CLEANSTART-2026-IS77725 Security fix for CVE-2023-40577 applied in: prometheus 2.47.2-r0, prometheus-alertmanager 0.26.0-r0, promxy 0.0.93-r1, promxy-fips 0.0.93-r1

CVE-2023-40577 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2023-2020 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, promxy...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: pulumi, amazon-cloudwatch-agent-operator, amazon-cloudwatch-agent-operator-fips, vault, promxy-fips, prometheus, promxy...

GO-2023-2020 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, promxy...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: kubescape-operator, splunk-otel-collector, weaviate, migrate, juicefs, tetragon, grafana-agent-operator, cortex, wal-g, hubble, cilium, tekton-chains, kubescape, opentelemetry-collector-contrib, slsa-verifier, terraform-provider-pagerduty, ksops, argo-cd, grafana,...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: pulumi, promxy, amazon-cloudwatch-agent-operator...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: rancher-agent, pulumi, amazon-cloudwatch-agent-operator, kubevela, promxy...

CLEANSTART-2026-AK90321 Security fixes in promxy 0.0.96-r3

Package promxy version 0.0.96-r3 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-85815

Package promxy version 0.0.96-r3 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CLEANSTART-2026-YF99196 Security fixes in promxy-fips 0.0.93-r1

Package promxy-fips version 0.0.93-r1 fixes 35 vulnerabilities: CVE-2023-40577, CVE-2026-2303, CVE-2026-29181, CVE-2026-39827, CVE-2026-39828...

CLEANSTART-2026-RW78583 Security fixes for CVE-2023-40577, CVE-2025-47914, CVE-2025-58181, CVE-2026-2303, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-29181, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0.0.93-r0, 0.0.93-r1

Multiple security vulnerabilities affect the promxy-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: eksctl, rancher-machine, crossplane-provider-azure-sql, nerdctl, argo-rollouts, net-kourier, crossplane-provider-aws-route53, gitlab-pages, grafana-agent-operator, step-ca, vexctl, slsa-verifier, buildah, spark-operator, yunikorn-k8shim, ipfs-cluster, podman,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: eksctl, rancher-machine, crossplane-provider-azure-sql, nerdctl, argo-rollouts, net-kourier, crossplane-provider-aws-route53, gitlab-pages, grafana-agent-operator, step-ca, vexctl, slsa-verifier, buildah, spark-operator, yunikorn-k8shim, ipfs-cluster, podman,...

CLEANSTART-2026-SU44499 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the promxy package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: eksctl, goreleaser, kube-fluentd-operator, rancher-machine, splunk-otel-collector, kubernetes-csi-external-health-monitor, oauth2-proxy, cloud-provider-azure, crossplane-provider-azure-sql, otel-cli, nerdctl, opa-envoy, terraform-provider-azuread, weaviate, falcoctl,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, thanos-operator, sbom-convert, net-kourier, victoriametrics-cluster, gitlab-pages, azcopy, cert-exporter, q, terraform-provider-pagerduty, tailscale, nri-nginx, buildah, yunikorn-k8shim, percona-server-mongodb-operator,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, thanos-operator, sbom-convert, net-kourier, victoriametrics-cluster, gitlab-pages, azcopy, cert-exporter, q, terraform-provider-pagerduty, tailscale, nri-nginx, buildah, yunikorn-k8shim, percona-server-mongodb-operator,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: rancher-machine, kube-fluentd-operator, kubernetes-csi-external-health-monitor, oauth2-proxy, otel-cli, terraform-provider-google, terraform-provider-azuread, falcoctl, argo-rollouts, cluster-api-gcp-controller, net-kourier, sqlexporter,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, thanos-operator, sbom-convert, net-kourier, victoriametrics-cluster, gitlab-pages, azcopy, cert-exporter, q, terraform-provider-pagerduty, tailscale, nri-nginx, buildah, yunikorn-k8shim, percona-server-mongodb-operator,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, thanos-operator, sbom-convert, net-kourier, victoriametrics-cluster, gitlab-pages, azcopy, cert-exporter, q, terraform-provider-pagerduty, tailscale, nri-nginx, buildah, yunikorn-k8shim, percona-server-mongodb-operator,...