GO-2026-6508 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, caddy, tempo, opentofu, falcosidekick, mcp-grafana, zot, harbor-registry, loki, amazon-cloudwatch-agent, datadog-agent, grafana, kots, grafana-pyroscope, aws-otel-collector, distribution, grafana-alloy, grafana-mimir, pulumi-kubernetes-operato...

GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: k9s, kubescape, mountpoint-s3-csi-driver, nuclei, tempo, mcp-grafana, crossplane-provider-aws-sqs, yunikorn-k8shim, k6, octo-sts, crossplane-provider-azure-storage, restic, tfsec, percona-server-mongodb-operator, rancher-agent, tetragon, redpanda,...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: k9s, kubescape, mountpoint-s3-csi-driver, nuclei, tempo, mcp-grafana, crossplane-provider-aws-sqs, yunikorn-k8shim, k6, octo-sts, crossplane-provider-azure-storage, restic, tfsec, percona-server-mongodb-operator, rancher-agent, tetragon, redpanda,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-wafv2, cerbos, terragrunt-fips, kubescape-operator-fips, crossplane-provider-aws-servicecatalog-fips, tofu-controller, crossplane-provider-aws-sns, crossplane-provider-aws-connect-fips, authservice-fips, kyverno-notation-aws-fips, kube-vip-fip...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-wafv2, cerbos, terragrunt-fips, kubescape-operator-fips, crossplane-provider-aws-servicecatalog-fips, tofu-controller, crossplane-provider-aws-sns, crossplane-provider-aws-connect-fips, authservice-fips, kyverno-notation-aws-fips, kube-vip-fip...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: k9s, kubescape, mountpoint-s3-csi-driver, nuclei, tempo, mcp-grafana, crossplane-provider-aws-sqs, yunikorn-k8shim, k6, octo-sts, crossplane-provider-azure-storage, restic, tfsec, percona-server-mongodb-operator, rancher-agent, tetragon, redpanda,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: k9s, kubescape, mountpoint-s3-csi-driver, nuclei, tempo, mcp-grafana, crossplane-provider-aws-sqs, yunikorn-k8shim, k6, octo-sts, crossplane-provider-azure-storage, restic, tfsec, percona-server-mongodb-operator, rancher-agent, tetragon, redpanda,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin-fips, caddy-fips, flyte, kyverno-notation-aws, portieris-fips, opa, pulumi-language-yaml, spark-operator, crossplane-provider-gcp, step-issuer, pulumi-kubernetes-operator, pulumi-language-dotnet, cert-exporter, terraform-provider-google,...

GO-2024-2883 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, cortex, fulcio, rekor, grafana-mimir, timestamp-authority...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dagger, k3d, conftest, rqlite, spire-server, smarter-device-manager, k8sgpt, kargo, k3s, grafana-agent-operator, opentelemetry-collector-contrib, guac, k8sgpt-operator, dex, falcosidekick, melange, zot, sigstore-scaffolding, restic, opa, terragrunt, temporal,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, hugo, flux, spire-server, goreleaser, tkn, velero, trino, fluent-bit-plugin-loki, k8sgpt, secrets-store-csi-driver-provider-azure, hugo-extended, kubescape, sqlpad, timestamp-authority, grafana-agent-operator, nuclei,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, k3d, flux-kustomize-controller, flux, rabbitmq-messaging-topology-operator, goreleaser, spire-server, tkn, vexctl, kargo, kubescape, neuvector-sigstore-interface, k3s, timestamp-authority, nuclei, opentelemetry-collector-contrib, guac,...

CLEANSTART-2026-JG10359 Security fixes in grafana-mimir 3.0.2-r0

Package grafana-mimir version 3.0.2-r0 fixes 9 vulnerabilities: CVE-2025-68121, ghsa-9h8m-3fm2-qjrq, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679...

CLEANSTART-2026-RY66554 Security fixes in grafana-mimir-fips 3.0.4-r1

Package grafana-mimir-fips version 3.0.4-r1 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-SP48916 Security fixes in grafana-mimir-fips 3.0.5-r1

Package grafana-mimir-fips version 3.0.5-r1 fixes 12 vulnerabilities: ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58, CVE-2026-39883, CVE-2026-39882, CVE-2026-27140...

CLEANSTART-2026-PI73299 Security fixes in grafana-mimir 3.0.2-r1

Package grafana-mimir version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-PK62931 Security fixes in grafana-mimir-fips 3.0.2-r1

Package grafana-mimir-fips version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-QD77000 Security fixes in grafana-mimir-fips 3.0.2-r0

Package grafana-mimir-fips version 3.0.2-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2025-68121, CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-wafv2, kube-logging-operator, buildah-fips, argo-cd, cerbos, kubescape-operator-fips, argo-workflows, beats, longhorn-manager-fips, gitlab-cng-fips, crossplane-provider-kubernetes,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-wafv2, kube-logging-operator, buildah-fips, argo-cd, cerbos, kubescape-operator-fips, argo-workflows, beats, longhorn-manager-fips, gitlab-cng-fips, crossplane-provider-kubernetes,...