CLEANSTART-2026-AQ33378 Security fixes for ghsa-gxhx-2686-5h9g applied in versions: 2.12.0-r0

Security vulnerability affects the kubewatch package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: argo-cd, bento, kyverno-policy-reporter, argo-events, atlantis, argo-rollouts, goreleaser, kubewatch, kubernetes-event-exporter...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: temporal, clickhouse-operator, newrelic-infra-operator, fluxcd-kustomize-mutating-webhook, smarter-device-manager, aws-privateca-issuer, dbmate, flux-image-reflector-controller, external-secrets-operator, metacontroller, gh, dkron, supercronic, dataplaneapi,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: spiffe-helper, bank-vaults, gke-gcloud-auth-plugin, kube-vip, crossplane-provider-azure-storage, wuzz, omnibump, gitlab-kas, aws-flb-kinesis, goreleaser, rancher-webhook, dive, aws-network-policy-agent, ctop, dgraph, local-path-provisioner, pgpool2exporter, terraform...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: flannel-cni-plugin, spiffe-helper, bank-vaults, age, gke-gcloud-auth-plugin, kube-vip, linkerd2-proxy-init, wuzz, shfmt, velero-plugin-for-microsoft-azure, hivemind, aws-flb-kinesis, dive, aws-network-policy-agent, ctop, terraform, thanos-operator, vault-k8s,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, flannel-cni-plugin, newrelic-infra-operator, nri-memcached, s5cmd, gke-gcloud-auth-plugin, docker-credential-acr-env, cue, nri-kafka, rqlite, coredns, vite, falco, shfmt, dynamic-localpv-provisioner, govulncheck, aws-flb-kinesis, goreleaser,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, flannel-cni-plugin, newrelic-infra-operator, nri-memcached, s5cmd, gke-gcloud-auth-plugin, docker-credential-acr-env, cue, nri-kafka, rqlite, coredns, vite, falco, shfmt, dynamic-localpv-provisioner, govulncheck, aws-flb-kinesis, goreleaser,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, flannel-cni-plugin, newrelic-infra-operator, nri-memcached, s5cmd, gke-gcloud-auth-plugin, docker-credential-acr-env, cue, nri-kafka, rqlite, coredns, vite, falco, shfmt, dynamic-localpv-provisioner, govulncheck, aws-flb-kinesis, goreleaser,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, flannel-cni-plugin, newrelic-infra-operator, nri-memcached, s5cmd, gke-gcloud-auth-plugin, docker-credential-acr-env, cue, nri-kafka, rqlite, coredns, vite, falco, shfmt, dynamic-localpv-provisioner, govulncheck, aws-flb-kinesis, goreleaser,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, guac, newrelic-infra-operator, nri-kubernetes, bank-vaults, docker-compose, rqlite, coredns, crossplane-provider-azure-storage, timestamp-authority, kaniko, falco, crossplane-provider-aws-s3, dynamic-localpv-provisioner,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, flannel-cni-plugin, newrelic-infra-operator, nri-memcached, s5cmd, gke-gcloud-auth-plugin, docker-credential-acr-env, cue, nri-kafka, rqlite, coredns, vite, falco, shfmt, dynamic-localpv-provisioner, govulncheck, aws-flb-kinesis, goreleaser,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, flannel-cni-plugin, newrelic-infra-operator, nri-memcached, s5cmd, gke-gcloud-auth-plugin, docker-credential-acr-env, cue, nri-kafka, rqlite, coredns, vite, falco, shfmt, dynamic-localpv-provisioner, govulncheck, aws-flb-kinesis, goreleaser,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: src, atlantis, trillian, hugo, nats, flux-source-controller, prometheus-operator, skaffold, prometheus-node-exporter, terraform-provider-sendgrid-fips, falcoctl, slsa-verifier, gobuster, aws-ebs-csi-driver, configmap-reload-fips, oauth2-proxy,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, cue, rqlite, coredns, dynamic-localpv-provisioner, aactl, nginx-stable, dgraph, flux-helm-controller, secrets-store-csi-driver, terraform, kubevela, buildkitd, pulumi-language-yaml, prometheus-blackbox-exporter, frp, gitness, gomplate, weaviat...