CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubescape, traefik, kubernetes-dashboard, kaf, chisel-fips, seaweedfs-rocksdb, kine, prometheus, loki, terraform, tekton-pipelines-fips, grafana, cloudbeat-fips, k9s, nemo, knative-kafka-broker, harbor, flux-fips, frankenphp-8.4, gitlab-workhorse-ce, k9s-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, generic-device-plugin-fips, kubescape, bazelisk, docker-credential-acr-env-fips, timestamp-authority, ytt, zabbix-agent2-fips, hubble-ui-backend-fips, minc, longhorn-manager-fips, chisel-fips,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, bazelisk, timestamp-authority, hubble-ui-backend-fips, chisel-fips, mockery, dockerize-fips, wait-for-port, keda, kubernetes-csi-node-driver-registrar-fips, mattmoor-chainit,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, bazelisk, timestamp-authority, hubble-ui-backend-fips, chisel-fips, mockery, dockerize-fips, wait-for-port, keda, kubernetes-csi-node-driver-registrar-fips, mattmoor-chainit,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, bazelisk, timestamp-authority, ytt, hubble-ui-backend-fips, chisel-fips, mockery, dockerize-fips, wait-for-port, keda, kubernetes-csi-node-driver-registrar-fips, mattmoor-chainit,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, bazelisk, timestamp-authority, hubble-ui-backend-fips, chisel-fips, mockery, dockerize-fips, wait-for-port, keda, kubernetes-csi-node-driver-registrar-fips, mattmoor-chainit,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, bazelisk, timestamp-authority, hubble-ui-backend-fips, chisel-fips, mockery, dockerize-fips, wait-for-port, keda, kubernetes-csi-node-driver-registrar-fips, mattmoor-chainit,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, bazelisk, timestamp-authority, hubble-ui-backend-fips, chisel-fips, mockery, dockerize-fips, wait-for-port, keda, kubernetes-csi-node-driver-registrar-fips, mattmoor-chainit,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, crossplane-provider-aws-sns, terraform-provider-aws, nri-prometheus, envoy-ratelimit, flux-notification-controller, atlantis, prometheus-operator, restic, nerdctl, gomplate, syft, crossplane-provider-aws-cloudwatchlogs,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: falcoctl, wavefront-collector-for-kubernetes, trillian, kubescape, secrets-store-csi-driver-provider-gcp, kubernetes-ingress-defaultbackend, kubernetes-dashboard, kubernetes-csi-livenessprobe-fips, kaf, stakater-reloader, metacontroller, trust-manager,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, nri-prometheus, flux-notification-controller, atlantis, prometheus-operator, gomplate, newrelic-infrastructure-agent, kubevela, sigstore-scaffolding, frp, kube-state-metrics, git-lfs, kube-fluentd-operator,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: amass, terraform-provider-aws, nri-prometheus, envoy-ratelimit, flux-notification-controller, atlantis, gomplate, newrelic-infrastructure-agent, kubevela, sigstore-scaffolding, frp, git-lfs, fuse-overlayfs-snapshotter, kind, metacontroller, kubescape, src,...