CLEANSTART-2026-ML87749 Security fix for ghsa-4v7x-pqxf-cx7m applied in: cfssl 1.5.0-r1, clickhouse-operator 0.25.5-r0, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, metallb 0.13.12-r3, multus-cni-fips 4.0.2-r2, wave-fips 0.7.2-r1, wave-fips 0.8.0-r1, wave-fips 0.9.0-r1, wavefront-collector-for-kubernetes 1.13.0-r0

ghsa-4v7x-pqxf-cx7m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV25742 Security fix for CVE-2026-14362 applied in: metallb 0.13.12-r5, metallb 0.14.9-r4, metallb 0.15.3-r1, metallb 0.16.1-r1, victoriametrics-operator 0.73.1-r1, weaviate-fips 1.37.14-r0, weaviate-fips 1.38.6-r2

CVE-2026-14362 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NR05292 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the metallb package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

PT-2026-98431

Multiple security vulnerabilities affect the metallb package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-HA46232 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the metallb package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-VO23255 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the metallb package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CLEANSTART-2026-LI28091 HashiCorp memberlist before version 0

Multiple security vulnerabilities affect the metallb package. HashiCorp memberlist before version 0. See references for individual vulnerability details...

CLEANSTART-2026-SS34822 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the metallb package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: gitlab-kas, keda, datadog-agent, rancher, cluster-api, kubernetes-csi-external-health-monitor, kubernetes-csi-external-snapshotter, spicedb, kyverno-notation-aws, openfga, cert-manager-webhook-pdns, cilium, tekton-pipelines, calico, hubble, spqr, kots, tkn, zot,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: sbomqs, configmap-reload, pulumi-language-java, actions-runner-controller, docker-credential-acr-env, nri-apache, stakater-reloader, yam, controller-gen, cri-tools, wait-for-port, prometheus-alertmanager, kyverno-policy-reporter, k8sgpt, protoc-gen-go-grpc,...

CLEANSTART-2026-VY83992 Security fixes in metallb 0.16.1-r1

Package metallb version 0.16.1-r1 fixes 10 vulnerabilities: CVE-2026-39824, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506...

CLEANSTART-2026-LM18792 Security fixes in metallb 0.14.9-r2

Package metallb version 0.14.9-r2 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507...

CLEANSTART-2026-BK90625 Security fixes in metallb-fips 0.14.9-r1

Package metallb-fips version 0.14.9-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-KO15676 Security fixes in metallb 0.13.12-r4

Package metallb version 0.13.12-r4 fixes 2 vulnerabilities: CVE-2024-24786, ghsa-8r3f-844c-mc37...

CLEANSTART-2026-VY42311 Security fixes in metallb 0.14.9-r3

Package metallb version 0.14.9-r3 fixes 2 vulnerabilities: CVE-2025-22868, ghsa-6v2p-p543-phr9...

CLEANSTART-2026-NY13907 Security fixes in metallb 0.14.9-r0

Package metallb version 0.14.9-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: gitlab-kas, keda, datadog-agent, rancher, cluster-api, kubernetes-csi-external-health-monitor, kubernetes-csi-external-snapshotter, spicedb, kyverno-notation-aws, openfga, cert-manager-webhook-pdns, cilium, tekton-pipelines, calico, hubble, spqr, kots, tkn, zot,...

CLEANSTART-2026-SO47947 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-42502, CVE-2026-42506 applied in versions: 0.15.2-r0, 0.15.2-r1, 0.16.1-r1

Multiple security vulnerabilities affect the metallb package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IC09970 Security fixes for CVE-2025-22868, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-6v2p-p543-phr9 applied in versions: 0.14.9-r1, 0.14.9-r2, 0.14.9-r3, 0.15.2-r0, 0.15.2-r1, 0.16.1-r1

Multiple security vulnerabilities affect the metallb package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JY65496 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-42502, CVE-2026-42506 applied in versions: 0.15.2-r0, 0.15.2-r1, 0.16.1-r1

Multiple security vulnerabilities affect the metallb package. These issues are resolved in later releases. See references for individual vulnerability details...