GO-2026-4600 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, grafana-fips, pgwatch, victoriametrics-cluster, victoriametrics-cluster-fips, pluto, go, gotenberg, temporal-fips, dkron, terragrunt, steampipe, flux-operator, flux-notification-controller, polaris, victoriametrics-fips,...

CLEANSTART-2026-BI40968 Security fixes in grafana-rollout-operator 0.35.0-r0

Package grafana-rollout-operator version 0.35.0-r0 fixes 7 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-27138, CVE-2026-27137, CVE-2026-27142...

CLEANSTART-2026-ZX59706 Security fixes in grafana-rollout-operator 0.36.0-r0

Package grafana-rollout-operator version 0.36.0-r0 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-MK41253 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MY03287 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63717

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63714

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EF68467 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MO33100 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UY10441 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dkron, external-secrets-operator, osv-scanner, mountpoint-s3-csi-driver, newrelic-infra-operator, victoriametrics, nova, actions-runner-controller, fluxcd-kustomize-mutating-webhook, temporal, envoy-ratelimit, volume-modifier-for-k8s, metacontroller,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, kubernetes-csi-driver-nfs, istio, kubescape, apache-exporter, delve, wal-g, cloudnative-pg, cilium-cli, argocd-image-updater, cortex, terraform-provider-azuread, net-kourier, prometheus-operator, kubescape-operator, seaweedfs,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, cloudflared, cluster-api-ipam-provider-in-cluster, istio, kubescape, grype, docker, thanos, argocd-image-updater, distribution, cortex, terraform-provider-grafana, net-kourier, ratify, kubescape-operator, containerd, seaweedfs, velero,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: delve, http-echo, cortex, prometheus-operator, velero, splunk-otel-collector, policy-controller, render-template, crane, temporal-ui-server, fluent-operator, aactl, cert-manager-webhook-pdns, wuzz, controller-gen, mockgen, kapp, kafkaexporter, q, nri-prometheus,...