GO-2026-6094 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, calico, emissary, cert-manager-webhook-pdns, rke2-cloud-provider, cass-operator, metallb, spicedb, kube-rbac-proxy, telegraf, rancher-agent, tkn, cluster-autoscaler, tekton-chains, metrics-server, datadog-operator, cluster-api-azure-controller,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: steampipe, pinact, crossplane-provider-aws-rds, cass-operator, azcopy, grafana-operator, runc, src, terraform-provider-acme, cluster-autoscaler, knative-serving, crossplane-provider-azure-sql, aws-flb-cloudwatch, tekton-chains, stakater-reloader, temporal-server,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: steampipe, terraform-provider-time, ipfs-cluster, whereabouts, crossplane-provider-aws-rds, cass-operator, azcopy, cert-manager-cmctl, doppler-kubernetes-operator, grafana-operator, langfuse, runc, src, minio-operator, crossplane-provider-azure-sql, aws-flb-cloudwatc...

CLEANSTART-2026-CW51683 Security fixes in descheduler 0.35.1-r1

Package descheduler version 0.35.1-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-YO80035 Security fixes in descheduler 0.34.0-r2

Package descheduler version 0.34.0-r2 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, CVE-2026-27139, CVE-2026-24051...

CLEANSTART-2026-CP70338 Security fixes in descheduler 0.34.0-r1

Package descheduler version 0.34.0-r1 fixes 1 vulnerabilities: CVE-2025-68121...

CLEANSTART-2026-VC59784 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.34.0-r0, 0.34.0-r1, 0.34.0-r2

Multiple security vulnerabilities affect the descheduler package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HM14899 url

Multiple security vulnerabilities affect the descheduler package. url. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, runc, minio-operator, crossplane-provider-azure-sql, helm, grpcurl, argo-workflows, etcd, kubernetes-replicator, kuberlr, nri-apache, caddy, direnv, cri-tools, aactl, opensearch-k8s-operator, metrics-agent, jitsucom-bulker, git-sync,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: steampipe, distribution, crossplane-provider-aws-rds, cass-operator, azcopy, src, melange, cluster-autoscaler, knative-serving, crossplane-provider-azure-sql, tekton-chains, temporal-server, grafana-image-renderer, juicefs, docker-machine-driver-harvester,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-emr, cass-operator, azcopy, crossplane-provider-terraform-fips, azuredisk-csi-fips, crossplane-provider-aws-redshiftserverless, crossplane-provider-aws-bedrockagent, crossplane-provider-aws-rds-fips, kcp, crossplane-provider-azure-sql, cadence...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-emr, cass-operator, azcopy, crossplane-provider-terraform-fips, azuredisk-csi-fips, crossplane-provider-aws-redshiftserverless, crossplane-provider-aws-bedrockagent, crossplane-provider-aws-rds-fips, kcp, crossplane-provider-azure-sql, cadence...

CLEANSTART-2026-FJ01373 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.34.0-r0, 0.34.0-r1, 0.34.0-r2

Multiple security vulnerabilities affect the descheduler package. These issues are resolved in later releases. See references for individual vulnerability details...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9 The Kube Descheduler Operator for Red Hat OpenShift is an optional operator that deploys the descheduler, which is responsible for evicting pods based on certain strategies. Security Fixes: golang: net: malformed DNS message can cau...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Important: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update

Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9 An update for kube-descheduler-operator-bundle-container, descheduler-container and kube-descheduler-operator-container is now available for KDO-5.0-RHEL-9. Red Hat Product Security has rated this update as having a security impact ...