GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, node-feature-discovery, cloud-provider-azure, kots, cilium, opentelemetry-operator, gitlab-kas, kube-state-metrics, cluster-api-gcp-controller, spicedb, cluster-api-ipam-provider-in-cluster, crossplane, metallb, tekton-pipelines, tetrago...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, newrelic-nri-statsd, terraform-provider-grafana, crossplane-provider-aws-sqs, litefs, argo-cd, redka, grafana-operator, local-path-provisioner, slsa-verifier, nfs-subdir-external-provisioner, crossplane-provider-aws-kms, cloud-provider-aws,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ferretdb, newrelic-nri-statsd, kubernetes-dashboard-metrics-scraper, nginx-prometheus-exporter, litefs, ytt, boring-registry, crossplane-provider-sql, kubernetes-dashboard, pvc-autoresizer, redka, grafana-operator, restic, local-path-provisioner, kubelet-csr-approver...

CLEANSTART-2026-CP70338 Security fixes in descheduler 0.34.0-r1

Package descheduler version 0.34.0-r1 fixes 1 vulnerabilities: CVE-2025-68121...

CLEANSTART-2026-YO80035 Security fixes in descheduler 0.34.0-r2

Package descheduler version 0.34.0-r2 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, CVE-2026-27139, CVE-2026-24051...

CLEANSTART-2026-CW51683 Security fixes in descheduler 0.35.1-r1

Package descheduler version 0.35.1-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-VC59784 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.34.0-r0, 0.34.0-r1, 0.34.0-r2

Multiple security vulnerabilities affect the descheduler package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HM14899 url

Multiple security vulnerabilities affect the descheduler package. url. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nats, slsa-verifier, nfs-subdir-external-provisioner, aactl, polaris, db-operator, kube-fluentd-operator, aws-s3-controller, gitaly, harbor-cli, telegraf, caddy, certificate-transparency, jitsucom-bulker, terraform-provider-azuread, prometheus, rook,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, node-feature-discovery, cloud-provider-azure, syft, gcp-compute-persistent-disk-csi-driver, ferretdb, spicedb, crossplane-provider-aws-sqs, terraform-provider-grafana, wolfictl, boring-registry, crossplane-provider-sql, fluent-operator, argo-c...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, kubernetes-csi-driver-hostpath, opentofu-fips, cert-manager-istio-csr-fips, flux-kustomize-controller-fips, crossplane-provider-azure-solutions, cass-operator, step-issuer, crossplane-provider-aws-cloudfront-fips,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, kubernetes-csi-driver-hostpath, opentofu-fips, cert-manager-istio-csr-fips, flux-kustomize-controller-fips, crossplane-provider-azure-solutions, cass-operator, step-issuer, crossplane-provider-aws-cloudfront-fips,...

CLEANSTART-2026-FJ01373 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.34.0-r0, 0.34.0-r1, 0.34.0-r2

Multiple security vulnerabilities affect the descheduler package. These issues are resolved in later releases. See references for individual vulnerability details...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9 The Kube Descheduler Operator for Red Hat OpenShift is an optional operator that deploys the descheduler, which is responsible for evicting pods based on certain strategies. Security Fixes: golang: net: malformed DNS message can cau...

Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9

Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Important: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update

Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9 An update for kube-descheduler-operator-bundle-container, descheduler-container and kube-descheduler-operator-container is now available for KDO-5.0-RHEL-9. Red Hat Product Security has rated this update as having a security impact ...