GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, external-secrets-operator, caddy, cilium, kapp-controller, emissary, helm-operator, gatekeeper, metrics-server, yunikorn-k8shim, flux-kustomize-controller, kubernetes, kubescape, calico, cass-operator, rancher, kube-metrics-adapter,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kubernetes-csi-node-driver-registrar, knative-serving, nri-elasticsearch, mattermost, rancher-fleet, crossplane-provider-aws-kinesis, octo-sts, addon-resizer, flux-image-reflector-controller, rancher, kuberay-operator, conftest,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: sonobuoy, fuse-overlayfs-snapshotter, mc, mattermost, crossplane-provider-aws-kinesis, spegel, yunikorn-k8shim, step, octo-sts, wgcf, docker-credential-ecr-login, whereabouts, timescaledb-parallel-copy, flux-image-automation-controller, rancher-telemetry,...

CLEANSTART-2026-CP70338 Security fixes in descheduler 0.34.0-r1

Package descheduler version 0.34.0-r1 fixes 1 vulnerabilities: CVE-2025-68121...

CLEANSTART-2026-YO80035 Security fixes in descheduler 0.34.0-r2

Package descheduler version 0.34.0-r2 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, CVE-2026-27139, CVE-2026-24051...

CLEANSTART-2026-CW51683 Security fixes in descheduler 0.35.1-r1

Package descheduler version 0.35.1-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-VC59784 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.34.0-r0, 0.34.0-r1, 0.34.0-r2

Multiple security vulnerabilities affect the descheduler package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HM14899 url

Multiple security vulnerabilities affect the descheduler package. url. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: yunikorn-web, mc, spegel, yunikorn-k8shim, docker-credential-ecr-login, timescaledb-parallel-copy, splunk-otel-collector, podman, sbomqs, logstash-exporter, polaris, go, prometheus-operator, kubernetes-csi-external-health-monitor, newrelic-fluent-bit-output,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: harbor-cli, task, distribution, kubernetes-csi-node-driver-registrar, knative-serving, rancher-fleet, jaeger, crossplane-provider-aws-kinesis, spegel, octo-sts, melange, addon-resizer, cadvisor, gitaly, rancher, op-geth, kuberay-operator, kube-metrics-adapter,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, metrics-server, crossplane-provider-aws-s3, aws-node-termination-handler, certificate-transparency-fips, kube-mgmt, ceph-csi-operator-fips, gomplate-fips, influxd, crossplane-provider-sql-fips, tekton-chains,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, metrics-server, crossplane-provider-aws-s3, aws-node-termination-handler, certificate-transparency-fips, kube-mgmt, ceph-csi-operator-fips, gomplate-fips, influxd, crossplane-provider-sql-fips, tekton-chains,...

CLEANSTART-2026-FJ01373 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.34.0-r0, 0.34.0-r1, 0.34.0-r2

Multiple security vulnerabilities affect the descheduler package. These issues are resolved in later releases. See references for individual vulnerability details...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9 The Kube Descheduler Operator for Red Hat OpenShift is an optional operator that deploys the descheduler, which is responsible for evicting pods based on certain strategies. Security Fixes: golang: net: malformed DNS message can cau...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Important: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update

Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9 An update for kube-descheduler-operator-bundle-container, descheduler-container and kube-descheduler-operator-container is now available for KDO-5.0-RHEL-9. Red Hat Product Security has rated this update as having a security impact ...