CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0

CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: falco-no-driver, external-dns, mongo-tools, kube-metrics-adapter-fips, gops, kafka-proxy-fips, regclient-fips, ansible-operator, external-dns-fips, ko, atlantis, metacontroller, stampdalf, gostatsd, litefs, cert-exporter, harbor, terraform-provider-sendgrid, flux,...

CLEANSTART-2026-TI99116 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.15.0-r5

Package kubernetes-csi-node-driver-registrar-fips version 2.15.0-r5 fixes 2 vulnerabilities: CVE-2026-25681, CVE-2026-25680...

CLEANSTART-2026-SP49860 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.16.0-r4

Package kubernetes-csi-node-driver-registrar-fips version 2.16.0-r4 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-SA81922 Security fixes for CVE-2024-45336, CVE-2024-45341, CVE-2025-0913, CVE-2025-22866, CVE-2025-22870, CVE-2025-22871, CVE-2025-22872, CVE-2025-22873, CVE-2025-4673, CVE-2025-4674, CVE-2025-47906, CVE-2025-47907, CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, ghsa-p77j-4mvh-x3m3, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 2.13.0-r0, 2.13.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-node-driver-registrar package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nova, flux-source-controller, gitness, envconsul, newrelic-nri-statsd, nats-server, nri-f5, openbao-k8s, opentofu, rqlite, aws-flb-firehose, newrelic-infrastructure-agent, tkn, kubernetes-csi-external-attacher, cloud-provider-azure, nsc, buf, kubernetes-dashboard-api...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: lvm-driver, vexctl, sftpgo-plugin-pubsub, karpenter-fips, gostatsd, knative-serving, karma-fips, prometheus-adapter, ctop, newrelic-fluent-bit-output, node-problem-detector-fips, confluent-common-docker, pvc-autoresizer, nvidia-nsight-compute-12.9, cluster-api,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: mongo-tools, kube-metrics-adapter-fips, gops, opentelemetry-collector-fips, cass-operator-fips-no-pvc-delete, rke2-runtime, kaniko, atlantis, crossplane-provider-azure-authorization, metrics-agent-fips, rekor-fips, cert-exporter, kubernetes-dashboard, harbor,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, nri-mysql, slsa-verifier, skaffold, spark-operator, render-template, gitness, configmap-reload, docker-credential-acr-env, golangci-lint, helm-operator, regclient, docker-cli, cfssl, nats-server, kube-logging-operator, nri-f5,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, slsa-verifier, skaffold, hugo-extended, cloudflared, flux-source-controller, gitness, configmap-reload, spark-operator, golangci-lint, helm-operator, crossplane-provider-azure-storage, cfssl, nri-prometheus, kube-logging-operator, rqlite,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: spark-operator, prometheus-stackdriver-exporter, kubeflow, up, kubernetes-csi-livenessprobe, k3d, metrics-server-fips, aactl, prometheus-blackbox-exporter, smarter-device-manager-fips, buildkitd, volume-modifier-for-k8s-fips, slsa-verifier, prometheus-adapter-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, buildkitd, slsa-verifier, dgraph, cortex, scorecard, spark-operator, up, k3d, kubeflow, terraform-provider-sendgrid, kubescape, aactl, src...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, slsa-verifier, skaffold, spark-operator, flux-source-controller, gitness, nri-prometheus, rqlite, ko, newrelic-infrastructure-agent, kots, flux-notification-controller, cosign, flux-helm-controller, ip-masq-agent, scorecard, hey, nats,...