CLEANSTART-2026-LU57861 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186, CVE-2026-33814, CVE-2026-41246, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-x4mj-7f9g-29h4 applied in versions: 0.18.0-r0, 0.18.0-r1, 0.21.0-r0

Multiple security vulnerabilities affect the external-dns package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-G3XR-5W5J-W4Q4 vulnerabilities

Vulnerabilities for packages: external-dns, external-dns-fips...

CVE-2026-50149 vulnerabilities

Vulnerabilities for packages: external-dns, external-dns-fips...

GHSA-G3XR-5W5J-W4Q4 vulnerabilities

Vulnerabilities for packages: external-dns...

CVE-2026-50149 vulnerabilities

Vulnerabilities for packages: external-dns...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, zarf-fips, cert-manager, chisel-fips, elastic-agent-fips, prometheus-mongodb-exporter, harbor, frankenphp-8.2, cloudbeat-fips, kubernetes-dashboard, istio, spire-server, chisel, gitlab-kas, frankenphp-8.3, drone-fips, drone, calico-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: slsa-verifier, opentofu, pulumi, buildah, splunk-otel-collector, terragrunt, kine, flux, kargo, vault-benchmark, buildkitd, kyverno, step-issuer, external-dns, gitlab-kas, gh, gitlab-runner, go-discover, trivy-operator, kubernetes-dashboard, atlantis, nfpm,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, gitea, loki, prometheus-operator, telegraf, helm, k9s, kaf, minio, fscrypt, osv-scanner, snyk-cli, kine, skaffold, flux, spire-server, zarf, argocd-image-updater, mattermost, aactl, cloud-provider-aws, nerdctl, kyverno, external-dns,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: loki, prometheus-operator, telegraf, helm, kaf, minio, podman, fscrypt, buildah, snyk-cli, kine, flux, spire-server, mattermost, aactl, cloud-provider-aws, nerdctl, kyverno, external-dns, zot, gitlab-kas, containerd, kubernetes, cilium-cli, opentelemetry-collector,...

GHSA-X4MJ-7F9G-29H4 vulnerabilities

Vulnerabilities for packages: k8sgateway, k8sgateway-fips, external-dns, external-dns-fips...

GHSA-X4MJ-7F9G-29H4 vulnerabilities

Vulnerabilities for packages: k8sgateway, external-dns...

CVE-2026-41246 vulnerabilities

Vulnerabilities for packages: k8sgateway, external-dns...

CVE-2026-41246 vulnerabilities

Vulnerabilities for packages: k8sgateway, k8sgateway-fips, external-dns, external-dns-fips...

CLEANSTART-2026-HA09227 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.18.0-r0, 0.18.0-r1

Multiple security vulnerabilities affect the external-dns package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: scanner-test-golang-vulnerability-fixed, longhorn-cli, cert-manager, crossplane-provider-aws-lambda-fips, verticadb-operator-fips, argo-events, aws-nuke, configmap-reload-fips, terraform-provider-azurerm-fips, volcano-fips, wuzz, kubernetes-csi-node-driver-registrar,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: cert-manager, crossplane-provider-aws-lambda-fips, verticadb-operator-fips, argo-events, terraform-provider-azurerm-fips, kubernetes-csi-node-driver-registrar, kubernetes-dashboard, istio, cilium-envoy-fips, kubernetes-csi-livenessprobe, terraform-provider-aws-fips,...

CLEANSTART-2026-ER42900 ParseAddress function constructs domain-literal address components through repeated string concatenation

Multiple security vulnerabilities affect the external-dns-fips package. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...

CVE-2025-13147 External Service Interaction (DNS)

Server-Side Request Forgery SSRF vulnerability in Progress MOVEit Transfer.This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4...

FreeBSD : zeek -- information leak vulnerability (50fd6a75-0587-4987-bef2-bb933cd78ea1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 50fd6a75-0587-4987-bef2-bb933cd78ea1 advisory. Tim Wojtulewicz of Corelight reports: The KRB analyzer can leak information about hosts in analyzed...

SUSE CVE-2025-47282

Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privileges for a Gardener project or a user...