GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, cluster-autoscaler-fips, aws-load-balancer-controller-fips, dkron, nova-fips, terragrunt, metacontroller, grafana-operator, loki-fips, victoriametrics, grafana-fips, flux-image-automation-controller, grafana-operator-fips, cert-manager-fips,...

CLEANSTART-2026-ZX59706 Security fixes in grafana-rollout-operator 0.36.0-r0

Package grafana-rollout-operator version 0.36.0-r0 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-BI40968 Security fixes in grafana-rollout-operator 0.35.0-r0

Package grafana-rollout-operator version 0.35.0-r0 fixes 7 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-27138, CVE-2026-27137, CVE-2026-27142...

CLEANSTART-2026-MY03287 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EF68467 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MO33100 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UY10441 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, rabbitmq-messaging-topology-operator, go, apko, supercronic, aws-privateca-issuer, omnibump, aws-network-policy-agent, flux-image-reflector-controller, smarter-device-manager, victoriametrics-cluster, flux-image-automation-controller,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: rancher-machine, terraform-provider-random, telegraf, descheduler, crossplane-provider-azure-authorization, falco-exporter, cert-manager, juicefs-csi-driver, k3s, kubernetes, flux-image-reflector-controller, mesosphere-vsphere-csi, spire-controller-manager,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: telegraf, crossplane-provider-aws-sqs, descheduler, hydra, crossplane-provider-azure-authorization, crossplane-provider-aws-ec2, k3s, cert-manager, kubernetes, tempo, mesosphere-vsphere-csi, spicedb, kserve-modelmesh-serving, azuredisk-csi, argo-cd, spicedb-operator,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: sbom-scorecard, bazelisk, falco-exporter, kubernetes, actions-runner-controller, k8ssandra-operator, argo-events, mage, grafana-operator, docker-credential-ecr-login, vt-cli, distribution, render-template, pdfcpu, nuclei, metrics-server, cni-plugins, trust-manager,...