CLEANSTART-2026-GN03543 Security fix for GHSA-qxp5-gwg8-xv66 applied in: ollama-fips 0.34.4-r2, metallb 0.13.12-r3

GHSA-qxp5-gwg8-xv66 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AZ99024 attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing

Security vulnerability affects the metallb package. An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing...

CLEANSTART-2026-YO86500 Security fix for GHSA-8r3f-844c-mc37 applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0, metallb 0.13.12-r3

GHSA-8r3f-844c-mc37 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TT15938 protojson

Security vulnerability affects the metallb package. The protojson...

CLEANSTART-2026-FX62991 Security fix for GHSA-6v2p-p543-phr9 applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0, metallb 0.13.12-r3

GHSA-6v2p-p543-phr9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZH56508 Security fix for GHSA-vvgc-356p-c3xw applied in: ollama-fips 0.34.4-r2, nfs-subdir-external-provisioner-fips 4.0.18-r0, metallb 0.13.12-r3

GHSA-vvgc-356p-c3xw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ML87749 Security fix for GHSA-4v7x-pqxf-cx7m applied in: cfssl 1.5.0-r1, clickhouse-operator 0.25.5-r0, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, metallb 0.13.12-r3, multus-cni-fips 4.0.2-r2, wave-fips 0.7.2-r1, wave-fips 0.8.0-r1, wave-fips 0.9.0-r1, wavefront-collector-for-kubernetes 1.13.0-r0

GHSA-4v7x-pqxf-cx7m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV25742 Security fix for CVE-2026-14362 applied in: metallb 0.13.12-r5, metallb 0.14.9-r4, metallb 0.15.3-r1, metallb 0.16.1-r1, victoriametrics-operator 0.73.1-r1, weaviate-fips 1.37.14-r0, weaviate-fips 1.38.6-r2

CVE-2026-14362 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NR05292 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the metallb package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

PT-2026-98431

Multiple security vulnerabilities affect the metallb package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-HA46232 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the metallb package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-VO23255 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the metallb package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CLEANSTART-2026-LI28091 HashiCorp memberlist before version 0

Multiple security vulnerabilities affect the metallb package. HashiCorp memberlist before version 0. See references for individual vulnerability details...

CLEANSTART-2026-SS34822 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the metallb package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, cert-manager-webhook-pdns, kyverno-notation-aws, hubble, external-secrets-operator, crossplane, flux-helm-controller, cert-manager-istio-csr, cluster-api-aws-controller, cluster-api-ipam-provider-in-cluster, rke2-cloud-provider, cass-operator,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: ferretdb, kube-logging-operator, mage, litefs, sonobuoy, bom, supercronic, dive, kubernetes-dashboard-metrics-scraper, cass-operator, docker-credential-ecr-login, wire-go, speedtest-go, gomplate, ctop, nerdctl, nfs-subdir-external-provisioner, kubevela, wait-for-port...

CLEANSTART-2026-LM18792 Security fixes in metallb 0.14.9-r2

Package metallb version 0.14.9-r2 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507...

CLEANSTART-2026-KO15676 Security fixes in metallb 0.13.12-r4

Package metallb version 0.13.12-r4 fixes 2 vulnerabilities: CVE-2024-24786, ghsa-8r3f-844c-mc37...

CLEANSTART-2026-BK90625 Security fixes in metallb-fips 0.14.9-r1

Package metallb-fips version 0.14.9-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-VY83992 Security fixes in metallb 0.16.1-r1

Package metallb version 0.16.1-r1 fixes 10 vulnerabilities: CVE-2026-39824, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506...