GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: virt-controller, ratify-fips, karpenter, cass-operator-fips-no-pvc-delete, flux-helm-controller-fips, prometheus-snmp-exporter, crossplane-provider-aws-schemas, nginx-kubernetes-ingress-fips, calico-fips, azcopy, neuvector-sigstore-interface-fips, haproxy-ingress-fip...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: rootlesskit, cloud-provider-azure, envoy-ratelimit, malcontent, cluster-proportional-autoscaler, govulncheck, cilium-certgen, flyte, cluster-api-gcp-controller, dapr, cluster-api-aws-controller, manifest-tool, mcp-grafana, newrelic-infrastructure-agent,...

CVE-2025-69725 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

GHSA-MQQF-5WVP-8FH8 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

Important: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update

Custom Metrics Autoscaler Operator for Red Hat OpenShift updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...

CLEANSTART-2026-EC57959 protojson

Multiple security vulnerabilities affect the cluster-proportional-autoscaler package. The protojson. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, envoy-ratelimit, bazelisk, cluster-proportional-autoscaler, malcontent, certificate-transparency, flux-operator, govulncheck, harbor-scanner-trivy, cilium-certgen, dapr, manifest-tool, mcp-grafana, newrelic-infrastructure-agent,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: secretgen-controller, jfrog-cli, cyberark-secrets-provider-for-k8s, hubble-ui, haproxy-ingress, apko, kubernetes-dashboard-web, lazygit, virt-controller, nfpm, flux-image-reflector-controller-fips, vault-fips, temporal-ui-server-fips, ipfs-cluster-fips,...

CLEANSTART-2026-MQ21261 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2, 1.5.1-r3

Multiple security vulnerabilities affect the vertical-pod-autoscaler package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX58669 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-aws-cloudfront, crossplane-provider-aws-lambda, goreleaser, cluster-api-azure-controller, flux-operator, grafana-mimir, opa-envoy, traefik, crossplane-provider-aws-memorydb, crossplane-provider-aws-iam,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-aws-cloudfront, crossplane-provider-aws-lambda, goreleaser, cluster-api-azure-controller, flux-operator, grafana-mimir, opa-envoy, traefik, crossplane-provider-aws-memorydb, crossplane-provider-aws-iam,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform-fips, gitlab-cng, crossplane-provider-aws-cloudfront, goose-fips, apko, crossplane-provider-aws-cloudformation-fips, crossplane-provider-aws-dynamodb, crossplane-provider-aws-sns-fips, amazon-ssm-agent, crossplane-provider-aws-ecr,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform-fips, gitlab-cng, crossplane-provider-aws-cloudfront, goose-fips, apko, crossplane-provider-aws-cloudformation-fips, crossplane-provider-aws-dynamodb, crossplane-provider-aws-sns-fips, amazon-ssm-agent, crossplane-provider-aws-ecr,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: gitlab-cng, cerbos-fips, ratify-fips, vault-fips, kubernetes-csi-external-health-monitor, prometheus-mongodb-exporter-fips, cass-operator-fips-no-pvc-delete, descheduler, kyverno-fips, kubernetes-csi-external-provisioner-fips, otel-cli, velero-fips, calico-fips,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: rootlesskit, envoy-ratelimit, bazelisk, cluster-proportional-autoscaler, malcontent, certificate-transparency, flux-operator, govulncheck, harbor-scanner-trivy, cilium-certgen, flyte, dapr, cluster-api-aws-controller, manifest-tool, mcp-grafana, cert-manager-istio-cs...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: rootlesskit, envoy-ratelimit, bazelisk, cluster-proportional-autoscaler, malcontent, certificate-transparency, flux-operator, govulncheck, harbor-scanner-trivy, cilium-certgen, flyte, dapr, cluster-api-aws-controller, manifest-tool, mcp-grafana, cert-manager-istio-cs...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: rootlesskit, envoy-ratelimit, bazelisk, cluster-proportional-autoscaler, malcontent, certificate-transparency, flux-operator, govulncheck, harbor-scanner-trivy, cilium-certgen, flyte, dapr, cluster-api-aws-controller, manifest-tool, mcp-grafana, cert-manager-istio-cs...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: secretgen-controller, cyberark-secrets-provider-for-k8s, kubernetes-dashboard-web, haproxy-ingress, shfmt, nfpm, flux-image-reflector-controller-fips, ratify-fips, vault-fips, ipfs-cluster-fips, aws-sigv4-proxy, karpenter, kubernetes-csi-external-health-monitor,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: secretgen-controller, cyberark-secrets-provider-for-k8s, kubernetes-dashboard-web, haproxy-ingress, nfpm, flux-image-reflector-controller-fips, ratify-fips, vault-fips, ipfs-cluster-fips, aws-sigv4-proxy, karpenter, kubernetes-csi-external-health-monitor,...