CLEANSTART-2026-FH07251 Security fixes in vertical-pod-autoscaler 1.7.1-r2

Package vertical-pod-autoscaler version 1.7.1-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, aws-lambda-runtime-interface-emulator, custom-pod-autoscaler, kyverno-fips, custom-pod-autoscaler-fips, fleet-server-fips, aws-lambda-runtime-interface-emulator-fips, cloudbeat, commercial-kyverno...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

CLEANSTART-2026-KM46423 Security fixes in vertical-pod-autoscaler-fips 1.5.1-r2

Package vertical-pod-autoscaler-fips version 1.5.1-r2 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-27141...

CLEANSTART-2026-CC98866 Security fixes in vertical-pod-autoscaler 1.5.1-r2

Package vertical-pod-autoscaler version 1.5.1-r2 fixes 4 vulnerabilities: CVE-2025-47911, CVE-2025-58190, CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-CH73594 Security fixes in vertical-pod-autoscaler-fips 1.5.1-r0

Package vertical-pod-autoscaler-fips version 1.5.1-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-RA54834 Security fixes in vertical-pod-autoscaler 1.5.1-r0

Package vertical-pod-autoscaler version 1.5.1-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

GHSA-MQQF-5WVP-8FH8 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

CVE-2025-69725 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nova, sftpgo-plugin-eventsearch, gostatsd, influx, telegraf, act, helm-mapkubeapis, maru, spicedb-operator, vt-cli, mailpit, cri-tools, dapr, falcoctl, promxy, doppler-kubernetes-operator, smarter-device-manager, node-problem-detector, victoriametrics, helm-set-statu...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, kubevirt-cdi-apiserver, nri-couchbase-fips, nerdctl-fips, google-cloud-otel-ops-collector, policy-bot, cadence-fips, tetragon-fips, flux-source-watcher-fips, newrelic-k8s-metadata-injection-fips, kbld, envoy-gateway,...

CLEANSTART-2026-MQ21261 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2, 1.5.1-r3

Multiple security vulnerabilities affect the vertical-pod-autoscaler package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX58669 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: nova, telegraf, opentelemetry-collector, tekton-pipelines, melange, harbor, datadog-agent, trivy, external-dns, flux, crossplane-provider-aws-kinesis, chezmoi, crossplane-provider-aws-elasticache, linkerd2, grafana-mimir, kubo, crossplane-provider-aws-cloudformation,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: nova, telegraf, opentelemetry-collector, tekton-pipelines, melange, harbor, datadog-agent, trivy, external-dns, flux, crossplane-provider-aws-kinesis, chezmoi, crossplane-provider-aws-elasticache, linkerd2, grafana-mimir, kubo, crossplane-provider-aws-cloudformation,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: ollama, fleet-server, crossplane-provider-aws-acm, syncthing, flux-source-watcher-fips, opentelemetry-collector-fips, traefik, cluster-api-azure-controller, crossplane-provider-aws-firehose, zarf, opa, k3s, tigera-operator, kube-logging-operator, mattermost,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: ollama, fleet-server, crossplane-provider-aws-acm, syncthing, flux-source-watcher-fips, opentelemetry-collector-fips, traefik, cluster-api-azure-controller, crossplane-provider-aws-firehose, zarf, opa, k3s, tigera-operator, kube-logging-operator, mattermost,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: nova, sftpgo-plugin-eventsearch, blob-csi, gostatsd, influx, telegraf, helm-mapkubeapis, maru, spicedb-operator, vt-cli, mailpit, cri-tools, dapr, gomplate, promxy, doppler-kubernetes-operator, node-problem-detector, victoriametrics, kube-vip-cloud-provider,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: nova, sftpgo-plugin-eventsearch, blob-csi, gostatsd, influx, fq, telegraf, helm-mapkubeapis, maru, spicedb-operator, vt-cli, mailpit, cri-tools, dapr, gomplate, promxy, doppler-kubernetes-operator, smarter-device-manager, node-problem-detector, victoriametrics,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: nova, sftpgo-plugin-eventsearch, blob-csi, gostatsd, influx, telegraf, helm-mapkubeapis, maru, spicedb-operator, vt-cli, mailpit, cri-tools, dapr, gomplate, promxy, doppler-kubernetes-operator, node-problem-detector, victoriametrics, kube-vip-cloud-provider,...