GO-2026-4340 vulnerabilities

Vulnerabilities for packages: slsa-verifier, rabbitmq-default-user-credential-updater, dkron, mc, octo-sts, aws-eks-pod-identity-agent, gostatsd, influx, nerdctl, telegraf, guac, kube-logging-operator-custom-runner, openbao-k8s, maru, minio, sftpgo-plugin-pubsub, cri-tools, rancher-machine,...

CLEANSTART-2026-EH11286 Security fixes for CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 0.12.0-r1, 0.12.0-r2

Multiple security vulnerabilities affect the kserve-modelmesh-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: slsa-verifier, dkron, sftpgo-plugin-eventsearch, mc, otel-cli, nerdctl, telegraf, memcached-exporter, helm-mapkubeapis, kserve-rest-proxy, sftpgo-plugin-pubsub, spicedb-operator, lazydocker, apisix-ingress-controller, cri-tools, terraform-provider-random,...