CLEANSTART-2026-CS02869 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, ghsa-p77j-4mvh-x3m3 applied in versions: 2.18.0-r0, 2.18.0-r1, 2.18.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OH47925 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

RHCOS 3 : OpenShift Container Platform 3.11 openshift-external-storage (RHSA-2019:4054)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4054 advisory. - kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation CVE-2019-11255...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, wave, buildah, mattermost, kaf, kyverno-policy-reporter-ui, spire-controller-manager, terraform, rclone, prometheus-blackbox-exporter, mcp-grafana, xeol, certificate-transparency, cloud-sql-proxy, kubernetes-csi-external-resizer,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, gostatsd, git-credential-oauth, kaf, spire-controller-manager, rclone, ctop, nri-f5, postgres-operator, harbor-scanner-trivy, gatekeeper, cluster-api-ipam-provider-in-cluster, gitaly, telegraf, kafka-proxy, apache-exporter, cert-exporter,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller-fips, kubevirt-cdi-operator, crane, kcp, kube-bench, trivy, gitlab-kas, nfpm, crossplane-provider-aws-acm-fips, kepler, s5cmd-fips, yace-fips, postgres-operator-fips, longhorn-share-manager, aws-application-networking-k8s-fips,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, podinfo, traefik, grafana-alloy, k8sgateway, kubo, tekton-chains, grafana-image-renderer, jaeger-operator, mcp-grafana, xeol, kubernetes-csi-external-resizer, ferretdb, buildkitd, gatekeeper, cluster-api-ipam-provider-in-cluster, cerbos,...

CLEANSTART-2026-LC01167 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WM95952 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, kaf, spire-controller-manager, ctop, postgres-operator, gatekeeper, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-kms, gitaly, telegraf, kserve, octo-sts, crossplane-provider-aws-kinesis, kafka-proxy, apache-exporter,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, podinfo, buildah, mattermost, kaf, kyverno-policy-reporter-ui, spire-controller-manager, kubo, crossplane-provider-family-aws, prometheus-blackbox-exporter, mcp-grafana, cloud-sql-proxy, crossplane-provider-aws-cloudformation,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, kaf, spire-controller-manager, ctop, postgres-operator, gatekeeper, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-kms, gitaly, telegraf, kserve, octo-sts, crossplane-provider-aws-kinesis, kafka-proxy, xcaddy, apache-exporter,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, podinfo, buildah, mattermost, kaf, kyverno-policy-reporter-ui, spire-controller-manager, kubo, crossplane-provider-family-aws, prometheus-blackbox-exporter, mcp-grafana, cloud-sql-proxy, crossplane-provider-aws-cloudformation,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller-fips, spicedb, gitlab-kas, kepler, livekit-cli, secrets-store-csi-driver-provider-gcp-fips, longhorn-share-manager, crossplane-function-go-templating, crossplane-function-go-templating-fips, gitlab-operator-fips, kyverno-policy-reporter-fip...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller-fips, spicedb, helm-operator-fips, trivy, containerd-fips, livekit-cli, secrets-store-csi-driver-provider-gcp-fips, gitlab-operator-fips, prometheus-mongodb-exporter-fips, argo-cd-fips, cass-operator-fips, prometheus-alertmanager,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: gostatsd, git-credential-oauth, kaf, spire-controller-manager, rclone, ctop, postgres-operator, harbor-scanner-trivy, gatekeeper, crossplane-provider-aws-kms, telegraf, kserve, octo-sts, crossplane-provider-aws-kinesis, kafka-proxy, apache-exporter,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: gostatsd, git-credential-oauth, kaf, spire-controller-manager, rclone, ctop, postgres-operator, harbor-scanner-trivy, gatekeeper, crossplane-provider-aws-kms, gitaly, telegraf, kserve, elvish, octo-sts, gotestsum, crossplane-provider-aws-kinesis, kafka-proxy, xcaddy,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: gostatsd, git-credential-oauth, kaf, spire-controller-manager, rclone, ctop, postgres-operator, harbor-scanner-trivy, gatekeeper, crossplane-provider-aws-kms, gitaly, telegraf, kserve, elvish, octo-sts, gotestsum, crossplane-provider-aws-kinesis, kafka-proxy, xcaddy,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, wave, podinfo, gostatsd, kor, git-credential-oauth, mattermost, traefik, kyverno-policy-reporter-ui, spire-controller-manager, terraform, k8sgateway, kubo, crossplane-provider-family-aws, prometheus-blackbox-exporter, xeol,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, wave, podinfo, gostatsd, kor, git-credential-oauth, mattermost, traefik, kyverno-policy-reporter-ui, spire-controller-manager, terraform, k8sgateway, kubo, crossplane-provider-family-aws, ctop, prometheus-blackbox-exporter, xeol,...