GO-2026-4600 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, podinfo, flux-helm-controller, go, victorialogs, flux-image-automation-controller, flux-source-controller, flux-operator, gotenberg, amazon-k8s-cni-fips, nova, flux-operator-fips, dkron, cluster-autoscaler-fips, aws-ebs-csi-driver-fips,...

CLEANSTART-2026-KF37160 Security fixes in victoriametrics-cluster 1.132.0-r1

Package victoriametrics-cluster version 1.132.0-r1 fixes 1 vulnerabilities: CVE-2025-68121...

CLEANSTART-2026-FL92445 Security fixes in victoriametrics-cluster 1.132.0-r0

Package victoriametrics-cluster version 1.132.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-YK97558 Security fixes in victoriametrics-cluster-fips 1.132.0-r0

Package victoriametrics-cluster-fips version 1.132.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: prometheus-operator, dask-gateway, grafana, k3s, istio, kubernetes-dashboard, aws-flb-firehose, grafana-alloy, telegraf, argo-cd, zarf, trino, prometheus, nerdctl, zot, juicefs, redka, coredns, kaf, cilium-cli, hubble, k8s-device-plugin, minio, falco-no-driver, kots,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: prometheus-operator, dask-gateway, grafana, k3s, istio, kubernetes-dashboard, aws-flb-firehose, grafana-alloy, telegraf, argo-cd, zarf, trino, prometheus, nerdctl, zot, juicefs, redka, coredns, kaf, cilium-cli, hubble, k8s-device-plugin, minio, falco-no-driver, kots,...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, reports-server, telegraf, gatekeeper, go-slim, kubevirt-cdi-uploadproxy, hubble, external-dns-fips, commercial-grafana, kubevela-fips, traefik-fips, kube-oidc-proxy, keda, knative-net-istio-fips, azuredisk-csi-fips, gitlab-workhorse-ce-fips,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, reports-server, telegraf, gatekeeper, go-slim, kubevirt-cdi-uploadproxy, hubble, external-dns-fips, commercial-grafana, kubevela-fips, traefik-fips, kube-oidc-proxy, keda, knative-net-istio-fips, azuredisk-csi-fips, gitlab-workhorse-ce-fips,...

CLEANSTART-2026-GX29850 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 1.132.0-r0, 1.132.0-r1

Multiple security vulnerabilities affect the victoriametrics-cluster package. These issues are resolved in later releases. See references for individual vulnerability details...