir-fips 3.0.4-r1

Package grafana-mimir-fips version 3.0.4-r1 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-PI73299 Security fixes in grafana-mimir 3.0.2-r1

Package grafana-mimir version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QD77000 Security fixes in grafana-mimir-fips 3.0.2-r0

Package grafana-mimir-fips version 3.0.2-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2025-68121, CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-PK62931 Security fixes in grafana-mimir-fips 3.0.2-r1

Package grafana-mimir-fips version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-macie2-fips, kubescape, trillian-fips, crossplane-provider-aws-kafkaconnect, longhorn-manager-fips, crossplane-provider-family-aws-fips, metallb, seaweedfs-rocksdb, rke2-runtime, keda,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-macie2-fips, kubescape, trillian-fips, crossplane-provider-aws-kafkaconnect, longhorn-manager-fips, crossplane-provider-family-aws-fips, metallb, seaweedfs-rocksdb, rke2-runtime, keda,...

CLEANSTART-2026-CY26398 Security fixes for CVE-2026-34986, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-w8rr-5gcm-pp58, ghsa-xmrv-pmrh-hhx2 applied in versions: 3.0.5-r0, 3.0.6-r0

Multiple security vulnerabilities affect the grafana-mimir-fips package. These issues are resolved in later releases. See references for individual vulnerability details...