CLEANSTART-2026-CS02869 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, ghsa-p77j-4mvh-x3m3 applied in versions: 2.18.0-r0, 2.18.0-r1, 2.18.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, postgres-operator, grafana-alloy, kube-rbac-proxy, kargo, dataplaneapi, kine, falco-no-driver, kyverno-policy-reporter, terraform-provider-azapi, aws-flb-kinesis, polaris, prometheus-alertmanager, bazelisk, aws-sigv4-proxy, kots,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: gops, crossplane-provider-aws-kinesis, postgres-operator, grafana-alloy, kube-rbac-proxy, kargo, dataplaneapi, kine, falco-no-driver, kyverno-policy-reporter, terraform-provider-azapi, aws-flb-kinesis, wire-go, polaris, prometheus-alertmanager, bazelisk,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: gops, crossplane-provider-aws-kinesis, postgres-operator, grafana-alloy, kube-rbac-proxy, kargo, dataplaneapi, kine, falco-no-driver, kyverno-policy-reporter, terraform-provider-azapi, aws-flb-kinesis, wire-go, polaris, prometheus-alertmanager, bazelisk,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, slsa-verifier, terraform-provider-sendgrid, buildkitd, aactl, src, cortex, kubevela, kubeflow, k3d, kubescape, ipfs, scorecard, spark-operator, up, dgraph, prometheus-blackbox-exporter...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, conftest-fips, bank-vaults-fips, src, k3d, prometheus-adapter-fips, slsa-verifier, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, aws-efs-csi-driver-fips, kube-oidc-proxy, falcoctl-fips, kubeflow-fips, smarter-device-manager-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: slsa-verifier, cue, aws-efs-csi-driver, fuse-overlayfs-snapshotter, stakater-reloader, hugo, kubewatch, kots, kubernetes-csi-livenessprobe, secrets-store-csi-driver, scorecard, kaf, nri-prometheus, nats, kubeflow, atlantis, hey, memcached-exporter, ko, spark-operator...