CLEANSTART-2026-LC49486 Security fix for GHSA-j5w8-q4qc-rx2x applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1, cloud-provider-aws 1.34.1-r1

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AR39396 Security fix for GHSA-f6x5-jh6r-wrfv applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV50859 Security fix for GHSA-p77j-4mvh-x3m3 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OX52172 Security fix for GHSA-mh2q-q3fh-2475 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QL10579 Security fix for GHSA-hfvc-g4fc-pqhx applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EY57242 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

PT-2026-117182

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-117179

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-117174

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-117172

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-84303 vulnerabilities

Vulnerabilities for packages: helm, cerbos, secrets-store-csi-driver-provider-azure, aws-otel-collector, kubescape-operator, smarter-device-manager, k8ssandra-client, kserve, cloud-provider-vsphere, kuma, kubernetes-csi-external-provisioner, flyte, hydra, argo-cd, gitlab-pages, kyverno,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: helm-set-status, crossplane-provider-aws-ec2, trino, authservice, kbld, restic, xeol, croc, nri-apache, crossplane-provider-aws-kms, pulumi-kubernetes-operator, argo-workflows, haproxy-ingress, cert-manager-cmctl, k8sgpt-operator, knative-eventing, libnvidia-containe...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nri-rabbitmq, rancher, kubescape-server-fips, gitea-fips, gatekeeper-fips, podman, maru, monstache, istio, hugo-fips, slsa-verifier, qemu-guesthelper, vale, quic-go-fips, argo-events-fips, tekton-chains-fips, amazon-vpc-cni-plugins, cert-manager-fips, grafana-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, trino, authservice, restic, xeol, croc, swagger, sqlexporter, nri-apache, crossplane-provider-aws-kms, pulumi-kubernetes-operator, argo-workflows, cert-manager-cmctl, k8sgpt-operator, libnvidia-container, azure-ipam, conftest,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, trino, cni-plugins, authservice, minify, newrelic-prometheus-configurator, restic, xeol, croc, swagger, sqlexporter, licenseclassifier, nri-apache, crossplane-provider-aws-kms, pulumi-kubernetes-operator, argo-workflows, cert-manager-cmct...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: rancher, gitea-fips, gatekeeper-fips, podman, maru, monstache, istio, qemu-guesthelper, falcosidekick, quic-go-fips, argo-events-fips, amazon-vpc-cni-plugins, licenseclassifier, grafana-fips, kafka-proxy-fips, wait-for-port-fips, falco-no-driver, gofumpt,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: nri-rabbitmq, rancher, aws-eks-pod-identity-agent, ini-file, monstache, opentofu, k8sgpt, kube-logging-operator, azuredisk-csi, rabbitmq-messaging-topology-operator, rancher-system-agent, kubecolor, step-kms-plugin, kubernetes-dashboard, timescaledb-tune, chartmuseum...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, bank-vaults, rancher-machine, nvidia-nsight-compute-13.2, karpenter, karma-fips, lvm-driver, custom-pod-autoscaler-operator, kubeflow-katib, azurefile-csi-fips, local-path-provisioner, modelmesh-runtime-adapter,...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, crossplane-provider-aws-ec2, authservice, restic, xeol, sqlexporter, crossplane-provider-aws-kms, pulumi-kubernetes-operator, argo-workflows, cert-manager-cmctl, k8sgpt-operator, zarf, grafana-rollout-operator, conftest,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: trino, cni-plugins, minify, kbld, restic, croc, swagger, sqlexporter, argo-workflows, cert-manager-cmctl, grafana-rollout-operator, gosu, wireguard-go, go-bindata, conftest, nri-couchbase, kind, dagdotdev, docker-credential-ecr-login, sftpgo-plugin-eventstore,...