CLEANSTART-2026-AQ33378 Security fixes for ghsa-gxhx-2686-5h9g applied in versions: 2.12.0-r0

Security vulnerability affects the kubewatch package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: argo-rollouts, kubewatch, argo-cd, kyverno-policy-reporter, argo-events, bento, kubernetes-event-exporter, atlantis, goreleaser...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, grafana-operator, nfs-subdir-external-provisioner, sftpgo-plugin-eventsearch, polaris, omnibump, smokescreen, metacontroller, oras, victoriametrics-cluster, flux-image-reflector-controller, aws-privateca-issuer,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, newrelic-infrastructure-agent, kube-state-metrics, buildah, knative-operator, gitsign, prometheus, dapr, db-operator, mockery, gitlab-kas, dkron, zot, modelmesh-runtime-adapter, mailpit, boring-registry,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, datadog-agent, secrets-store-csi-driver-provider-aws, lazygit, sbom-scorecard, newrelic-infrastructure-agent, prometheus-alertmanager, kube-state-metrics, kpt, go-bindata, k8sgpt-operator, cni-plugins, ytt, dockerize,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, datadog-agent, secrets-store-csi-driver-provider-aws, lazygit, sbom-scorecard, newrelic-infrastructure-agent, prometheus-alertmanager, kube-state-metrics, kpt, go-bindata, k8sgpt-operator, cni-plugins, ytt, dockerize,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, datadog-agent, secrets-store-csi-driver-provider-aws, lazygit, sbom-scorecard, newrelic-infrastructure-agent, prometheus-alertmanager, kube-state-metrics, kpt, go-bindata, k8sgpt-operator, cni-plugins, ytt, dockerize,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, kube-state-metrics, gitsign, mockery, distribution, modelmesh-runtime-adapter, helm-docs, boring-registry, rancher-loglevel, memcached-exporter, k9s, docker-credential-ecr-login, certificate-transparency, crossplane-provider-aws...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, datadog-agent, secrets-store-csi-driver-provider-aws, lazygit, sbom-scorecard, newrelic-infrastructure-agent, prometheus-alertmanager, kube-state-metrics, kpt, go-bindata, k8sgpt-operator, cni-plugins, ytt, dockerize,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, datadog-agent, secrets-store-csi-driver-provider-aws, crossplane-provider-aws-dynamodb, newrelic-infrastructure-agent, prometheus-alertmanager, kube-state-metrics, kpt, metacontroller, k8sgpt-operator, tkn,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, datadog-agent, secrets-store-csi-driver-provider-aws, lazygit, sbom-scorecard, newrelic-infrastructure-agent, prometheus-alertmanager, kube-state-metrics, kpt, go-bindata, k8sgpt-operator, cni-plugins, ytt, dockerize,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, datadog-agent, secrets-store-csi-driver-provider-aws, lazygit, sbom-scorecard, newrelic-infrastructure-agent, prometheus-alertmanager, kube-state-metrics, kpt, go-bindata, k8sgpt-operator, cni-plugins, ytt, dockerize,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: src, node-problem-detector, nats, dex-k8s-authenticator, coredns, haproxy-ingress, falcoctl-fips, git-lfs, prometheus-node-exporter, k8sgpt-operator, crossplane-provider-aws, k8sgpt, flux-kustomize-controller, thanos-operator, newrelic-infrastructure-agent, hugo,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, newrelic-infrastructure-agent, kpt, metacontroller, kubeflow-katib, kubevela, stakater-reloader, conftest, pulumi-kubernetes-operator, nats, pulumi, flux-helm-controller, memcached-exporter, dgraph, kaf, envoy-ratelimit,...