CLEANSTART-2026-LC49486 Security fix for GHSA-j5w8-q4qc-rx2x applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1, cloud-provider-aws 1.34.1-r1

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZR95195 Security fix for GHSA-f6x5-jh6r-wnfv applied in: cloud-provider-aws 1.34.1-r1

Security vulnerability affects the cloud-provider-aws package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-MP55739 Security fix for GHSA-f6x5-jh6r-wnfv applied in: cloud-provider-aws-1.34 1.34.1-r1

Security vulnerability affects the cloud-provider-aws-1.34 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100022

Security vulnerability affects the cloud-provider-aws-1.34 package. This issue is resolved in later releases. See references for vulnerability details...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: fluent-operator, keda, cluster-api-helm-controller, kwok, flux-notification-controller, kubernetes-csi-external-attacher, kube-state-metrics, cilium, flux-helm-controller, openbao, rancher, cluster-autoscaler, flux-kustomize-controller, node-feature-discovery,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gptscript, chisel, flux-notification-controller, crossplane-provider-aws-dynamodb, flux-kustomize-controller, step-issuer, fscrypt, mattermost, rancher-agent, falco-no-driver, external-dns, docker, k3s, gomplate, skaffold, external-secrets-operator, fulcio, ko,...

CLEANSTART-2026-QS96651 Security fixes in cloud-provider-aws-1.34 1.34.1-r1

Package cloud-provider-aws-1.34 version 1.34.1-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wnfv, ghsa-j5w8-q4qc-rx2x...

PT-2026-86011

Package cloud-provider-aws-1.34 version 1.34.1-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wnfv, ghsa-j5w8-q4qc-rx2x...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: fluent-operator, keda, cluster-api-helm-controller, kwok, flux-notification-controller, kubernetes-csi-external-attacher, kube-state-metrics, cilium, flux-helm-controller, openbao, rancher, cluster-autoscaler, flux-kustomize-controller, node-feature-discovery,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux-fips, zot, gitlab-rails-ce, docker-machine-driver-harvester, kubescape-server-fips, minio, gitea, opentofu-fips, falco-no-driver, cilium-cli, external-secrets-operator-fips, drone-fips, reports-server, knative-eventing-fips, harbor, kine,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-vpc-fips, crossplane-provider-aws-sesv2-fips, crossplane-provider-aws-ec2-fips, crossplane-provider-aws-opensearch, cluster-api-azure-controller, teleport-operator-fips, databricks-cli-fips, kueue-fips, crossplane-provider-aws-lambda-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gptscript, chisel, flux-notification-controller, flux-kustomize-controller, step-issuer, fscrypt, mattermost, rancher-agent, falco-no-driver, external-dns, docker, k3s, gomplate, skaffold, external-secrets-operator, fulcio, ko, age, cilium-cli, cloud-provider-aws,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: chisel, cilium, flux, rancher, kaf, fscrypt, kubernetes, mattermost, rancher-agent, spire-server, nerdctl, kots, telegraf, argocd-image-updater, kubescape, falco-no-driver, snyk-cli, external-dns, opentelemetry-collector, kine, k3s, skaffold, prometheus,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cilium, flux, rancher, kaf, docker-cli-buildx, fscrypt, kubernetes, mattermost, rancher-agent, nerdctl, spire-server, kots, telegraf, falco-no-driver, snyk-cli, external-dns, opentelemetry-collector, kine, buildah, k3s, prometheus, external-secrets-operator,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: gptscript, step-issuer, fscrypt, mattermost, rancher-agent, falco-no-driver, external-dns, k3s, gomplate, skaffold, external-secrets-operator, cilium-cli, cloud-provider-aws, minio, docker-machine-driver-harvester, zot, act, pulumi, pulumi-kubernetes-operator, nuclei...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: tofu-controller, flux-notification-controller, mariadb-operator, crossplane-provider-aws-dynamodb, migrate, sftpgo-plugin-geoipfilter, step-issuer, fscrypt, mattermost, gitness, rancher-agent, cadvisor, sftpgo-plugin-eventsearch, k8ssandra-operator, promxy,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: tofu-controller, flux-notification-controller, mariadb-operator, crossplane-provider-aws-dynamodb, migrate, sftpgo-plugin-geoipfilter, step-issuer, fscrypt, mattermost, gitness, rancher-agent, cadvisor, sftpgo-plugin-eventsearch, k8ssandra-operator, promxy,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, smokescreen, fuse-overlayfs-snapshotter, argo-rollouts, kor, newrelic-nri-statsd,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, newrelic-prometheus-configurator, smokescreen, yq, fuse-overlayfs-snapshotter, argo-rollouts, kor...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, newrelic-prometheus-configurator, smokescreen, yq, fuse-overlayfs-snapshotter, argo-rollouts, kor...