CLEANSTART-2026-RD73080 Security fix for GHSA-cgrx-mc8f-2prm applied in: eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, kaniko 1.24.0-r0, kaniko-fips 1.24.0-r0, local-static-provisioner 2.6.0-r1, local-static-provisioner-fips 2.6.0-r1, local-static-provisioner-fips 2.7.0-r1, prometheus-node-exporter 1.8.0-r3, prometheus-node-exporter-fips 1.10.2-r1, prometheus-node-exporter-fips 1.10.2-r3, prometheus-node-exporter-fips 1.7.0-r2, prometheus-node-exporter-fips 1.8.2-r2, prometheus-node-exporter-fips 1.9.1-r1, runc 1.1.14-r0, skaffold 2.16.1-r1, trivy-fips 0.67.2-r0, velero 1.17.0-r0

GHSA-cgrx-mc8f-2prm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6253 vulnerabilities

Vulnerabilities for packages: skaffold, kaniko, podman, buildkitd, telegraf, openbao, falcoctl, buildah, kubescape, docker-cli-buildx...

CVE-2026-17106 vulnerabilities

Vulnerabilities for packages: skaffold, kaniko, podman, buildkitd, telegraf, openbao, falcoctl, buildah, kubescape, docker-cli-buildx...

GHSA-HFG8-HC9C-6C3H vulnerabilities

Vulnerabilities for packages: skaffold, kaniko, podman, buildkitd, telegraf, openbao, falcoctl, buildah, kubescape, docker-cli-buildx...

GO-2026-6162 vulnerabilities

Vulnerabilities for packages: tkn, trivy-operator, kubescape, kyverno, aactl, neuvector-sigstore-interface, ko, kyverno-notation-aws, zot, policy-controller, zarf, goreleaser, spire-server, trivy, skaffold, crossplane, flux-source-controller, falcoctl, tekton-chains...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, mattermost, grafana-rollout-operator, terraform-provider-acme, witness, rancher-agent, mariadb-operator, gcp-compute-persistent-disk-csi-driver, crossplane-provider-aws-kinesis, kapp, kube-rbac-proxy, flux-kustomize-controller, kaf,...

GO-2024-2493 vulnerabilities

Vulnerabilities for packages: conftest, conftest-fips, scorecard, kaniko, kubescape, skaffold, zot, docker, buildkitd, trivy, guac...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: kubescape, buildkitd, ctop, k3d, syft, trivy, cadvisor, zot, k3s, zarf, k9s, kots, skaffold, grype, kubernetes, runc, wolfictl, skopeo, kaniko, newrelic-infrastructure-agent, docker, nerdctl, podman...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: conftest, cloudbeat-fips, podman-fips, kubescape, cloudbeat, kubescape-server-fips, trivy-operator, kaniko-fips, docker-cli-buildx, docker-compose-fips, buildah, livekit-cli, trivy, zot, conftest-fips, scorecard, skaffold, docker-cli-buildx-fips, docker-compose,...

GO-2024-2494 vulnerabilities

Vulnerabilities for packages: conftest, conftest-fips, scorecard, kaniko, kubescape, skaffold, zot, docker, buildkitd, trivy, guac...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm, kubescape, up, flux-source-controller, helm-push, buildkitd, cilium-cli, ctop, k3d, trivy, zot, kots, skaffold, gitness, grype, k8sgpt, eksctl, kaniko, melange, flux-helm-controller, newrelic-infrastructure-agent, kubevela...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: conftest, cloudbeat-fips, podman-fips, kubescape, cloudbeat, kubescape-server-fips, trivy-operator, kaniko-fips, docker-cli-buildx, docker-compose-fips, buildah, livekit-cli, trivy, zot, conftest-fips, scorecard, skaffold, docker-cli-buildx-fips, docker-compose,...

GO-2024-2492 vulnerabilities

Vulnerabilities for packages: conftest, conftest-fips, scorecard, kaniko, kubescape, skaffold, zot, docker, buildkitd, trivy, guac...

GO-2024-2497 vulnerabilities

Vulnerabilities for packages: conftest, conftest-fips, scorecard, kaniko, kubescape, skaffold, zot, docker, buildkitd, trivy, guac...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: nerdctl-fips, containerd, steampipe, flux-source-controller, cilium-cli, helm-fips, neuvector, gitlab-rails-ce, k8ssandra-client-fips, docker-cli-buildx, syft, google-osconfig-agent, rancher-fleet-fips, opa-envoy, chainctl, consul-k8s, chartmuseum-fips, kargo,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: nerdctl-fips, containerd, steampipe, flux-source-controller, cilium-cli, helm-fips, neuvector, gitlab-rails-ce, k8ssandra-client-fips, docker-cli-buildx, syft, google-osconfig-agent, rancher-fleet-fips, opa-envoy, chainctl, consul-k8s, chartmuseum-fips, kargo,...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: gitea-fips, nuclei, argo-workflows-fips, gomplate-fips, steampipe, pulumi-language-java, goreleaser, cloudbeat, redpanda-console, gitlab-rails-ce, apko-fips, flux, pulumi-kubernetes-operator, syft, google-osconfig-agent, rancher-fleet-fips, chainctl,...

GO-2023-1795 vulnerabilities

Vulnerabilities for packages: skaffold, aactl...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: spire-server, tkn-fips, neuvector-sigstore-interface, ko, kubescape, flux-source-controller, goreleaser, policy-controller-fips, apko, gitsign, spire-server-fips, zot, zarf, chainctl, tkn, skaffold, tekton-chains, falcoctl, vexctl, slsa-verifier, policy-controller,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: melange, fuse-overlayfs-snapshotter, gitness, newrelic-infrastructure-agent, grype, kubescape, helm-push, buildkitd, helm, up, k8sgpt, zot, kaniko, kubevela, flux-helm-controller, eksctl, trivy, skaffold, kots, k3d, flux-source-controller, ctop, cilium-cli...