CVE-2026-119117

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

CVE-2026-119117 Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

CVE-2026-119117

The Amazon Kinesis Producer Library for Java (versions prior to 1.0.8 ) is vulnerable to the insertion of sensitive information. When the library's logger is set to DEBUG level, it may write resolved AWS credentials into log files. Additionally, the library passes these credentials as command-lin...

EUVD-2026-114267

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

CVE-2026-119117: AWS amazon-kinesis-producer: Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the…

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

GHSA-75PG-WVH3-34JR vulnerabilities

Vulnerabilities for packages: kubernetes, trufflehog, wuzz, crossplane-provider-aws-iam, minio, kots, src, crossplane-provider-aws-cloudfront, crossplane-provider-aws-route53, crossplane-provider-aws-lambda, hydra, prometheus-operator, k3s, k6, cert-manager, crossplane-provider-aws-memorydb,...

GO-2026-6605 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, azuredisk-csi, crossplane-provider-aws-cloudsearch-fips, crossplane-provider-aws-route53resolver-fips, kepler-fips, jupyterhub-k8s-image-awaiter-fips, dapr, jupyterhub-k8s-image-awaiter, prometheus-fips, gitlab-kas-fips,...

GHSA-22JX-P735-QCPM vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-fips, kserve-localmodelnode-agent-fips, crossplane-provider-aws-chime-fips, azuredisk-csi, crossplane-provider-azure-purview, kube-conformance, crossplane-provider-aws-cloudsearch-fips, knative-eventing, crossplane-provider-aws-route53resolver-fips...

GHSA-F5VF-8PVC-394G vulnerabilities

Vulnerabilities for packages: actions-runner-controller, azuredisk-csi, crossplane-provider-aws-cloudsearch-fips, crossplane-provider-aws-route53resolver-fips, kepler-fips, jupyterhub-k8s-image-awaiter-fips, dapr, jupyterhub-k8s-image-awaiter, prometheus-fips, gitlab-kas-fips,...

CVE-2026-56866 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, azuredisk-csi, crossplane-provider-aws-cloudsearch-fips, crossplane-provider-aws-route53resolver-fips, kepler-fips, jupyterhub-k8s-image-awaiter-fips, dapr, jupyterhub-k8s-image-awaiter, prometheus-fips, gitlab-kas-fips,...

CLEANSTART-2026-ZG24378 Security fix for CVE-2025-61727 applied in: apache-nifi 2.10.0-r4, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, calico-fips 3.31.2-r1, cert-manager-cmctl-fips 2.4.0-r1, cert-manager-fips 1.18.2-r0, cert-manager-fips 1.19.1-r0, cert-manager-webhook-pdns-fips 2.2.0-r0, chartmuseum-fips 0.15.0-r4, chartmuseum-fips 0.16.3-r3, cloudnative-pg-fips 1.24.4-r0, cloudnative-pg-fips 1.25.4-r0, cloudnative-pg-fips 1.26.2-r0, cni-plugin-flannel 1.6.0-r0, cni-plugins-fips 1.8.0-r0, configmap-reload 0.15.0-r0, consul-k8s-fips 1.7.8-r0, consul-k8s-fips 1.8.6-r0, consul-k8s-fips 1.9.1-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, dex-fips 2.41.1-r4, dex-fips 2.42.1-r4, dex-fips 2.43.1-r4, docker-fips 28.4.0-r0, druid-exporter-fips 0.10-r1, druid-exporter-fips 0.11-r2, eck-operator 3.2.0-r1, eks-distro-kube-apiserver-fips 1.34.2-r0, elastic-beats-fips 9.2.2-r0, external-dns 0.18.0-r0, external-dns-fips 0.20.0-r0, external-secrets 0.20.4-r0, flux-notification-controller-fips 1.5.0-r0, go-discover-fips 0_git20250325-r0, go-fips-1.25 1.25.6-r1, gomplate-fips 4.3.3-r3, harbor-registry 3.0.0.1-r2, harbor-registry-fips 2.6.2-r0, harbor-registry-fips 2.7.1-r0, harbor-registry-fips 2.8.3-r0, harbor-registry-fips 3.0.0-r1, helm-fips 3.17-4-r0, helm-fips 3.19.0-r1, helm-fips 4.0.1-r0, helm-operator-fips 1.39.0-r1, helm-operator-fips 1.41.1-r1, ip-masq-agent 2.12.6-r1, istio-operator-fips 1.25.5-r0, istio-operator-fips 1.26.7-r0, istio-operator-fips 1.27.4-r0, istio-operator-fips 1.28.1-r0, istio-operator-fips 1.4.10-r6, istio-pilot-discovery 1.28.1-r0, istio-pilot-discovery-fips 1.25.5-r0, istio-pilot-discovery-fips 1.26.7-r0, istio-pilot-discovery-fips 1.27.4-r0, istio-pilot-discovery-fips 1.28.1-r0, k8ssandra-client-fips 0.7.0-r2, k8ssandra-client-fips 0.7.0-r4, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.26.0-r0, k8ssandra-operator-fips 1.27.0-r0, k8ssandra-operator-fips 1.28.0-r0, k8ssandra-operator-fips 1.29.0-r0, kaniko-fips 1.24.0-r0, kapp-controller 0.59.0-r1, kapp-controller-fips 0.59.0-r1, kube-rbac-proxy-fips 0.17.1-r1, kube-rbac-proxy-fips 0.18.2-r2, kube-rbac-proxy-fips 0.19.1-r1, kube-state-metrics 2.16.0-r3, kube-state-metrics-fips 2.14.0-r0, kube-state-metrics-fips 2.15.0-r0, kube-state-metrics-fips 2.17.0-r0, kubernetes 1.31.14-r1, kubernetes 1.32-10-r1, kubernetes 1.33.6-r0, kubernetes 1.34.2-r0, kubernetes-csi-external-resizer-fips 2.0.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-csi-node-driver-registrar-fips 2.15.0-r0, kubernetes-fips 1.31.14-r0, kubernetes-fips 1.32.10-r0, kubernetes-fips 1.32.2-r0, kubernetes-fips 1.33.6-r0, kured 1.20.0-r0, metallb-fips 0.14.9-r1, metrics-server 0.8.0-r0, metrics-server-fips 0.5.2-r1, metrics-server-fips 0.6.4-r1, metrics-server-fips 0.7.2-r3, metrics-server-fips 0.8.0-r5, minio-operator 7.1.1-r3, mongodb 8.2.1-r1, mongodb 8.2.6-r1, multus-cni-fips 4.0.2-r3, multus-cni-fips 4.1.4-r4, multus-cni-fips 4.2.3-r1, nginx-prometheus-exporter 1.5.1-r0, nginx-prometheus-exporter-fips 1.5.1-r0, nvidia-container-toolkit 1.19.0-r0, openbao-fips 2.4.4-r2, opensearch-k8s-operator-fips 2.5.1-r1, opensearch-k8s-operator-fips 2.6.1-r7, opensearch-k8s-operator-fips 2.7.0-r8, opentofu-fips 1.10.7-r0, opentofu-fips 1.7.10-r0, opentofu-fips 1.8.11-r0, opentofu-fips 1.9.4-r1, prometheus-fips 3.5.0-r4, prometheus-fips 3.9.0-r0, prometheus-node-exporter 1.8.0-r3, prometheus-node-exporter-fips 1.10.2-r0, prometheus-node-exporter-fips 1.7.0-r1, prometheus-node-exporter-fips 1.8.2-r1, prometheus-node-exporter-fips 1.9.1-r0, prometheus-operator-fips 0.85.0-r1, prometheus-operator-fips 0.86.2-r0, prometheus-operator-fips 0.87.0-r0, prometheus-redis-exporter-fips 1.77.0-r0, prometheus-redis-exporter-fips 1.78.0-r0, prometheus-redis-exporter-fips 1.79.0-r0, promxy 0.0.93-r1, rabbitmq-messaging-topology-operator 1.15.0-r1, restic 0.18.0-r0, runc 1.1.14-r0, smarter-device-manager-fips 1.20.12-r0, spark-operator 2.2.1-r0, spire-server-fips 1.13.3-r0, stakater-reloader-fips 1.1.0-r3, stakater-reloader-fips 1.2.1-r1, stakater-reloader-fips 1.3.0-r0, stakater-reloader-fips 1.4.10-r0, step-issuer-fips 0.9.11-r1, step-issuer-fips 0.9.9-r2, tekton-pipelines 1.5.0-r0, tekton-pipelines-fips 1.5.0-r0, tempo 2.9.0-r0, terragrunt-fips 0.90.2-r0, terragrunt-fips 0.91.5-r0, terragrunt-fips 0.92.1-r0, terragrunt-fips 0.93.13-r1, thanos-operator-fips 0.3.7-r0, trino 479-r0, velero 1.17.0-r1, velero-fips 1.14.1-r1, velero-fips 1.16.2, vertical-pod-autoscaler 1.5.1-r0, vertical-pod-autoscaler-fips 1.5.1-r0, volume-modifier-for-k8s 0.9.0-r0, volume-modifier-for-k8s-fips 0.9.0-r0, wave-fips 0.10.0-r0, wave-fips 0.9.0-r3

CVE-2025-61727 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gomplate, k9s, kots, cluster-api-azure-controller, crossplane-provider-aws-lambda, gitlab-kas, crossplane-provider-aws-firehose, crossplane-provider-aws-eks, crossplane-provider-aws-kinesis, zot, docker, buildkitd, crossplane-provider-aws-cloudwatchlogs,...

CLEANSTART-2026-ZN75891 Security fixes in aws-flb-kinesis 1.10.3-r0

Package aws-flb-kinesis version 1.10.3-r0 fixes 22 vulnerabilities: ghsa-4f99-4q7p-p3gh, CVE-2025-65637, ghsa-8r3f-844c-mc37, CVE-2024-24786, CVE-2025-68121...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: actions-runner-controller, azuredisk-csi, crossplane-provider-aws-cloudsearch-fips, crossplane-provider-aws-route53resolver-fips, kepler-fips, jupyterhub-k8s-image-awaiter-fips, crossplane-provider-aws-route53, dapr, prometheus-fips, gitlab-kas-fips, crossplane,...

ch.admin.bit.jeap:jeap-messaging-glue-schema-registry (>=8.51.0, <=15.2.0), com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=4.0.7, <=5.0.3) +105 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (5.2.0)

com.squareup.wire:wire-runtime-jvm MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - ch.admin.bit.jeap:jeap-messaging-glue-schema-registry =8.51.0, =4.0.7, =2.0.1, =3.0.14.0,...

ch.admin.bit.jeap:jeap-messaging-glue-schema-registry (>=8.15.0, <=8.50.0), com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=3.4.3, <=4.0.6) +90 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.3.0)

com.squareup.wire:wire-runtime MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - ch.admin.bit.jeap:jeap-messaging-glue-schema-registry =8.15.0, =3.4.3, =0.15.8, =1.0.20, =1.0.20,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kubernetes, kots, aws-flb-firehose, prometheus-operator, go, gitlab-kas, cert-manager, cloud-provider-aws, nerdctl, gitaly, libnvidia-container, fscrypt, zot, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, gitlab-pages, kine, kyverno, prometheus, flux, helm,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubewatch, consul-k8s, gitlab-kas, kube-state-metrics, kubernetes-dashboard-web, nri-postgresql, nri-redis, kubernetes-event-exporter, spicedb-operator, logstash-exporter, aws-application-networking-k8s, newrelic-infra-operator, cadvisor, flux-source-controller,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, azuredisk-csi, kubernetes-dashboard, kube-conformance, go, knative-eventing, kyverno, opentofu-fips, etcd, commercial-grafana, ingress-nginx-controller-fips, grafana-fips, prometheus-fips, nemo, falco-no-driver, gitlab-kas-fips,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, azuredisk-csi, kubernetes-dashboard, kube-conformance, go, knative-eventing, kyverno, opentofu-fips, etcd, commercial-grafana, ingress-nginx-controller-fips, grafana-fips, prometheus-fips, nemo, falco-no-driver, gitlab-kas-fips,...