CLEANSTART-2026-EF68467 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MO33100 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UY10441 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dgraph, flux, apko, malcontent, newrelic-infra-operator, smarter-device-manager, clickhouse-operator, oras, secrets-store-csi-driver-provider-aws, temporal, kubewatch, victoriametrics-cluster, github-mcp-server, envoy-ratelimit, aws-privateca-issuer,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cerbos, prometheus, descheduler, k8s-device-plugin, kyverno-notation-aws, argo-workflows, envoy-gateway, cloud-sql-proxy, crossplane-provider-keycloak, cluster-api, bom, dapr, dex, kube-fluentd-operator, keda, kubernetes-dashboard, juicefs-csi-driver, terraform-docs,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: cerbos, grype, descheduler, kyverno-notation-aws, prometheus, kube-rbac-proxy, argo-workflows, k8sgpt, envoy-gateway, dapr, cluster-api, datadog-operator, dex, cluster-api-helm-controller, keda, syft, kubernetes-csi-node-driver-registrar, jitsucom-bulker,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: kubernetes-release, gostatsd, argo-workflows, k8sgpt, nri-nginx, bom, ytt, overmind, go-bindata, cloudnative-pg, k8ssandra-client, octo-sts, argo-events, kubernetes-csi-external-attacher, kbld, terraform, secrets-store-csi-driver-provider-gcp, sbom-scorecard,...