GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cis-operator, cni-plugins, kapp-controller, kubernetes-csi-driver-hostpath, spark-operator, wire-go, cluster-api-azure-controller, k8sgpt, kyverno-notation-aws, ini-file, rabbitmq-messaging-topology-operator, gptscript, ratify, kubernetes-dashboard-api, lazydocker,...

CLEANSTART-2026-MX15076 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.7.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-web package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: malcontent, victoriametrics-cluster-fips, yunikorn-k8shim-fips, trivy, wgcf, kafkaexporter, spicedb-operator, zitadel, longhorn-cli, aws-application-networking-k8s, emqx-exporter-fips, cloud-provider-azure-fips, cloud-provider-azure, cue-fips, gitlab-operator,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: malcontent, victoriametrics-cluster-fips, yunikorn-k8shim-fips, trivy, wgcf, kafkaexporter, spicedb-operator, zitadel, longhorn-cli, aws-application-networking-k8s, emqx-exporter-fips, cloud-provider-azure-fips, cloud-provider-azure, cue-fips, gitlab-operator,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim-fips, trivy, wgcf, cloud-provider-azure, kubernetes-release-fips, gitlab-operator-fips, gostatsd, slsa-verifier, gitness, k8ssandra-operator, cloud-sql-proxy-fips, knative-eventing-fips, crossplane-provider-keycloak, q, ctop, cilium-envoy-fips,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: gcsfuse, cg, trivy, wgcf, zot, tigera-operator, kubernetes-dashboard-web, aws-application-networking-k8s, swagger, migrate, oauth2-proxy, kubernetes-dashboard-api, headlamp, rabbitmq-cluster-operator, step-kms-plugin, cluster-api-helm-controller, cluster-api, polaris...