CLEANSTART-2026-JU04978 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r0

Package prometheus-elasticsearch-exporter version 1.10.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-JC40207 Security fixes in prometheus-elasticsearch-exporter-fips 1.10.0-r0

Package prometheus-elasticsearch-exporter-fips version 1.10.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: drone-fips, flux-image-automation-controller, trivy-operator-fips, kubernetes, rancher, istio, flux, gatekeeper, opentelemetry-collector, telegraf, trivy, kaf, omnictl-multiarch, gitea, gatekeeper-fips, drone, flux-source-controller, tekton-pipelines, skaffold-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: longhorn-cli, trivy-operator-fips, victoriametrics-operator, kubernetes-event-exporter, filebrowser, oras-fips, zabbix-agent2, rancher-webhook-fips, wuzz, nri-nginx-fips, cert-manager-cmctl, chaos-mesh-fips, crossplane-provider-aws-sns-fips, logstash-exporter,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, metrics-server, oras-fips, rancher-webhook-fips, cert-manager-cmctl, logstash-exporter, policy-controller, prometheus-postgres-exporter-fips, go-licenses, ini-file,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, metrics-server, oras-fips, rancher-webhook-fips, wuzz, cert-manager-cmctl, logstash-exporter, policy-controller, prometheus-postgres-exporter-fips, go-licenses, ini-file,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, metrics-server, oras-fips, rancher-webhook-fips, cert-manager-cmctl, logstash-exporter, policy-controller, prometheus-postgres-exporter-fips, go-licenses, ini-file,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, metrics-server, oras-fips, rancher-webhook-fips, cert-manager-cmctl, logstash-exporter, policy-controller, prometheus-postgres-exporter-fips, go-licenses, ini-file,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, metrics-server, oras-fips, rancher-webhook-fips, cert-manager-cmctl, logstash-exporter, policy-controller, prometheus-postgres-exporter-fips, go-licenses, ini-file,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, metrics-server, oras-fips, rancher-webhook-fips, cert-manager-cmctl, logstash-exporter, policy-controller, prometheus-postgres-exporter-fips, go-licenses, ini-file,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: temporal, kubernetes-csi-external-provisioner, cortex, gitness, aws-flb-kinesis, ferretdb, kubernetes-event-exporter, kwok, helm-operator, kaniko, ctop, guac, kubeflow, crossplane-provider-azure, sonobuoy, crossplane-provider-aws-cloudfront, step-ca, dagger, k3d,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, bom, metrics-server, prometheus-node-exporter-fips, flux, prometheus-postgres-exporter-fips, pulumi-language-java, node-problem-detector, kaf, kubernetes-csi-external-provisioner, crossplane-provider-aws, kube-oidc-proxy,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, git-lfs, gitness, gobuster, kubeflow, crossplane-provider-azure, k3d, kube-logging-operator, ollama, pulumi, dgraph, secrets-store-csi-driver-provider-gcp, kubernetes-dashboard-metrics-scraper, secrets-store-csi-driver, atlantis,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: cortex, git-lfs, gitness, gobuster, kubeflow, k3d, ollama, pulumi, dgraph, secrets-store-csi-driver-provider-gcp, secrets-store-csi-driver, atlantis, gke-gcloud-auth-plugin, buildkitd, skaffold, newrelic-infrastructure-agent, terraform-provider-azurerm, hey, nats,...