CLEANSTART-2026-ML87749 Security fix for ghsa-4v7x-pqxf-cx7m applied in: cfssl 1.5.0-r1, clickhouse-operator 0.25.5-r0, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, metallb 0.13.12-r3, multus-cni-fips 4.0.2-r2, wave-fips 0.7.2-r1, wave-fips 0.8.0-r1, wave-fips 0.9.0-r1, wavefront-collector-for-kubernetes 1.13.0-r0

ghsa-4v7x-pqxf-cx7m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GE07592 Security fix for CVE-2022-30636 applied in: cert-manager-webhook-pdns-fips 2.3.0-r0, cfssl 1.5.0-r1

CVE-2022-30636 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: ytt, oras, wave, kubeflow-katib, kubernetes-dashboard-web, mongo-tools, traefik, grafana-rollout-operator, aws-flb-firehose, kubernetes-dashboard-auth, kwok, skopeo, cluster-proportional-autoscaler, flux-notification-controller, minio, kube-vip-cloud-provider, kind,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: vale, rabbitmq-messaging-topology-operator, rancher-telemetry, spegel, ytt, crossplane-provider-aws-rds, kuberay-operator, nginx-prometheus-exporter, wave, kubeflow-katib, amazon-cloudwatch-agent-operator, chart-testing, crossplane-provider-aws-s3, nri-couchbase,...

GO-2024-2888 vulnerabilities

Vulnerabilities for packages: ytt, oras, wave, kubeflow-katib, mongo-tools, aws-flb-firehose, kwok, sops, skopeo, cluster-proportional-autoscaler, flux-notification-controller, terragrunt, kind, nri-kubernetes, local-static-provisioner, fq, gh, step, thanos, influx, mkcert, prometheus-pushgateway...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: wave, kubeflow-katib, kubernetes-dashboard-web, amazon-cloudwatch-agent-operator, grafana-rollout-operator, kubeflow, kubernetes-dashboard-auth, kwok, openbao, skopeo, sops, cluster-proportional-autoscaler, flux-notification-controller, minio, terragrunt,...

CLEANSTART-2026-NG63443 Security fixes in cfssl 1.5.0-r1

Package cfssl version 1.5.0-r1 fixes 81 vulnerabilities: CVE-2020-29652, CVE-2021-31525, CVE-2021-33194, CVE-2021-38561, CVE-2021-43565...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, s5cmd-fips, pgpool2exporter-fips, hubble-fips, argo-workflows, pguser, traefik-fips, commercial-chainloop-backend, golangci-lint, rabbitmq-messaging-topology-operator, crossplane-provider-aws-kms-fips, podinfo-fips, chisel-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, s5cmd-fips, pgpool2exporter-fips, hubble-fips, argo-workflows, pguser, traefik-fips, commercial-chainloop-backend, golangci-lint, rabbitmq-messaging-topology-operator, crossplane-provider-aws-kms-fips, podinfo-fips, chisel-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, ipfs-cluster-fips, pguser, commercial-chainloop-backend, rabbitmq-messaging-topology-operator, podinfo-fips, crossplane-provider-family-azure, protoc-gen-go, crossplane-provider-azure-storage, hugo-fips, node-problem-detector,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, s5cmd-fips, pgpool2exporter-fips, hubble-fips, argo-workflows, pguser, traefik-fips, commercial-chainloop-backend, golangci-lint, rabbitmq-messaging-topology-operator, crossplane-provider-aws-kms-fips, podinfo-fips, chisel-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: vale, rabbitmq-messaging-topology-operator, rancher-telemetry, spegel, ytt, crossplane-provider-aws-rds, kuberay-operator, nginx-prometheus-exporter, wave, kubeflow-katib, amazon-cloudwatch-agent-operator, chart-testing, crossplane-provider-aws-s3, traefik,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: ytt, wave, amazon-cloudwatch-agent-operator, traefik, grafana-rollout-operator, confluent-cp-docker-utils, kubeflow, sops, flux-notification-controller, minio, kube-vip-cloud-provider, gptscript, local-static-provisioner, git-sync, step, x509-certificate-exporter,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: vale, rabbitmq-messaging-topology-operator, rancher-telemetry, spegel, ytt, crossplane-provider-aws-rds, kuberay-operator, nginx-prometheus-exporter, wave, kubeflow-katib, amazon-cloudwatch-agent-operator, chart-testing, crossplane-provider-aws-s3, nri-couchbase,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: ytt, wave, kubeflow-katib, amazon-cloudwatch-agent-operator, traefik, grafana-rollout-operator, confluent-cp-docker-utils, kubeflow, sops, flux-notification-controller, minio, kube-vip-cloud-provider, gptscript, local-static-provisioner, git-sync, step,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: vale, rabbitmq-messaging-topology-operator, rancher-telemetry, spegel, ytt, crossplane-provider-aws-rds, kuberay-operator, nginx-prometheus-exporter, wave, kubeflow-katib, amazon-cloudwatch-agent-operator, chart-testing, crossplane-provider-aws-s3, traefik,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: eck-operator-fips, ipfs-cluster-fips, velero-plugin-for-csi-fips, s5cmd-fips, pgpool2exporter-fips, pguser, rabbitmq-messaging-topology-operator, golangci-lint, crossplane-provider-aws-kms-fips, chisel-fips, kapp-controller, timescaledb-tune, protoc-gen-go, ratify,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: eck-operator-fips, ipfs-cluster-fips, velero-plugin-for-csi-fips, s5cmd-fips, pgpool2exporter-fips, pguser, rabbitmq-messaging-topology-operator, golangci-lint, crossplane-provider-aws-kms-fips, chisel-fips, kapp-controller, timescaledb-tune, protoc-gen-go, ratify,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: eck-operator-fips, ipfs-cluster-fips, velero-plugin-for-csi-fips, s5cmd-fips, pgpool2exporter-fips, pguser, rabbitmq-messaging-topology-operator, golangci-lint, crossplane-provider-aws-kms-fips, chisel-fips, kapp-controller, timescaledb-tune, protoc-gen-go, ratify,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: eck-operator-fips, ipfs-cluster-fips, s5cmd-fips, pgpool2exporter-fips, pguser, rabbitmq-messaging-topology-operator, golangci-lint, crossplane-provider-aws-kms-fips, chisel-fips, kapp-controller, ratify, authservice-fips, azure-service-operator, kubescape-operator,...