GO-2025-4108 vulnerabilities

Vulnerabilities for packages: skaffold, helm, envoy-gateway, syft, rancher-fleet, spegel, kubescape-operator, kargo, steampipe, docker-compose, osv-scanner, rancher-helm, k8sgpt, falco-no-driver, trivy-operator, wolfictl, containerd, k3s, zot, melange, headlamp, buildkitd, grype, k9s, opa-envoy,...

GO-2026-5622 vulnerabilities

Vulnerabilities for packages: skaffold, rancher, helm, linkerd2, envoy-gateway, syft, spegel, kubescape-operator, kargo, kube-arangodb, docker-compose, rancher-agent, steampipe, tigera-operator, rancher-helm, falco-no-driver, trivy-operator, wolfictl, containerd, datadog-agent, k3s, zot, docker,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: linkerd2, pluto, envoy-gateway, rancher-fleet, kargo, rancher-helm, k8sgpt, zot, helm-docs, k9s, chart-testing, istio, trivy, zarf, kots, cluster-api-helm-controller, flux-source-controller, cert-manager-cmctl, k8ssandra-client, tw, cerbos, helm-push,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: spqr, pvc-autoresizer, aws-flb-cloudwatch, chisel, kubernetes-csi-external-resizer, vertical-pod-autoscaler, kubeflow, spire-server, opencost, docker-credential-ecr-login, grpcurl, spegel, terraform-provider-time, vale, vault-k8s, mods, db-operator, golangci-lint,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kpt, nats-server-config-reloader, witness, cni-plugins, cloud-provider-gcp-cloud-controller-manager, containerd, ipfs-cluster, flux, terraform-mcp-server, chart-testing, wgcf, nri-memcached, wal-g, portieris, k3d, gcsfuse, nri-nginx,...

CLEANSTART-2026-WU83083 Security fixes in helm-operator 1.41.1-r0

Package helm-operator version 1.41.1-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...

CLEANSTART-2026-PW58668 Security fixes in helm-operator 1.42.2-r2

Package helm-operator version 1.42.2-r2 fixes 4 vulnerabilities: ghsa-jpcc-p29g-p8mq, ghsa-xhf5-7wjv-pqxp, CVE-2026-47262, CVE-2026-53488...

CLEANSTART-2026-JV33217 Security fixes in helm-operator-fips 1.41.1-r2

Package helm-operator-fips version 1.41.1-r2 fixes 52 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2025-68121, CVE-2026-25679, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-VY72501 Security fixes in helm-operator-fips 1.41.1-r0

Package helm-operator-fips version 1.41.1-r0 fixes 3 vulnerabilities: ghsa-9h84-gmv7-982p, ghsa-mf38-5pwr-xv68, ghsa-x4rx-4gw5-53pq...

CLEANSTART-2026-KE07618 Security fixes in helm-operator 1.42.3-r1

Package helm-operator version 1.42.3-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-UT23053 Security fixes in helm-operator 1.42.2-r3

Package helm-operator version 1.42.2-r3 fixes 4 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-AU93241 Security fixes in helm-operator 1.42.1-r0

Package helm-operator version 1.42.1-r0 fixes 30 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, ghsa-p77j-4mvh-x3m3, CVE-2026-27143, CVE-2026-42499...

CLEANSTART-2026-CY22332 Security fixes in helm-operator 1.42.2-r1

Package helm-operator version 1.42.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: grafana, kwok, keda, cloud-provider-aws, kube-vip-cloud-provider, metrics-server, rancher, spqr, cert-manager, openfga, apisix-ingress-controller, datadog-operator, telegraf, spicedb, cass-operator, rke2-cloud-provider, openbao, rancher-agent,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, kgateway-fips, ocm-cli, external-secrets-operator-fips, tekton-pipelines-fips, flux-kustomize-controller, seaweedfs-operator-fips, plugin-barman-cloud-fips, commercial-grafana, eks-distro-fips, eck-operator-fips, ansible-operator-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: trivy, docker-cli-buildx-fips, kgateway-fips, k9s, gitlab-rails-ce, jfrog-cli, helm, headlamp-fips, neuvector-scanner, newrelic-infrastructure-agent-fips, trivy-fips, datadog-agent-fips, docker-cli-buildx, skaffold, teleport, k8sgpt, amazon-ecs-agent, docker-compose,...

CLEANSTART-2026-CL67452 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-35206, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, CVE-2026-46680, ghsa-fqw6-gf59-qr4w, ghsa-hfvc-g4fc-pqhx, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-pc3f-x583-g7j2 applied in versions: 1.41.1-r0, 1.41.1-r1, 1.42.2-r0, 1.42.2-r1

Multiple security vulnerabilities affect the helm-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: nova, helm, linkerd2, pluto, envoy-gateway, rancher-fleet, kube-arangodb, tigera-operator, kuma, trivy-operator, flux, zot, helm-docs, consul-k8s, headlamp, chart-testing, istio, k9s, trivy, zarf, kots, harbor, cluster-api-helm-controller, flux-source-controller,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: nova, helm, linkerd2, pluto, envoy-gateway, rancher-fleet, kube-arangodb, tigera-operator, kuma, trivy-operator, flux, zot, helm-docs, consul-k8s, headlamp, chart-testing, istio, k9s, trivy, zarf, kots, harbor, cluster-api-helm-controller, flux-source-controller,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: trivy, chartmuseum-fips, cloudbeat-fips, flux-source-controller, harbor-fips, kube-arangodb, chaos-mesh, cilium-cli, consul-k8s, rancher-fleet-fips, rancher-fleet, kots, tigera-operator, cerbos, k9s, eksctl, nova-fips, helm-operator, tw, envoy-gateway, trivy-operator...