CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zitadel, kubescape-server-fips, opentelemetry-collector, external-secrets-operator-fips, etcd-fips, aactl, nerdctl, frankenphp-8.5, flux-source-controller-fips, frankenphp-8.4, knative-kafka-broker-fips, kots, kube-conformance, traefik, kyverno-fips, coder,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, zitadel, kubescape-server-fips, longhorn-cli, pgpool2exporter, temporal-ui-server, cadence, etcd-fips, hubble-fips, crossplane-provider-aws-ecr, crossplane-provider-aws-rolesanywhere-fips, direnv,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-42333

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, packer-fips, pgpool2exporter, etcd-fips, stampdalf, tfsec, kubeflow-katib, direnv, protoc-gen-go, ini-file, wgcf, vertical-pod-autoscaler, kapp-controller-fips, dragonfly-operator-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, packer-fips, pgpool2exporter, etcd-fips, stampdalf, tfsec, kubeflow-katib, direnv, protoc-gen-go, ini-file, wgcf, vertical-pod-autoscaler, kapp-controller-fips, dragonfly-operator-fips,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, packer-fips, pgpool2exporter, etcd-fips, stampdalf, tfsec, kubeflow-katib, direnv, protoc-gen-go, ini-file, wgcf, vertical-pod-autoscaler, kapp-controller-fips, dragonfly-operator-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, packer-fips, pgpool2exporter, etcd-fips, stampdalf, tfsec, kubeflow-katib, direnv, protoc-gen-go, ini-file, wgcf, vertical-pod-autoscaler, kapp-controller-fips, dragonfly-operator-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, packer-fips, pgpool2exporter, etcd-fips, stampdalf, tfsec, kubeflow-katib, direnv, protoc-gen-go, ini-file, wgcf, vertical-pod-autoscaler, kapp-controller-fips, dragonfly-operator-fips,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, packer-fips, pgpool2exporter, etcd-fips, stampdalf, tfsec, kubeflow-katib, direnv, protoc-gen-go, ini-file, wgcf, vertical-pod-autoscaler, kapp-controller-fips, dragonfly-operator-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: runc, crossplane-provider-aws-s3, gitness, terraform-docs, actions-runner-controller, aws-load-balancer-controller, cert-exporter, gitsign, kubewatch, helm-operator, oauth2-proxy, vexctl, k8sgpt-operator, kine, aws-flb-kinesis, crossplane-provider-aws-ec2, kubeflow,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: runc, gitness, aws-load-balancer-controller, kubewatch, oauth2-proxy, k8sgpt-operator, kubernetes-ingress-defaultbackend, apko, kubeflow, dex, metrics-server, pulumi-language-java, prometheus-adapter, grpcurl, dive, atlantis, wireguard-go, dynamic-localpv-provisioner...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, kubeflow-katib, apko, gitness, pulumi-kubernetes-operator, aactl, kubernetes-csi-external-resizer, kubernetes-csi-livenessprobe-fips, prometheus-blackbox-exporter, vertical-pod-autoscaler, kots, cosign, flux-kustomize-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gitness, kubewatch, oauth2-proxy, kubeflow, dex, metrics-server, pulumi-language-java, prometheus-adapter, grpcurl, atlantis, wireguard-go, dynamic-localpv-provisioner, src, ip-masq-agent, flux-source-controller, dgraph, kubernetes-csi-livenessprobe, nginx-stable,...