CLEANSTART-2026-CP01923 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.15.0-r0, 0.15.0-r1

Multiple security vulnerabilities affect the configmap-reload package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HM31566 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.15.0-r0

Multiple security vulnerabilities affect the configmap-reload package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kpt, prometheus-blackbox-exporter, aws-efs-csi-driver, dbmate, grafana-agent-operator, manifest-tool, ko, knative-eventing, terraform-provider-pagerduty, kubernetes-csi-node-driver-registrar, maru, php-fpmexporter, influx, pgpool2exporter, go,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: jaeger, nats, tfsec, tempo-fips, quic-go-fips, net-kourier, gitlab-kas-fips, tofu-controller-fips, dapr-fips, plugin-barman-cloud-fips, pluto, packer, databricks-cli-fips, aws-load-balancer-controller-fips, kubernetes-csi-external-attacher-fips, thanos-operator-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kpt, guac, prometheus-blackbox-exporter, dbmate, grafana-agent-operator, cluster-api-gcp-controller, manifest-tool, ko, knative-eventing, kubernetes-csi-node-driver-registrar, maru, cert-manager-webhook-pdns, php-fpmexporter, pgpool2exporter, kube-vip-cloud-provider,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko, dockerize,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, guac, kpt, prometheus-blackbox-exporter, configmap-reload, vault-env, dfc, velero-plugin-for-csi, falco-no-driver, dbmate, gotestsum, helm-mapkubeapis, prometheus-alertmanager, terraform-provider-tls, cluster-api-gcp-controller, manifest-tool, ko,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: jaeger, nats, tfsec, omni, net-kourier, fixuid, vexctl, dapr-fips, packer, thanos-operator-fips, kubernetes-csi-external-attacher-fips, argo-cd, fq, stampdalf, vault-k8s, cloud-sql-proxy, k6-fips, ipfs-cluster, sbom-convert, knative-serving-fips,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: jaeger, nats, tfsec, omni, net-kourier, fixuid, vexctl, dapr-fips, packer, thanos-operator-fips, kubernetes-csi-external-attacher-fips, argo-cd, fq, stampdalf, vault-k8s, cloud-sql-proxy, k6-fips, ipfs-cluster, sbom-convert, knative-serving-fips,...