GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: restic, loki, runc, seaweedfs, docker-credential-ecr-login, grafana-pyroscope, terraform-provider-acme, conftest, temporal, timestamp-authority, kine, helm-operator, kitty, containerd, rancher-webhook, helm-set-status, trillian, cadvisor, opensearch-k8s-operator,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: temporal-server, nri-consul, chisel, pgpool2exporter, runc, terraform-provider-acme, conftest, temporal, emissary, omnibump, containerd, rancher-webhook, prometheus-adapter, crossplane-provider-aws-lambda, terraform-provider-grafana, azure-workload-identity-webhook,...

CLEANSTART-2026-PC23558 Security fixes in haproxy-ingress 0.15.4-r4

Package haproxy-ingress version 0.15.4-r4 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-OQ29725 Security fixes in haproxy-ingress 0.15.4-r3

Package haproxy-ingress version 0.15.4-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-GZ85503 Security fixes in haproxy-ingress 0.16.1-r3

Package haproxy-ingress version 0.16.1-r3 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-YV08114 Security fixes in haproxy-ingress 0.14.12-r1

Package haproxy-ingress version 0.14.12-r1 fixes 21 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39832...

CLEANSTART-2026-PI10084 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0.14.12-r1, 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AC51978 Security fixes for CVE-2026-39822, CVE-2026-42504, CVE-2026-42505 applied in versions: 0.15.4-r3, 0.15.4-r4

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AW97162 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, ghsa-mh2q-q3fh-2475 applied in versions: 0.15.1-r0, 0.15.4-r0, 0.15.4-r1

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RK40393 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814 applied in versions: 0.15.1-r0, 0.16.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: oras, nri-redis, kine, php-fpmexporter, rancher-webhook, cadvisor, wal-g, caddy, crossplane-provider-family-azure, infinispan-operator, terraform-provider-tls, sonobuoy, http-echo, victoriametrics, redis-operator, cloud-sql-proxy, zot, git-sync, kubescape-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave, grafana-beyla, external-secrets-operator,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, apache-beam-python-3.12-sdk, nri-postgresql-fips, kubeflow-katib, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave,...

CLEANSTART-2026-FZ57809 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, longhorn-backing-image-manager, go-md2man, rancher-loglevel, docker-credential-acr-env-fips, kubelet-csr-approver-fips, consul-k8s-fips, loki, multus-cni-fips, docker-cli-fips, cass-operator-fips-no-pvc-delete, pulumi-kubernetes-operator,...

Linux Distros Unpatched Vulnerability : CVE-2025-59303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

PT-2025-41287

Name of the Vulnerable Software and Affected Versions HAProxy Kubernetes Ingress Controller versions prior to 3.1.13 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 3.0.16-ee1 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 1.11.13-ee1 HAProxy Enterprise...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kots, kubernetes-dashboard-metrics-scraper, newrelic-infrastructure-agent, prometheus-mongodb-exporter-fips, stakater-reloader, kiam, dex-k8s-authenticator, slsa-verifier, k3s, nats, crossplane-provider-aws, prometheus-elasticsearch-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nghttp2, conftest, prometheus-adapter, nri-prometheus, kubescape, pulumi-language-dotnet, git-lfs, pulumi-language-java, dynamic-localpv-provisioner, terraform-provider-aws, helm, gitness, frp, cosign, kaf, certificate-transparency, dgraph, flux-kustomize-controller,...