CLEANSTART-2026-MC29038 Security fix for GHSA-hrxh-6v49-42gf applied in: temporal-server 1.30.8-r1, grafana-fips 13.1.0-r1, temporal-server-fips 1.31.4-r1, istio-pilot-discovery 1.29.8-r1, istio-pilot-discovery 1.30.1-r1, openbao 2.6.1-r0, external-dns 0.20.0-r3, kube-state-metrics 2.20.0-r4

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KN30068 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the external-dns package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-LB27311 On Unix platforms, when listing the contents of a directory using File

Security vulnerability affects the external-dns package. On Unix platforms, when listing the contents of a directory using File...

CLEANSTART-2026-TC68391 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the external-dns package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

CLEANSTART-2026-LL10619 On Linux, if the target of Root

Security vulnerability affects the external-dns package. On Linux, if the target of Root...

CLEANSTART-2026-TZ31810 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used

Security vulnerability affects the external-dns package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, tigera-operator, commercial-spilo-fips, falco-no-driver, commercial-grafana, terraform, commercial-nginx-ingress, frankenphp-8.3, zitadel, frankenphp-8.4, cosign-fips, opentelemetry-collector-k8s, telegraf, loki, reports-server,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: rancher-agent, atlantis, aactl, grafana-alloy, loki, argo-workflows, k8s-device-plugin, karpenter, flux, opencost, kube-arangodb, hubble-ui, spire-server, kyverno-policy-reporter-ui, step, rancher, headlamp, grafana, kubernetes, temporal-ui-server, yunikorn-web, k6,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: rancher-agent, atlantis, aactl, grafana-alloy, loki, argo-workflows, k8s-device-plugin, karpenter, flux, opencost, kube-arangodb, hubble-ui, spire-server, kyverno-policy-reporter-ui, step, rancher, headlamp, grafana, kubernetes, temporal-ui-server, yunikorn-web, k6,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: chainctl-fips, mig-parted, crossplane-provider-aws-guardduty, crossplane-fips, crossplane-provider-aws-docdb-fips, milvus, crossplane-provider-aws-appintegrations, terraform-provider-kubernetes-fips, argo-workflows, crossplane-provider-aws-glacier,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: chainctl-fips, mig-parted, crossplane-function-environment-configs-fips, crossplane-provider-aws-guardduty, crossplane-fips, crossplane-provider-aws-docdb-fips, milvus, crossplane-provider-aws-appintegrations, terraform-provider-kubernetes-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: chainctl-fips, mig-parted, crossplane-function-environment-configs-fips, crossplane-provider-aws-guardduty, crossplane-fips, crossplane-provider-aws-docdb-fips, milvus, crossplane-provider-aws-appintegrations, terraform-provider-kubernetes-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: chainctl-fips, mig-parted, crossplane-function-environment-configs-fips, crossplane-provider-aws-guardduty, crossplane-fips, crossplane-provider-aws-docdb-fips, milvus, crossplane-provider-aws-appintegrations, terraform-provider-kubernetes-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: chainctl-fips, mig-parted, crossplane-function-environment-configs-fips, crossplane-provider-aws-guardduty, crossplane-fips, crossplane-provider-aws-docdb-fips, milvus, crossplane-provider-aws-appintegrations, terraform-provider-kubernetes-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: chainctl-fips, mig-parted, crossplane-function-environment-configs-fips, crossplane-provider-aws-guardduty, crossplane-fips, crossplane-provider-aws-docdb-fips, milvus, crossplane-provider-aws-appintegrations, terraform-provider-kubernetes-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: coredns, tekton-chains, kube-logging-operator-custom-runner, trivy-operator, crossplane-provider-aws-kinesis, argo-workflows, cri-tools, clickhouse-operator, http-echo, secrets-store-csi-driver-provider-azure, metrics-agent, gh, kubernetes-dashboard-metrics-scraper,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: coredns, tekton-chains, kube-logging-operator-custom-runner, trivy-operator, crossplane-provider-aws-kinesis, argo-workflows, pdfcpu, cri-tools, clickhouse-operator, http-echo, secrets-store-csi-driver-provider-azure, metrics-agent, gh,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: coredns, tekton-chains, kube-logging-operator-custom-runner, trivy-operator, crossplane-provider-aws-kinesis, argo-workflows, pdfcpu, cri-tools, clickhouse-operator, http-echo, secrets-store-csi-driver-provider-azure, metrics-agent, gh,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: tekton-chains, trivy-operator, crossplane-provider-aws-kinesis, argo-workflows, pdfcpu, clickhouse-operator, secrets-store-csi-driver-provider-azure, metrics-agent, kubernetes-dashboard-metrics-scraper, spicedb, vcluster, flannel, kyverno-policy-reporter, mailpit,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: coredns, tekton-chains, kube-logging-operator-custom-runner, trivy-operator, crossplane-provider-aws-kinesis, argo-workflows, pdfcpu, cri-tools, clickhouse-operator, http-echo, secrets-store-csi-driver-provider-azure, metrics-agent, gh,...