CLEANSTART-2026-ZY59905 Security fixes for CVE-2025-65637, CVE-2025-68121, CVE-2026-33186, CVE-2026-33814, CVE-2026-39822, CVE-2026-39834, CVE-2026-42502, CVE-2026-42504, CVE-2026-42505, CVE-2026-42506, CVE-2026-42507, CVE-2026-46598 applied in versions: 0_git20250325-r0, 0_git20250325-r1

Multiple security vulnerabilities affect the go-discover package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, coredns, crossplane, docker-credential-gcr, grpc-health-probe, kafka-proxy, buildah, redpanda, rabbitmq-messaging-topology-operator, tetragon, docker-machine-driver-harvester, cert-manager, kubernetes-csi-external-attacher, flux,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway, argo-events, cert-manager-istio-csr, crossplane-provider-aws-sns, grype, kube-vip-cloud-provider, rancher-helm, terraform-provider-google, sealed-secrets, flux-source-controller, sftpgo, sftpgo-plugin-eventstore, apisix-ingress-controller,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: buildkitd, prometheus-pushgateway, argo-events, cert-manager-istio-csr, crossplane-provider-aws-sns, grype, kube-vip-cloud-provider, rancher-helm, terraform-provider-google, sealed-secrets, flux-source-controller, sftpgo, sftpgo-plugin-eventstore,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway, argo-events, cert-manager-istio-csr, crossplane-provider-aws-sns, grype, kube-vip-cloud-provider, rancher-helm, terraform-provider-google, sealed-secrets, flux-source-controller, sftpgo, sftpgo-plugin-eventstore, apisix-ingress-controller,...