CLEANSTART-2026-GK32867 Security fix for CVE-2026-1703 applied in: k8s-sidecar 1.25.2-r0, kubernetes-csi-driver-nfs-fips 4.13.0-r0, python3 3.11.14-r0, python3 3.12.12-r0

CVE-2026-1703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, scorecard, dbmate, nuclei, minio-operator, keda, petname, hey, rancher-system-upgrade-controller, step-issuer, migrate, prometheus-pushgateway, k8ssandra-client, telegraf, helm-operator, ko, gatekeeper, tekton-pipelines, harbor-scanner-trivy, aact...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: redis-operator, dbmate, docker-machine-driver-linode, go-licenses, scorecard, azure-workload-identity-webhook, minio-operator, aws-sigv4-proxy, kuberlr, spire-controller-manager, clickhouse-operator, crossplane-provider-aws-cloudformation, hey, grpcurl,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, nuclei, kuberlr, spire-controller-manager, clickhouse-operator, harbor-registry, rancher-system-upgrade-controller, migrate, ipfs-cluster, gptscript, steampipe, helm-operator, ko, aactl, kubernetes-dashboard-api, guac, cluster-api-azure-controller...