GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, cilium-envoy-fips, flux-helm-controller, crossplane-function-environment-configs-fips, kubevirt-cdi-uploadserver-fips, gitlab-kas-fips, kargo, witness, trivy-fips, certificate-transparency-fips, kubernetes-csi-driver-nfs,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, cilium-envoy-fips, flux-helm-controller, crossplane-function-environment-configs-fips, kubevirt-cdi-uploadserver-fips, gitlab-kas-fips, kargo, neuvector-dbgen, node-problem-detector-fips, nats-top, trivy-fips, certificate-transparency-fip...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, flux-helm-controller, node-problem-detector-fips, gitlab-kas-fips, certificate-transparency-fips, rclone-fips, terraform, sigstore-scaffolding-fips, crossplane-provider-aws-cloudfront-fips, yace, prometheus-node-exporter-fips, consul-fips...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, cilium-envoy-fips, flux-helm-controller, crossplane-function-environment-configs-fips, kubevirt-cdi-uploadserver-fips, gitlab-kas-fips, kargo, neuvector-dbgen, node-problem-detector-fips, nats-top, trivy-fips, certificate-transparency-fip...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cilium-envoy-fips, flux-helm-controller, crossplane-function-environment-configs-fips, kubevirt-cdi-uploadserver-fips, gitlab-kas-fips, kargo, neuvector-dbgen, node-problem-detector-fips, nats-top, trivy-fips, certificate-transparency-fips, kubernetes-csi-driver-nfs,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: cilium-envoy-fips, flux-helm-controller, crossplane-function-environment-configs-fips, kubevirt-cdi-uploadserver-fips, gitlab-kas-fips, kargo, neuvector-dbgen, node-problem-detector-fips, nats-top, trivy-fips, certificate-transparency-fips, kubernetes-csi-driver-nfs,...

CLEANSTART-2026-JT73156 protojson

Multiple security vulnerabilities affect the prometheus-node-exporter package. The protojson. See references for individual vulnerability details...

CLEANSTART-2026-AR20742 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the prometheus-mysqld-exporter package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-DK61762 filippo

Multiple security vulnerabilities affect the prometheus-mysqld-exporter package. filippo. See references for individual vulnerability details...

CLEANSTART-2026-RI97043 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the prometheus-mysqld-exporter package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-CD13174 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the prometheus package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-NG28268 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the prometheus package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-JY63371 Delete function fails to properly validate offsets when processing malformed JSON input

Multiple security vulnerabilities affect the prometheus package. The Delete function fails to properly validate offsets when processing malformed JSON input. See references for individual vulnerability details...

CLEANSTART-2026-RA52239 url

Multiple security vulnerabilities affect the prometheus-operator package. url. See references for individual vulnerability details...

GHSA-3CJC-VHFM-FFP2 Apache DolphinScheduler vulnerable to sensitive information disclosure

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Apache DolphinScheduler. This vulnerability may allow unauthorized actors to access sensitive information, including database credentials. This issue affects Apache DolphinScheduler versions 3.1.. Users are...

CLEANSTART-2026-TI57220 url

Multiple security vulnerabilities affect the prometheus-operator package. url. See references for individual vulnerability details...

CLEANSTART-2026-FU47971 protojson

Multiple security vulnerabilities affect the prometheus-node-exporter package. The protojson. See references for individual vulnerability details...

CLEANSTART-2026-HX94762 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the prometheus-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-GG94489 go-retryablehttp prior to 0

Multiple security vulnerabilities affect the prometheus package. go-retryablehttp prior to 0. See references for individual vulnerability details...

CLEANSTART-2026-BK17545 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the prometheus-mysqld-exporter package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...