49 matches found
CLEANSTART-2026-PO24101 Security fix for GHSA-f6x5-jh6r-wrfv applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, kubernetes-dns-node-cache-fips 1.25.0-r1, argo-events 1.6.3-r1, local-static-provisioner-fips 2.8.0-r0, grafana-alloy-fips 1.12.1-r0, kubevela 1.10.5-r0
GHSA-f6x5-jh6r-wrfv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-CD85749 Security fix for GHSA-r6j8-c6r2-37rr applied in: local-static-provisioner-fips 2.8.0-r3, local-static-provisioner 2.8.0-r0, kyverno-policy-reporter-kyverno-plugin 1.6.4-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.6.4-r5
GHSA-r6j8-c6r2-37rr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UN07096 Security fix for GHSA-4x4m-3c2p-qppc applied in: local-static-provisioner-fips 2.8.0-r3, kyverno-policy-reporter-kyverno-plugin 1.6.4-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.6.4-r5
GHSA-4x4m-3c2p-qppc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GI83888 Security fix for GHSA-j5w8-q4qc-rx2x applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, argo-events 1.6.3-r1, local-static-provisioner-fips 2.8.0-r0, grafana-alloy-fips 1.12.1-r0
GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-FO62255 Security fix for GHSA-vvgc-356p-c3xw applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, ip-masq-agent 2.12.0-r1, kserve-rest-proxy 0.12.0-r0, kubernetes-dns-node-cache-fips 1.25.0-r1, local-static-provisioner-fips 2.8.0-r0
GHSA-vvgc-356p-c3xw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
GO-2026-6610 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, newrelic-infra-operator-fips, dynatrace-operator, hubble-ui, crossplane-provider-aws-kendra, eksctl, kubescape-operator-fips, chartmuseum-fips, crossplane-provider-aws-mediapackage-fips, crossplane-provider-aws-wafv2,...
GO-2026-6611 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, newrelic-infra-operator-fips, dynatrace-operator, hubble-ui, crossplane-provider-aws-kendra, eksctl, kubescape-operator-fips, chartmuseum-fips, crossplane-provider-aws-mediapackage-fips, crossplane-provider-aws-wafv2,...
GO-2026-6603 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, newrelic-infra-operator-fips, dynatrace-operator, hubble-ui, crossplane-provider-aws-kendra, eksctl, kubescape-operator-fips, chartmuseum-fips, crossplane-provider-aws-mediapackage-fips, crossplane-provider-aws-wafv2,...
CVE-2026-78669 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, newrelic-infra-operator-fips, dynatrace-operator, hubble-ui, crossplane-provider-aws-kendra, eksctl, kubescape-operator-fips, chartmuseum-fips, crossplane-provider-aws-mediapackage-fips, crossplane-provider-aws-wafv2,...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, newrelic-infra-operator-fips, dynatrace-operator, hubble-ui, crossplane-provider-aws-kendra, eksctl, kubescape-operator-fips, chartmuseum-fips, crossplane-provider-aws-mediapackage-fips, crossplane-provider-aws-wafv2,...
GO-2026-6612 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, newrelic-infra-operator-fips, dynatrace-operator, hubble-ui, crossplane-provider-aws-kendra, eksctl, kubescape-operator-fips, chartmuseum-fips, crossplane-provider-aws-mediapackage-fips, crossplane-provider-aws-wafv2,...
GO-2026-6612 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, oauth2-proxy, kube-logging-operator-custom-runner, boring-registry, vault-k8s, minio-operator, cilium-certgen, crossplane, opentelemetry-collector-contrib, spire-controller-manager, postgres-operator, dagger, step-ca,...
CVE-2026-78663 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, oauth2-proxy, kube-logging-operator-custom-runner, boring-registry, vault-k8s, minio-operator, cilium-certgen, crossplane, opentelemetry-collector-contrib, spire-controller-manager, postgres-operator, dagger, step-ca,...
GO-2026-6603 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, oauth2-proxy, kube-logging-operator-custom-runner, boring-registry, vault-k8s, minio-operator, cilium-certgen, crossplane, opentelemetry-collector-contrib, spire-controller-manager, postgres-operator, dagger, step-ca, s5cmd,...
GO-2026-6610 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, oauth2-proxy, boring-registry, vault-k8s, minio-operator, cilium-certgen, crossplane, opentelemetry-collector-contrib, spire-controller-manager, postgres-operator, dagger, step-ca, s5cmd, crossplane-provider-aws-sns, bom,...
CVE-2026-78659 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, oauth2-proxy, kube-logging-operator-custom-runner, boring-registry, vault-k8s, minio-operator, cilium-certgen, crossplane, opentelemetry-collector-contrib, spire-controller-manager, postgres-operator, dagger, step-ca, s5cmd,...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, oauth2-proxy, kube-logging-operator-custom-runner, boring-registry, vault-k8s, minio-operator, cilium-certgen, crossplane, opentelemetry-collector-contrib, spire-controller-manager, postgres-operator, dagger, step-ca, s5cmd,...
CVE-2026-97032 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, oauth2-proxy, kube-logging-operator-custom-runner, boring-registry, vault-k8s, minio-operator, cilium-certgen, crossplane, opentelemetry-collector-contrib, spire-controller-manager, postgres-operator, dagger, step-ca, s5cmd,...
CLEANSTART-2026-RD73080 Security fix for GHSA-cgrx-mc8f-2prm applied in: eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, kaniko 1.24.0-r0, kaniko-fips 1.24.0-r0, local-static-provisioner 2.6.0-r1, local-static-provisioner-fips 2.6.0-r1, local-static-provisioner-fips 2.7.0-r1, prometheus-node-exporter 1.8.0-r3, prometheus-node-exporter-fips 1.10.2-r1, prometheus-node-exporter-fips 1.10.2-r3, prometheus-node-exporter-fips 1.7.0-r2, prometheus-node-exporter-fips 1.8.2-r2, prometheus-node-exporter-fips 1.9.1-r1, runc 1.1.14-r0, skaffold 2.16.1-r1, trivy-fips 0.67.2-r0, velero 1.17.0-r0
GHSA-cgrx-mc8f-2prm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-MG19941 Security fix for GHSA-q78c-gwqw-jcmc applied in: local-static-provisioner 2.6.0-r1, nfs-subdir-external-provisioner-fips 4.0.16-r0
GHSA-q78c-gwqw-jcmc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...