CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0

CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, amazon-k8s-cni-fips, scorecard, knative-serving, age, redka, aws-iam-authenticator, mc-fips, speedtest-go, kafka-proxy-fips, consul, prometheus-statsd-exporter, protoc-gen-go-grpc, kustomize-fips, capslock,...

CLEANSTART-2026-IG79399 Security fixes in kubernetes-csi-node-driver-registrar 2.13.0-r1

Package kubernetes-csi-node-driver-registrar version 2.13.0-r1 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-YT96362 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.16.0-r3

Package kubernetes-csi-node-driver-registrar-fips version 2.16.0-r3 fixes 13 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-29181, CVE-2026-39820, CVE-2026-42499, CVE-2026-39836...

CLEANSTART-2026-TI99116 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.15.0-r5

Package kubernetes-csi-node-driver-registrar-fips version 2.15.0-r5 fixes 2 vulnerabilities: CVE-2026-25681, CVE-2026-25680...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, delve, knative-serving, aws-sigv4-proxy, temporal-ui-server, kine, cerbos, fluxcd-kustomize-mutating-webhook, yunikorn-k8shim, cluster-proportional-autoscaler, github-mcp-server, git-sync, snyk-cli, git-lfs, kubernetes-csi-driver-hostpath,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter-fips, cluster-api, k8sgpt-operator, gcp-compute-persistent-disk-csi-driver-fips, kube-logging-operator-custom-runner-fips, knative-serving, mongodb-k8s-operator-version-upgrade-post-start-hook, vault-benchmark, memcached-exporter-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cilium, knative-serving, kyverno-fips, sftpgo-plugin-eventstore, undock, redka, ytt, aws-iam-authenticator, consul, aws-flb-firehose, trust-manager, gatekeeper-fips, extism, sftpgo-plugin-eventsearch, minio-operator, kots, fluxcd-kustomize-mutating-webhook,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, delve, ctop, up, wireguard-go, flannel-cni-plugin, ip-masq-agent, temporal-ui-server, flux-image-automation-controller, gitness, kine, oras, nri-memcached, controller-gen, lazygit, capslock, grafana-operator, gcsfuse,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, ctop, up, crossplane-provider-aws-kms, temporal-ui-server, ip-masq-agent, kubeflow, flux-image-automation-controller, gitness, kine, falcoctl, capslock, crossplane-provider-aws-cloudformation, crossplane-provider-aws-eks, grafana-operator,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, scorecard, prometheus-blackbox-exporter, dynamic-localpv-provisioner-fips, kiam, plutono-fips, kubernetes-csi-livenessprobe, bank-vaults-fips, kubeflow, conftest-fips, kubescape, buildkitd, slsa-verifier, cortex, vault-csi-provider,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: scorecard, k3d, slsa-verifier, up, spark-operator, buildkitd, kubeflow, cortex, kubescape, terraform-provider-sendgrid, src, kubevela, aactl, dgraph...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, wireguard-go, ip-masq-agent, kubeflow, gitness, skaffold, atlantis, git-lfs, gke-gcloud-auth-plugin, nodetaint, aactl, helm, terraform-provider-aws, kubernetes-csi-livenessprobe, dynamic-localpv-provisioner, terraform-provider-azurerm,...