GO-2026-4600 vulnerabilities

Vulnerabilities for packages: grafana-operator, pluto, victoriametrics-fips, terragrunt, cert-manager-fips, loki-fips, dkron, metacontroller, grafana-fips, librechat, victoriametrics, grafana-rollout-operator, localstack, aws-ebs-csi-driver-fips, nova-fips, flux-source-controller, nova,...

CLEANSTART-2026-ZX59706 Security fixes in grafana-rollout-operator 0.36.0-r0

Package grafana-rollout-operator version 0.36.0-r0 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-BI40968 Security fixes in grafana-rollout-operator 0.35.0-r0

Package grafana-rollout-operator version 0.35.0-r0 fixes 7 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-27138, CVE-2026-27137, CVE-2026-27142...

CLEANSTART-2026-MK41253 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MY03287 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EF68467 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MO33100 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UY10441 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, fluxcd-kustomize-mutating-webhook, mountpoint-s3-csi-driver, aws-network-policy-agent, grafana-operator, goreleaser, pluto, mariadb-operator, kubewatch, temporal, victoriametrics, envoy-ratelimit, flux, aws-load-balancer-controller,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: grpcurl, helm-mapkubeapis, eksctl, cloudnative-pg, kubernetes-dashboard-auth, weaviate, dask-gateway, kaf, docker-cli-buildx, spire-controller-manager, step-ca, docker-credential-gcr, argocd-image-updater, kubernetes-csi-external-resizer, cloud-provider-vsphere,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, eksctl, harbor-registry, crossplane-provider-aws-eks, gogatekeeper, kube-metrics-adapter, weaviate, buildkitd, cluster-api-helm-controller, docker-cli-buildx, crossplane-provider-aws-firehose, step-ca, argocd-image-updater,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, minify, dask-gateway, kuberlr, spire-controller-manager, helm-docs, cfssl, dive, yace, emissary, mockery, prometheus-alertmanager, gitsign, skopeo, octo-sts, cloud-provider-aws, restic, yq, kserve-modelmesh-serving, src-fingerprint, kubecolo...