CLEANSTART-2026-RD73080 Security fix for GHSA-cgrx-mc8f-2prm applied in: eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, kaniko 1.24.0-r0, kaniko-fips 1.24.0-r0, local-static-provisioner 2.6.0-r1, local-static-provisioner-fips 2.6.0-r1, local-static-provisioner-fips 2.7.0-r1, prometheus-node-exporter 1.8.0-r3, prometheus-node-exporter-fips 1.10.2-r1, prometheus-node-exporter-fips 1.10.2-r3, prometheus-node-exporter-fips 1.7.0-r2, prometheus-node-exporter-fips 1.8.2-r2, prometheus-node-exporter-fips 1.9.1-r1, runc 1.1.14-r0, skaffold 2.16.1-r1, trivy-fips 0.67.2-r0, velero 1.17.0-r0

GHSA-cgrx-mc8f-2prm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6253 vulnerabilities

Vulnerabilities for packages: falcoctl, buildkitd, telegraf, buildah, kubescape, skaffold, kaniko, docker-cli-buildx, openbao, podman...

GHSA-HFG8-HC9C-6C3H vulnerabilities

Vulnerabilities for packages: falcoctl, buildkitd, telegraf, buildah, kubescape, skaffold, kaniko, docker-cli-buildx, openbao, podman...

CVE-2026-17106 vulnerabilities

Vulnerabilities for packages: falcoctl, buildkitd, telegraf, buildah, kubescape, skaffold, kaniko, docker-cli-buildx, openbao, podman...

GO-2026-6162 vulnerabilities

Vulnerabilities for packages: spire-server, zarf, kyverno-notation-aws, flux-source-controller, tekton-chains, trivy-operator, falcoctl, zot, kubescape, kyverno, neuvector-sigstore-interface, policy-controller, crossplane, skaffold, ko, goreleaser, aactl, trivy, tkn...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, prometheus-alertmanager, sriov-network-device-plugin, trino, descheduler, tekton-chains, dapr, kubescape-operator, cloud-provider-azure, cerbos, aws-privateca-issuer, gh, pgtimetable, bank-vaults, rancher-machine,...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: buildah-fips, conftest-fips, kubescape, scorecard, docker-cli-buildx, docker-fips, guac, kubescape-server, kaniko, trivy-operator-fips, skaffold, podman, kubescape-server-fips, trivy-fips, docker-compose, skaffold-fips, docker-compose-fips, osv-scanner, kaniko-fips,...

GO-2024-2494 vulnerabilities

Vulnerabilities for packages: trivy, conftest-fips, kubescape, skaffold, scorecard, zot, buildkitd, docker, guac, kaniko, conftest...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: buildah-fips, conftest-fips, kubescape, scorecard, docker-cli-buildx, docker-fips, guac, kubescape-server, kaniko, trivy-operator-fips, skaffold, podman, kubescape-server-fips, trivy-fips, docker-compose, skaffold-fips, docker-compose-fips, osv-scanner, kaniko-fips,...

GO-2024-2492 vulnerabilities

Vulnerabilities for packages: trivy, conftest-fips, kubescape, skaffold, scorecard, zot, buildkitd, docker, guac, kaniko, conftest...

GO-2024-2493 vulnerabilities

Vulnerabilities for packages: trivy, conftest-fips, kubescape, skaffold, scorecard, zot, buildkitd, docker, guac, kaniko, conftest...

GO-2024-2497 vulnerabilities

Vulnerabilities for packages: trivy, conftest-fips, kubescape, skaffold, scorecard, zot, buildkitd, docker, guac, kaniko, conftest...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: k3d, newrelic-infrastructure-agent, runc, kubescape, skopeo, ctop, zarf, nerdctl, cadvisor, kaniko, skaffold, podman, k9s, kots, grype, wolfictl, zot, trivy, buildkitd, k3s, docker, syft, kubernetes...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: k3d, gitness, newrelic-infrastructure-agent, kubescape, ctop, cilium-cli, eksctl, kaniko, skaffold, fuse-overlayfs-snapshotter, kubevela, kots, grype, helm-push, k8sgpt, melange, up, zot, flux-source-controller, trivy, flux-helm-controller, buildkitd, helm...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: ctop, falco-no-driver, opa-fips-envoy, cluster-api-helm-controller-fips, kargo, nerdctl-fips, helm-push, apm-server-fips, chartmuseum-fips, datadog-agent-fips, dagger, skaffold-fips, gitlab-operator, opa-envoy, kaniko-fips, livekit-cli, neuvector-scanner, apm-server,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: ctop, falco-no-driver, opa-fips-envoy, cluster-api-helm-controller-fips, kargo, nerdctl-fips, helm-push, apm-server-fips, chartmuseum-fips, datadog-agent-fips, dagger, skaffold-fips, gitlab-operator, opa-envoy, kaniko-fips, livekit-cli, neuvector-scanner, apm-server,...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: nfpm, gomplate-fips, flux-image-automation-controller, argo-workflows-fips, tfsec, packer-fips, coder, grafana-fips, pulumi-language-dotnet, trufflehog, kargo, dagger, flux-fips, skaffold-fips, kaniko-fips, argo-events-fips, cerbos, chainloop-cli-fips, mapotf-fips,...

GO-2023-1795 vulnerabilities

Vulnerabilities for packages: skaffold, aactl...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, policy-controller, tkn-fips, goreleaser, tekton-chains-fips, skaffold, aactl, gitsign, ko-fips, spire-server-fips, falcoctl-fips, wolfictl, neuvector-sigstore-interface, falcoctl, policy-controller-fips, tkn, vexctl, melange, zot, slsa-verifier,...

GO-2025-4098 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, xeol, sriov-network-device-plugin, mesosphere-vsphere-csi, skopeo, ctop, zarf, buildah, containerd, neuvector-scanner, newrelic-infrastructure-agent, trivy-operator, nvidia-container-toolkit, osv-scanner, syft, wolfictl, kubescape-operator, zo...