CLEANSTART-2026-VM42398 Kubernetes kube-apiserver in versions v1

Security vulnerability affects the gostatsd package. The Kubernetes kube-apiserver in versions v1...

CLEANSTART-2026-UP94680 Security fix for GHSA-8cfg-vx93-jvxw applied in: gostatsd 28.3.0-r0

Security vulnerability affects the gostatsd package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MN84983 Security fix for GHSA-33c5-9fx5-fvjm applied in: gostatsd 28.3.0-r0

Security vulnerability affects the gostatsd package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YP35057 In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files

Security vulnerability affects the gostatsd package. In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files...

CLEANSTART-2026-AY16638 Security fix for CVE-2020-8565 applied in: cluster-proportional-autoscaler 1.7.1-r0, gostatsd 28.3.0-r2

CVE-2020-8565 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MV16544 Security fix for CVE-2026-46597 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300066.1-r1, apko 1.2.13-r0, apko 1.2.2-r2, argo-cd 3.3.5-r1, argo-cd-fips 3.1.14-r2, argo-workflows 4.0.5-r0, authservice 1.1.5-r1, authservice 1.1.6-r1, cadvisor 0.55.1-r1, cadvisor 0.57.0-r0, cadvisor-fips 0.55.1-r0, calico 3.30.7-r2, cert-manager 1.17.4-r2, cert-manager 1.18.6-r1, cert-manager 1.20.0-r0, cert-manager 1.20.2-r0, cert-manager-webhook-pdns-fips 2.5.5-r1, cfssl 1.5.0-r1, cluster-autoscaler 1.35.2-r2, consul 2.0.1-r0, cortex 1.21.0-r2, cosign 3.0.6-r1, crossplane-provider-sql-fips 0.15.0-r3, dynatrace-operator 1.6.3-r1, elastic-beats 8.19.15-r5, elastic-beats 9.2.8-r2, elastic-beats-fips 9.2.8-r0, external-secrets-fips 0.17.0-r2, external-secrets-operator 2.5.0-r1, flux-image-automation-controller 1.2.1-r1, flux-notification-controller-fips 1.5.0-r0, forecastle 1.0.159-r1, fulcio-fips 1.7.1-r3, gostatsd 28.3.0-r2, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, haproxy-ingress 0.14.12-r1, helm 4.0.5-r2, helm-operator 1.42.2-r0, istio 1.28.5-r3, istio 1.29.2-r1, istio-fips 1.26.8-r4, istio-fips 1.27.9-r2, istio-fips 1.30.0-r1, kube-rbac-proxy 0.20.2-r2, kube-rbac-proxy 0.21.2-r0, kube-rbac-proxy-fips 0.20.2-r2, kube-state-metrics 2.10.1-r2, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.1.0-r1, kubernetes 1.36.1-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r4, kubernetes-csi-external-provisioner-fips 6.2.1-r3, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-csi-external-snapshotter-fips 8.4.0-r4, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, local-static-provisioner 2.8.0-r2, melange 0.50.0-r1, melange 0.56.1-r1, memcached-exporter 0.16.0-r0, minio-client 0.20250721.052808-r1, mongodb 7.0.32-r1, mongodb 8.0.20-r1, mongodb 8.0.21-r1, mongodb 8.2.6-r1, mongodb 8.3.2-r1, ollama 0.20.3-r2, ollama 0.31.2-r2, ollama 0.32.11-r2, ollama-fips 0.32.11-r2, opa 1.17.0-r1, percona-server-mongodb-operator 1.22.0-r1, percona-server-mongodb-operator 1.23.0-r0, policy-controller-fips 0.15.1-r1, postgres-operator 1.12.2-r2, postgres-operator 1.15.1-r1, prometheus 3.11.2-r0, prometheus 3.5.2-r1, prometheus-alertmanager 0.32.0-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mysqld-exporter 0.15.0-r2, prometheus-node-exporter-fips 1.11.1-r1, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway 1.11.3-r1, prometheus-pushgateway 1.8.0-r1, prometheus-pushgateway 1.9.0-r1, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r1, prometheus-pushgateway-fips 1.8.0-r2, prometheus-redis-exporter-fips 1.84.0-r0, prometheus-redis-exporter-fips 1.87.0-r3, promxy-fips 0.0.93-r1, pulumi-kubernetes-operator 2.7.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rancher-fleet-agent 0.12.17-r3, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r3, rancher-fleet-agent 0.15.4-r3, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, rclone 1.69.0-r3, restic-fips 0.18.1-r7, rundeck 6.0.0-r0, sealed-secrets 0.34.0-r0, sealed-secrets 0.35.0-r4, sealed-secrets 0.36.6-r1, secrets-store-csi-driver-provider-gcp 1.15.0-r1, secrets-store-csi-driver-provider-gcp 1.17.0-r2, spire-server 1.13.5-r1, spire-server 1.14.5-r1, spire-server-fips 1.14.5-r1, step-ca-fips 0.30.2-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, syft 1.45.0-r2, tempo 2.10.4-r1, temporal 1.5.1-r0, temporal-server 1.31.0.153.1-r0, temporal-ui-server-fips 2.51.1-r1, terraform 1.14.8-r2, tigera-operator 1.42.0-r0, tigera-operator-fips 1.37.2-r4, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.45.0-r1, tkn-fips 0.44.2-r0, trust-manager-fips 0.20.3-r2, trust-manager-fips 0.21.1-r2, vault 1.20.4-r5, vault 1.21.4-r5, vault 2.0.0-r1, vault-k8s 1.7.4-r0, velero 1.18.1-r0, velero-fips 1.18.2-r6, weaviate 1.37.4-r1, weaviate 1.37.6-r1, weaviate-fips 1.36.17-r0, weaviate-fips 1.37.9-r0, weaviate-fips 1.38.1-r0

CVE-2026-46597 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2021-0064 vulnerabilities

Vulnerabilities for packages: spark-operator, kubeflow-pipelines, newrelic-nri-statsd, gostatsd...

GO-2021-0064 vulnerabilities

Vulnerabilities for packages: newrelic-nri-statsd, kubeflow-pipelines, spark-operator, gostatsd...

GO-2025-4188 vulnerabilities

Vulnerabilities for packages: kubeflow, neuvector-dbgen, newrelic-nri-statsd, hello-world-golang, sonobuoy, php-fpmexporter, aws-flb-cloudwatch, src-fingerprint, go-discover, terraform-provider-google, docker-credential-gcr, smokescreen, gostatsd, kpt, aws-flb-firehose, kube-fluentd-operator,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: envoy-gateway, nfs-subdir-external-provisioner, terraform-provider-azurerm, kubernetes-event-exporter, nova, external-secrets-operator, tetragon, dask-gateway, actions-runner-controller, dapr, kubernetes-csi-external-provisioner, lazydocker, litestream,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: nova, tetragon, dask-gateway, prometheus-operator, sftpgo-plugin-auth, spark-operator, lazydocker, litestream, rabbitmq-default-user-credential-updater, libnvidia-container, newrelic-nri-statsd, container-object-storage-interface, go, sops, grafana, tw, influx,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: boring-registry, nfs-subdir-external-provisioner, kubernetes-event-exporter, tetragon, dask-gateway, actions-runner-controller, kubernetes-csi-external-provisioner, sftpgo-plugin-auth, litestream, rancher-machine, rabbitmq-default-user-credential-updater, kine,...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: boring-registry, kubebuilder, nfs-subdir-external-provisioner, spqr, dask-gateway, kubernetes-csi-external-provisioner, spark-operator, litestream, rabbitmq-default-user-credential-updater, libnvidia-container, crossplane-provider-aws, src, go-licenses, k9s,...

CLEANSTART-2026-EV66178 Security fixes in gostatsd 28.3.0-r2

Package gostatsd version 28.3.0-r2 fixes 47 vulnerabilities: CVE-2020-8565, CVE-2020-8911, CVE-2020-8912, CVE-2026-25680, CVE-2026-25681...

CLEANSTART-2026-JT15863 Security fixes for CVE-2020-8565, CVE-2020-8911, CVE-2020-8912, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 28.3.0-r2

Multiple security vulnerabilities affect the gostatsd package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EU52554 In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files

Multiple security vulnerabilities affect the gostatsd package. In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. See references for individual vulnerability details...

CLEANSTART-2026-TC31671 Security fixes for CVE-2020-8559, CVE-2020-8565, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, ghsa-33c5-9fx5-fvjm, ghsa-8cfg-vx93-jvxw applied in versions: 28.3.0-r0, 28.3.0-r1

Multiple security vulnerabilities affect the gostatsd package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-42289

Multiple security vulnerabilities affect the gostatsd package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: oras, q, conftest-fips, go-md2man, helm-operator-fips, cortex-fips, timoni, helm-operator, secrets-store-csi-driver-provider-azure, bank-vaults, confluent-common-docker, multus-cni, dynamic-localpv-provisioner, prometheus-beat-exporter-fips, thanos-fips, wire-go,...