CLEANSTART-2026-FR69458 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2026-33186, CVE-2026-39883, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 0.59.0-r0, 0.59.0-r1, 0.59.4-r0

Multiple security vulnerabilities affect the kapp-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: spicedb-fips, velero-plugin-for-csi-fips, aws-fsx-csi-driver, splunk-otel-collector, prometheus-operator, azcopy-fips, openbao-k8s, gomplate-fips, falcosidekick, zabbix-agent2, rancher-system-upgrade-controller, helm-operator-fips, crossplane-provider-aws-route53-fip...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, crossplane-provider-aws-rolesanywhere-fips, nrdot-collector-k8s, amazon-eks-ami, prometheus-mongodb-exporter-fips, flux-helm-controller, nri-kafka-fips, hubble, mockery, flux-image-automation-controller, kubernetes-dashboard-api-fips, k3d...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, chisel, op-geth, portieris, etcd, hubble, kubernetes-dashboard-api, nginx-prometheus-exporter, hubble-ui, kserve-rest-proxy, gitsign, nova, kube-metrics-adapter, prometheus-adapter, mesosphere-vsphere-csi, nri-elasticsearch,...

CVE-2025-5187 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, local-static-provisioner, emissary, docker-machine-driver-harvester, rancher-system-agent, kubernetes-csi-driver-nfs, yunikorn-k8shim, kubernetes, mesosphere-vsphere-csi, nodetaint, kapp,...