CLEANSTART-2026-HM31566 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.15.0-r0

Multiple security vulnerabilities affect the configmap-reload package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: supercronic, crossplane-provider-sql, kaf, wal-g, k8sgpt-operator, memcached-exporter, ctop, speedtest-go, fscrypt, nri-haproxy, cluster-api, terraform-provider-aws, s5cmd, kubernetes-replicator, azure-workload-identity-webhook, gcsfuse, step, trillian, vt-cli,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: azure-container-networking, chartmuseum-fips, crossplane-provider-aws-ecr, flux-source-controller, kubernetes-secret-generator, crossplane-provider-aws-sqs-fips, metrics-agent-fips, grpc-health-probe-fips, skopeo, ceph-csi-operator-fips, crossplane-provider-gcp,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: gotestsum, metacontroller, telegraf, cargobump, apisix-ingress-controller, kubecolor, cluster-proportional-autoscaler, oras, extism, atlantis, azurefile-csi, dfc, wgcf, kaf, kube-state-metrics, prometheus-alertmanager, promxy, kafka-proxy, controller-gen, ctop,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kubecolor, supercronic, kaf, prometheus-alertmanager, k8sgpt-operator, ctop, speedtest-go, fscrypt, cluster-api, s5cmd, kubernetes-replicator, azure-workload-identity-webhook, gcsfuse, trillian, k6, mockgen, vt-cli, nri-prometheus, rancher-telemetry, ko, flannel,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: azure-container-networking, trivy-operator, chartmuseum-fips, skopeo, kubernetes-secret-generator, grpc-health-probe-fips, knative-operator-fips, seaweedfs-operator-fips, whereabouts-fips, wave-fips, regclient, oras, otel-cli, gatekeeper,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: azure-container-networking, trivy-operator, chartmuseum-fips, skopeo, kubernetes-secret-generator, grpc-health-probe-fips, knative-operator-fips, seaweedfs-operator-fips, whereabouts-fips, wave-fips, regclient, oras, otel-cli, gatekeeper,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: azure-container-networking, trivy-operator, chartmuseum-fips, skopeo, kubernetes-secret-generator, grpc-health-probe-fips, knative-operator-fips, seaweedfs-operator-fips, whereabouts-fips, wave-fips, regclient, oras, otel-cli, gatekeeper,...