GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating, grafana-mimir, aws-flb-kinesis-fips, deck-fips, terraform-provider-kubernetes-fips, harbor, datadog-agent, gcp-compute-persistent-disk-csi-driver-fips, contour, kiam, grpc-health-probe-fips, knative-client, kube-rbac-proxy,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating, grafana-mimir, aws-flb-kinesis-fips, deck-fips, terraform-provider-kubernetes-fips, nri-redis-fips, clickhouse-operator-fips, datadog-agent, gcp-compute-persistent-disk-csi-driver-fips, grafana-operator, harbor, contour, kiam,...

GHSA-29QP-CRVH-W22M vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, crossplane-provider-azure-managedidentity, crossplane-provider-aws, kafka-proxy, crossplane-provider-azure-sql, sftpgo-plugin-geoipfilter, velero, crossplane-provider-aws-cloudfront, crossplane-provider-aws-firehose, terragrunt,...

ch.cern.hbase.connectors.kafka:hbase-kafka-proxy (>=1.0.1_spark-3.0.1_2, <=1.0.1_spark-3.0.1_4), ch.cern.hbase.connectors.spark:hbase-spark (>=1.0.1_spark-3.0.1_2, <=1.0.1_spark-3.0.1_4) +414 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.8.5)

org.apache.hadoop:hadoop-common MAVEN version 2.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - ch.cern.hbase.connectors.kafka:hbase-kafka-proxy =1.0.1spark-3.0.12, =1.0.1spark-3.0.12,...