GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: cert-manager, stern, kube-fluentd-operator, rancher, flux-image-automation-controller, step, hubble-ui, container-object-storage-interface, kyverno-notation-aws, juicefs-csi-driver, sbomqs, secrets-store-csi-driver, infinispan-operator, aws-flb-firehose,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cert-manager, kube-fluentd-operator, kubeflow, rancher, vault-k8s, fuse-overlayfs-snapshotter, hubble-ui, conjur-cli, container-object-storage-interface, nri-apache, q, secrets-store-csi-driver, octo-sts, db-operator, kube-state-metrics, flux,...

CLEANSTART-2026-PC23558 Security fixes in haproxy-ingress 0.15.4-r4

Package haproxy-ingress version 0.15.4-r4 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-OQ29725 Security fixes in haproxy-ingress 0.15.4-r3

Package haproxy-ingress version 0.15.4-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-GZ85503 Security fixes in haproxy-ingress 0.16.1-r3

Package haproxy-ingress version 0.16.1-r3 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-YV08114 Security fixes in haproxy-ingress 0.14.12-r1

Package haproxy-ingress version 0.14.12-r1 fixes 21 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39832...

CLEANSTART-2026-PI10084 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0.14.12-r1, 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AC51978 Security fixes for CVE-2026-39822, CVE-2026-42504, CVE-2026-42505 applied in versions: 0.15.4-r3, 0.15.4-r4

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AW97162 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, ghsa-mh2q-q3fh-2475 applied in versions: 0.15.1-r0, 0.15.4-r0, 0.15.4-r1

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RK40393 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814 applied in versions: 0.15.1-r0, 0.16.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, hubble-ui, kubernetes-ingress-defaultbackend, conjur-cli, smokescreen, infinispan-operator, kube-state-metrics, timoni, bento, incert, cert-manager-csi-driver, kserve-modelmesh-serving, memcached-exporter,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: json-exporter, cloud-provider-azure-fips, crossplane-provider-azure-sql, eks-node-monitoring-agent, k6-operator, metacontroller, nerdctl, syncthing-fips, crossplane-provider-azure-authorization, eksctl, aws-ebs-csi-driver, eks-distro, vault-benchmark,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: json-exporter, cloud-provider-azure-fips, crossplane-provider-azure-sql, eks-node-monitoring-agent, k6-operator, metacontroller, nerdctl, syncthing-fips, crossplane-provider-azure-authorization, eksctl, aws-ebs-csi-driver, eks-distro, vault-benchmark,...

CLEANSTART-2026-FZ57809 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure-fips, nerdctl, falcosidekick-fips, prometheus-operator-fips, gitlab-cng, grafana-operator-fips, terraform-provider-random-fips, harbor-registry, helm-push, distribution-fips, k6-fips, mongo-tools, kube-logging-operator, dcgm-exporter-fips,...

Linux Distros Unpatched Vulnerability : CVE-2025-59303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

PT-2025-41287

Name of the Vulnerable Software and Affected Versions HAProxy Kubernetes Ingress Controller versions prior to 3.1.13 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 3.0.16-ee1 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 1.11.13-ee1 HAProxy Enterprise...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: metacontroller, dynamic-localpv-provisioner, aws-load-balancer-controller-fips, metrics-server, prometheus-bind-exporter, aws-ebs-csi-driver, prometheus-mongodb-exporter-fips, up, flux-source-controller, atlantis-fips, falcoctl-fips, k3s,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubeflow, fuse-overlayfs-snapshotter, secrets-store-csi-driver, skaffold, memcached-exporter, terraform-provider-sendgrid, mc, flux-notification-controller, gke-gcloud-auth-plugin, ip-masq-agent, nginx-stable, sigstore-scaffolding, kubewatch, hey, kots, nats,...