CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0

CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: cis-operator, yace-fips, promxy, ipfs-cluster-fips, kubernetes-dashboard-metrics-scraper, dagdotdev, nvidia-nsight-compute-13.2, pgpool2exporter, extism, gotestsum, yunikorn-k8shim-fips, seaweedfs-operator, configmap-reload, hydra, prometheus-statsd-exporter,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: ytt, aws-flb-cloudwatch, pdfcpu, metrics-agent, hubble-ui, hugo-extended, kubernetes-csi-external-attacher, step, aws-flb-kinesis, docker-credential-gcr, docker-credential-ecr-login, ingress-nginx-controller, certificate-transparency, crossplane-provider-family-azure...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: yace-fips, azurefile-csi-fips, secrets-store-csi-driver-provider-aws-fips, dagdotdev, kubernetes-dashboard-fips, nvidia-nsight-compute-13.2, sftpgo-plugin-pubsub, ctop, kube-logging-operator-custom-runner-fips, secrets-store-csi-driver-provider-aws,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter-fips, promxy, ipfs-cluster-fips, containerd-fips, kubernetes-dashboard-metrics-scraper, kubewatch, aws-eks-pod-identity-agent, kyverno-policy-reporter-kyverno-plugin-fips, nvidia-nsight-compute-13.2, docker-cli-fips, extism,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-haproxy, aws-flb-cloudwatch, newrelic-infra-operator, ytt, dagger, sbomqs, vexctl, nri-cassandra, bazelisk, buildkitd, hubble-ui, kyverno-policy-reporter, nerdctl, smarter-device-manager, volume-modifier-for-k8s, kubernetes-dashboard, aws-flb-kinesis,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: zarf, newrelic-infra-operator, grafana-agent-operator, dagger, terragrunt, vexctl, crossplane-provider-aws-elasticache, conftest, cilium-cli, buildkitd, hubble-ui, hugo-extended, kyverno-policy-reporter, nerdctl, crossplane-provider-aws-route53, smarter-device-manage...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, slsa-verifier, volume-modifier-for-k8s-fips, terraform-provider-sendgrid, kubernetes-csi-livenessprobe, src, kube-oidc-proxy, kubeflow, prometheus-blackbox-exporter, buildkitd, kubeflow-fips, kubevela, k3d,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow, slsa-verifier, scorecard, spark-operator, k3d, kubevela, aactl, dgraph, terraform-provider-sendgrid, buildkitd, up, src, cortex, kubescape...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: conftest, buildkitd, terraform-provider-azurerm, wireguard-go, flux-notification-controller, prometheus-adapter, certificate-transparency, nats, helm, git-lfs, metacontroller, nodetaint, amass, aactl, gitness, ip-masq-agent, k3d, flux-kustomize-controller, kpt,...