CLEANSTART-2026-ER76776 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 2.12.0-r2

Multiple security vulnerabilities affect the kubewatch package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AQ33378 Security fixes for ghsa-gxhx-2686-5h9g applied in versions: 2.12.0-r0

Security vulnerability affects the kubewatch package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, argo-rollouts, bento, goreleaser, kubewatch, atlantis, kyverno-policy-reporter, argo-cd, argo-events...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: mariadb-operator, nodetaint, omnibump, smokescreen, apko, flux-image-reflector-controller, spire-server, temporal, external-secrets-operator, supercronic, rabbitmq-messaging-topology-operator, tailscale, smarter-device-manager, flux-helm-controller, go,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: manifest-tool, sftpgo-plugin-pubsub, yunikorn-web, crossplane-provider-azure-storage, grafana-pyroscope, sbom-convert, terraform-provider-aws, kyverno-policy-reporter-ui, k8ssandra-client, falco-no-driver, cloud-provider-azure, authservice, coredns, kyverno,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: bazelisk, eksctl, nri-rabbitmq, nri-apache, dockerize, haproxy-ingress, nri-nagios, delve, tflint, flux-image-reflector-controller, scorecard, crossplane, k3d, nri-couchbase, terraform-docs, kubernetes-dashboard-metrics-scraper, thanos, pulumi, wait-for-port,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: bazelisk, eksctl, nri-rabbitmq, nri-apache, dockerize, haproxy-ingress, nri-nagios, delve, tflint, flux-image-reflector-controller, scorecard, crossplane, k3d, nri-couchbase, terraform-docs, kubernetes-dashboard-metrics-scraper, thanos, pulumi, wait-for-port,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: bazelisk, eksctl, nri-rabbitmq, nri-apache, dockerize, haproxy-ingress, nri-nagios, delve, tflint, flux-image-reflector-controller, scorecard, crossplane, k3d, nri-couchbase, terraform-docs, kubernetes-dashboard-metrics-scraper, thanos, pulumi, wait-for-port,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: bazelisk, eksctl, nri-rabbitmq, nri-apache, dockerize, haproxy-ingress, nri-nagios, delve, tflint, flux-image-reflector-controller, scorecard, crossplane, k3d, nri-couchbase, terraform-docs, kubernetes-dashboard-metrics-scraper, thanos, pulumi, wait-for-port,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: mockgen, sftpgo-plugin-pubsub, gptscript, yunikorn-web, helm-docs, sbom-convert, wait-for-port, k8ssandra-client, coredns, kuberlr, certificate-transparency, helm-push, hey, distribution, cluster-autoscaler, q, aws-privateca-issuer, grpcurl, ferretdb,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: eksctl, haproxy-ingress, tflint, crossplane-provider-aws-cloudformation, zarf, crossplane-provider-aws, flux-image-reflector-controller, scorecard, crossplane, k3d, terraform-provider-azurerm, nri-kubernetes, policy-controller, crossplane-provider-azure-storage,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: bazelisk, eksctl, nri-rabbitmq, nri-apache, dockerize, haproxy-ingress, nri-nagios, delve, tflint, flux-image-reflector-controller, scorecard, crossplane, k3d, nri-couchbase, terraform-docs, kubernetes-dashboard-metrics-scraper, thanos, pulumi, wait-for-port,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: bazelisk, eksctl, nri-rabbitmq, nri-apache, dockerize, haproxy-ingress, nri-nagios, delve, tflint, flux-image-reflector-controller, scorecard, crossplane, k3d, nri-couchbase, terraform-docs, kubernetes-dashboard-metrics-scraper, thanos, pulumi, wait-for-port,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: nats, flux-helm-controller, kubeflow, prometheus-operator, metrics-server, k8sgpt-operator, prometheus-adapter-fips, aws-efs-csi-driver, grpcurl, dive, go, prometheus-stackdriver-exporter, kubernetes-dashboard, dgraph, prometheus-mysqld-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: haproxy-ingress, scorecard, terraform-provider-azurerm, k3d, pulumi, terraform-provider-aws, metrics-server, weaviate, wireguard-go, coredns, nghttp2, memcached-exporter, mc, gomplate, flux-notification-controller, kubernetes-csi-livenessprobe,...