GO-2025-4013 vulnerabilities

Vulnerabilities for packages: dive, gobump, prometheus-adapter-fips, git-sync-fips, gitlab-rails-ce, conjur-cli, certificate-transparency, configmap-reload, net-kourier-fips, redka, rancher-webhook-fips, secrets-store-csi-driver-provider-aws, falco-no-driver, dockerize, knative-eventing-fips,...

CLEANSTART-2026-SP49860 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.16.0-r4

Package kubernetes-csi-node-driver-registrar-fips version 2.16.0-r4 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-TI99116 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.15.0-r5

Package kubernetes-csi-node-driver-registrar-fips version 2.15.0-r5 fixes 2 vulnerabilities: CVE-2026-25681, CVE-2026-25680...

CLEANSTART-2026-SA81922 Security fixes for CVE-2024-45336, CVE-2024-45341, CVE-2025-0913, CVE-2025-22866, CVE-2025-22870, CVE-2025-22871, CVE-2025-22872, CVE-2025-22873, CVE-2025-4673, CVE-2025-4674, CVE-2025-47906, CVE-2025-47907, CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, ghsa-p77j-4mvh-x3m3, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 2.13.0-r0, 2.13.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-node-driver-registrar package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: eksctl, kubernetes-event-exporter, neuvector-scanner, dbmate, vault-secrets-webhook, calico, pgpool2exporter, delve, harbor-cli, hugo-extended, terraform-provider-pagerduty, fscrypt, prometheus-operator, cluster-proportional-autoscaler, trivy-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: memcached-exporter-fips, dagdotdev, nvidia-nsight-compute-12.9, linkerd2-proxy-init, grafana-operator, secrets-store-csi-driver-provider-aws, shfmt, knative-eventing-fips, eks-distro-fips, lvm-driver, stakater-reloader, ctop, nvidia-nsight-compute-13.0, checksec,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: dive, gobump, prometheus-operator, prometheus-podman-exporter-fips, kuma, sqlexporter, helm-operator-fips, conjur-cli, certificate-transparency, configmap-reload, net-kourier-fips, nri-rabbitmq, rancher-webhook-fips, redka, elvish, dbmate,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: php-fpmexporter, trillian, eksctl, fuse-overlayfs-snapshotter, temporal-server, cert-exporter, kubernetes-csi-external-provisioner, kubernetes-event-exporter, runc, gomplate, yq, cri-tools, configmap-reload, go-md2man, gops, kubernetes-dashboard, bom,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: melange, php-fpmexporter, crossplane-provider-aws-ec2, trillian, eksctl, fuse-overlayfs-snapshotter, temporal-server, crossplane-provider-aws-cloudwatchlogs, cert-exporter, kubernetes-csi-external-provisioner, kubernetes-event-exporter, osv-scanner, gomplate, hugo,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kiam, terraform-provider-sendgrid-fips, prometheus-adapter-fips, scorecard, spark-operator, src, cortex, prometheus-blackbox-exporter, dynamic-localpv-provisioner-fips, aws-efs-csi-driver-fips, smarter-device-manager-fips, vault-csi-provider, up,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: scorecard, aactl, up, terraform-provider-sendgrid, k3d, cortex, dgraph, spark-operator, kubevela, slsa-verifier, buildkitd, kubeflow, kubescape, src...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, gomplate, hugo, bom, kubernetes-csi-livenessprobe, scorecard, newrelic-infrastructure-agent, dex, flux-kustomize-controller, buildkitd, hey, envoy-ratelimit, mc, nats, ip-masq-agent, nri-prometheus, slsa-verifier, kubescape, grype,...