CLEANSTART-2026-OR64895 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.1-r2

Package kubernetes-csi-external-provisioner-fips version 6.2.1-r2 fixes 21 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-DR03869 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.1-r1

Package kubernetes-csi-external-provisioner-fips version 6.2.1-r1 fixes 29 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

CLEANSTART-2026-HV38878 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.1-r3

Package kubernetes-csi-external-provisioner-fips version 6.2.1-r3 fixes 27 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: spicedb, argocd-image-updater, fluent-operator, cluster-api-provider-vsphere, cluster-api-aws-controller, rancher-agent, kyverno, cert-manager-webhook-pdns, cert-manager, cluster-api, pulumi-kubernetes-operator, tetragon, opentelemetry-operator, gatekeeper, crossplan...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: dive, kube-state-metrics, kubeflow-katib, prometheus-blackbox-exporter, kubernetes-dashboard-metrics-scraper, prometheus-pushgateway, prometheus-mysqld-exporter, kube-logging-operator, frp, nodetaint, bank-vaults-fips, pulumi-language-yaml, hey, node-problem-detector...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, spicedb, terragrunt, opentelemetry-collector, restic, ferretdb, hubble-ui, conftest, sigstore-scaffolding, zarf, kwok, opa, temporal, zot, ksops, vcluster, k8sgpt, pulumi-language-dotnet, cert-manager-cmctl, gomplate, kots, trivy, kaniko, cilium-cli,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, grpcurl, ferretdb, dive, argo-workflows, nri-mongodb, local-path-provisioner, vault-k8s, paranoia, temporal-ui-server, wait-for-port, gke-gcloud-auth-plugin, sbomqs, nri-couchbase, pulumi-language-yaml, fuse-overlayfs-snapshotter,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, argocd-image-updater, cloud-sql-proxy, nova, local-path-provisioner, vault-k8s, zarf, paranoia, rekor, temporal-ui-server, containerd, crossplane-provider-family-azure, glab, falco-no-driver, libnvidia-container,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kubernetes-csi-driver-nfs, podman, cluster-api-aws-controller, rekor, containerd, kserve-modelmesh-serving, vault-secrets-webhook, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, sriov-network-device-plugin,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, fluxcd-kustomize-mutating-webhook, stern, kubernetes-csi-driver-nfs, podman, fscrypt, timescaledb-parallel-copy, libnvidia-container, kserve-modelmesh-serving, vault-secrets-webhook, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, dive, argo-workflows, nova, terraform-provider-tls, zarf, paranoia, kubernetes-csi-driver-nfs, containerd, pdfcpu, libnvidia-container, falco-no-driver, vault-secrets-webhook, local-static-provisioner, minify, authservice, jitsucom-bulker,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, grpcurl, ferretdb, crossplane-provider-aws-iam, fluxcd-kustomize-mutating-webhook, spire-controller-manager, gitleaks, nri-mongodb, local-path-provisioner, vault-k8s, paranoia, timescaledb-parallel-copy, crossplane-provider-sql,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, dive, spire-controller-manager, nova, cluster-api-provider-vsphere, kubernetes-csi-driver-nfs, mockgen, rabbitmq-messaging-topology-operator, containerd, wait-for-port, libnvidia-container, nginx-prometheus-exporter, nri-consul,...

CLEANSTART-2026-LB37339 Security fixes in kubernetes-csi-external-resizer-fips 2.2.1-r1

Package kubernetes-csi-external-resizer-fips version 2.2.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-IK70425 Security fixes in kubernetes-csi-external-snapshotter 8.6.0-r4

Package kubernetes-csi-external-snapshotter version 8.6.0-r4 fixes 1 vulnerabilities: CVE-2026-39822...

CLEANSTART-2026-FV98119 Security fixes in kubernetes-csi-external-snapshotter-fips 8.4.0-r4

Package kubernetes-csi-external-snapshotter-fips version 8.4.0-r4 fixes 31 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: spicedb, argocd-image-updater, fluent-operator, cluster-api-provider-vsphere, cluster-api-aws-controller, rancher-agent, kyverno, cert-manager-webhook-pdns, cert-manager, cluster-api, pulumi-kubernetes-operator, tetragon, opentelemetry-operator, gatekeeper, crossplan...

CLEANSTART-2026-BD49035 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, fluxcd-kustomize-mutating-webhook, stern, kubernetes-csi-driver-nfs, rekor, cluster-api-aws-controller, containerd, libnvidia-container, kserve-modelmesh-serving, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, nri-consul,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, k8sgpt-operator, argocd-image-updater, grpcurl, cloud-sql-proxy, spire-controller-manager, argo-workflows, terraform-provider-tls, cluster-api-provider-vsphere, crossplane-provider-sql, kubernetes-csi-driver-nfs, fscrypt,...