CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0

CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: newrelic-nri-statsd, spiffe-helper, docker-machine-driver-linode, flux-fips, gosu, prometheus-stackdriver-exporter, distribution-fips, sonobuoy-fips, argo-rollouts-fips, kubecolor, neuvector-dbgen, portieris-fips, kyverno-policy-reporter-plugins-trivy-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: etcd, victoriametrics-operator, vault-k8s, lazygit, nova, kind, spire-controller-manager, go-licenses, cert-manager-csi-driver, kbld, k8ssandra-client, pvc-autoresizer, aws-efs-csi-driver, boring-registry, secrets-store-csi-driver-provider-aws, oras, kubeflow,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: newrelic-nri-statsd, local-path-provisioner, nemo, modelmesh-runtime-adapter, cloud-provider-aws-fips, nvidia-nsight-compute-13.1, newrelic-fluent-bit-output, gcp-compute-persistent-disk-csi-driver-fips, kube-logging-operator-custom-runner-fips, blob-csi-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: dgraph, spiffe-helper, rekor-fips, sqlexporter-fips, chainctl, kubernetes-csi-external-provisioner, cloudnative-pg, gosu, kubernetes-csi-external-provisioner-fips, prometheus-stackdriver-exporter, sonobuoy-fips, argo-rollouts-fips, verticadb-operator-fips, kubecolor,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: ytt, gosu, ctop, vexctl, newrelic-infrastructure-agent, go-md2man, metallb, task, vault-k8s, mockery, nri-memcached, vt-cli, lazygit, grpcurl, kind, prometheus-alertmanager, kaf, nri-kafka, bom, thanos-operator, tailscale, helm-operator, yam, http-echo, go-licenses,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: ctop, vexctl, newrelic-infrastructure-agent, metallb, falcoctl, vault-k8s, rabbitmq-messaging-topology-operator, grpcurl, crossplane-provider-family-aws, prometheus-alertmanager, kaf, thanos-operator, crossplane-provider-aws-memorydb, helm-operator, terraform,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: bank-vaults-fips, dgraph, kubescape, up, aactl, falcoctl-fips, aws-efs-csi-driver-fips, prometheus-blackbox-exporter, prometheus-adapter-fips, volume-modifier-for-k8s-fips, prometheus-stackdriver-exporter, k3d, velero-plugin-for-alicloud, kubernetes-csi-livenessprobe...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-sendgrid, kubeflow, aactl, kubevela, buildkitd, cortex, src, scorecard, dgraph, k3d, slsa-verifier, up, kubescape...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, grpcurl, kind, kaf, bom, nodetaint, pulumi-kubernetes-operator, aws-efs-csi-driver, kubernetes-csi-livenessprobe, weaviate, git-lfs, kubeflow, aactl, atlantis, cortex, amass, scorecard, dgraph, kubeflow-katib, ollama, nghttp2, buildkitd...