CLEANSTART-2026-II22452 Security fix for GHSA-9h8m-3fm2-qjrq applied in: metrics-server-fips 0.8.1-r3, amazon-cloudwatch-agent 1.300065.0-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, istio-fips 1.28.1-r1

GHSA-9h8m-3fm2-qjrq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IK31949 Security fix for GHSA-hfvc-g4fc-pqhx applied in: cosign 2.6.4-r1, metrics-server-fips 0.8.1-r3, amazon-cloudwatch-agent 1.300065.0-r1, trillian-fips 1.7.3-r1, kube-logging-operator 6.4.0-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, trillian 1.7.3-r1, gotenberg 8.30.1-r0, kyverno-fips 1.13.6-r9, jitsucom-bulker 2.10.0-r0

GHSA-hfvc-g4fc-pqhx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PO24101 Security fix for GHSA-f6x5-jh6r-wrfv applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, kubernetes-dns-node-cache-fips 1.25.0-r1, argo-events 1.6.3-r1, local-static-provisioner-fips 2.8.0-r0, grafana-alloy-fips 1.12.1-r0, kubevela 1.10.5-r0

GHSA-f6x5-jh6r-wrfv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KX96717 Security fix for GHSA-8rm2-7qqf-34qm applied in: amazon-cloudwatch-agent 1.300065.0-r1, metrics-server-fips 0.8.1-r2, node-problem-detector 1.35.2-r1, keda-fips 2.19.0-r1, trillian 1.7.3-r1, elastic-beats 8.19.14-r0

GHSA-8rm2-7qqf-34qm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IY18121 Security fix for GHSA-wg65-39gg-5wfj applied in: amazon-cloudwatch-agent 1.300065.0-r1, metrics-server-fips 0.8.1-r2, keda-fips 2.19.0-r1, trillian 1.7.3-r1, elastic-beats 8.19.14-r0

GHSA-wg65-39gg-5wfj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MO57700 Security fix for GHSA-fw8g-cg8f-9j28 applied in: amazon-cloudwatch-agent 1.300065.0-r1, metrics-server-fips 0.8.1-r2, trillian-fips 1.7.3-r1, node-problem-detector 1.35.2-r1, keda-fips 2.19.0-r1, trillian 1.7.3-r1, elastic-beats 8.19.14-r0

GHSA-fw8g-cg8f-9j28 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AG54423 Security fix for GHSA-p77j-4mvh-x3m3 applied in: helm-fips 3.20.2-r0, dynamic-localpv-provisioner 4.5.0-r1, argo-workflows 3.6.19-r3, fulcio-fips 1.8.7-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r2, litestream 0.5.14-r1, falco-exporter 0.8.7-r2, k8sgpt-operator 0.2.27-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2, cert-manager 1.19.4-r1

GHSA-p77j-4mvh-x3m3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GI83888 Security fix for GHSA-j5w8-q4qc-rx2x applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, argo-events 1.6.3-r1, local-static-provisioner-fips 2.8.0-r0, grafana-alloy-fips 1.12.1-r0

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZM96262 Security fix for GHSA-9h8m-3fm2-qjrq applied in: kube-state-metrics 2.18.0-r0, bank-vaults 1.32.1-r1, grafana 12.3.4-r0, minio 0.20250907.161309-r0, velero 1.16.2-r4, thanos 0.41.0-r0, fulcio 1.8.7-r2, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3

GHSA-9h8m-3fm2-qjrq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CJ69662 Security fix for GHSA-8rm2-7qqf-34qm applied in: minio 0.20250907.161309-r3, minio 0.20250907.161309-r5, cortex 1.21.1-r2, cortex 1.21.1-r3, thanos 0.41.0-r0, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3, metrics-server 0.8.1-r4

GHSA-8rm2-7qqf-34qm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LI02806 Security fix for GHSA-fw8g-cg8f-9j28 applied in: minio 0.20250907.161309-r3, minio 0.20250907.161309-r5, cortex 1.21.1-r2, cortex 1.21.1-r3, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3, metrics-server 0.8.1-r4

GHSA-fw8g-cg8f-9j28 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KJ81244 Security fix for GHSA-wg65-39gg-5wfj applied in: minio 0.20250907.161309-r3, minio 0.20250907.161309-r5, cortex 1.21.1-r2, cortex 1.21.1-r3, thanos 0.41.0-r0, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3, metrics-server 0.8.1-r4

GHSA-wg65-39gg-5wfj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NI80451 Security fix for GHSA-wf43-55jj-vwq8 applied in: chartmuseum-fips 0.15.0-r4, metrics-server-fips 0.5.2-r3

GHSA-wf43-55jj-vwq8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-MN33948 Security fix for GHSA-wr2v-9rpq-c35q applied in: metrics-server-fips 0.5.2-r3

Security vulnerability affects the metrics-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-GT80206 Security fix for GHSA-2xhq-gv6c-p224 applied in: metrics-server-fips 0.5.2-r3

Security vulnerability affects the metrics-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100021

Security vulnerability affects the metrics-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100004

Security vulnerability affects the metrics-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-77097

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098 Private Metrics Server SQL Injection

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...