CLEANSTART-2026-ZH84525 Security fix for GHSA-cp6g-7hqx-qxhp applied in: amazon-cloudwatch-agent 1.300065.0-r1, grafana-agent-operator 0.44.3-r1, prometheus 3.9.1-r6

GHSA-cp6g-7hqx-qxhp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: zarf, tflint, kubernetes-csi-driver-hostpath, dex, gomplate, osv-scanner, opentelemetry-collector-contrib, terraform-docs, k3d, sigstore-scaffolding, step, terragrunt, k8sgpt, cloudnative-pg, grafana-mimir, ferretdb, cert-manager-cmctl, spegel,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: zarf, up, argo-events, pulumi, rclone, rekor, opentelemetry-collector-contrib, cosign, falcoctl, sigstore-scaffolding, step, terragrunt, k8sgpt, grafana-mimir, tekton-chains, druid, boring-registry, sqlpad, velero, chezmoi, thanos, flyte, restic,...

CLEANSTART-2026-HN48536 Security fixes in grafana-agent-operator 0.44.3-r1

Package grafana-agent-operator version 0.44.3-r1 fixes 6 vulnerabilities: CVE-2026-39828, ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv, ghsa-x527-x647-q7gg...

CLEANSTART-2026-MO12071 Security fixes in grafana-agent-operator 0.44.8-r0

Package grafana-agent-operator version 0.44.8-r0 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatch-fips, knative-net-istio-fips, neuvector-fips, terraform-provider-databricks-fips, gitlab-runner-fips, vertical-pod-autoscaler, falco-no-driver, consul, rclone, crossplane-provider-azure-network, eks-distro-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: vault-env, kubernetes-csi-driver-hostpath, cloud-provider-aws, vexctl, crossplane-provider-sql, k8s-device-plugin, osv-scanner, authservice, falcoctl, aws-node-termination-handler, step, envconsul, cloudnative-pg, kube-state-metrics, amazon-cloudwatch-agent-operator,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: extism, trillian, falcoctl, nats-server, kube-bench, stern, prometheus-postgres-exporter-fips, falcosidekick-fips, delve, dockerize, guac, ko, gostatsd, secrets-store-csi-driver-provider-gcp, vertical-pod-autoscaler, prometheus-postgres-exporter, s5cmd, rclone,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: temporal-server, terraform-provider-azurerm, pulumi, mailpit, cloud-provider-aws, amass, crossplane-provider-sql, opentelemetry-collector-contrib, osv-scanner, authservice, falcoctl, step, cloudnative-pg, frp, kube-state-metrics, tekton-chains, go-licenses,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: zarf, up, argo-events, pulumi, rclone, rekor, opentelemetry-collector-contrib, cosign, falcoctl, sigstore-scaffolding, step, terragrunt, k8sgpt, grafana-mimir, tekton-chains, druid, boring-registry, sqlpad, velero, chezmoi, thanos, flyte, restic,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: falcoctl, kube-fluentd-operator, falcosidekick-fips, dockerize, s5cmd, rclone, gomplate-fips, kpt, bazelisk, falcoctl-fips, grype, postgres-operator-fips, kubescape, prometheus-elasticsearch-exporter-fips, conftest, mc-fips, newrelic-prometheus-configurator, cortex,...