GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, spqr, flux-kustomize-controller, spicedb, kube-state-metrics, rancher-system-agent, cert-manager-istio-csr, hubble, flux-notification-controller, rke2-cloud-provider, cluster-api-aws-controller, emissary, calico, cluster-api-provider-vsphere,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, kubernetes-event-exporter, jitsucom-bulker, spqr, flux-kustomize-controller, kubo, promxy, witness, dapr, fuse-overlayfs-snapshotter, goreleaser, octo-sts, snyk-cli, zarf, dask-gateway, k9s, kube-state-metrics,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, spqr, x509-certificate-exporter, docker-credential-gcr, flux-kustomize-controller, kubo, fuse-overlayfs-snapshotter, spire-controller-manager, goreleaser, octo-sts, gcp-compute-persistent-disk-csi-driver, go-licenses, dask-gateway,...

CLEANSTART-2026-CP70338 Security fixes in descheduler 0.34.0-r1

Package descheduler version 0.34.0-r1 fixes 1 vulnerabilities: CVE-2025-68121...

CLEANSTART-2026-YO80035 Security fixes in descheduler 0.34.0-r2

Package descheduler version 0.34.0-r2 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, CVE-2026-27139, CVE-2026-24051...

CLEANSTART-2026-CW51683 Security fixes in descheduler 0.35.1-r1

Package descheduler version 0.35.1-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-VC59784 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.34.0-r0, 0.34.0-r1, 0.34.0-r2

Multiple security vulnerabilities affect the descheduler package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HM14899 url

Multiple security vulnerabilities affect the descheduler package. url. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: direnv, x509-certificate-exporter, docker-credential-gcr, fscrypt, witness, spire-controller-manager, snyk-cli, ytt, kube-state-metrics, grafana-agent-operator, sftpgo-plugin-auth, hubble, stakater-reloader, kubeflow, vale, secrets-store-csi-driver-provider-aws,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, crossplane-provider-aws-memorydb, jitsucom-bulker, flux-kustomize-controller, kubo, spicedb, witness, dapr, goreleaser, octo-sts, op-geth, snyk-cli, gcp-compute-persistent-disk-csi-driver, zarf, kube-state-metrics, k9s, cert-manager-istio-csr,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: k6-operator-fips, crossplane-provider-azure-web, cloud-provider-vsphere, apisix-ingress-controller, nrdot-collector-k8s-fips, flyte, kube-arangodb, zarf-fips, crossplane-provider-aws-secretsmanager-fips, jaeger, addon-resizer-fips, google-cloud-otel-ops-collector,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: k6-operator-fips, crossplane-provider-azure-web, cloud-provider-vsphere, apisix-ingress-controller, nrdot-collector-k8s-fips, flyte, kube-arangodb, zarf-fips, crossplane-provider-aws-secretsmanager-fips, jaeger, addon-resizer-fips, google-cloud-otel-ops-collector,...

CLEANSTART-2026-FJ01373 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.34.0-r0, 0.34.0-r1, 0.34.0-r2

Multiple security vulnerabilities affect the descheduler package. These issues are resolved in later releases. See references for individual vulnerability details...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9 The Kube Descheduler Operator for Red Hat OpenShift is an optional operator that deploys the descheduler, which is responsible for evicting pods based on certain strategies. Security Fixes: golang: net: malformed DNS message can cau...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Important: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update

Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9 An update for kube-descheduler-operator-bundle-container, descheduler-container and kube-descheduler-operator-container is now available for KDO-5.0-RHEL-9. Red Hat Product Security has rated this update as having a security impact ...