CLEANSTART-2026-IZ37366 Security fixes in kubernetes-event-exporter 1.6.1-r2

Package kubernetes-event-exporter version 1.6.1-r2 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-JJ72716 Security fixes in kubernetes-event-exporter 1.6.1-r1

Package kubernetes-event-exporter version 1.6.1-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-DL23987 Security fixes in kubernetes-event-exporter 1.5-r1

Package kubernetes-event-exporter version 1.5-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-ZT42186 Security fixes in kubernetes-event-exporter 1.5-r2

Package kubernetes-event-exporter version 1.5-r2 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-QH63910 Security fixes in kubernetes-event-exporter 1.6.1-r3

Package kubernetes-event-exporter version 1.6.1-r3 fixes 1 vulnerabilities: CVE-2026-56852...

CLEANSTART-2026-XC36921 Security fixes in kubernetes-event-exporter 1.5-r3

Package kubernetes-event-exporter version 1.5-r3 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-41178, ghsa-259r-337f-4rfw...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: argo-events, atlantis, argo-rollouts-fips, kyverno-policy-reporter, argo-events-fips, argo-cd-fips, kubernetes-event-exporter, ory-kratos-fips, kubernetes-event-exporter-fips, ory-kratos, argo-cd, bento-fips, goreleaser, argo-rollouts, bento,...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: atlantis, kubewatch, argo-rollouts, goreleaser, argo-events, kubernetes-event-exporter, kyverno-policy-reporter, argo-cd, bento...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, temporal-server, chisel, terragrunt, spqr, runc, container-object-storage-interface, argo-events, azcopy, jitsucom-bulker, addon-resizer, crossplane-provider-aws-firehose, dapr, kubeflow, lazydocker, neuvector-dbgen, q, tekton-pipelines,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: step, chisel, spqr, kubernetes-csi-driver-nfs, runc, container-object-storage-interface, azcopy, postgres-operator, rabbitmq-default-user-credential-updater, kubeflow, crossplane-provider-aws-firehose, restic, mc, gogatekeeper, kserve-modelmesh-serving, grpcurl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kubevela, rabbitmq-messaging-topology-operator, actions-runner-controller, rook, src-fingerprint, pulumi, step-ca, terragrunt, argo-events, bank-vaults, crossplane-provider-azure-authorization, crossplane-provider-azure-managedidentity,...

CLEANSTART-2026-WL45158 Security fixes in kubernetes-event-exporter 1.7-r0

Package kubernetes-event-exporter version 1.7-r0 fixes 2 vulnerabilities: CVE-2025-47911, CVE-2025-58190...

CLEANSTART-2026-RJ04514 Security fixes in kubernetes-event-exporter 1.7-r1

Package kubernetes-event-exporter version 1.7-r1 fixes 46 vulnerabilities: ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, ghsa-gxhx-2686-5h9g, CVE-2026-41602, CVE-2026-33186...

CLEANSTART-2026-HY96164 Security fixes in kubernetes-event-exporter-fips 1.7-r0

Package kubernetes-event-exporter-fips version 1.7-r0 fixes 46 vulnerabilities: ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, ghsa-gxhx-2686-5h9g, CVE-2026-41602, CVE-2026-33186...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: atlantis, kubewatch, argo-rollouts, goreleaser, argo-events, kubernetes-event-exporter, kyverno-policy-reporter, argo-cd, bento...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, crossplane-provider-azure-spring, crossplane-provider-sql-fips, crossplane-provider-aws-cognitoidentity-fips, docker-fips, haproxy-ingress-fips, crossplane-provider-aws-ecr, cadence, crossplane-provider-azure-sql,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: step, cloudflared, kubernetes-csi-driver-nfs, argo-events, crossplane-provider-aws-firehose, tekton-pipelines, kserve-modelmesh-serving, k3d, crossplane-provider-aws-cloudwatchlogs, kubernetes-csi-driver-hostpath, crossplane-provider-aws-kms, dex, external-dns, eksct...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: step, cloudflared, kubernetes-csi-driver-nfs, argo-events, crossplane-provider-aws-firehose, tekton-pipelines, kserve-modelmesh-serving, k3d, crossplane-provider-aws-cloudwatchlogs, kubernetes-csi-driver-hostpath, crossplane-provider-aws-kms, dex, external-dns, eksct...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, openbao, container-object-storage-interface, filebrowser, argo-events, postgres-operator, rabbitmq-default-user-credential-updater, kyverno-notation-aws, kserve-modelmesh-serving, kubernetes-csi-driver-hostpath,...

CVE-2025-68476 KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential

KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, an Arbitrary File Read vulnerability has been identified in KEDA, potentially affecting any KEDA resource that uses TriggerAuthentication to configure HashiCorp Vault authentication. The...