GO-2026-4600 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster-fips, victoriametrics, metacontroller, victoriametrics-fips, grafana-operator, victorialogs-fips, gotenberg, steampipe, temporal-fips, loki-fips, nova, terragrunt, amazon-k8s-cni-fips, localstack, flux-source-controller, polaris, podinfo,...

CLEANSTART-2026-ZX59706 Security fixes in grafana-rollout-operator 0.36.0-r0

Package grafana-rollout-operator version 0.36.0-r0 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-BI40968 Security fixes in grafana-rollout-operator 0.35.0-r0

Package grafana-rollout-operator version 0.35.0-r0 fixes 7 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-27138, CVE-2026-27137, CVE-2026-27142...

CLEANSTART-2026-MY03287 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EF68467 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MO33100 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UY10441 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the grafana-rollout-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: hubble, malcontent, dgraph, secrets-store-csi-driver-provider-aws, goreleaser, nova, karpenter, mariadb-operator, victoriametrics-cluster, envoy-ratelimit, oras, smarter-device-manager, newrelic-k8s-metadata-injection, metacontroller, dkron, sftpgo-plugin-eventsearch...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, hubble, keda, cert-manager-cmctl, libnvidia-container, syft, nuclei, seaweedfs, kubernetes, litestream, crossplane, kpt, prometheus-adapter, rancher, dkron, newrelic-infrastructure-agent, gitlab-kas, sftpgo-plugin-pubsub, yunikorn-k8shi...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: hubble, keda, syft, tfsec, seaweedfs, kubernetes, litestream, prometheus-adapter, steampipe, falcosidekick, rancher, rke2-cloud-provider, dkron, newrelic-infrastructure-agent, gitlab-kas, sftpgo-plugin-pubsub, datadog-operator, guac, openbao, tkn, datadog-agent, k9s,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, fq, hello-world-golang, kpt, nri-jmx, sbom-convert, oras, metacontroller, trino, docker-credential-ecr-login, ytt, prometheus-operator, flux-notification-controller, runc, podman, argo-rollouts, git-credential-oauth, influx, kapp,...