GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, net-kourier, k9s, falcosidekick, rabbitmq-messaging-topology-operator, sftpgo-plugin-eventsearch, tfsec, ferretdb, argo-cd, crossplane, blob-csi, crossplane-provider-aws-cloudformation, percona-server-mongodb-operator, telegraf,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: net-kourier, kube-logging-operator-custom-runner, k9s, kbld, cilium, vertical-pod-autoscaler, pgpool2exporter, crossplane, crossplane-provider-aws-cloudformation, kiali, percona-server-mongodb-operator, kots, goreleaser, litestream, kubernetes-csi-external-snapshotte...

CLEANSTART-2026-PC23558 Security fixes in haproxy-ingress 0.15.4-r4

Package haproxy-ingress version 0.15.4-r4 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-GZ85503 Security fixes in haproxy-ingress 0.16.1-r3

Package haproxy-ingress version 0.16.1-r3 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-OQ29725 Security fixes in haproxy-ingress 0.15.4-r3

Package haproxy-ingress version 0.15.4-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-YV08114 Security fixes in haproxy-ingress 0.14.12-r1

Package haproxy-ingress version 0.14.12-r1 fixes 21 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39832...

CLEANSTART-2026-PI10084 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0.14.12-r1, 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AC51978 Security fixes for CVE-2026-39822, CVE-2026-42504, CVE-2026-42505 applied in versions: 0.15.4-r3, 0.15.4-r4

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AW97162 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814, ghsa-mh2q-q3fh-2475 applied in versions: 0.15.1-r0, 0.15.4-r0, 0.15.4-r1

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RK40393 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33814 applied in versions: 0.15.1-r0, 0.16.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: net-kourier, cilium, percona-server-mongodb-operator, victoriametrics-operator, nri-mysql, stern, stakater-reloader, chart-testing, mkcert, go-discover, aactl, smokescreen, pdfcpu, php-fpmexporter, eksctl, flux-helm-controller, dive, promxy, terraform-provider-azapi,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: authservice, jupyterhub-k8s-image-awaiter-fips, openbao, vault-k8s, crossplane-provider-aws-rds-fips, swagger, falco-exporter, opentelemetry-operator, aws-privateca-issuer, amazon-ecs-agent-fips, db-operator, secrets-store-csi-driver-provider-aws, yunikorn-k8shim-fip...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: authservice, jupyterhub-k8s-image-awaiter-fips, openbao, opentelemetry-collector, vault-k8s, crossplane-provider-aws-rds-fips, swagger, falco-exporter, opentelemetry-operator, aws-privateca-issuer, amazon-ecs-agent-fips, db-operator,...

CLEANSTART-2026-FZ57809 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: openbao, jupyterhub-k8s-image-awaiter-fips, opentelemetry-collector, falco-exporter, sftpgo-plugin-kms, opentelemetry-operator, aws-privateca-issuer, aws-node-termination-handler-fips, db-operator, yunikorn-k8shim-fips, secrets-store-csi-driver-provider-aws,...

Linux Distros Unpatched Vulnerability : CVE-2025-59303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

PT-2025-41287

Name of the Vulnerable Software and Affected Versions HAProxy Kubernetes Ingress Controller versions prior to 3.1.13 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 3.0.16-ee1 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 1.11.13-ee1 HAProxy Enterprise...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: vault-k8s, metacontroller, secrets-store-csi-driver-provider-gcp, kube-logging-operator, kube-oidc-proxy, mc, prometheus-postgres-exporter, atlantis-fips, flux-source-controller, smarter-device-manager-fips, fuse-overlayfs-snapshotter, flux-image-reflector-controller...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: memcached-exporter, nghttp2, kots, k3d, stakater-reloader, pulumi-language-dotnet, weaviate, aactl, cosign, flux-helm-controller, ko, haproxy-ingress, certificate-transparency, kpt, buildkitd, kubevela, gomplate, rqlite, flux-source-controller, nri-prometheus,...