CLEANSTART-2026-LC49486 Security fix for GHSA-j5w8-q4qc-rx2x applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1, cloud-provider-aws 1.34.1-r1

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AR39396 Security fix for GHSA-f6x5-jh6r-wrfv applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV50859 Security fix for GHSA-p77j-4mvh-x3m3 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OX52172 Security fix for GHSA-mh2q-q3fh-2475 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EY57242 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-QL10579 Security fix for GHSA-hfvc-g4fc-pqhx applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-84303 vulnerabilities

Vulnerabilities for packages: opentofu, cloudflared, kserve, k8sgpt, knative-serving, istio, kubernetes-csi-external-resizer, grafana-mimir, spicedb-operator, k8ssandra-client, kubeflow-pipelines, datadog-agent, lvm-driver, docker, kubescape-operator, amazon-cloudwatch-agent, argo-cd, helm,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubo, dask-gateway, apko, grafana-pyroscope, grafana-mimir, crossplane-provider-aws-sns, trufflehog, kubernetes-dashboard-metrics-scraper, restic, custom-pod-autoscaler, govulncheck, crossplane-provider-aws-ec2, gitaly, sftpgo-plugin-pubsu...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, volcano-fips, redis-operator, kubectx, kuma, kyverno-policy-reporter-plugins-trivy, neuvector-scanner-fips, influxd, cloudnative-pg, knative-serving, kubernetes-csi-node-driver-registrar-fips, sftpgo-plugin-eventstore,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, cloudflared, cluster-api-gcp-controller, kubo, kube-fluentd-operator, dask-gateway, redka, crossplane-provider-aws-lambda, azure-service-operator, crossplane-provider-aws-sns, libnvidia-container, chartmuseum, pulumi-language-yaml,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, cloudflared, cluster-api-gcp-controller, kubo, kube-fluentd-operator, dask-gateway, redka, crossplane-provider-aws-lambda, azure-service-operator, crossplane-provider-aws-sns, libnvidia-container, chartmuseum, pulumi-language-yaml,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kubo, dask-gateway, cluster-api-helm-controller, grafana-mimir, crossplane-provider-aws-sns, kubernetes-dashboard-metrics-scraper, restic, custom-pod-autoscaler, govulncheck, amass, crossplane-provider-aws-ec2, gitaly, sftpgo-plugin-pubsub, terraform-mcp-server, yace...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kubo, dask-gateway, cluster-api-helm-controller, grafana-mimir, crossplane-provider-aws-sns, kubernetes-dashboard-metrics-scraper, restic, custom-pod-autoscaler, govulncheck, amass, crossplane-provider-aws-ec2, sftpgo-plugin-pubsub, terraform-mcp-server, yace,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, metrics-server-fips, redis-operator, gobump, kubectx, kuma, kyverno-policy-reporter-plugins-trivy, crossplane-provider-aws-firehose, influxd, sftpgo-plugin-eventstore, knative-serving,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: gobump, nri-apache, contour, kuma, k8sgpt, nri-memcached, knative-serving, gatekeeper, cluster-api, rancher-system-agent, tkn, azure-service-operator, oauth2-proxy, karpenter, nodetaint, docker-machine-driver-harvester, nuclei, grafana-pyroscope, kyverno,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: rancher-machine, knative-serving, gitsign, octo-sts, cluster-api, kubernetes-dashboard-fips, node-problem-detector-fips, bank-vaults, knative-eventing, karpenter, vexctl, vault-benchmark, kube-logging-operator-custom-runner-fips, configmap-reload-fips, git-lfs,...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: falcoctl, apko, grafana-mimir, crossplane-provider-aws-sns, trufflehog, amazon-cloudwatch-agent, kubernetes-dashboard-metrics-scraper, restic, crossplane-provider-aws-ec2, kubernetes-csi-external-provisioner, prometheus-operator, addon-resizer, kubevela, terraform,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: dask-gateway, kubernetes-dashboard-metrics-scraper, restic, govulncheck, sftpgo-plugin-pubsub, yace, prometheus-operator, kubevela, bom, terraform, sbom-scorecard, s5cmd, swagger, harbor-registry, kbld, whereabouts, gobuster, local-static-provisioner,...