CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, crossplane-provider-kubernetes-fips, crossplane-provider-aws-emrserverless-fips, cluster-api, external-secrets-operator, gitlab-kas, crossplane-provider-aws-cloudfront, terraform, slsa-verifier, crossplane-provider-aws-ssm,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: polaris-fips, secrets-store-csi-driver-provider-aws-fips, prometheus-nats-exporter, crossplane-provider-kubernetes-fips, metrics-agent-fips, git-sync-fips, google-cloud-otel-ops-collector, prometheus-redis-exporter, keda-fips, pulumi-language-yaml,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: dkron-fips, keda-fips, temporal, external-secrets-operator, gotrue-fips, gitlab-kas, crossplane, dagger, cosign-fips, livekit-server-fips, seaweedfs-rocksdb-fips, slsa-verifier, grpc-health-probe, commercial-chainloop-backend, ko-fips, packer-fips,...

CVE-2025-14459

A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...