CLEANSTART-2026-KJ72865 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-mh2q-q3fh-2475 applied in versions: 0.55.1-r0, 0.57.0-r0

Multiple security vulnerabilities affect the cadvisor package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kwok, cosign, opensearch-k8s-operator, stakater-reloader, litefs, juicefs, checksec, nodetaint, vexctl, ini-file, velero-plugin-for-aws, kubelet-csr-approver, jitsucom-bulker, tfsec, sigstore-scaffolding, distribution, glow, atlantis, aws-s3-controller,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: amass, cert-exporter, kwok, conftest, docker-credential-ecr-login, nerdctl, opensearch-k8s-operator, stakater-reloader, flyte, istio, litefs, cluster-api-provider-vsphere, juicefs, helm-mapkubeapis, helm-set-status, velero-plugin-for-microsoft-azure, checksec,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: go-bindata, neuvector-sigstore-interface, falco-no-driver, kratos, kind, vendir, minio-object-browser-fips, packer-fips, cloud-provider-aws, spire-controller-manager, velero-plugin-for-microsoft-azure-fips, vault-csi-provider-fips, stern, redka, apm-server,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: go-bindata, neuvector-sigstore-interface, falco-no-driver, kratos, kind, vendir, minio-object-browser-fips, packer-fips, cloud-provider-aws, spire-controller-manager, velero-plugin-for-microsoft-azure-fips, vault-csi-provider-fips, stern, redka, apm-server,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: go-bindata, neuvector-sigstore-interface, falco-no-driver, kratos, kind, vendir, minio-object-browser-fips, packer-fips, cloud-provider-aws, spire-controller-manager, velero-plugin-for-microsoft-azure-fips, vault-csi-provider-fips, stern, redka, apm-server,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: go-bindata, neuvector-sigstore-interface, falco-no-driver, kratos, kind, vendir, minio-object-browser-fips, packer-fips, cloud-provider-aws, spire-controller-manager, velero-plugin-for-microsoft-azure-fips, vault-csi-provider-fips, stern, redka, apm-server,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: go-bindata, neuvector-sigstore-interface, falco-no-driver, kratos, kind, vendir, minio-object-browser-fips, packer-fips, cloud-provider-aws, spire-controller-manager, velero-plugin-for-microsoft-azure-fips, vault-csi-provider-fips, stern, redka, apm-server,...