CLEANSTART-2026-CP01923 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.15.0-r0, 0.15.0-r1

Multiple security vulnerabilities affect the configmap-reload package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HM31566 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.15.0-r0

Multiple security vulnerabilities affect the configmap-reload package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: scorecard, percona-server-mongodb-operator, rancher, falcoctl, step-issuer, gitaly, cortex, nri-couchbase, cue, gatus, influx, neuvector-scanner, gostatsd, knative-eventing, prometheus, govulncheck, kyverno-policy-reporter-kyverno-plugin, pluto, aws-flb-cloudwatch,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, crossplane-provider-aws-cloudformation-fips, swagger, rancher-telemetry, sftpgo-plugin-pubsub, backup-restore-operator-fips, src, boring-registry, victoriametrics-cluster-fips, volcano, cloud-provider-aws,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev, cluster-api-gcp-controller,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: render-template, scorecard, velero-plugin-for-csi, falcoctl, cortex, cue, gostatsd, knative-eventing, prometheus, govulncheck, oauth2-proxy, x509-certificate-exporter, pulumi-kubernetes-operator, nuclei, src-fingerprint, dataplaneapi, wave, pulumi-language-yaml,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: render-template, scorecard, kube-bench, modelmesh-runtime-adapter, thanos-operator, litefs, falco-no-driver, velero-plugin-for-csi, local-path-provisioner, cloud-provider-azure, elvish, renovate, falcoctl, kubevela, vitess, terraform-provider-time, dagdotdev,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: flyte, rancher-telemetry, boring-registry, cloud-provider-aws, consul-k8s, localstack, kubernetes-csi-driver-hostpath, ipfs-cluster, velero-plugin-for-aws, stakater-reloader, terraform-provider-time, configmap-reload-fips, capslock, dfc, docker-cli-buildx,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: flyte, rancher-telemetry, boring-registry, cloud-provider-aws, consul-k8s, localstack, kubernetes-csi-driver-hostpath, ipfs-cluster, velero-plugin-for-aws, stakater-reloader, terraform-provider-time, configmap-reload-fips, capslock, dfc, docker-cli-buildx,...