GO-2025-4013 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, beats, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, yace, kubevela, rootlesskit-fips, oras,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

CLEANSTART-2026-GF33583 Security fixes in kustomize-fips 5.7.1-r1

Package kustomize-fips version 5.7.1-r1 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: act, terraform-provider-tls, cosign-fips, crossplane-provider-azure-managedidentity, chainctl, harbor-fips, flux-kustomize-controller, argo-cd, minio-fips, kyverno-notation-aws-fips, terraform-fips, traefik-fips, rootlesskit-fips, atlantis-fips, tekton-chains-fips,...

CLEANSTART-2026-VP44686 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61732, CVE-2025-68121 applied in versions: 5.7.1-r0, 5.7.1-r1

Multiple security vulnerabilities affect the kustomize-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-42342

Multiple security vulnerabilities affect the kustomize-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, beats, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, yace, kubevela, rootlesskit-fips, oras,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras, cilium-certgen,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras, cilium-certgen,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...