CLEANSTART-2026-JZ53476 Security fixes in kserve-rest-proxy 0.12.0-r1

Package kserve-rest-proxy version 0.12.0-r1 fixes 6 vulnerabilities: CVE-2025-68121, CVE-2026-27142, CVE-2026-25679, CVE-2025-58190, CVE-2025-47911...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: mcp-grafana, azure-workload-identity-webhook, opa-envoy, kubescape-operator, rancher-telemetry, aws-efs-csi-driver, rqlite, nri-mysql, sftpgo-plugin-geoipfilter, azure-service-operator, nri-elasticsearch, wal-g, grafana-rollout-operator, kubernetes-dashboard-web,...

CLEANSTART-2026-HK71313 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 0.12.0-r0, 0.12.0-r1, 0.12.0-r2

Multiple security vulnerabilities affect the kserve-rest-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: dagdotdev, bank-vaults, rancher-machine, blobfuse2, linkerd2-proxy-init, gostatsd, php-fpmexporter, vexctl, kube-vip, vault-benchmark, cloud-provider-aws, local-path-provisioner, shfmt, addon-resizer, kuberay-operator, custom-pod-autoscaler-operator, git-lfs,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: checksec, docker-credential-ecr-login, k8sgpt-operator, kube-logging-operator-custom-runner-fips, dagdotdev, gostatsd, knative-eventing, sftpgo-plugin-pubsub, nvidia-nsight-compute-13.1, prometheus-node-exporter-fips, modelmesh-runtime-adapter, prometheus-adapter,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: checksec, docker-credential-ecr-login, k8sgpt-operator, kube-logging-operator-custom-runner-fips, dagdotdev, gostatsd, knative-eventing, sftpgo-plugin-pubsub, nvidia-nsight-compute-13.1, prometheus-node-exporter-fips, modelmesh-runtime-adapter, prometheus-adapter,...