CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: trillian, tempo, istio, minio, loki, telegraf, cloud-sql-proxy, mc, splunk-otel-collector, karma, minio-object-browser, minio-operator, prometheus, prometheus-pushgateway, jaeger, keda, node-problem-detector, certificate-transparency, datadog-agent, mcp-grafana...

CLEANSTART-2026-KU98579 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the istio package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-AS59691 Security fixes for CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-31837, CVE-2026-31838, ghsa-9h8m-3fm2-qjrq applied in versions: 1.28.3-r0

Multiple security vulnerabilities affect the istio package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JG61689 Security fixes for CVE-2025-15558, CVE-2026-33186, ghsa-p436-gjf2-799p applied in versions: 1.29.0-r0, 1.29.0-r1

Multiple security vulnerabilities affect the istio package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UV31684 Security fixes for CVE-2025-15558, CVE-2026-33186, ghsa-p436-gjf2-799p applied in versions: 1.28.4-r0, 1.28.4-r1

Multiple security vulnerabilities affect the istio package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VD70282 Security fixes for CVE-2025-11065, CVE-2025-15558, CVE-2026-33186, ghsa-2464-8j7c-4cjm, ghsa-p436-gjf2-799p applied in versions: 1.27.1-r0, 1.27.7-r1

Multiple security vulnerabilities affect the istio package. These issues are resolved in later releases. See references for individual vulnerability details...

@pepr/istio (=0.1.0), @pepr/keycloak-authsvc (>=0.3.0 <=0.6.0) potentially affected by CVE-2026-23634 via pepr (>=0.14.2 <=0.9.0)

pepr NPM version =0.14.2, =0.3.0, =0.6.0 Source cves: CVE-2026-23634 Source advisory: OSV:GHSA-W54X-R83C-X79Q...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: k9s, headlamp, helm-mapkubeapis, chartmuseum, cerbos, istio, rancher-fleet, nova, envoy-gateway, trivy, chart-testing, kuma, zot, trivy-operator, kargo, kube-arangodb, flux-helm-controller, k8ssandra-client, kubescape, zarf, cilium-cli, linkerd2, consul-k8s,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: linkerd2-fips, flux-source-controller, consul-k8s, zot, cerbos-fips, k8ssandra-client, flux, tw, cilium-cli, rancher-fleet-fips, teleport, cloudbeat-fips, flux-helm-controller-fips, trivy-operator-fips, cert-manager-fips, eksctl, cerbos, rancher-helm, rancher-fleet,...