CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: aactl, cert-manager, karpenter, flux, commercial-gitlab-rails-ee, commercial-nginx-ingress, consul-k8s, tempo-fips, telegraf, loki, spire-server, qemu-guesthelper, commercial-gitlab-workhorse-ee-fips, prometheus, containerd, cosign-fips, kyverno,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, k6, rclone, argo-cd, chartmuseum, kyverno-policy-reporter-ui, terragrunt, prometheus-adapter, spire-server, grafana-pyroscope, grafana-alloy, continuity, zarf, external-dns, headlamp, karpenter, grafana, temporal-ui-server, mesosphere-vsphere-csi,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, k6, rclone, argo-cd, chartmuseum, kyverno-policy-reporter-ui, terragrunt, prometheus-adapter, spire-server, grafana-pyroscope, grafana-alloy, continuity, zarf, external-dns, headlamp, karpenter, grafana, temporal-ui-server, mesosphere-vsphere-csi,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cert-manager, karpenter, aactl, ingress-nginx-controller, kubernetes, spire-server, flux, falco-no-driver, external-dns, loki...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cert-manager, karpenter, aactl, ingress-nginx-controller, kubernetes, spire-server, flux, falco-no-driver, external-dns, loki...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cert-manager, karpenter, aactl, ingress-nginx-controller, kubernetes, spire-server, flux, falco-no-driver, external-dns, loki...

GO-2026-4970 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, buildah-fips, harbor-fips, timestamp-authority-fips, flux, ocm-kubernetes-controller, prometheus-operator, cerbos-fips, kyverno-policy-reporter-plugins-kyverno, backup-restore-operator, rekor-fips, flux-fips, fleet-server-fips, telegraf,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: redpanda, podinfo, migrate, kbld, emissary, manifest-tool, spire-server, crossplane-provider-aws-route53, crossplane-provider-aws-cloudformation, envoy-gateway, actions-runner-controller, node-problem-detector, wuzz, zarf, cloud-provider-azure, cloud-provider-aws,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, kubernetes-dashboard, argo-cd, telegraf, zot, kaf, datadog-agent, kyverno, grafana-alloy, prometheus-operator, knative-serving, zarf, helm, karpenter, runc, dask-gateway, grafana, kubevela, hubble, kubo, coredns, aws-flb-cloudwatch, karma, kots,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, fscrypt, kubernetes-dashboard, argo-cd, telegraf, kubescape, zot, fuse-overlayfs-snapshotter, kaf, kyverno, spire-server, prometheus-operator, external-dns, kine, cloud-provider-aws, gitlab-kas, helm, karpenter, runc, dask-gateway, gitaly,...

CLEANSTART-2026-CO70502 Security fixes in karpenter 1.9.0-r2

Package karpenter version 1.9.0-r2 fixes 2 vulnerabilities: CVE-2026-33811, CVE-2026-33814...

CLEANSTART-2026-QM14096 Security fixes in karpenter-fips 1.9.0-r0

Package karpenter-fips version 1.9.0-r0 fixes 23 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143...

CLEANSTART-2026-BA48090 Security fixes in karpenter-fips 1.8.6-r0

Package karpenter-fips version 1.8.6-r0 fixes 2 vulnerabilities: CVE-2025-58190, CVE-2025-47911...

CLEANSTART-2026-QH30636 Security fixes in karpenter 1.9.0-r0

Package karpenter version 1.9.0-r0 fixes 5 vulnerabilities: CVE-2026-32283, CVE-2026-32281, CVE-2026-32280, CVE-2026-25679, CVE-2026-32282...

CLEANSTART-2026-QC71924 Security fixes for CVE-2026-25679, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.9.0-r0, 1.9.0-r1, 1.9.0-r2

Multiple security vulnerabilities affect the karpenter package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, buildah-fips, harbor-fips, timestamp-authority-fips, flux, ocm-kubernetes-controller, prometheus-operator, cerbos-fips, kyverno-policy-reporter-plugins-kyverno, backup-restore-operator, rekor-fips, flux-fips, fleet-server-fips, telegraf,...

CLEANSTART-2026-KO66630 Security fixes for CVE-2026-25679, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.9.0-r0, 1.9.0-r1

Multiple security vulnerabilities affect the karpenter package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MI82983 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.8.6-r0, 1.8.6-r1, 1.9.0-r0

Multiple security vulnerabilities affect the karpenter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MP87020 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources

Multiple security vulnerabilities affect the karpenter package. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: buildah-fips, prometheus-elasticsearch-exporter-fips, kubernetes-csi-livenessprobe, kyverno-policy-reporter-plugins-kyverno, aws-fsx-csi-driver-fips, amazon-ecs-agent-fips, policy-controller, flux-fips, go, crossplane-provider-aws-kinesis-fips, influxd, flannel,...