GO-2025-3955 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, tempo, ratify, gptscript, prometheus-operator, kubernetes-csi-driver-hostpath, bom, harbor-cli, opa, wait-for-port, rancher-system-upgrade-controller, render-template, step-kms-plugin, rclone, kubernetes-dashboard-web, tflint, kind,...

CLEANSTART-2026-MX15076 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.7.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-web package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips, vale, helm-exporter, kube-state-metrics, mig-parted, kyverno-policy-reporter-plugins-kyverno-fips, nerdctl, nodetaint-fips, commercial-expanso-edge, crossplane-provider-azure-authorization, nodetaint,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips, vale, helm-exporter, kube-state-metrics, mig-parted, kyverno-policy-reporter-plugins-kyverno-fips, nerdctl, nodetaint-fips, commercial-expanso-edge, crossplane-provider-azure-authorization, nodetaint,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, vale, helm-exporter, mig-parted, go-spdk-helper, terraform-provider-tls-fips, iptables-wrappers, kubernetes-csi-driver-nfs-fips, crossplane-provider-aws-backup, mkcert, crossplane-provider-family-aws-fips, vault-k8s-fips,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: contour, neuvector, oauth2-proxy, azure-service-operator, yunikorn-k8shim, neuvector-sigstore-interface, aws-application-networking-k8s, emissary, nodetaint, cluster-api-helm-controller, k3d, polaris, ratify, harbor-cli, traefik, conftest,...