GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: fluent-operator, kube-metrics-adapter, metallb, spicedb-operator, cert-manager-istio-csr, cloud-provider-gcp-cloud-controller-manager, descheduler, tekton-pipelines, crossplane, cluster-api-aws-controller, istio, tetragon, opentelemetry-operator, rancher,...

CLEANSTART-2026-BD49035 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: gomplate, nri-apache, rancher-helm, crossplane-provider-aws-dynamodb, grafana-agent-operator, timestamp-authority, mailpit, crossplane-provider-aws-s3, coredns, crossplane-provider-aws-memorydb, dgraph, grafana, nri-postgresql, nova, nri-nginx,...

CLEANSTART-2026-RE02723 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 6.1.0-r0, 6.1.0-r1, 6.1.0-r2, 6.1.0-r3, 6.1.0-r4

Multiple security vulnerabilities affect the kubernetes-csi-external-provisioner-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: snyk-cli, terraform-provider-pagerduty, wal-g, migrate, rancher-helm, apko, vault-env, opa-envoy, grafana-agent-operator, docker-machine-driver-linode, kafka-proxy, temporal, falcoctl, coredns, dgraph, kots, neuvector-scanner, dapr, grafana, grpc-health-probe,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, ceph-csi-operator, mcp-grafana-fips, opentelemetry-operator, custom-pod-autoscaler-fips, grafana-mimir, pgtimetable, sriov-network-device-plugin-fips, terraform-provider-azapi-fips, pushprox-fips, kube-vip-fips,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: fluent-operator, cass-operator, snyk-cli, gomplate, ferretdb, rekor, jaeger-operator, migrate, cluster-api-azure-controller, kube-vip-cloud-provider, skaffold, vault-env, crossplane-provider-aws-dynamodb, grafana-agent-operator, hydra, temporal, pulumi-language-dotne...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: snyk-cli, cass-operator, terraform-provider-pagerduty, wal-g, migrate, rancher-helm, cluster-api-azure-controller, kube-vip-cloud-provider, vault-env, crossplane-provider-aws-dynamodb, kafka-proxy, pulumi-language-dotnet, azcopy, crossplane-provider-aws-s3, falcoctl,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: azure-ipam, nri-apache, configmap-reload, rancher-helm, crossplane-provider-aws-dynamodb, timestamp-authority, falcoctl, crossplane-provider-aws-s3, coredns, crossplane-provider-aws-memorydb, nri-postgresql, nova, nri-nginx, kapp-controller,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: ceph-csi-operator, mcp-grafana-fips, secrets-store-csi-driver-provider-gcp-fips, grafana-mimir, sriov-network-device-plugin-fips, terraform-provider-azapi-fips, steampipe, rancher, metrics-server-fips, blob-csi-fips, cluster-api-gcp-controller-fips, kubeflow-katib,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, sbom-convert, ceph-csi-operator, mcp-grafana-fips, pgtimetable, custom-pod-autoscaler-fips, grafana-mimir, secrets-store-csi-driver-provider-gcp-fips, sriov-network-device-plugin-fips, terraform-provider-azapi-fips, pushprox-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, cass-operator, docker-credential-ecr-login, ferretdb, aws-eks-pod-identity-agent, rancher-helm, kube-vip-cloud-provider, crossplane-provider-aws-dynamodb, hydra, docker-machine-driver-linode, azcopy, crossplane-provider-aws-s3, hey,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: azure-ipam, rancher-helm, crossplane-provider-aws-dynamodb, crossplane-provider-aws-s3, hey, nri-postgresql, nri-nginx, kapp-controller, grpcurl, rabbitmq-messaging-topology-operator, cargobump, doppler-kubernetes-operator, percona-server-mongodb-operator, spegel,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: ceph-csi-operator, pgtimetable, sriov-network-device-plugin-fips, terraform-provider-azapi-fips, pushprox-fips, steampipe, nri-f5-fips, jupyterhub-k8s-image-awaiter-fips, kuberlr, spire-server, blob-csi-fips, secretgen-controller-fips, cloud-provider-aws,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: ceph-csi-operator, pgtimetable, sriov-network-device-plugin-fips, terraform-provider-azapi-fips, pushprox-fips, steampipe, nri-f5-fips, jupyterhub-k8s-image-awaiter-fips, kuberlr, spire-server, blob-csi-fips, secretgen-controller-fips, cloud-provider-aws,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: sbom-convert, ceph-csi-operator, pgtimetable, sriov-network-device-plugin-fips, terraform-provider-azapi-fips, pushprox-fips, steampipe, kuberlr, spire-server, blob-csi-fips, secretgen-controller-fips, cloud-provider-aws, cluster-api-gcp-controller-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: nri-nagios, sbom-convert, ceph-csi-operator, pgtimetable, sriov-network-device-plugin-fips, terraform-provider-azapi-fips, confluent-cp-docker-utils, pushprox-fips, steampipe, nri-f5-fips, jupyterhub-k8s-image-awaiter-fips, kuberlr, sbom-scorecard, spire-server,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, nri-nagios, sbom-convert, mcp-grafana-fips, custom-pod-autoscaler-fips, terraform-provider-azapi-fips, steampipe, kube-vip-fips, spire-server-fips, sbom-scorecard, trivy-operator, spire-server, blob-csi-fips, opentelemetry-collector,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, nri-nagios, grafana-mimir, kube-vip-fips, spire-server-fips, sbom-scorecard, metrics-server-fips, spire-server, node-problem-detector, dive, nfs-subdir-external-provisioner-fips, kubeflow-katib, step-issuer-fips, ctop,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cass-operator, gomplate, configmap-reload, ferretdb, rekor, skaffold, crossplane-provider-aws-dynamodb, grafana-agent-operator, timestamp-authority, temporal, falcoctl, crossplane-provider-aws-s3, supercronic, crossplane-provider-aws-memorydb, dgraph, kots,...