CLEANSTART-2026-KI12594 Security fixes in cluster-proportional-autoscaler 1.7.1-r0

Package cluster-proportional-autoscaler version 1.7.1-r0 fixes 7 vulnerabilities: CVE-2021-3121, CVE-2022-3064, CVE-2020-8559, CVE-2019-11254, CVE-2019-11250...

CLEANSTART-2026-KM46423 Security fixes in vertical-pod-autoscaler-fips 1.5.1-r2

Package vertical-pod-autoscaler-fips version 1.5.1-r2 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-27141...

CLEANSTART-2026-CH73594 Security fixes in vertical-pod-autoscaler-fips 1.5.1-r0

Package vertical-pod-autoscaler-fips version 1.5.1-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-RA54834 Security fixes in vertical-pod-autoscaler 1.5.1-r0

Package vertical-pod-autoscaler version 1.5.1-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-CC98866 Security fixes in vertical-pod-autoscaler 1.5.1-r2

Package vertical-pod-autoscaler version 1.5.1-r2 fixes 4 vulnerabilities: CVE-2025-47911, CVE-2025-58190, CVE-2025-68121, CVE-2025-61732...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, dkron-fips, prometheus-postgres-exporter-fips, blob-csi, cluster-api-azure-controller-fips, crossplane-provider-aws-kms-fips, kyverno-notation-aws, seaweedfs, envconsul, crossplane-provider-aws-elb-fips, consul-fips,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: multus-cni, tetragon, task, kuberay-operator, kubernetes-dashboard, opentofu, addon-resizer, harbor-registry, yunikorn-k8shim, newrelic-infrastructure-agent, cluster-autoscaler, envoy-ratelimit, cluster-proportional-autoscaler, crossplane-provider-aws-route53,...

GHSA-MQQF-5WVP-8FH8 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

CVE-2025-69725 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

Important: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update

Custom Metrics Autoscaler Operator for Red Hat OpenShift updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...

CLEANSTART-2026-EC57959 protojson

Multiple security vulnerabilities affect the cluster-proportional-autoscaler package. The protojson. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: multus-cni, tetragon, task, kuberay-operator, kubernetes-dashboard, opentofu, addon-resizer, git-credential-oauth, oauth2-proxy, yunikorn-k8shim, newrelic-infrastructure-agent, cluster-autoscaler, envoy-ratelimit, cluster-proportional-autoscaler, ip-masq-agent, vendi...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, scorecard, generic-device-plugin-fips, prometheus-postgres-exporter-fips, blob-csi, eks-distro, crossplane-provider-kubernetes, minio-object-browser, nri-couchbase-fips, cluster-autoscaler-fips, terraform-provider-azuread-fips,...

CLEANSTART-2026-MQ21261 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2, 1.5.1-r3

Multiple security vulnerabilities affect the vertical-pod-autoscaler package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX58669 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: kube-vip, apko, splunk-otel-collector, src, cluster-api-azure-controller, azure-service-operator, opa, descheduler, crossplane-provider-aws-route53, kyverno-policy-reporter, crossplane-provider-aws-eks, ollama, crossplane-provider-aws-rds, trivy, gitlab-runner,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: kube-vip, apko, splunk-otel-collector, src, cluster-api-azure-controller, azure-service-operator, opa, descheduler, crossplane-provider-aws-route53, kyverno-policy-reporter, crossplane-provider-aws-eks, ollama, crossplane-provider-aws-rds, trivy, gitlab-runner,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-kms, bento-fips, crossplane-provider-aws-rds, descheduler, livekit-server, crossplane-provider-aws-wafv2-fips, kube-rbac-proxy, seaweedfs-operator, cert-manager-webhook-pdns, gitlab-pages, sops,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-kms, bento-fips, crossplane-provider-aws-rds, descheduler, livekit-server, crossplane-provider-aws-wafv2-fips, kube-rbac-proxy, seaweedfs-operator, cert-manager-webhook-pdns, gitlab-pages, sops,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: dkron-fips, scorecard, grype-fips, blob-csi, eks-distro, cluster-autoscaler-fips, cluster-api-azure-controller-fips, cluster-api-aws-controller-fips, kyverno-notation-aws, vault, seaweedfs, cass-operator-fips, kyverno-policy-reporter-plugins-kyverno, eck-operator-fip...