GO-2023-2095 vulnerabilities

Vulnerabilities for packages: kind, metrics-server, smarter-device-manager-fips, configmap-reload-fips, kubeflow-katib...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: docker-cli, docker-credential-ecr-login, nsc, vertical-pod-autoscaler, go-bindata, mage, nri-discovery-kubernetes, scorecard, aws-flb-firehose, k3d, cortex, kubernetes-dashboard-metrics-scraper, aactl, slsa-verifier, go-licenses, gops, hey, sonobuoy, aws-flb-kinesis,...

CLEANSTART-2026-ZR84349 Security fixes in configmap-reload 0.15.0-r1

Package configmap-reload version 0.15.0-r1 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-QN25000 Security fixes in configmap-reload 0.15.0-r0

Package configmap-reload version 0.15.0-r0 fixes 23 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2026-25679...

CLEANSTART-2026-OG78440 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.15.0-r0, 0.15.0-r1

Multiple security vulnerabilities affect the configmap-reload package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CP01923 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.15.0-r0, 0.15.0-r1

Multiple security vulnerabilities affect the configmap-reload package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HM31566 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.15.0-r0

Multiple security vulnerabilities affect the configmap-reload package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: net-kourier, cilium, percona-server-mongodb-operator, victoriametrics-operator, nri-mysql, stern, stakater-reloader, chart-testing, mkcert, go-discover, aactl, smokescreen, pdfcpu, php-fpmexporter, eksctl, flux-helm-controller, dive, promxy, terraform-provider-azapi,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: authservice, jupyterhub-k8s-image-awaiter-fips, opentelemetry-collector, crossplane-provider-aws-rds-fips, swagger, sftpgo-plugin-kms, aws-privateca-issuer, aws-node-termination-handler-fips, amazon-ecs-agent-fips, yunikorn-k8shim-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: stern, stakater-reloader, chart-testing, mkcert, smokescreen, php-fpmexporter, yunikorn-k8shim, dive, promxy, terraform-provider-azapi, kubernetes-dashboard-web, flyte, podinfo, hydra, kubecolor, buildkitd, timestamp-authority, prometheus-operator, rancher-machine,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, tfsec, vertical-pod-autoscaler, ferretdb, pgpool2exporter, crossplane, vt-cli, dockerize, chisel, controller-gen, k3d, prometheus-alertmanager, stern,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, tfsec, vertical-pod-autoscaler, ferretdb, pgpool2exporter, crossplane, vt-cli, dockerize, chisel, controller-gen, k3d, prometheus-alertmanager, stern,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, tfsec, vertical-pod-autoscaler, ferretdb, pgpool2exporter, crossplane, vt-cli, dockerize, chisel, controller-gen, k3d, prometheus-alertmanager, stern,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, tfsec, vertical-pod-autoscaler, ferretdb, pgpool2exporter, crossplane, vt-cli, dockerize, chisel, controller-gen, k3d, prometheus-alertmanager, stern,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, tfsec, vertical-pod-autoscaler, ferretdb, pgpool2exporter, crossplane, vt-cli, dockerize, chisel, controller-gen, k3d, prometheus-alertmanager, stern,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, tfsec, vertical-pod-autoscaler, ferretdb, pgpool2exporter, crossplane, vt-cli, dockerize, chisel, controller-gen, k3d, prometheus-alertmanager, stern,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, tfsec, vertical-pod-autoscaler, ferretdb, pgpool2exporter, crossplane, vt-cli, dockerize, chisel, controller-gen, k3d, prometheus-alertmanager, stern,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, tfsec, vertical-pod-autoscaler, ferretdb, pgpool2exporter, crossplane, vt-cli, dockerize, chisel, controller-gen, k3d, prometheus-alertmanager, stern,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, tfsec, vertical-pod-autoscaler, ferretdb, pgpool2exporter, crossplane, vt-cli, dockerize, chisel, controller-gen, k3d, prometheus-alertmanager, stern,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, tfsec, vertical-pod-autoscaler, ferretdb, pgpool2exporter, crossplane, vt-cli, dockerize, chisel, controller-gen, k3d, prometheus-alertmanager, stern,...