CLEANSTART-2026-OV11554 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: cloudbeat, neuvector-fips, kubescape-operator, steampipe, buildkitd-fips, helm-push, trivy-operator, rancher, linkerd2, kaniko, gitlab-rails-ce-fips, newrelic-infrastructure-agent-fips, cluster-api-helm-controller, ctop, docker, kaniko-fips, syft, chaos-mesh-fips,...

CLEANSTART-2026-CX34942 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: envoy-gateway, cilium-cli, zarf, ctop, helm, kubescape, wolfictl, skaffold, grype, opa-envoy, kubevela, rancher-fleet, newrelic-infrastructure-agent, docker-compose, kots, neuvector-scanner, nerdctl, docker, k3s, xeol, opa, buildkitd, melange, flux-source-controller,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: cass-operator, gomplate, docker-credential-ecr-login, nri-apache, configmap-reload, ferretdb, skaffold, temporal, supercronic, hey, dgraph, mongo-tools, go-bindata, rabbitmq-cluster-operator, nats, nri-nginx, kine, bazelisk, terraform-docs, speedtest-go, grpcurl,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cass-operator, gomplate, docker-credential-ecr-login, nri-apache, configmap-reload, ferretdb, skaffold, temporal, supercronic, hey, dgraph, mongo-tools, go-bindata, rabbitmq-cluster-operator, nats, nri-nginx, kine, bazelisk, terraform-docs, speedtest-go, grpcurl,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: cass-operator, gomplate, docker-credential-ecr-login, nri-apache, configmap-reload, ferretdb, skaffold, temporal, supercronic, hey, dgraph, mongo-tools, go-bindata, rabbitmq-cluster-operator, nats, nri-nginx, kine, bazelisk, terraform-docs, speedtest-go, grpcurl,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: cass-operator, gomplate, docker-credential-ecr-login, nri-apache, configmap-reload, ferretdb, skaffold, temporal, supercronic, hey, dgraph, mongo-tools, go-bindata, rabbitmq-cluster-operator, nats, nri-nginx, kine, bazelisk, terraform-docs, speedtest-go, grpcurl,...

GHSA-2CGQ-H8XW-2V5J vulnerabilities

Vulnerabilities for packages: grype, cadvisor, buildah, wolfictl, neuvector-scanner, opentelemetry-collector-contrib-fips, cadvisor-fips, opentelemetry-collector-contrib, kubernetes, ctop...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: grype, cadvisor, buildah, wolfictl, neuvector-scanner, opentelemetry-collector-contrib-fips, cadvisor-fips, opentelemetry-collector-contrib, kubernetes, ctop...

@oneuptime/common-server (>=7.0.141 <=7.0.1814), @oneuptime/common-ui (>=7.0.141 <=7.0.1814) +1 more potentially affected by CVE-2024-29194 via @oneuptime/model (>=7.0.141 <=7.0.1814)

@oneuptime/model NPM version =7.0.141, =7.0.141, =7.0.141, =7.0.141, =7.0.1769 Source cves: CVE-2024-29194 Source advisory: OSV:GHSA-246P-XMG8-WMCQ...

@oneuptime/infrastructure-agent (>=7.0.141 <=7.0.1769) potentially affected by CVE-2024-29194 via @oneuptime/common-server (>=7.0.141 <=7.0.1769)

@oneuptime/common-server NPM version =7.0.141, =7.0.141, =7.0.1769 Source cves: CVE-2024-29194 Source advisory: OSV:GHSA-246P-XMG8-WMCQ...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cass-operator, gomplate, configmap-reload, ferretdb, rekor, skaffold, crossplane-provider-aws-dynamodb, grafana-agent-operator, timestamp-authority, temporal, falcoctl, crossplane-provider-aws-s3, supercronic, crossplane-provider-aws-memorydb, dgraph, kots,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: cass-operator, gomplate, docker-credential-ecr-login, nri-apache, configmap-reload, ferretdb, skaffold, temporal, supercronic, hey, dgraph, mongo-tools, go-bindata, rabbitmq-cluster-operator, nats, nri-nginx, kine, bazelisk, terraform-docs, speedtest-go, grpcurl,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: cass-operator, gomplate, docker-credential-ecr-login, nri-apache, configmap-reload, ferretdb, skaffold, temporal, supercronic, hey, dgraph, mongo-tools, go-bindata, rabbitmq-cluster-operator, nats, nri-nginx, kine, bazelisk, terraform-docs, speedtest-go, grpcurl,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: cass-operator, gomplate, docker-credential-ecr-login, nri-apache, configmap-reload, ferretdb, skaffold, temporal, supercronic, hey, dgraph, mongo-tools, go-bindata, rabbitmq-cluster-operator, nats, nri-nginx, kine, bazelisk, terraform-docs, speedtest-go, grpcurl,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: ko-fips, slsa-verifier, vexctl, goreleaser, dagger, guac, k3d, k3s, bom, nerdctl, cadvisor-fips, flux-helm-controller, k8sgpt, flux, policy-controller-fips, kots, timoni, docker-machine-driver-harvester, cadvisor, kubescape, kubevela, rancher-machine,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: ko-fips, slsa-verifier, vexctl, goreleaser, dagger, guac, k3d, k3s, bom, nerdctl, cadvisor-fips, flux-helm-controller, k8sgpt, flux, policy-controller-fips, kots, timoni, docker-machine-driver-harvester, cadvisor, kubescape, kubevela, rancher-machine,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: k3d, k3s, nerdctl, kots, kubescape, cadvisor, runc, kaniko, skaffold, ctop, docker, newrelic-infrastructure-agent, wolfictl, syft, grype, zarf, k9s, zot, trivy, skopeo, podman, buildkitd, kubernetes...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: zarf, runc, ctop, kubescape, wolfictl, cadvisor, skaffold, grype, newrelic-infrastructure-agent, kots, nerdctl, docker, k3d, k3s, buildkitd, skopeo, kaniko, trivy, kubernetes, syft, podman, k9s, zot...