CLEANSTART-2026-OV11554 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: trivy, trivy-fips, redpanda-operator, neuvector, docker-fips, helmfile, headlamp, amazon-ecs-agent, chainctl-fips, kube-arangodb, harvester-fips, tw, headlamp-fips, k9s-fips, newrelic-infrastructure-agent, cloudbeat, cg, kubescape-server-fips, spegel-fips, harvester,...

CLEANSTART-2026-CX34942 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: dagger, k8ssandra-client, opa-envoy, opa, eksctl, helm-operator, nerdctl, newrelic-infrastructure-agent, zarf, docker-cli-buildx, kubevela, k8sgpt, ctop, kots, rancher-fleet, linkerd2, cilium-cli, flux-helm-controller, grype, helm, wolfictl, buildkitd, trivy,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-mssql, dagger, nri-mysql, kube-logging-operator, dive, nerdctl, newrelic-infra-operator, influx, nats-server, thanos, minio, supercronic, flannel-cni-plugin, ctop, cni-plugins, wait-for-port, nri-rabbitmq, rabbitmq-cluster-operator, crossplane-provider-azure,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-mssql, dagger, nri-mysql, kube-logging-operator, dive, nerdctl, newrelic-infra-operator, influx, nats-server, thanos, minio, supercronic, flannel-cni-plugin, ctop, cni-plugins, wait-for-port, nri-rabbitmq, rabbitmq-cluster-operator, crossplane-provider-azure,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-mssql, dagger, nri-mysql, kube-logging-operator, dive, nerdctl, newrelic-infra-operator, influx, nats-server, thanos, minio, supercronic, flannel-cni-plugin, ctop, cni-plugins, wait-for-port, nri-rabbitmq, rabbitmq-cluster-operator, crossplane-provider-azure,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: nri-mssql, dagger, nri-mysql, kube-logging-operator, dive, nerdctl, newrelic-infra-operator, influx, nats-server, thanos, minio, supercronic, flannel-cni-plugin, ctop, cni-plugins, wait-for-port, nri-rabbitmq, rabbitmq-cluster-operator, crossplane-provider-azure,...

GHSA-2CGQ-H8XW-2V5J vulnerabilities

Vulnerabilities for packages: cadvisor, cadvisor-fips, grype, buildah, ctop, opentelemetry-collector-contrib-fips, kubernetes, neuvector-scanner, opentelemetry-collector-contrib, wolfictl...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: cadvisor, cadvisor-fips, grype, buildah, ctop, opentelemetry-collector-contrib-fips, kubernetes, neuvector-scanner, opentelemetry-collector-contrib, wolfictl...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: step, dagger, kube-logging-operator, nerdctl, newrelic-infra-operator, influx, crossplane-provider-aws-ec2, thanos, minio, supercronic, ctop, kots, hugo, rabbitmq-cluster-operator, crossplane-provider-azure, memcached-exporter, flux-helm-controller, cortex, ferretdb,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-mssql, dagger, nri-mysql, kube-logging-operator, dive, nerdctl, newrelic-infra-operator, influx, nats-server, thanos, minio, supercronic, flannel-cni-plugin, ctop, cni-plugins, wait-for-port, nri-rabbitmq, rabbitmq-cluster-operator, crossplane-provider-azure,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: nri-mssql, dagger, nri-mysql, kube-logging-operator, dive, nerdctl, newrelic-infra-operator, influx, nats-server, thanos, minio, supercronic, flannel-cni-plugin, ctop, cni-plugins, wait-for-port, nri-rabbitmq, rabbitmq-cluster-operator, crossplane-provider-azure,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: falcoctl, bom, falcoctl-fips, helm-operator-fips, trivy, k9s, ko-fips, policy-controller-fips, cosign-fips, helm-fips, kubescape, loki, cadvisor-fips, dagger, k3d, k3s, helm-operator, cosign, cri-tools, k8sgpt, tekton-chains, timoni, vexctl, zarf, argo-workflows,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: falcoctl, bom, falcoctl-fips, helm-operator-fips, trivy, k9s, ko-fips, policy-controller-fips, cosign-fips, helm-fips, kubescape, loki, cadvisor-fips, dagger, k3d, k3s, helm-operator, cosign, cri-tools, k8sgpt, tekton-chains, timoni, vexctl, zarf, argo-workflows,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: trivy, docker, kubescape, k3s, k3d, kubernetes, zarf, kots, cadvisor, newrelic-infrastructure-agent, runc, zot, skaffold, wolfictl, ctop, grype, kaniko, podman, skopeo, buildkitd, k9s, nerdctl, syft...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: k3d, nerdctl, newrelic-infrastructure-agent, zarf, ctop, runc, kots, cadvisor, k9s, podman, grype, wolfictl, buildkitd, trivy, syft, kaniko, kubernetes, k3s, skaffold, zot, docker, kubescape, skopeo...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: trivy, fuse-overlayfs-snapshotter, melange, kubescape, gitness, k8sgpt, k3d, cilium-cli, helm-push, eksctl, kots, newrelic-infrastructure-agent, zot, flux-source-controller, skaffold, kubevela, ctop, grype, rancher-agent, up, kaniko, helm, flux-helm-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: minio, nghttp2, git-lfs, kots, ko, hugo, memcached-exporter, flux-helm-controller, cortex, nats, pulumi, secrets-store-csi-driver-provider-gcp, nginx-mainline, gobuster, rqlite, dgraph, kind, kubeflow, pulumi-language-yaml, haproxy-ingress, k3d, aws-efs-csi-driver,...