CLEANSTART-2026-MC29038 Security fix for GHSA-hrxh-6v49-42gf applied in: temporal-server 1.30.8-r1, grafana-fips 13.1.0-r1, temporal-server-fips 1.31.4-r1, istio-pilot-discovery 1.29.8-r1, istio-pilot-discovery 1.30.1-r1, openbao 2.6.1-r0, external-dns 0.20.0-r3, kube-state-metrics 2.20.0-r4

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KN30068 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the external-dns package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-LB27311 On Unix platforms, when listing the contents of a directory using File

Security vulnerability affects the external-dns package. On Unix platforms, when listing the contents of a directory using File...

CLEANSTART-2026-TC68391 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the external-dns package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

CLEANSTART-2026-LL10619 On Linux, if the target of Root

Security vulnerability affects the external-dns package. On Linux, if the target of Root...

CLEANSTART-2026-TZ31810 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used

Security vulnerability affects the external-dns package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, nemo, commercial-chainloop-cli, cosign-fips, aactl, commercial-expanso-edge, opentelemetry-collector-k8s, loki, tigera-operator, cert-manager, karpenter-fips, commercial-gitlab-workhorse-ee, commercial-nginx-ingress,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: filebrowser, cloudprober, gitness, hubble-ui, grafana, mesosphere-vsphere-csi, grafana-pyroscope, grafana-alloy, terragrunt, rclone, falco-no-driver, rancher, rancher-agent, atlantis, argo-workflows, gitlab-pages, headlamp, spire-server, argo-cd, zarf,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: filebrowser, cloudprober, gitness, hubble-ui, grafana, mesosphere-vsphere-csi, grafana-pyroscope, grafana-alloy, terragrunt, rclone, falco-no-driver, rancher, rancher-agent, atlantis, argo-workflows, gitlab-pages, headlamp, spire-server, argo-cd, zarf,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips, longhorn-share-manager,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: dapr, runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, bom, aws-s3-controller, azurefile-csi, nri-nginx, falco-exporter, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: dapr, runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, aws-s3-controller, azurefile-csi, falco-exporter, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: dapr, runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, bom, aws-s3-controller, azurefile-csi, nri-nginx, falco-exporter, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: dapr, runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, bom, aws-s3-controller, azurefile-csi, nri-nginx, falco-exporter, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, bom, aws-s3-controller, azurefile-csi, nri-nginx, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner, dynamic-localpv-provisione...