CVE-2025-69725 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

GHSA-MQQF-5WVP-8FH8 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kafka-proxy, opentelemetry-operator, kubernetes-csi-driver-nfs, pguser, dgraph, kubernetes-dashboard-auth, sriov-network-device-plugin, secrets-store-csi-driver-provider-aws, nri-discovery-kubernetes, temporal, cadvisor,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, litestream, kots, kubernetes-csi-external-snapshotter-fips, stakater-reloader, harbor-fips, flux-image-automation-controller, crossplane-provider-aws-eks-fips, dive, kustomize-fips, grafana-beyla, eks-distro, neuvector, podman,...

CLEANSTART-2026-MQ21261 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2, 1.5.1-r3

Multiple security vulnerabilities affect the vertical-pod-autoscaler package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX58669 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-rds, pulumi-language-java, telegraf, crossplane-provider-aws-sns, crossplane-provider-aws-route53, polaris, cluster-api-azure-controller, crossplane-provider-aws-memorydb, zot,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-rds, pulumi-language-java, telegraf, crossplane-provider-aws-sns, crossplane-provider-aws-route53, polaris, cluster-api-azure-controller, crossplane-provider-aws-memorydb, zot,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: dex, tempo, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, harbor-fips, crossplane-provider-aws-eks-fips, seaweedfs-operator-fips, crossplane-provider-aws-elasticache, syncthing, trivy, omni, crossplane-provider-aws-iam,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: dex, tempo, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, harbor-fips, crossplane-provider-aws-eks-fips, seaweedfs-operator-fips, crossplane-provider-aws-elasticache, syncthing, trivy, omni, crossplane-provider-aws-iam,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, fuse-overlayfs-snapshotter, kafka-proxy, opentelemetry-operator, kubernetes-csi-driver-nfs, pguser, dgraph, kubernetes-dashboard-auth, sriov-network-device-plugin, secrets-store-csi-driver-provider-aws,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, fuse-overlayfs-snapshotter, kafka-proxy, opentelemetry-operator, kubernetes-csi-driver-nfs, pguser, dgraph, kubernetes-dashboard-auth, sriov-network-device-plugin, wazero, wireguard-go, secrets-store-csi-driver-provider-aws,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, fuse-overlayfs-snapshotter, kafka-proxy, opentelemetry-operator, kubernetes-csi-driver-nfs, pguser, dgraph, kubernetes-dashboard-auth, sriov-network-device-plugin, secrets-store-csi-driver-provider-aws,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, litestream, kots, kubernetes-csi-external-snapshotter-fips, stakater-reloader, flux-image-automation-controller, crossplane-provider-aws-eks-fips, dive, ory-kratos, datadog-operator, grafana-beyla, eks-distro, neuvector, podman,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, litestream, kots, kubernetes-csi-external-snapshotter-fips, stakater-reloader, flux-image-automation-controller, crossplane-provider-aws-eks-fips, dive, ory-kratos, datadog-operator, grafana-beyla, eks-distro, neuvector, podman,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, litestream, kots, kubernetes-csi-external-snapshotter-fips, stakater-reloader, flux-image-automation-controller, crossplane-provider-aws-eks-fips, dive, ory-kratos, datadog-operator, grafana-beyla, eks-distro, neuvector, podman,...

CLEANSTART-2026-UM63521 Within HostnameError

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kafka-proxy, opentelemetry-operator, kubernetes-csi-driver-nfs, pguser, ratify, dgraph, kubernetes-dashboard-auth, sriov-network-device-plugin, secrets-store-csi-driver-provider-aws, nri-discovery-kubernetes, temporal,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: podinfo, kafka-proxy, kubernetes-csi-external-attacher, spqr, telegraf, fscrypt, skopeo, pguser, crossplane, kind, tfsec, stern, neuvector-sigstore-interface, newrelic-nri-statsd, sriov-network-device-plugin, gotestsum, docker-machine-driver-linode,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: podinfo, kafka-proxy, kubernetes-csi-external-attacher, spqr, telegraf, fscrypt, skopeo, pguser, crossplane, kind, tfsec, stern, neuvector-sigstore-interface, newrelic-nri-statsd, sriov-network-device-plugin, gotestsum, docker-machine-driver-linode,...