CLEANSTART-2026-FB77791 Security fix for CVE-2026-40890 applied in: gotenberg 8.30.1-r0, kube-metrics-adapter 0.2.9-r0, temporal 1.5.1-r0, temporal-ui-server-fips 2.48.2-r0

CVE-2026-40890 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OT08451 Security fix for CVE-2026-40898 applied in: kube-metrics-adapter 0.2.9-r0, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, prometheus-blackbox-exporter 0.28.0-r2

CVE-2026-40898 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ON16702 Security fix for CVE-2026-55677 applied in: kube-metrics-adapter 0.2.9-r3, temporal 1.8.2-r1

CVE-2026-55677 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DC83183 Security fix for CVE-2023-42821 applied in: kube-metrics-adapter 0.2.9-r0

Security vulnerability affects the kube-metrics-adapter package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100330

Security vulnerability affects the kube-metrics-adapter package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XD35510 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the kube-metrics-adapter package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

PT-2026-98433

Multiple security vulnerabilities affect the kube-metrics-adapter package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-BR58082 Echo is a Go web framework

Multiple security vulnerabilities affect the kube-metrics-adapter package. Echo is a Go web framework. See references for individual vulnerability details...

GO-2026-6293 vulnerabilities

Vulnerabilities for packages: temporal-fips, listmonk, falcosidekick-ui-fips, kube-metrics-adapter, temporal-ui-server, temporal-ui-server-fips, falcosidekick-ui, temporal, kube-metrics-adapter-fips...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: temporal-fips, listmonk, falcosidekick-ui-fips, kube-metrics-adapter, temporal-ui-server, temporal-ui-server-fips, falcosidekick-ui, temporal, kube-metrics-adapter-fips...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, temporal, temporal-ui-server...

CVE-2026-55677 vulnerabilities

Vulnerabilities for packages: temporal-fips, listmonk, falcosidekick-ui-fips, kube-metrics-adapter, temporal-ui-server, temporal-ui-server-fips, falcosidekick-ui, temporal, kube-metrics-adapter-fips...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-ipam-provider-in-cluster, spicedb, datadog-operator, telegraf, rancher-system-agent, emissary, kubescape, cluster-api-gcp-controller, zot, kubernetes-csi-external-snapshotter, datadog-agent, kyverno, metallb, kuma, kubernetes-csi-external-health-monitor,...

GO-2024-3205 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, fq...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: temporal-fips, fq, kube-metrics-adapter, temporal-ui-server, gotenberg, snyk-cli, temporal-ui-server-fips, temporal, kube-metrics-adapter-fips...

GO-2024-3205 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, fq...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, temporal, kube-metrics-adapter, fq, snyk-cli...

CLEANSTART-2026-OQ99090 Security fixes in kube-metrics-adapter 0.2.9-r0

Package kube-metrics-adapter version 0.2.9-r0 fixes 3 vulnerabilities: CVE-2026-40890, CVE-2023-42821, CVE-2026-40898...

Metrics::Any::Adapter::Statsd injection vulnerability

Metrics::Any::Adapter::Statsd is a Perl metric collection adapter module developed by PEVANS’s individual developers. Versions of Metrics::Any::Adapter::Statsd prior to version 0.04 contained an injection vulnerability. This vulnerability stemmed from the send method not verifying the content of...

Metrics::Any::Adapter::SignalFx Injection Vulnerability

Metrics::Any::Adapter::SignalFx is a Perl metric collection adapter module developed by PEVANS’ personal developers. Versions of Metrics::Any::Adapter::SignalFx prior to version 0.04 contained an injection vulnerability. This vulnerability occurred because the labels function did not check for li...