CLEANSTART-2026-AW97162 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, ghsa-mh2q-q3fh-2475 applied in versions: 0.15.1-r0, 0.15.4-r0, 0.15.4-r1

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RK40393 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814 applied in versions: 0.15.1-r0, 0.16.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, external-secrets-operator, rancher-system-upgrade-controller, knative-eventing, argo-rollouts, chartmuseum, falco-no-driver, aws-application-networking-k8s, cluster-api-provider-vsphere, dex, metacontroller, nri-f5, runc, cosign,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, terraform-provider-aws-fips, chartmuseum-fips, nri-consul, external-secrets-operator-fips, hugo-fips, kubectx, task, crossplane-provider-aws-kms-fips, eks-node-monitoring-agent-fips, quic-go, external-dns-fips, crossplane-provider-aws-wafv2-fips...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, terraform-provider-aws-fips, chartmuseum-fips, nri-consul, external-secrets-operator-fips, hugo-fips, kubectx, task, crossplane-provider-aws-kms-fips, eks-node-monitoring-agent-fips, quic-go, external-dns-fips, crossplane-provider-aws-wafv2-fips...

CLEANSTART-2026-FZ57809 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: chartmuseum-fips, nri-consul, external-secrets-operator-fips, task, grype, external-dns-fips, gobump, velero-plugin-for-csi-fips, ytt-fips, aactl, op-geth, frp, oras, prometheus-postgres-exporter, pluto-fips, amazon-cloudwatch-agent-operator-fips, azurefile-csi,...

Linux Distros Unpatched Vulnerability : CVE-2025-59303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

PT-2025-41287

Name of the Vulnerable Software and Affected Versions HAProxy Kubernetes Ingress Controller versions prior to 3.1.13 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 3.0.16-ee1 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 1.11.13-ee1 HAProxy Enterprise...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: chartmuseum, pulumi-language-yaml, dex, wireguard-go, prometheus-elasticsearch-exporter, external-dns-fips, aactl, caddy, frp, nfs-subdir-external-provisioner, gobuster, kube-oidc-proxy, prometheus-postgres-exporter, smarter-device-manager-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gitness, kubewatch, amass, dex, metacontroller, oauth2-proxy, cosign, terraform-provider-sendgrid, minio, nghttp2, terraform-provider-azurerm, weaviate, flux-kustomize-controller, grype, kpt, pulumi-language-yaml, metrics-server, gobuster, nri-prometheus, hugo,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, dex, wireguard-go, ip-masq-agent, grype, prometheus-elasticsearch-exporter, external-dns-fips, nginx-stable, aactl, conftest, frp, prometheus-postgres-exporter, gobuster, kube-oidc-proxy, smarter-device-manager-fips,...