CLEANSTART-2026-FZ57809 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: kargo, syft, deck-fips, k8sgpt-operator, sops, kube-logging-operator-custom-runner-fips, ytt-fips, cluster-proportional-autoscaler-fips, amazon-ssm-agent-fips, gostatsd, rancher-security-scan-fips, kubernetes-event-exporter-fips, spicedb, kbld, helm-operator-fips,...

Linux Distros Unpatched Vulnerability : CVE-2025-59303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

PT-2025-41287

Name of the Vulnerable Software and Affected Versions HAProxy Kubernetes Ingress Controller versions prior to 3.1.13 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 3.0.16-ee1 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 1.11.13-ee1 HAProxy Enterprise...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: trillian, pulumi, k8sgpt-operator, metacontroller, cosign, hey, flux-notification-controller, prometheus-elasticsearch-exporter-fips, minio, zot, flux-image-automation-controller, flux-source-controller, kiam, bom, prometheus-alertmanager,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: memcached-exporter, secrets-store-csi-driver-provider-gcp, amass, aws-efs-csi-driver, rqlite, aactl, newrelic-infrastructure-agent, ko, skaffold, pulumi-language-java, scorecard, dgraph, kubewatch, envoy-ratelimit, hugo, nginx-stable, ip-masq-agent,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: pulumi, metacontroller, cosign, hey, flux-notification-controller, minio, flux-source-controller, kiam, bom, nfs-subdir-external-provisioner-fips, kubewatch, gitness, prometheus-adapter-fips, prometheus-adapter, rqlite, prometheus-blackbox-exporter,...