GO-2026-5039 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, gitlab-runner, prometheus, sealed-secrets, harbor, envconsul, rancher-fleet, zarf, crossplane-provider-aws-sns, fuse-overlayfs-snapshotter, policy-controller, kube-bench, speedtest-go, traefik, trufflehog, bank-vaults, src-fingerprint, croc,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: verticadb-operator, gitlab-runner, lvm-driver, sealed-secrets, spire-server, git-lfs, crossplane-provider-aws-sns, fuse-overlayfs-snapshotter, whereabouts, grpcurl, kustomize, policy-controller, kube-bench, traefik, sftpgo-plugin-kms, bank-vaults, boring-registry,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: prometheus, cni-plugins, envconsul, ko, cerbos, kube-bench, nri-memcached, terraform, step-kms-plugin, neuvector-sigstore-interface, kind, src, cilium-cli, prometheus-operator, lazydocker, libnvidia-container, regclient, dgraph, buildkitd, cloud-provider-vsphere,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, zarf, tw, gke-gcloud-auth-plugin, minio-operator, secrets-store-csi-driver-provider-gcp, cloud-provider-aws, secrets-store-csi-driver, nri-prometheus, x509-certificate-exporter, glab, flannel, volume-modifier-for-k8s, kubernetes-dashboard-api,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tekton-chains, zarf, policy-controller, flux-image-automation-controller, bank-vaults, src-fingerprint, crossplane-provider-azure, tkn, crossplane-provider-azure-managedidentity, terraform, step-ca, k3d, neuvector-sigstore-interface, kubescape...

CLEANSTART-2026-LZ94818 Security fixes in logstash-exporter-fips 1.9.1-r1

Package logstash-exporter-fips version 1.9.1-r1 fixes 1 vulnerabilities: CVE-2025-61726...

CLEANSTART-2026-DF29491 Security fixes in falco-exporter 0.8.7-r2

Package falco-exporter version 0.8.7-r2 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-ZS75989 Security fixes in logstash-exporter-fips 1.8.4-r1

Package logstash-exporter-fips version 1.8.4-r1 fixes 1 vulnerabilities: CVE-2025-68121...

CVE-2026-68266 drm/xe: Hold a dma-buf reference for imported BOs

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttmbotypesg BO whose reservation object is the exporter's dmabuf-resv. The importer, however, only takes a dma-buf reference after a...

Malicious code in statist-browser-typed-client-mb.reliability.android.metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452d03d6ed4b82fa956dc7419066742e9c91518b786f0e164aa63e2ae55d6083 On require of the package, index.js loads loader.js which downloads a platform-specific binary from hardcoded Cloudflare Workers hosts assembled by...

SUSE SLES12 Security Update : prometheus-ha_cluster_exporter (SUSE-SU-2026:3421-1)

The remote SUSE Linux SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3421-1 advisory. This update for prometheus-haclusterexporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only...

Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2 Use proper obs time forma...

CLEANSTART-2026-WV49336 Security fixes in prom-mysqld-exporter-fips 0.18.0-r0

Package prom-mysqld-exporter-fips version 0.18.0-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-MC01423 Security fixes in prometheus-redis-exporter-fips 1.81.0-r0

Package prometheus-redis-exporter-fips version 1.81.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-KH08761 Security fixes in prometheus-redis-exporter-fips 1.78.0-r4

Package prometheus-redis-exporter-fips version 1.78.0-r4 fixes 8 vulnerabilities: CVE-2026-27140, CVE-2026-32283, CVE-2026-32280, CVE-2026-32281, CVE-2026-33810...

CLEANSTART-2026-AV37069 Security fixes in prometheus-mysqld-exporter 0.16.0-r2

Package prometheus-mysqld-exporter version 0.16.0-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-BL43584 Security fixes in prometheus-redis-exporter-fips 1.80.0-r0

Package prometheus-redis-exporter-fips version 1.80.0-r0 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-68119, CVE-2025-61728, CVE-2025-68121, CVE-2025-61731...

CLEANSTART-2026-LG92218 Security fixes in prometheus-redis-exporter-fips 1.80.2-r0

Package prometheus-redis-exporter-fips version 1.80.2-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-JU04978 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r0

Package prometheus-elasticsearch-exporter version 1.10.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-KL10922 Security fixes in druid-exporter-fips 0.8-r3

Package druid-exporter-fips version 0.8-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...