CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, kubernetes-dashboard, opentofu, zot, kyverno-fips, docker-machine-driver-harvester, cilium-cli, prometheus-operator, terraform, cloud-provider-aws, prometheus-mongodb-exporter, gitlab-workhorse-ce-fips, reports-server, seaweedfs-rocksdb, flux,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: chronyexporter, kubernetes-dashboard, pluto, crossplane-provider-sql, image-factory, redis-operator-fips, kepler, chart-testing, lvm-driver, s5cmd, chezmoi, step-ca, tetragon-fips, oras, crossplane-provider-azure-storage, slsa-verifier,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: kubevela, podinfo, s5cmd, kepler, oras, slsa-verifier, velero, kubernetes-dashboard-metrics-scraper-fips, cargobump, kuberay-operator-fips, node-feature-discovery, terraform, neuvector-dbgen-fips, pvc-autoresizer, tofu-controller, jsonnet-bundler, kubebuilder,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kubevela, podinfo, s5cmd, kepler, oras, slsa-verifier, velero, kubernetes-dashboard-metrics-scraper-fips, cargobump, kuberay-operator-fips, node-feature-discovery, terraform, neuvector-dbgen-fips, pvc-autoresizer, tofu-controller, jsonnet-bundler, kubebuilder,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kubevela, podinfo, s5cmd, kepler, chart-testing, oras, slsa-verifier, velero, kubernetes-dashboard-metrics-scraper-fips, cargobump, kuberay-operator-fips, node-feature-discovery, prometheus-operator, neuvector-dbgen-fips, temporal, pvc-autoresizer, terraform,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: kubevela, podinfo, s5cmd, kepler, oras, slsa-verifier, velero, kubernetes-dashboard-metrics-scraper-fips, cargobump, kuberay-operator-fips, node-feature-discovery, terraform, neuvector-dbgen-fips, pvc-autoresizer, tofu-controller, jsonnet-bundler, kubebuilder,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: kubevela, podinfo, s5cmd, kepler, oras, slsa-verifier, velero, kubernetes-dashboard-metrics-scraper-fips, cargobump, kuberay-operator-fips, node-feature-discovery, terraform, neuvector-dbgen-fips, pvc-autoresizer, tofu-controller, jsonnet-bundler, kubebuilder,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: kubevela, podinfo, s5cmd, kepler, oras, slsa-verifier, velero, kubernetes-dashboard-metrics-scraper-fips, cargobump, kuberay-operator-fips, node-feature-discovery, terraform, neuvector-dbgen-fips, pvc-autoresizer, tofu-controller, jsonnet-bundler, kubebuilder,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, helm-operator, melange, pulumi-language-java, ferretdb, amass, kwok, helm-push, metrics-server, nfs-subdir-external-provisioner, cert-exporter, external-dns, rekor, falcoctl, flux-kustomize-controller, crossplane-provider-aws-rds, golangci-lint,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, kubevela, aws-efs-csi-driver-fips, tekton-chains, kubernetes-dashboard, thanos-operator, falcoctl, zot, slsa-verifier, wavefront-collector-for-kubernetes, sigstore-scaffolding, prometheus-operator, terraform, chartmuseum, rqlite,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, amass, nfs-subdir-external-provisioner, metrics-server, falcoctl, flux-kustomize-controller, kaf, flux, ollama, dive, k3d, go, memcached-exporter, prometheus-alertmanager, hugo, k8sgpt-operator, spark-operator, kind, up, kube-logging-operator,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, amass, metrics-server, flux-kustomize-controller, kaf, ollama, k3d, memcached-exporter, hugo, spark-operator, kind, terraform, pulumi, kubernetes-csi-livenessprobe, slsa-verifier, nginx-mainline, terraform-provider-sendgrid, gitness,...