GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kubernetes-csi-driver-nfs, podman, cluster-api-aws-controller, rekor, containerd, vault-secrets-webhook, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, sriov-network-device-plugin, pulumi-kubernetes-operator,...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kubernetes-csi-driver-nfs, podman, cluster-api-aws-controller, rekor, containerd, vault-secrets-webhook, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, sriov-network-device-plugin, pulumi-kubernetes-operator,...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: kserve-localmodelnode-agent-fips, sigstore-scaffolding-fips, ratify-fips, kubevirt-cdi-operator, apko-fips, aws-otel-collector-fips, crossplane-provider-aws-kms, argo-workflows-fips, envoy-ai-gateway-fips, trillian, crossplane, keda-http-add-on-fips,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: kserve-localmodelnode-agent-fips, sigstore-scaffolding-fips, ratify-fips, kubevirt-cdi-operator, apko-fips, aws-otel-collector-fips, crossplane-provider-aws-kms, argo-workflows-fips, envoy-ai-gateway-fips, trillian, crossplane, keda-http-add-on-fips,...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kubernetes-csi-driver-nfs, rekor, cluster-api-aws-controller, containerd, kserve-modelmesh-serving, vault-secrets-webhook, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, sriov-network-device-plugin, pulumi-kubernetes-operator,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kubernetes-csi-driver-nfs, rekor, cluster-api-aws-controller, containerd, kserve-modelmesh-serving, vault-secrets-webhook, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, sriov-network-device-plugin, pulumi-kubernetes-operator,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: step, step-issuer-fips, opa-envoy, kubeflow-pipelines, cluster-proportional-autoscaler-fips, smarter-device-manager, sigstore-scaffolding-fips, portieris-fips, nfs-subdir-external-provisioner, flux-image-reflector-controller, pulumi, sriov-network-device-plugin-fips,...

GO-2024-2883 vulnerabilities

Vulnerabilities for packages: grafana-mimir, cortex, prometheus-alertmanager, timestamp-authority, rekor, fulcio...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, spicedb, terragrunt, opentelemetry-collector, restic, ferretdb, hubble-ui, conftest, sigstore-scaffolding, zarf, kwok, opa, temporal, zot, ksops, vcluster, k8sgpt, pulumi-language-dotnet, cert-manager-cmctl, gomplate, kots, trivy, kaniko, cilium-cli,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: terragrunt, opentelemetry-collector, flux-kustomize-controller, tkn, policy-controller, wal-g, boring-registry, thanos, argo-workflows, trino, zarf, sigstore-scaffolding, sqlpad, tekton-chains, rekor, zot, ksops, flyte, flux-image-reflector-controller, falcoctl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, opentelemetry-collector, flux-kustomize-controller, terragrunt, policy-controller, skopeo, tkn, aactl, crossplane-provider-azure-authorization, snyk-cli, scorecard, sigstore-scaffolding, zarf, tekton-chains, rekor, zot, ksops,...

CLEANSTART-2026-RY66554 Security fixes in grafana-mimir-fips 3.0.4-r1

Package grafana-mimir-fips version 3.0.4-r1 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-JG10359 Security fixes in grafana-mimir 3.0.2-r0

Package grafana-mimir version 3.0.2-r0 fixes 9 vulnerabilities: CVE-2025-68121, ghsa-9h8m-3fm2-qjrq, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679...

CLEANSTART-2026-SP48916 Security fixes in grafana-mimir-fips 3.0.5-r1

Package grafana-mimir-fips version 3.0.5-r1 fixes 12 vulnerabilities: ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58, CVE-2026-39883, CVE-2026-39882, CVE-2026-27140...

CLEANSTART-2026-PI73299 Security fixes in grafana-mimir 3.0.2-r1

Package grafana-mimir version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-PK62931 Security fixes in grafana-mimir-fips 3.0.2-r1

Package grafana-mimir-fips version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-QD77000 Security fixes in grafana-mimir-fips 3.0.2-r0

Package grafana-mimir-fips version 3.0.2-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2025-68121, CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: volcano, kserve-localmodelnode-agent-fips, cluster-api-provider-vsphere, crossplane-provider-aws-imagebuilder, knative-eventing-fips, terraform-provider-grafana, blob-csi-fips, kube-logging-operator, ratify-fips, percona-xtradb-cluster-operator, grafana,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: volcano, kserve-localmodelnode-agent-fips, cluster-api-provider-vsphere, crossplane-provider-aws-imagebuilder, knative-eventing-fips, terraform-provider-grafana, blob-csi-fips, kube-logging-operator, ratify-fips, percona-xtradb-cluster-operator, grafana,...

CLEANSTART-2026-CY26398 Security fixes for CVE-2026-34986, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-w8rr-5gcm-pp58, ghsa-xmrv-pmrh-hhx2 applied in versions: 3.0.5-r0, 3.0.6-r0

Multiple security vulnerabilities affect the grafana-mimir-fips package. These issues are resolved in later releases. See references for individual vulnerability details...