CLEANSTART-2026-KM46423 Security fixes in vertical-pod-autoscaler-fips 1.5.1-r2

Package vertical-pod-autoscaler-fips version 1.5.1-r2 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-27141...

CLEANSTART-2026-CH73594 Security fixes in vertical-pod-autoscaler-fips 1.5.1-r0

Package vertical-pod-autoscaler-fips version 1.5.1-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-RA54834 Security fixes in vertical-pod-autoscaler 1.5.1-r0

Package vertical-pod-autoscaler version 1.5.1-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-CC98866 Security fixes in vertical-pod-autoscaler 1.5.1-r2

Package vertical-pod-autoscaler version 1.5.1-r2 fixes 4 vulnerabilities: CVE-2025-47911, CVE-2025-58190, CVE-2025-68121, CVE-2025-61732...

GHSA-MQQF-5WVP-8FH8 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

CVE-2025-69725 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, rclone, contour, helm-push, juicefs-csi-driver, temporal-ui-server, calico, victoriametrics-operator, docker-credential-acr-env, aws-network-policy-agent, certificate-transparency, coredns, aws-nuke, prometheus-pushgateway, gitness,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: victorialogs, ipfs-cluster-fips, spegel, docker-credential-acr-env, trivy-operator, chart-testing-fips, jaeger-fips, kubeflow, kubelet-csr-approver-fips, nri-consul, pushprox-fips, sftpgo-plugin-eventstore, go-discover-fips, buildah-fips, flannel-fips,...

CLEANSTART-2026-MQ21261 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2, 1.5.1-r3

Multiple security vulnerabilities affect the vertical-pod-autoscaler package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX58669 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: contour, cilium-cli, crossplane-provider-aws-sqs, crossplane-provider-aws-sns, melange, crossplane-provider-aws-route53, sops, kube-logging-operator, caddy, opentelemetry-collector, apko, tekton-pipelines, nova, zot, cluster-api-azure-controller, descheduler,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: contour, cilium-cli, crossplane-provider-aws-sqs, crossplane-provider-aws-sns, melange, crossplane-provider-aws-route53, sops, kube-logging-operator, caddy, opentelemetry-collector, apko, tekton-pipelines, nova, zot, cluster-api-azure-controller, descheduler,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, livekit-server, opa-fips-envoy, trivy-operator, cluster-api-azure-controller, goose-fips, omni-fips, crossplane-provider-aws-sns, crossplane-provider-aws-ecs, crossplane-provider-aws-servicediscovery-fips, sops, crossplane-provider-aws-dynamodb-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, livekit-server, opa-fips-envoy, trivy-operator, cluster-api-azure-controller, goose-fips, omni-fips, crossplane-provider-aws-sns, crossplane-provider-aws-ecs, crossplane-provider-aws-servicediscovery-fips, sops, crossplane-provider-aws-dynamodb-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, rclone, contour, juicefs-csi-driver, victoriametrics-operator, falcosidekick, docker-credential-acr-env, aws-network-policy-agent, loki, certificate-transparency, coredns, prometheus-pushgateway, gitness, harbor-registry,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, rclone, contour, juicefs-csi-driver, victoriametrics-operator, calico, falcosidekick, docker-credential-acr-env, aws-network-policy-agent, loki, certificate-transparency, distribution, coredns, prometheus-pushgateway, gitness,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, rclone, contour, juicefs-csi-driver, victoriametrics-operator, falcosidekick, docker-credential-acr-env, aws-network-policy-agent, loki, certificate-transparency, coredns, prometheus-pushgateway, gitness, harbor-registry,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: newrelic-nri-kube-events-fips, velero-plugin-for-aws, ipfs-cluster-fips, spegel, age-fips, containerd-fips, docker-credential-acr-env, chart-testing-fips, livekit-server, jaeger-fips, kubeflow, kubelet-csr-approver-fips, pushprox-fips, sftpgo-plugin-eventstore,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: newrelic-nri-kube-events-fips, velero-plugin-for-aws, ipfs-cluster-fips, spegel, age-fips, containerd-fips, docker-credential-acr-env, chart-testing-fips, livekit-server, jaeger-fips, kubeflow, kubelet-csr-approver-fips, pushprox-fips, sftpgo-plugin-eventstore,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: newrelic-nri-kube-events-fips, velero-plugin-for-aws, ipfs-cluster-fips, spegel, docker-credential-acr-env, livekit-server, chart-testing-fips, kubeflow, kubelet-csr-approver-fips, pushprox-fips, sftpgo-plugin-eventstore, go-discover-fips, livekit-server-fips,...