54 matches found
CLEANSTART-2026-ZN75891 Security fixes in aws-flb-kinesis 1.10.3-r0
Package aws-flb-kinesis version 1.10.3-r0 fixes 22 vulnerabilities: ghsa-4f99-4q7p-p3gh, CVE-2025-65637, ghsa-8r3f-844c-mc37, CVE-2024-24786, CVE-2025-68121...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-policyinsights, rancher-system-upgrade-controller-fips, k3d, spicedb-operator, chainloop-cli, crossplane-provider-aws-wafv2, aws-network-policy-agent-fips, grafana-fips, commercial-chainloop-backend, dex-k8s-authenticator, kots,...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, karpenter, redka, telegraf, falco-no-driver, kots, external-dns, mattermost, nerdctl, go, aws-flb-kinesis, aws-flb-cloudwatch, istio, kine, spire-server, kubescape, zot, newrelic-fluent-bit-output, libnvidia-container, dask-gateway,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: redka, lazygit, stakater-reloader, kyverno-notation-aws, bank-vaults, local-static-provisioner, grpcurl, newrelic-nri-statsd, kustomize, weaviate, clickhouse-operator, docker-cli, cert-manager, sftpgo-plugin-geoipfilter, helm-set-status, grafana, esbuild, gitsign, bo...
GHSA-XJ38-JXC5-RPPX vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch-fips, cluster-autoscaler-fips, etcd, snyk-cli, kubernetes-fips, argo-workflows-fips, tekton-pipelines-fips, rke2-runtime-fips, gitlab-rails-ce, commercial-chainloop-backend, grafana-fips, gitlab-kas-fips, kots, kubernetes-csi-node-driver-registrar,...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch-fips, cluster-autoscaler-fips, etcd, snyk-cli, kubernetes-fips, argo-workflows-fips, tekton-pipelines-fips, rke2-runtime-fips, gitlab-rails-ce, commercial-chainloop-backend, grafana-fips, gitlab-kas-fips, kots, kubernetes-csi-node-driver-registrar,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch-fips, amazon-ecs-agent-fips, etcd, pulumi-language-java, rabbitmq-messaging-topology-operator-fips, conftest-fips, rke2-runtime-fips, grafana-fips, commercial-chainloop-backend, kots, mattermost, azure-aad-pod-identity-mic, commercial-chainloop-cli...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch-fips, amazon-ecs-agent-fips, etcd, pulumi-language-java, rabbitmq-messaging-topology-operator-fips, conftest-fips, rke2-runtime-fips, grafana-fips, commercial-chainloop-backend, kots, mattermost, azure-aad-pod-identity-mic, commercial-chainloop-cli...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch-fips, kyverno-policy-reporter-plugins-kyverno-fips, terraform-provider-time, amazon-ecs-agent-fips, grafana-pyroscope, etcd, consul-k8s-fips, k3d, oauth2-proxy-fips, pulumi-language-java, rabbitmq-messaging-topology-operator-fips,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: k3d, spicedb-operator, crossplane-provider-aws-wafv2, aws-network-policy-agent-fips, hugo-extended, logstash-exporter, grafana-fips, commercial-chainloop-backend, dex-k8s-authenticator, kots, yunikorn-web, gops, kubernetes-release, cue-fips, kubevirt-cdi-operator,...
Uncaught Exception
Overview Affected versions of this package are vulnerable to Uncaught Exception via the eventstream decoder process. An attacker can cause the host process to terminate unexpectedly by sending a crafted EventStream response frame containing a header value type byte outside the valid range...
CVE-2025-65637 vulnerabilities
Vulnerabilities for packages: src-fingerprint, kpt, go-discover, kubeflow, gostatsd, newrelic-nri-statsd, hello-world-golang, sonobuoy, terraform-provider-google, kube-fluentd-operator, php-fpmexporter, docker-credential-gcr, aws-flb-kinesis, aws-flb-cloudwatch, smokescreen, neuvector-dbgen,...
GHSA-4F99-4Q7P-P3GH vulnerabilities
Vulnerabilities for packages: src-fingerprint, kpt, go-discover, kubeflow, gostatsd, newrelic-nri-statsd, hello-world-golang, sonobuoy, terraform-provider-google, kube-fluentd-operator, php-fpmexporter, docker-credential-gcr, aws-flb-kinesis, aws-flb-cloudwatch, smokescreen, neuvector-dbgen,...
GHSA-4F99-4Q7P-P3GH vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch-fips, go-discover-fips, hello-world-golang, consul-fips, aws-flb-kinesis-fips, neuvector-dbgen, src-fingerprint, kiam, src-fingerprint-fips, wavefront-collector-for-kubernetes, newrelic-nri-statsd, kubeflow-fips, kubeflow, go-discover,...
CVE-2025-65637 vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch-fips, go-discover-fips, hello-world-golang, consul-fips, aws-flb-kinesis-fips, neuvector-dbgen, src-fingerprint, kiam, src-fingerprint-fips, wavefront-collector-for-kubernetes, newrelic-nri-statsd, kubeflow-fips, kubeflow, go-discover,...
Malicious code in @posthog/kinesis-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f869c9f2e7f4d35c729f506eb479a88bab7ca0dcd2aa6f2485319d87f39dd5 The package @posthog/kinesis-plugin was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198941
Malicious code in @posthog/kinesis-plugin npm...
MAL-2025-190884 Malicious code in @posthog/kinesis-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f869c9f2e7f4d35c729f506eb479a88bab7ca0dcd2aa6f2485319d87f39dd5 The package @posthog/kinesis-plugin was found to contain malicious code. Source: google-open-source-security...
New Home for Spring Integration AWS
The Spring Integration for AWS was always an independent Spring Integration extension project with its own plans and release cycles. The consumption of this single jar library has always added a complexity from the dependency management perspective. It depends not only on Spring Integration modul...