CLEANSTART-2026-PI10084 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0.14.12-r1, 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AW97162 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, ghsa-mh2q-q3fh-2475 applied in versions: 0.15.1-r0, 0.15.4-r0, 0.15.4-r1

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RK40393 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814 applied in versions: 0.15.1-r0, 0.16.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-mssql, rancher-loglevel, nerdctl, multus-cni, ctop, kots, hugo, rancher-fleet, k8s-device-plugin, envconsul, cert-exporter, vt-cli, vertical-pod-autoscaler, http-echo, osv-scanner, rancher-webhook, sbomqs, custom-pod-autoscaler, migrate, victoriametrics-cluster,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cert-manager-csi-driver, supercronic, gitlab-pages, volume-modifier-for-k8s, nginx-prometheus-exporter-fips, crossplane-provider-aws-firehose-fips, dive, argocd-image-updater-fips, rabbitmq-messaging-topology-operator-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cert-manager-csi-driver, supercronic, gitlab-pages, volume-modifier-for-k8s, nginx-prometheus-exporter-fips, apache-beam-java-sdk, crossplane-provider-aws-firehose-fips, dive, argocd-image-updater-fips,...

CLEANSTART-2026-FZ57809 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, kubecolor, nvidia-nsight-compute-13.2, gitlab-pages, sriov-network-device-plugin, nginx-prometheus-exporter-fips, supercronic, apache-beam-java-sdk, kubernetes-dns-node-cache, dive, rabbitmq-messaging-topology-operator-fips,...

Linux Distros Unpatched Vulnerability : CVE-2025-59303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

PT-2025-41287

Name of the Vulnerable Software and Affected Versions HAProxy Kubernetes Ingress Controller versions prior to 3.1.13 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 3.0.16-ee1 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 1.11.13-ee1 HAProxy Enterprise...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-postgres-exporter-fips, sigstore-scaffolding, prometheus-pushgateway, kubernetes-dns-node-cache, dive, caddy, prometheus-mongodb-exporter-fips, gke-gcloud-auth-plugin, gitness, minio, prometheus-operator, timoni, prometheus-statsd-exporter-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: minio, nghttp2, git-lfs, kots, ko, hugo, memcached-exporter, flux-helm-controller, cortex, nats, pulumi, secrets-store-csi-driver-provider-gcp, nginx-mainline, gobuster, rqlite, dgraph, kind, kubeflow, pulumi-language-yaml, haproxy-ingress, k3d, aws-efs-csi-driver,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, gke-gcloud-auth-plugin, gitness, minio, prometheus-blackbox-exporter, pulumi-language-java, secrets-store-csi-driver, newrelic-infrastructure-agent, cue, kind, nats, prometheus-elasticsearch-exporter, slsa-verifier, kaf, aactl, src,...