GO-2025-4188 vulnerabilities

Vulnerabilities for packages: src-fingerprint, sonobuoy, php-fpmexporter, kpt, aws-flb-firehose, aws-flb-cloudwatch, hello-world-golang, gostatsd, kube-fluentd-operator, kubeflow, neuvector-dbgen, aws-flb-kinesis, newrelic-nri-statsd, go-discover, terraform-provider-google, docker-credential-gcr,...

CLEANSTART-2026-QT21347 Security fixes in go-discover-fips 0_git20250325-r1

Package go-discover-fips version 0git20250325-r1 fixes 3 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

CLEANSTART-2026-JM58207 Security fixes in go-discover 0_git20250325-r1

Package go-discover version 0git20250325-r1 fixes 8 vulnerabilities: CVE-2026-42505, CVE-2026-39822, CVE-2026-42504, CVE-2026-42507, CVE-2026-42506...

CLEANSTART-2026-TB77865 Security fixes in go-discover-fips 0_git20250325-r0

Package go-discover-fips version 0git20250325-r0 fixes 14 vulnerabilities: CVE-2025-22871, CVE-2025-4674, CVE-2025-58187, CVE-2025-58188, CVE-2025-61723...

CLEANSTART-2026-ZY59905 Security fixes for CVE-2025-65637, CVE-2025-68121, CVE-2026-33186, CVE-2026-33814, CVE-2026-39822, CVE-2026-39834, CVE-2026-42502, CVE-2026-42504, CVE-2026-42505, CVE-2026-42506, CVE-2026-42507, CVE-2026-46598 applied in versions: 0_git20250325-r0, 0_git20250325-r1

Multiple security vulnerabilities affect the go-discover package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, boring-registry, grafana-rollout-operator, cri-tools, telegraf, terraform-docs, terraform-provider-aws, bento, volume-modifier-for-k8s, k8ssandra-client, prometheus-operator, external-dns, kubernetes-csi-driver-hostpath, envoy-gateway,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: boring-registry, wireguard-go, k8ssandra-client, helm-docs, cert-exporter, traefik, terraform-provider-azurerm, amazon-cloudwatch-agent-operator, sftpgo, crossplane-provider-aws-cloudfront, db-operator, helm-mapkubeapis, ipfs-cluster, juicefs, dex, gatus, k8sgateway,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: boring-registry, wireguard-go, k8ssandra-client, helm-docs, cert-exporter, traefik, terraform-provider-azurerm, amazon-cloudwatch-agent-operator, sftpgo, crossplane-provider-aws-cloudfront, db-operator, helm-mapkubeapis, ipfs-cluster, juicefs, dex, gatus, k8sgateway,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: boring-registry, wireguard-go, helm-docs, cert-exporter, opentelemetry-collector-contrib, traefik, amazon-cloudwatch-agent-operator, sftpgo, crossplane-provider-aws-cloudfront, db-operator, syft, helm-mapkubeapis, timescaledb-parallel-copy, tigera-operator,...