CLEANSTART-2026-YV85299 Security fix for GHSA-8wmf-6v46-5gfg applied in: prometheus-operator 0.92.1-r6, argo-cd 3.4.10-r3

GHSA-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NE14632 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-YT94569 Security fix for GHSA-8wmf-6v46-5gfg applied in: prometheus-operator 0.91.0-r7, prometheus-operator 0.92.1-r5

GHSA-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DS09618 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...

PT-2026-105241

Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...

PT-2026-105222

Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-PM97219 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-DB46993 Prometheus is an open-source monitoring system and time series database

Multiple security vulnerabilities affect the prometheus-operator package. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

GO-2025-4175 vulnerabilities

Vulnerabilities for packages: cluster-api-fips, kubelet-csr-approver, prometheus-adapter, dataplaneapi-fips, go-discover-fips, mockery, ytt-fips, ingress-nginx-controller-fips, hydra-fips, kubernetes-csi-node-driver-registrar-fips, newrelic-nri-kube-events-fips, sonobuoy-fips,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: skopeo, ctop, kaf, prometheus-adapter, argo-workflows-fips, capslock, rqlite, kubeflow-katib, memcached-exporter, fulcio, hubble-ui-backend-fips, atlantis, nri-discovery-kubernetes, terraform-docs, certificate-transparency-fips, k3d, step, kwok, helm-operator-fips,...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, trillian, datadog-agent, splunk-otel-collector, loki, prometheus-pushgateway, prometheus-operator, tempo, minio, cloud-sql-proxy, certificate-transparency, amazon-cloudwatch-agent-operator, node-problem-detector, metrics-server, prometheus, m...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: nuclei, grafana-agent-operator, opentelemetry-collector, trino, spire-server, zarf, sops, sqlpad, harbor-registry, boring-registry, flux-source-controller, hugo-extended, fulcio, tekton-chains, up, falcoctl, grafana-mimir, py3-cassandra-medusa, py3-azure-identity, zo...

GO-2026-5841 vulnerabilities

Vulnerabilities for packages: spire-server, containerd, helm, k3d, loki, zot, kine, kots, prometheus-operator, minio, nerdctl, kyverno, flux, snyk-cli, telegraf, kaf, aactl, falco-no-driver, k3s...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: zarf, crossplane-provider-azure-sql, gatus, crossplane-provider-aws-sqs, flux-source-controller, tekton-chains, fulcio, docker-cli-buildx, flux-image-automation-controller, trivy-operator, crossplane-provider-aws-route53, osv-scanner, external-dns, loki,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, mattermost, opentelemetry-collector, spire-server, buildah, containerd, helm, docker-cli-buildx, cilium-cli, external-dns, gitlab-kas, loki, rancher-agent, zot, kine, kots, prometheus-operator, minio, kubernetes-dashboard, nerdctl, kyverno, podman...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: delve, docker-cli, swagger, kyverno-notation-aws, tekton-chains, fulcio, docker-cli-buildx, cloud-provider-vsphere, nri-memcached, prometheus-operator, steampipe, argo-events, clickhouse-operator, cerbos, cluster-api-helm-controller, aws-privateca-issuer, chartmuseum...

CLEANSTART-2026-YF39699 Security fixes in prometheus-operator 0.69.1-r3

Package prometheus-operator version 0.69.1-r3 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-QB06725 Security fixes in prometheus-operator 0.91.0-r1

Package prometheus-operator version 0.91.0-r1 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-42507, CVE-2026-27145...

CLEANSTART-2026-QM13586 Security fixes in prometheus-operator 0.88.1-r2

Package prometheus-operator version 0.88.1-r2 fixes 1 vulnerabilities: CVE-2026-2303...

CLEANSTART-2026-IM91854 Security fixes in prometheus-operator-fips 0.91.0-r0

Package prometheus-operator-fips version 0.91.0-r0 fixes 4 vulnerabilities: CVE-2026-42506, CVE-2026-42502, CVE-2026-39821, CVE-2026-27136...