GO-2024-2978 vulnerabilities

Vulnerabilities for packages: grpc-health-probe, conftest, kaniko, osv-scanner, spegel, rqlite, hubble-ui, trivy, k3d, terragrunt, opa, terraform-docs, kubernetes-csi-external-provisioner, spire-server, minio, temporal, certificate-transparency, smarter-device-manager, zot, dbmate, fulcio,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, prometheus-operator, up, airflow, timestamp-authority, velero, py3-azure-identity, trivy, fluent-bit-plugin-loki, argo-events, terragrunt, secrets-store-csi-driver-provider-azure, spire-server, chezmoi, pulumi, rekor, zot, flux, rook,...

CLEANSTART-2026-HN48536 Security fixes in grafana-agent-operator 0.44.3-r1

Package grafana-agent-operator version 0.44.3-r1 fixes 6 vulnerabilities: CVE-2026-39828, ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv, ghsa-x527-x647-q7gg...

CLEANSTART-2026-MO12071 Security fixes in grafana-agent-operator 0.44.8-r0

Package grafana-agent-operator version 0.44.8-r0 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: image-factory-fips, crossplane-provider-aws-cloudsearch, etcd, vault-env, blob-csi, trident-fips, rancher, kubernetes-csi-livenessprobe-fips, crossplane-provider-azure-resources, kubevirt-cdi-operator, cri-tools, amazon-cloudwatch-agent-operator, juicefs,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: spegel, azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, neuvector-scanner, contour, kyverno-notation-aws, osv-scanner, prometheus-operator, terraform-provider-pagerduty, rancher-helm, helm-mapkubeapis, falco-no-driver, gcsfuse, redka,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: kafkaexporter, oauth2-proxy, etcd, kubernetes-csi-livenessprobe-fips, cri-tools, prometheus-postgres-exporter-fips, docker-credential-ecr-login, litefs, wire-go, atlantis, nri-prometheus, harbor-scanner-trivy, buildkitd, wireguard-go, kubernetes-dashboard-fips,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: spegel, osv-scanner, nats-server, kserve, dagdotdev, kyverno-notation-aws, prometheus-operator, gcsfuse, undock, crossplane-provider-aws-cloudwatchlogs, terraform, buf, grype, src-fingerprint, cloudprober, grafana-alloy, bom, dockerize, metrics-server, step-issuer,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, prometheus-operator, up, airflow, timestamp-authority, velero, py3-azure-identity, trivy, fluent-bit-plugin-loki, argo-events, terragrunt, secrets-store-csi-driver-provider-azure, spire-server, chezmoi, pulumi, rekor, zot, flux, rook,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: kafkaexporter, aws-flb-cloudwatch, oauth2-proxy, opa-fips, xcaddy, etcd, grafana-mimir, yq, kubernetes-csi-livenessprobe-fips, cri-tools, prometheus-postgres-exporter-fips, docker-credential-ecr-login, velero-plugin-for-csi-fips, minify, neuvector-dbgen, litefs,...