GO-2026-5026 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, cue, skopeo, cluster-api, nova, spire-controller-manager, crossplane-provider-aws-sns, knative-eventing, boring-registry, net-kourier, configmap-reload, crossplane-provider-aws-ec2, pgtimetable, container-object-storage-interface,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: apache-exporter, azure-workload-identity-webhook, cloud-provider-azure, buildah, kubevela, skopeo, gomplate, cluster-api, docker-machine-driver-linode, aws-efs-csi-driver, nova, redka, cloud-sql-proxy, argo-events, kapp-controller, crossplane-provider-aws-sns,...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, dagger, zot, docker-compose, keda, buildkitd, datadog-agent, knative-eventing, octo-sts, knative-serving, net-kourier, hydra, gitaly, prometheus-alertmanager, grafana-alloy, kubo, tempo, flux, k6, dgraph, opentofu, weaviate, cilium, opa,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, flux-notification-controller, prometheus-operator, buildah, dagger, zot, gomplate, gitea, podman, argo-events, buildkitd, datadog-agent, melange, apko, eksctl, pulumi-language-dotnet, ksops, wolfictl, flux, osv-scanner,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: prometheus-operator, buildah, dagger, zot, gomplate, gitea, podman, argo-events, melange, apko, pulumi-language-dotnet, wolfictl, flux, osv-scanner, nerdctl, witness, opentofu, k9s, cert-manager, cilium, helm, flux-image-automation-controller, guac, zarf, go-discover...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, flux-notification-controller, prometheus-operator, buildah, dagger, zot, docker-compose, gomplate, gitea, docker-machine-driver-linode, podman, argo-events, buildkitd, crossplane-provider-aws-sns, crossplane-provider-aws-dynamodb,...

GO-2026-5018 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, flux-notification-controller, prometheus-operator, buildah, dagger, zot, gomplate, gitea, podman, argo-events, buildkitd, datadog-agent, melange, apko, eksctl, pulumi-language-dotnet, ksops, wolfictl, flux, osv-scanner,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, prometheus-operator, scorecard, dagger, trivy, helm, telegraf, gomplate, kine, gitea, zot, flux-image-automation-controller, grype, splunk-otel-collector, guac, podman, argo-events, kots, kubernetes-dashboard, kubescape, terragrunt, act,...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: prometheus-operator, dagger, zot, gomplate, gitea, podman, argo-events, buildkitd, datadog-agent, melange, apko, pulumi-language-dotnet, wolfictl, flux, osv-scanner, nerdctl, witness, opentofu, k9s, cert-manager, rootlesskit, cilium, helm,...

GO-2026-5016 vulnerabilities

Vulnerabilities for packages: prometheus-operator, dagger, zot, gomplate, gitea, podman, argo-events, buildkitd, datadog-agent, melange, apko, pulumi-language-dotnet, wolfictl, flux, osv-scanner, nerdctl, witness, opentofu, k9s, cert-manager, rootlesskit, cilium, helm,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: bom, flux-notification-controller, cosign, k8sgateway, scorecard, helm, redis-operator, telegraf, kine, opensearch-k8s-operator, helm-set-status, croc, flux-kustomize-controller, kubernetes-dashboard-api, kubernetes-dns-node-cache, flux-image-automation-controller,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, apache-exporter, azure-workload-identity-webhook, k8sgateway, opencost, opensearch-k8s-operator, helm-set-status, docker-machine-driver-linode, spire-controller-manager, kubernetes-dns-node-cache, redka, blobfuse2, esbuild,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, ini-file, prometheus-operator, k8sgateway, zot, dive, helm-set-status, nova, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port, argo-events, buildkitd, kapp-controller, aws-privateca-issuer, nodetaint, mongo-tools,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, zot, opencost, gomplate, gitea, buildkitd, boring-registry, octo-sts, mongo-tools, hydra, eksctl, grafana-alloy, xeol, ksops, flux, terraform-provider-azurerm, aws-eks-pod-identity-agent, dgraph, opentofu, weaviate, jitsucom-bulker,...

GO-2025-3485 vulnerabilities

Vulnerabilities for packages: buildah, dagger, skopeo, zot, gomplate, spire-controller-manager, podman, boring-registry, octo-sts, hydra, melange, apko, neuvector-scanner, grafana-alloy, undock, ksops, wolfictl, dgraph, nerdctl, opentofu, weaviate, dex, falcoctl, ko, guac, steampipe,...

CLEANSTART-2026-KS00115 Security fixes in opentofu-fips 1.7.10-r3

Package opentofu-fips version 1.7.10-r3 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-MY41612 Security fixes in opentofu-fips 1.10.9-r4

Package opentofu-fips version 1.10.9-r4 fixes 7 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-hfvc-g4fc-pqhx, CVE-2026-39883, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-IS48136 Security fixes in opentofu-fips 1.10.9-r0

Package opentofu-fips version 1.10.9-r0 fixes 2 vulnerabilities: CVE-2024-10005, CVE-2024-10006...

CLEANSTART-2026-FV02233 Security fixes in opentofu-fips 1.8.11-r1

Package opentofu-fips version 1.8.11-r1 fixes 13 vulnerabilities: CVE-2025-61726, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119, CVE-2025-61731...

CLEANSTART-2026-AB44357 Security fixes in opentofu-fips 1.9.4-r6

Package opentofu-fips version 1.9.4-r6 fixes 13 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...