CLEANSTART-2026-LU57861 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186, CVE-2026-33814, CVE-2026-41246, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-x4mj-7f9g-29h4 applied in versions: 0.18.0-r0, 0.18.0-r1, 0.21.0-r0

Multiple security vulnerabilities affect the external-dns package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-50149 vulnerabilities

Vulnerabilities for packages: external-dns, external-dns-fips...

GHSA-G3XR-5W5J-W4Q4 vulnerabilities

Vulnerabilities for packages: external-dns, external-dns-fips...

GHSA-G3XR-5W5J-W4Q4 vulnerabilities

Vulnerabilities for packages: external-dns...

CVE-2026-50149 vulnerabilities

Vulnerabilities for packages: external-dns...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, frankenphp-8.4, helm, tigera-operator, spire-server, kubevela-fips, prometheus, coder, argo-cd-fips, gitlab-kas, istio, external-dns, kubescape-server-fips, traefik, telegraf, gitea-fips, kube-arangodb-fips, commercial-expanso-edge,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: step-kms-plugin, slsa-verifier, tekton-chains, fulcio, osv-scanner, kaf, kyverno, flux-image-automation-controller, pulumi-language-java, ksops, kubescape, kubernetes, podman, neuvector-sigstore-interface, aactl, argo-cd, buildkitd, chezmoi, tflint, atlantis,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kine, cilium-cli, prometheus-operator, rancher, kots, knative-serving, kubernetes-dashboard, osv-scanner, kaf, kyverno, loki, cilium, flux-image-automation-controller, flux-source-controller, kubescape, kubernetes, nerdctl, zarf, flux, skaffold, spire-server, aactl,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kine, cilium-cli, prometheus-operator, rancher, kots, knative-serving, kubernetes-dashboard, kaf, kyverno, loki, cilium, kubernetes, nerdctl, flux, podman, spire-server, aactl, istio, prometheus, helm, k3s, mattermost, cloud-provider-aws, external-dns, buildah,...

GHSA-X4MJ-7F9G-29H4 vulnerabilities

Vulnerabilities for packages: k8sgateway, k8sgateway-fips, external-dns, external-dns-fips...

GHSA-X4MJ-7F9G-29H4 vulnerabilities

Vulnerabilities for packages: k8sgateway, external-dns...

CVE-2026-41246 vulnerabilities

Vulnerabilities for packages: k8sgateway, external-dns...

CVE-2026-41246 vulnerabilities

Vulnerabilities for packages: k8sgateway, k8sgateway-fips, external-dns, external-dns-fips...

CLEANSTART-2026-HA09227 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.18.0-r0, 0.18.0-r1

Multiple security vulnerabilities affect the external-dns package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, cinder-csi-plugin-fips, chartmuseum-fips, helm, yunikorn-k8shim-fips, crossplane-provider-aws-cognitoidentity, k8ssandra-operator-fips, sftpgo, databricks-cli-fips, kubernetes-csi-driver-nfs, kubernetes-dashboard-api, oauth2-proxy-fips, prometheu...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, nri-mongodb, aws-nuke, cinder-csi-plugin-fips, chartmuseum-fips, helm, rabbitmq-cluster-operator, yunikorn-k8shim-fips, crossplane-provider-aws-cognitoidentity, k8ssandra-operator-fips, sftpgo, percona-server-mongodb-operator, nri-kubernetes-fips...

CLEANSTART-2026-ER42900 ParseAddress function constructs domain-literal address components through repeated string concatenation

Multiple security vulnerabilities affect the external-dns-fips package. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...

CVE-2025-13147 External Service Interaction (DNS)

Server-Side Request Forgery SSRF vulnerability in Progress MOVEit Transfer.This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4...

FreeBSD : zeek -- information leak vulnerability (50fd6a75-0587-4987-bef2-bb933cd78ea1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 50fd6a75-0587-4987-bef2-bb933cd78ea1 advisory. Tim Wojtulewicz of Corelight reports: The KRB analyzer can leak information about hosts in analyzed...

SUSE CVE-2025-47282

Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privileges for a Gardener project or a user...