CLEANSTART-2026-CS02869 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, ghsa-p77j-4mvh-x3m3 applied in versions: 2.18.0-r0, 2.18.0-r1, 2.18.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OH47925 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

RHCOS 3 : OpenShift Container Platform 3.11 openshift-external-storage (RHSA-2019:4054)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4054 advisory. - kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation CVE-2019-11255...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kargo, knative-serving, grpcurl, gitness, kserve-rest-proxy, wuzz, zot, pulumi-language-java, incert, s5cmd, rancher-telemetry, cloud-sql-proxy, vault-benchmark, flux-operator, scorecard, aws-node-termination-handler, kube-vip, nri-elasticsearch, go-discover, rqlite,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: nerdctl, kargo, knative-serving, grpcurl, kots, step-issuer, tetragon, gitness, kserve-rest-proxy, mattermost, net-kourier, neuvector-scanner, pulumi-language-java, zot, envconsul, keda, kserve-modelmesh-serving, kubescape, rancher-fleet, volume-modifier-for-k8s,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr-fips, docker-credential-ecr-login-fips, flagger-fips, juicefs-csi-driver, longhorn-backing-image-manager-fips, kine, victoriametrics-operator, cilium-cli, kube-oidc-proxy, terraform-provider-azapi, scorecard, rancher-machine, kubernetes-fips,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: knative-serving, k6, kots, tflint, gitness, zot, pulumi-language-java, keda, kubescape, terraform-mcp-server, harbor-registry, falco-no-driver, ferretdb, juicefs, pulumi, envoy-ratelimit, teleport, opentofu, kubernetes-dns-node-cache, melange, rancher-webhook,...

CLEANSTART-2026-LC01167 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WM95952 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: tflint, gitness, kserve-rest-proxy, minify, wuzz, pulumi-language-java, s5cmd, nri-kubernetes, rancher-telemetry, cloud-sql-proxy, vault-benchmark, flux-operator, kubernetes-dns-node-cache, nri-elasticsearch, sqlexporter, spiffe-helper, aws-eks-pod-identity-agent,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kots, step-issuer, tetragon, tflint, gitness, kserve-rest-proxy, mattermost, net-kourier, pulumi-language-java, keda, kserve-modelmesh-serving, kubescape, volume-modifier-for-k8s, prometheus-blackbox-exporter, falco-no-driver, teleport, cloud-sql-proxy, pulumi,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: tflint, gitness, kserve-rest-proxy, minify, wuzz, pulumi-language-java, s5cmd, nri-kubernetes, rancher-telemetry, cloud-sql-proxy, vault-benchmark, flux-operator, kubernetes-dns-node-cache, nri-elasticsearch, sqlexporter, spiffe-helper, aws-eks-pod-identity-agent,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kots, step-issuer, tetragon, tflint, gitness, kserve-rest-proxy, mattermost, net-kourier, pulumi-language-java, keda, kserve-modelmesh-serving, kubescape, volume-modifier-for-k8s, prometheus-blackbox-exporter, falco-no-driver, teleport, cloud-sql-proxy, pulumi,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: flagger-fips, longhorn-backing-image-manager-fips, kube-oidc-proxy, terraform-provider-azurerm-fips, terraform-provider-azapi, rancher-machine, kubernetes-fips, timoni, mcp-grafana-fips, kubernetes-dashboard-api-fips, crossplane-provider-kubernetes, cephcsi, kots,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, kine, scorecard, cluster-api, sops-fips, beats, policy-controller, trillian, vault-fips, secrets-store-csi-driver-provider-gcp-fips, velero, percona-server-mongodb-operator-fips, cluster-api-ipam-provider-in-cluster, livekit-egress, steampipe,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kargo, knative-serving, grpcurl, gitness, kserve-rest-proxy, wuzz, zot, pulumi-language-java, incert, s5cmd, rancher-telemetry, cloud-sql-proxy, vault-benchmark, flux-operator, glow, scorecard, aws-node-termination-handler, kube-vip, sqlexporter, go-discover,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kargo, knative-serving, grpcurl, gitness, kserve-rest-proxy, minify, wuzz, pulumi-language-java, zot, incert, s5cmd, rancher-telemetry, cloud-sql-proxy, vault-benchmark, flux-operator, glow, scorecard, aws-node-termination-handler, kube-vip, sqlexporter, go-discover,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kargo, knative-serving, grpcurl, gitness, kserve-rest-proxy, minify, wuzz, pulumi-language-java, zot, incert, s5cmd, rancher-telemetry, cloud-sql-proxy, vault-benchmark, flux-operator, glow, scorecard, aws-node-termination-handler, kube-vip, sqlexporter, go-discover,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: nerdctl, knative-serving, grpcurl, tetragon, gitness, mattermost, sealed-secrets, net-kourier, gostatsd, wuzz, kubernetes-dashboard-metrics-scraper, keda, s5cmd, kserve-modelmesh-serving, terraform-mcp-server, rancher-telemetry, volume-modifier-for-k8s,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: nerdctl, knative-serving, grpcurl, tetragon, nri-nginx, gitness, mattermost, sealed-secrets, net-kourier, gostatsd, wuzz, kubernetes-dashboard-metrics-scraper, keda, s5cmd, kserve-modelmesh-serving, terraform-mcp-server, rancher-telemetry, nri-f5, harbor-registry,...