CLEANSTART-2026-ZL73481 Security fix for CVE-2021-4235 applied in: cluster-proportional-autoscaler 1.7.1-r0

Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YU71715 Security fix for CVE-2022-3064 applied in: cluster-proportional-autoscaler 1.7.1-r0

Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...

Important: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-3 This version is a rebuild of 2.19.0 using a newer base image, Go modules and Go compiler, and two bug fixes. See the release notes for more information.

Custom Metrics Autoscaler Operator for Red Hat OpenShift updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...

CLEANSTART-2026-YJ84497 Security fixes in vertical-pod-autoscaler 1.6.0-r1

Package vertical-pod-autoscaler version 1.6.0-r1 fixes 1 vulnerabilities: CVE-2026-29181...

CLEANSTART-2026-BG12778 Security fixes in cluster-autoscaler 1.35.2-r1

Package cluster-autoscaler version 1.35.2-r1 fixes 29 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-AY80745 Security fixes in cluster-autoscaler 1.35.2-r4

Package cluster-autoscaler version 1.35.2-r4 fixes 3 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-41178...

CLEANSTART-2026-FS80399 Security fixes in vertical-pod-autoscaler 1.7.1-r1

Package vertical-pod-autoscaler version 1.7.1-r1 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-MA24667 Security fixes in cluster-autoscaler 1.35.2-r2

Package cluster-autoscaler version 1.35.2-r2 fixes 26 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-OZ55229 Security fixes in vertical-pod-autoscaler 1.6.0-r2

Package vertical-pod-autoscaler version 1.6.0-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-LW70656 Security fixes in cluster-autoscaler 1.36.1-r3

Package cluster-autoscaler version 1.36.1-r3 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-DB39840 Security fixes in cluster-autoscaler 1.36.1-r1

Package cluster-autoscaler version 1.36.1-r1 fixes 7 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-56864, CVE-2026-56865, CVE-2026-39883, CVE-2026-56852...

CLEANSTART-2026-CT32025 Security fixes in vertical-pod-autoscaler 1.5.1-r4

Package vertical-pod-autoscaler version 1.5.1-r4 fixes 1 vulnerabilities: CVE-2026-29181...

CLEANSTART-2026-IW50648 Security fixes in cluster-autoscaler 1.36.1-r2

Package cluster-autoscaler version 1.36.1-r2 fixes 4 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-73500, ghsa-gcjh-h69q-9w9g...

CLEANSTART-2026-UF80970 Security fixes in cluster-autoscaler 1.35.2-r3

Package cluster-autoscaler version 1.35.2-r3 fixes 3 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-41178...

CLEANSTART-2026-NG38964 Security fixes in cluster-autoscaler 1.36.1-r4

Package cluster-autoscaler version 1.36.1-r4 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-FH07251 Security fixes in vertical-pod-autoscaler 1.7.1-r2

Package vertical-pod-autoscaler version 1.7.1-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: datadog-agent, flux-notification-controller, flux-helm-controller, kube-vip-cloud-provider, cert-manager, kubernetes-csi-external-health-monitor, cluster-api-gcp-controller, cloud-provider-aws, openfga, cloud-provider-azure, gitlab-kas, kots, opentelemetry-operator,...

CVE-2026-56859 vulnerabilities

Vulnerabilities for packages: mattermost, ko, secrets-store-csi-driver-provider-aws, cloudnative-pg, haproxy-ingress, kapp, amazon-cloudwatch-agent-operator, neuvector-dbgen, go-discover, knative-client, secrets-store-csi-driver, traefik, opensearch-k8s-operator, docker-machine-driver-linode,...

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: mattermost, ko, secrets-store-csi-driver-provider-aws, cloudnative-pg, haproxy-ingress, kapp, amazon-cloudwatch-agent-operator, neuvector-dbgen, go-discover, knative-client, secrets-store-csi-driver, traefik, opensearch-k8s-operator, docker-machine-driver-linode,...

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: zarf, crane, crossplane-provider-aws-cloudwatchlogs, kubernetes-csi-external-health-monitor, ko, dataplaneapi, gitlab-kas, cloudnative-pg, haproxy-ingress, kapp, k8s-device-plugin, aws-load-balancer-controller, kubernetes-dashboard-web,...