Upbound Official
provider-family-gcp-beta
By upbound
Last changed 2 months ago
Availability
Community
Standard
Enterprise
Business Critical
Languages
Support
Upbound Supported
12 months window ends 2026/08/12
Security & Maintenance
CVE Remediation
Backporting
Upbound signed
Source Code

Notice something off about this package? Help us keep the marketplace safe and trustworthy by reporting inappropriate content or behavior.

Report this package
Overview
Upbound's official Crossplane provider to manage Google Cloud Platform (GCP) config services in Kubernetes.
ReadmeProvidersProviderConfigManaged ResourcesProvenanceRelease Notes
Vulnerabilities (27)

Summary

This release includes critical security fixes addressing multiple CVE vulnerabilities in the Go standard library.

Security Fixes

  • Go version updated to 1.25.10 - Remediates 11 CVE vulnerabilities:
    • 6 High severity: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811, CVE-2026-42501
    • 5 Medium severity: CVE-2026-39817, CVE-2026-39826, CVE-2026-39825, CVE-2026-39823, CVE-2026-39819

Changes

  • Updated Go version from 1.25.9 to 1.25.10
  • Updated CI workflows to use Go 1.25.10
Discover the building blocks for your internal cloud platform.
© 2026 Upbound, Inc.
Solutions
Learn
Company
Community
More