CLEANSTART-2026-GF33583 Security fixes in kustomize-fips 5.7.1-r1

Package kustomize-fips version 5.7.1-r1 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: sops, gatus, neuvector-sigstore-interface, ko-fips, clickhouse-backup-fips, vault, chainloop-cli-fips, cilium-cli, trivy, vault-benchmark, apply-cve-bump, gitlab-runner-fips, juicefs, crossplane-provider-azure-notificationhubs, witness, harbor, tekton-pipelines-fips,...

CLEANSTART-2026-VP44686 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61732, CVE-2025-68121 applied in versions: 5.7.1-r0, 5.7.1-r1

Multiple security vulnerabilities affect the kustomize-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, ini-file, sbom-convert, xcaddy, kubernetes-event-exporter, kustomize, ytt-fips, terraform-provider-azuread, kwok, cluster-api-gcp-controller-fips, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, logstash-exporter, mc,...