CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: modelmesh-runtime-adapter, crossplane-provider-aws-s3, crossplane-provider-aws-eks, crossplane-provider-aws-kms, src, metallb, kubernetes-csi-driver-hostpath, crossplane-provider-aws-lambda, crossplane-provider-aws-dynamodb, crossplane-provider-aws-route53,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: modelmesh-runtime-adapter, crossplane-provider-aws-s3, crossplane-provider-aws-eks, crossplane-provider-aws-kms, src, metallb, kubernetes-csi-driver-hostpath, crossplane-provider-aws-lambda, crossplane-provider-aws-dynamodb, crossplane-provider-aws-route53,...

CLEANSTART-2026-SU44499 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the promxy package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, grpcurl, kube-vip, lazydocker, modelmesh-runtime-adapter, sftpgo-plugin-geoipfilter, pulumi-language-yaml, snyk-cli, rancher-fleet, sriov-network-device-plugin, xeol, certificate-transparency, k8ssandra-operator, caddy,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, configmap-reload, croc, crossplane-provider-aws-s3, crossplane-provider-aws-eks, src, k8ssandra-operator, openbao-k8s, thanos, authservice, neuvector-dbgen, renovate, docker-compose, telegraf, cluster-autoscaler, kube-arangodb,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, configmap-reload, croc, nri-cassandra, crossplane-provider-aws-s3, crossplane-provider-aws-eks, src, k8ssandra-operator, openbao-k8s, thanos, authservice, neuvector-dbgen, docker-compose, telegraf, cluster-autoscaler,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, modelmesh-runtime-adapter, sftpgo-plugin-geoipfilter, snyk-cli, pulumi-language-yaml, terragrunt, sriov-network-device-plugin, crossplane-provider-aws-s3, ksops, crossplane-provider-aws-eks, crossplane-provider-aws-kms, src,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, configmap-reload, croc, nri-cassandra, crossplane-provider-aws-s3, crossplane-provider-aws-eks, src, k8ssandra-operator, openbao-k8s, thanos, authservice, neuvector-dbgen, docker-compose, telegraf, cluster-autoscaler,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, configmap-reload, croc, crossplane-provider-aws-s3, crossplane-provider-aws-eks, src, k8ssandra-operator, openbao-k8s, thanos, authservice, neuvector-dbgen, renovate, docker-compose, telegraf, cluster-autoscaler, kube-arangodb,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, modelmesh-runtime-adapter, sftpgo-plugin-geoipfilter, snyk-cli, pulumi-language-yaml, terragrunt, sriov-network-device-plugin, crossplane-provider-aws-s3, ksops, crossplane-provider-aws-eks, crossplane-provider-aws-kms, src,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: packer-fips, terraform-provider-pagerduty-fips, gcp-compute-persistent-disk-csi-driver-fips, kube-fluentd-operator, langfuse-fips, prometheus-elasticsearch-exporter-fips, redpanda, eck-operator-fips, policy-bot, spire-controller-manager-fips,...