CLEANSTART-2026-LC49486 Security fix for GHSA-j5w8-q4qc-rx2x applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1, cloud-provider-aws 1.34.1-r1

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AR39396 Security fix for GHSA-f6x5-jh6r-wrfv applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV50859 Security fix for GHSA-p77j-4mvh-x3m3 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OX52172 Security fix for GHSA-mh2q-q3fh-2475 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QL10579 Security fix for GHSA-hfvc-g4fc-pqhx applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EY57242 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CVE-2026-84303 vulnerabilities

Vulnerabilities for packages: dapr, knative-serving, hydra, kserve, k8sgpt, kyverno, tekton-pipelines, litestream, docker, rancher-agent, gitlab-runner, grafana-mimir, falco-exporter, istio, cloud-provider-vsphere, gitlab-pages, kubernetes-csi-external-provisioner, argo-cd, bank-vaults,...

GHSA-HRXH-6V49-42GF vulnerabilities

Vulnerabilities for packages: dapr, sqlexporter, policy-controller, spicedb, step-ca, op-geth, azurefile-csi, falco-exporter, manifest-tool, amazon-cloudwatch-agent-operator, kubernetes-csi-external-provisioner, dynamic-localpv-provisioner, zot, cilium-cli, terraform-provider-grafana,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: runc, addon-resizer, opensearch-k8s-operator, step-ca, lazydocker, aws-s3-controller, azurefile-csi, nri-nginx, manifest-tool, amazon-cloudwatch-agent-operator, kubernetes-csi-external-provisioner, controller-gen, dynamic-localpv-provisioner, zot, cilium-cli,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating, grafana-mimir, aws-flb-kinesis-fips, crossplane-provider-keycloak, deck-fips, terraform-provider-kubernetes-fips, nri-redis-fips, harbor, datadog-agent, gcp-compute-persistent-disk-csi-driver-fips, grafana-operator, contour, kiam,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating, grafana-mimir, aws-flb-kinesis-fips, deck-fips, terraform-provider-kubernetes-fips, harbor, datadog-agent, gcp-compute-persistent-disk-csi-driver-fips, contour, kiam, grpc-health-probe-fips, knative-client, kube-rbac-proxy,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: harbor, datadog-agent, gcp-compute-persistent-disk-csi-driver-fips, gitlab-operator, ansible-operator, opencost, ansible-operator-fips, trivy, kine, docker-compose-fips, prometheus-adapter, jaeger-operator, kapp-controller, kubevela, kyverno-notation-aws-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: runc, sqlexporter, addon-resizer, opensearch-k8s-operator, step-ca, swagger, op-geth, lazydocker, bom, aws-s3-controller, falco-exporter, manifest-tool, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner, controller-gen,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: runc, sqlexporter, addon-resizer, opensearch-k8s-operator, step-ca, swagger, op-geth, lazydocker, bom, aws-s3-controller, falco-exporter, manifest-tool, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner, controller-gen,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating, grafana-mimir, aws-flb-kinesis-fips, crossplane-provider-keycloak, deck-fips, nri-redis-fips, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, contour, kiam, knative-client, kube-rbac-proxy,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating, grafana-mimir, aws-flb-kinesis-fips, crossplane-provider-keycloak, deck-fips, nri-redis-fips, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, contour, kiam, knative-client, kube-rbac-proxy,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: cni-plugins, tekton-chains, falcoctl, witness, aactl, harbor, chartmuseum, headlamp, contour, lazydocker, controller-gen, ipfs-cluster, opa, knative-serving, kyverno-notation-aws, grafana-alloy, aws-privateca-issuer, clickhouse-operator, cloud-provider-vsphere,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: bank-vaults, nemo, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, cloud-provider-aws, knative-serving, custom-pod-autoscaler-operator, newrelic-nri-statsd, azuredisk-csi-fips, nvidia-nsight-compute-13.2, prometheus-nats-exporter,...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, step-ca, aws-s3-controller, amazon-cloudwatch-agent-operator, kubernetes-csi-external-provisioner, dynamic-localpv-provisioner, zot, cilium-cli, nodetaint, crossplane-provider-family-azure,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: runc, sqlexporter, opensearch-k8s-operator, policy-controller, swagger, lazydocker, bom, nri-nginx, falco-exporter, controller-gen, wait-for-port, nodetaint, dataplaneapi, kbld, metrics-server, kapp-controller, gobuster, crossplane-provider-sql, k6, kubevela,...