GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: rancher-fleet, fscrypt, sqlexporter, runc, kubescape-operator, cluster-proportional-autoscaler, bento, rancher-machine, argo-workflows, crossplane-provider-aws-route53, pdfcpu, aactl, cluster-api-azure-controller, steampipe, flux, rabbitmq-messaging-topology-operator...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: net-kourier, spark-operator, kube-state-metrics, crossplane-provider-azure-authorization, knative-serving, rancher-fleet, docker-machine-driver-harvester, jitsucom-bulker, buildah, kubevela, kubescape, kubernetes-replicator, crossplane-provider-aws-dynamodb,...

CLEANSTART-2026-PC23558 Security fixes in haproxy-ingress 0.15.4-r4

Package haproxy-ingress version 0.15.4-r4 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-OQ29725 Security fixes in haproxy-ingress 0.15.4-r3

Package haproxy-ingress version 0.15.4-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-YV08114 Security fixes in haproxy-ingress 0.14.12-r1

Package haproxy-ingress version 0.14.12-r1 fixes 21 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39832...

CLEANSTART-2026-GZ85503 Security fixes in haproxy-ingress 0.16.1-r3

Package haproxy-ingress version 0.16.1-r3 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-PI10084 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0.14.12-r1, 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AC51978 Security fixes for CVE-2026-39822, CVE-2026-42504, CVE-2026-42505 applied in versions: 0.15.4-r3, 0.15.4-r4

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AW97162 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, ghsa-mh2q-q3fh-2475 applied in versions: 0.15.1-r0, 0.15.4-r0, 0.15.4-r1

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RK40393 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814 applied in versions: 0.15.1-r0, 0.16.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: knative-serving, rancher-fleet, buildah, fscrypt, esbuild, runc, etcd, kubescape-operator, kots, cluster-proportional-autoscaler, bento, terraform-docs, vt-cli, wuzz, rancher-machine, argo-workflows, pdfcpu, aws-node-termination-handler, aactl, pulumi, flux,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, kube-oidc-proxy, rancher-loglevel, crossplane-provider-sql, terraform-provider-aws-fips, eks-node-monitoring-agent-fips, volcano-fips, envconsul, mongo-tools, buf, ytt-fips, prometheus-blackbox-exporter, crossplane-function-go-templating,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, kube-oidc-proxy, rancher-loglevel, crossplane-provider-sql, terraform-provider-aws-fips, eks-node-monitoring-agent-fips, volcano-fips, envconsul, mongo-tools, buf, ytt-fips, prometheus-blackbox-exporter, crossplane-function-go-templating,...

CLEANSTART-2026-FZ57809 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher-fips, rancher-loglevel, volcano-fips, kiali, mongo-tools, ytt-fips, amazon-cloudwatch-agent-fips, docker-credential-acr-env, ratify-fips, openbao-k8s, kubernetes-dashboard-metrics-scraper, kube-state-metrics, spicedb-fips,...

Linux Distros Unpatched Vulnerability : CVE-2025-59303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

PT-2025-41287

Name of the Vulnerable Software and Affected Versions HAProxy Kubernetes Ingress Controller versions prior to 3.1.13 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 3.0.16-ee1 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 1.11.13-ee1 HAProxy Enterprise...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, tekton-chains, pulumi, cosign, wireguard-go, prometheus-postgres-exporter-fips, prometheus-operator, kubernetes-csi-external-resizer, prometheus-bind-exporter, prometheus-blackbox-exporter, trust-manager, prometheus-elasticsearch-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: spark-operator, secrets-store-csi-driver-provider-gcp, kubevela, grype, kubescape, cosign, kots, k3d, nghttp2, oauth2-proxy, aactl, pulumi, gke-gcloud-auth-plugin, kpt, nri-prometheus, src, amass, gitness, atlantis, prometheus-adapter, scorecard, aws-efs-csi-driver,...