CLEANSTART-2026-OB24504 Previously, resolving relative paths containing parent directory ('

Multiple security vulnerabilities affect the kube-state-metrics package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: kube-state-metrics: kube-state-metrics-2.20.0-0.2.hum1 aarch64, x8664 kube-state-metrics-2.20.0-0.2.hum1.src src Security Fixes: kube-state-metrics: CVE-2026-71556...

CLEANSTART-2026-SK94653 Security fixes in kube-state-metrics-fips 2.20.0-r1

Package kube-state-metrics-fips version 2.20.0-r1 fixes 9 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-OJ80990 Security fixes in kube-state-metrics-fips 2.20.0-r2

Package kube-state-metrics-fips version 2.20.0-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-WT90810 Security fixes in kube-state-metrics 2.20.0-r1

Package kube-state-metrics version 2.20.0-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-gcjh-h69q-9w9g, CVE-2026-41178...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, rancher-agent, spicedb-operator, cluster-autoscaler, cluster-api-gcp-controller, kubescape-operator, rancher-system-agent, keda, kubernetes-csi-external-snapshotter, external-secrets-operator, tkn, cluster-api-aws-controller, cluster-api,...

GO-2022-0619 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, kubeflow, kubeflow-fips...

GO-2022-1130 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, kube-state-metrics, prometheus-pushgateway...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kube-state-metrics, wireguard-go, hey, kubeflow, kubeflow-fips, k3d, grpcurl, terraform-provider-sendgrid, restic, kubeflow-katib, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, go, gke-gcloud-auth-plugin...

GO-2022-0969 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kube-state-metrics, wireguard-go, kubeflow, dynamic-localpv-provisioner-fips, kubeflow-fips, k3d, grpcurl, terraform-provider-sendgrid, kubeflow-katib, terraform-provider-sendgrid-fips, hey...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kube-state-metrics, kubeflow, dynamic-localpv-provisioner-fips, kubeflow-fips, vt-cli, k3d, grpcurl, php-fpmexporter, terraform-provider-sendgrid, terraform-provider-sendgrid-fips, hey, gitleaks...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: rancher-helm, argocd-image-updater, spicedb-operator, cluster-autoscaler, kubescape-operator, witness, slsa-verifier, victoriametrics-cluster, k9s, volume-modifier-for-k8s, kube-vip, nri-discovery-kubernetes, external-secrets-operator, kube-logging-operator,...

CLEANSTART-2026-QD19370 Security fixes in kube-state-metrics-fips 2.15.0-r0

Package kube-state-metrics-fips version 2.15.0-r0 fixes 6 vulnerabilities: CVE-2025-61727, CVE-2025-61729, ghsa-6v2p-p543-phr9, ghsa-hcg3-q754-cr77, ghsa-qxp5-gwg8-xv66...

CLEANSTART-2026-IV23706 Security fixes in kube-state-metrics 2.19.1-r0

Package kube-state-metrics version 2.19.1-r0 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-XU92282 Security fixes in kube-state-metrics 2.15.0-r1

Package kube-state-metrics version 2.15.0-r1 fixes 15 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836, CVE-2026-42499...

CLEANSTART-2026-YN39605 Security fixes in kube-state-metrics-fips 2.17.0-r0

Package kube-state-metrics-fips version 2.17.0-r0 fixes 1 vulnerabilities: ghsa-2464-837c-4c3m...

CLEANSTART-2026-AT86413 Security fixes in kube-state-metrics 2.15.0-r0

Package kube-state-metrics version 2.15.0-r0 fixes 1 vulnerabilities: CVE-2025-22868...

CLEANSTART-2026-AJ94183 Security fixes in kube-state-metrics-fips 2.17.0-r1

Package kube-state-metrics-fips version 2.17.0-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-XF99533 Security fixes in kube-state-metrics 2.17.0-r3

Package kube-state-metrics version 2.17.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-GX93192 Security fixes in kube-state-metrics 2.10.1-r2

Package kube-state-metrics version 2.10.1-r2 fixes 19 vulnerabilities: CVE-2026-39835, CVE-2026-39828, CVE-2026-39827, CVE-2026-25681, CVE-2026-27136...