CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, harbor, gatekeeper, terraform, vitess, frankenphp-8.5, commercial-grafana, chisel-fips, flux-image-automation-controller, flux-image-automation-controller-fips, loki, rancher, commercial-expanso-edge, gitea, etcd-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nri-haproxy, victorialogs-fips, oauth2-proxy, k6-operator, karma-fips, crossplane, knative-storage-migrate-fips, prometheus-pgbouncer-exporter, rancher-loglevel, grpc-health-probe, nats, ingress-nginx-controller, dataplaneapi, buildah, kubernetes-csi-driver-nfs-fips,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, rancher-loglevel, crossplane, nats, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips, container-object-storage-interface-fips, multus-cni,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, k6-operator, rancher-loglevel, crossplane, grpc-health-probe, nats, dataplaneapi, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, rancher-loglevel, crossplane, nats, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips, container-object-storage-interface-fips, multus-cni,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: oauth2-proxy, rancher-loglevel, crossplane, nats, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips, container-object-storage-interface-fips, multus-cni,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, rancher-loglevel, crossplane, nats, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips, container-object-storage-interface-fips, multus-cni,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, rancher-loglevel, crossplane, nats, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips, container-object-storage-interface-fips, multus-cni,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, hugo, terraform-provider-aws, prometheus-operator, k8ssandra-operator, hugo-extended, kargo, memcached-exporter, temporal-server, trust-manager, step-ca, kyverno-policy-reporter, rabbitmq-cluster-operator, minio, cosign, zarf,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, mc, terraform, nats, prometheus-statsd-exporter, cue, falcoctl, flux-image-automation-controller, bank-vaults-fips, flux-image-reflector-controller, falcoctl-fips, vault-k8s, smarter-device-manager-fips, weaviate, memcached-exporter,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: hugo, prometheus-operator, bom, memcached-exporter, trust-manager, minio, cosign, kubernetes-dns-node-cache, terraform-provider-sendgrid, kubescape, pulumi-language-yaml, dex, nri-prometheus, vertical-pod-autoscaler, stakater-reloader, kubernetes-csi-external-resizer...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: hugo, terraform-provider-aws, bom, nginx-stable, memcached-exporter, minio, cosign, cortex, terraform-provider-sendgrid, kubescape, pulumi-language-yaml, dex, nri-prometheus, stakater-reloader, flux-helm-controller, kubeflow-katib, oauth2-proxy, cue, kubeflow,...