CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, containerd, rancher-agent, kube-arangodb-fips, harbor, kubescape, chisel-fips, vitess, prometheus-elasticsearch-exporter, snyk-cli, trivy-operator, falco-no-driver, argocd-image-updater-fips, tigera-operator, skaffold-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: chronyexporter-fips, azuredisk-csi, kube-arangodb-fips, kubelet-csr-approver-fips, elastic-agent, kubescape, nri-haproxy-fips, openbao-k8s, kyverno-policy-reporter-fips, step-ca, amazon-cloudwatch-agent-operator-fips, victoriametrics-operator, grafana-operator,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, openbao-k8s, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d, kubernetes-csi-external-attacher-fips, prometheus-process-exporter-fips, checksec, local-static-provisioner-fips, terraform-provider-time, speedtest-go, blobfuse2-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, openbao-k8s, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d, kubernetes-csi-external-attacher-fips, prometheus-process-exporter-fips, checksec, local-static-provisioner-fips, terraform-provider-time, speedtest-go, blobfuse2-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, kube-arangodb-fips, openbao-k8s, amazon-cloudwatch-agent-operator-fips, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d, kubernetes-csi-external-attacher-fips, prometheus-process-exporter-fips, checksec, frp, local-static-provisioner-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, openbao-k8s, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d, kubernetes-csi-external-attacher-fips, prometheus-process-exporter-fips, checksec, local-static-provisioner-fips, terraform-provider-time, speedtest-go, blobfuse2-fips,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: iptables-wrappers, openbao-k8s, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d, kubernetes-csi-external-attacher-fips, prometheus-process-exporter-fips, checksec, local-static-provisioner-fips, terraform-provider-time, speedtest-go, blobfuse2-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, openbao-k8s, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d, kubernetes-csi-external-attacher-fips, prometheus-process-exporter-fips, checksec, local-static-provisioner-fips, terraform-provider-time, speedtest-go, blobfuse2-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: pulumi, hugo, configmap-reload, crossplane-provider-aws, terraform-provider-sendgrid, apisix-ingress-controller, kubernetes-dns-node-cache, crossplane-provider-aws-dynamodb, secrets-store-csi-driver-provider-azure, volume-modifier-for-k8s,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, dive, gke-gcloud-auth-plugin, src, kubescape, buildkitd, flux-image-reflector-controller, prometheus-elasticsearch-exporter, k3d, tekton-chains, yq, gitness, newrelic-infrastructure-agent, frp, kubevela, atlantis, kube-state-metrics-fips...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: pulumi, hugo, crossplane-provider-aws, terraform-provider-sendgrid, kubernetes-dns-node-cache, kubernetes-ingress-defaultbackend, newrelic-infrastructure-agent, flux-source-controller, k3d, gke-gcloud-auth-plugin, kube-state-metrics, flux-notification-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nginx-mainline, pulumi, hugo, terraform-provider-sendgrid, newrelic-infrastructure-agent, ko, flux-source-controller, ip-masq-agent, k3d, gke-gcloud-auth-plugin, flux-notification-controller, dynamic-localpv-provisioner, kubewatch, src, atlantis, mc, nodetaint, helm,...