GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, victoriametrics-cluster, victorialogs, flux-image-reflector-controller, flux-source-watcher, grafana-fips, nova, aws-ebs-csi-driver, terragrunt, amazon-k8s-cni-fips, grafana-rollout-operator, aws-load-balancer-controller-fips, librechat, go,...

CLEANSTART-2026-BI40968 Security fixes in grafana-rollout-operator 0.35.0-r0

Package grafana-rollout-operator version 0.35.0-r0 fixes 7 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-27138, CVE-2026-27137, CVE-2026-27142...

CLEANSTART-2026-ZX59706 Security fixes in grafana-rollout-operator 0.36.0-r0

Package grafana-rollout-operator version 0.36.0-r0 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-MY03287 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63717

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63714

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EF68467 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MO33100 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UY10441 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, flux-notification-controller, envoy-ratelimit, malcontent, flux-helm-controller, flux-image-automation-controller, flux-source-controller, dkron, oras, victoriametrics, gh, temporal, external-secrets-operator, aws-privateca-issuer,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, k3s, terraform-docs, hubble-ui, authservice, kine, atlantis, flux-source-controller, kubernetes-csi-external-health-monitor, dkron, cloud-provider-vsphere, delve, descheduler, zot, gh, temporal, external-secrets-operator, kafka-proxy,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: openbao, flux-notification-controller, k3s, podinfo, crossplane-provider-aws-route53, kine, dive, flux-source-controller, dkron, cloud-provider-vsphere, kapp, descheduler, kubernetes-csi-external-health-monitor, temporal, calico, crossplane-provider-aws-kms, spicedb,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: atlantis, overmind, timoni, litestream, nri-discovery-kubernetes, kubecolor, containerd, regclient, wire-go, kaf, distribution, redka, src-fingerprint, wgcf, docker-compose, go-licenses, flux-kustomize-controller, crossplane-provider-sql, dask-gateway, falcosidekick,...