CLEANSTART-2026-MC29038 Security fix for GHSA-hrxh-6v49-42gf applied in: temporal-server 1.30.8-r1, grafana-fips 13.1.0-r1, temporal-server-fips 1.31.4-r1, istio-pilot-discovery 1.29.8-r1, istio-pilot-discovery 1.30.1-r1, openbao 2.6.1-r0, external-dns 0.20.0-r3, kube-state-metrics 2.20.0-r4

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KN30068 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the external-dns package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-LB27311 On Unix platforms, when listing the contents of a directory using File

Security vulnerability affects the external-dns package. On Unix platforms, when listing the contents of a directory using File...

CLEANSTART-2026-LL10619 On Linux, if the target of Root

Security vulnerability affects the external-dns package. On Linux, if the target of Root...

CLEANSTART-2026-TC68391 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the external-dns package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

CLEANSTART-2026-TZ31810 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used

Security vulnerability affects the external-dns package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...

PT-2026-122833

Security vulnerability affects the external-dns package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: telegraf, kyverno, kube-conformance, spire-server, kubernetes, cosign-fips, commercial-expanso-edge, qemu-guesthelper, commercial-gitlab-workhorse-ee, nvidia-nsight-compute-13.4, commercial-gitlab-rails-ee, reports-server, opentelemetry-collector-k8s, tigera-operator...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: argo-workflows, continuity, grafana-alloy, spire-server, step, grafana, aactl, flux-source-controller, chartmuseum, ingress-nginx-controller, gitness, rancher-agent, grafana-pyroscope, k6, karpenter, kyverno-policy-reporter, kube-arangodb, flux, atlantis, juicefs,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: argo-workflows, continuity, grafana-alloy, spire-server, step, grafana, aactl, flux-source-controller, chartmuseum, ingress-nginx-controller, gitness, rancher-agent, grafana-pyroscope, k6, karpenter, kyverno-policy-reporter, kube-arangodb, flux, atlantis, juicefs,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, fleet-server-fips, rabbitmq-cluster-operator-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner, dragonfly-operator-fips, headlamp,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: gotenberg, amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, rabbitmq-cluster-operator-fips, prometheus-statsd-exporter-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: gotenberg, amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, rabbitmq-cluster-operator-fips, prometheus-statsd-exporter-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: gotenberg, amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, rabbitmq-cluster-operator-fips, prometheus-statsd-exporter-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: gotenberg, amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, rabbitmq-cluster-operator-fips, prometheus-statsd-exporter-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: gotenberg, amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, rabbitmq-cluster-operator-fips, prometheus-statsd-exporter-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: mariadb-operator, step, cluster-api, velero-plugin-for-microsoft-azure, addon-resizer, gomplate, actions-runner-controller, crossplane-provider-aws-eks, rancher-fleet, opentelemetry-collector, kpt, helm-push, dex, k8ssandra-client, yunikorn-k8shim, contour,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: mariadb-operator, step, cluster-api, velero-plugin-for-microsoft-azure, addon-resizer, gomplate, actions-runner-controller, crossplane-provider-aws-eks, rancher-fleet, opentelemetry-collector, kpt, helm-push, dex, k8ssandra-client, yunikorn-k8shim, contour,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: mariadb-operator, step, cluster-api, velero-plugin-for-microsoft-azure, addon-resizer, gomplate, actions-runner-controller, crossplane-provider-aws-eks, rancher-fleet, opentelemetry-collector, kpt, helm-push, dex, k8ssandra-client, yunikorn-k8shim, contour,...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: mariadb-operator, step, cluster-api, velero-plugin-for-microsoft-azure, addon-resizer, gomplate, actions-runner-controller, crossplane-provider-aws-eks, rancher-fleet, opentelemetry-collector, kpt, helm-push, dex, k8ssandra-client, yunikorn-k8shim, contour,...