CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0

CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: mc-fips, gatekeeper, gatekeeper-fips, mongodb-k8s-operator-version-upgrade-post-start-hook-fips, pgwatch, velero-plugin-for-microsoft-azure-fips, timescaledb-parallel-copy, loki, prometheus-bind-exporter, fq, licenseclassifier, velero-plugin-for-csi-fips, gosu-fips,...

CLEANSTART-2026-IG79399 Security fixes in kubernetes-csi-node-driver-registrar 2.13.0-r1

Package kubernetes-csi-node-driver-registrar version 2.13.0-r1 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: chart-testing, cert-manager-cmctl, step-issuer, haproxy-ingress, nri-postgresql, kpt, rancher-system-upgrade-controller, gitness, amazon-cloudwatch-agent-operator, kubernetes-dashboard-auth, bank-vaults, flux-source-controller, k3s, argocd-image-updater, contour,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: karpenter, linkerd2-proxy-init, prometheus-bind-exporter, lvm-driver, sftpgo-plugin-geoipfilter, rancher-machine, node-problem-detector-fips, nats, nvidia-nsight-compute-13.1, configmap-reload-fips, kube-vip-cloud-provider, blobfuse2, kubeflow-katib,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: influx, minio-fips, crossplane-provider-sql-fips, cert-manager-csi-driver-fips, gatekeeper-fips, karma, timescaledb-parallel-copy, loki, aactl, fq, licenseclassifier, peerdb-flow, velero-plugin-for-csi-fips, local-static-provisioner, trust-manager-fips, gosu-fips,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: hello-world-golang, docker-credential-gcr, newrelic-infrastructure-agent, kwok, runc, helm, rabbitmq-cluster-operator, kpt, nri-couchbase, sonobuoy, gitness, gke-gcloud-auth-plugin, cfssl, flannel-cni-plugin, nri-mssql, amass, nats, dockerize, kube-bench, k3s,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, rabbitmq-messaging-topology-operator, newrelic-nri-kube-events, ollama, newrelic-infrastructure-agent, kwok, runc, crossplane-provider-azure-sql, sigstore-scaffolding, helm, falcosidekick, rabbitmq-cluster-operator, kpt,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, kubeflow-fips, volume-modifier-for-k8s-fips, aactl, conftest-fips, dgraph, terraform-provider-sendgrid, timestamp-authority-fips, kubevela, src, terraform-provider-sendgrid-fips, plutono-fips, prometheus-adapter-fips, spark-operator, kubescape,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, spark-operator, kubevela, scorecard, kubeflow, kubescape, slsa-verifier, up, buildkitd, cortex, dgraph, k3d, terraform-provider-sendgrid, src...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: ollama, newrelic-infrastructure-agent, sigstore-scaffolding, helm, kpt, gitness, gke-gcloud-auth-plugin, terraform-provider-aws, amass, nats, kubescape, flux-source-controller, secrets-store-csi-driver, oauth2-proxy, dex, pulumi-language-java, hugo, ip-masq-agent,...