CLEANSTART-2026-FR69458 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2026-33186, CVE-2026-39883, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 0.59.0-r0, 0.59.0-r1, 0.59.4-r0

Multiple security vulnerabilities affect the kapp-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: regclient, secrets-store-csi-driver-provider-azure-fips, nrdot-collector-k8s-fips, nri-haproxy-fips, harbor-registry-fips, aws-efs-csi-driver-fips, dataplaneapi-fips, aws-iam-authenticator-fips, timoni, syft-fips, aws-s3-controller, crossplane-provider-aws-cloudsearc...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: spiffe-helper, flux-image-reflector-controller, kserve-modelmesh-serving, gitaly, nri-mysql, promxy, ipfs-cluster, restic, percona-server-mongodb-operator, opencost, kubernetes-csi-external-attacher, go-discover, multus-cni, spicedb,...