CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, coder, drone, external-secrets-operator-fips, prometheus-mongodb-exporter, flux-source-controller-fips, vault-fips, etcd-fips, omnictl-multiarch, rancher-agent, tigera-operator, flux-fips, kubevela-fips, prometheus, flux, opentofu, argo-cd, fscrypt,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: envconsul-fips, chartmuseum-fips, memcached-exporter-fips, pluto-fips, nrdot-collector-k8s-fips, cloud-provider-gcp-cloud-controller-manager-fips, amazon-vpc-cni-plugins-fips, ctop, buildah-fips, litestream, thanos-receive-controller, cinder-csi-plugin-fips, k3d,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: envconsul-fips, chartmuseum-fips, kubernetes-csi-external-attacher-fips, cloud-provider-gcp-cloud-controller-manager-fips, cfssl-fips, ctop, k3d, pvc-autoresizer, nvidia-nsight-compute-13.1, rancher-agent, grpcurl-fips, metrics-server, kube-bench, gpu-operator-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: envconsul-fips, chartmuseum-fips, kubernetes-csi-external-attacher-fips, cloud-provider-gcp-cloud-controller-manager-fips, cfssl-fips, ctop, k3d, pvc-autoresizer, nvidia-nsight-compute-13.1, rancher-agent, grpcurl-fips, metrics-server, kube-bench, gpu-operator-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: envconsul-fips, chartmuseum-fips, kubernetes-csi-external-attacher-fips, cloud-provider-gcp-cloud-controller-manager-fips, cfssl-fips, ctop, k3d, pvc-autoresizer, nvidia-nsight-compute-13.1, rancher-agent, wuzz, grpcurl-fips, metrics-server, kube-bench,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: envconsul-fips, chartmuseum-fips, kubernetes-csi-external-attacher-fips, cloud-provider-gcp-cloud-controller-manager-fips, cfssl-fips, ctop, k3d, pvc-autoresizer, nvidia-nsight-compute-13.1, rancher-agent, grpcurl-fips, metrics-server, kube-bench, gpu-operator-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: envconsul-fips, chartmuseum-fips, kubernetes-csi-external-attacher-fips, cloud-provider-gcp-cloud-controller-manager-fips, cfssl-fips, ctop, k3d, pvc-autoresizer, nvidia-nsight-compute-13.1, rancher-agent, grpcurl-fips, metrics-server, kube-bench, gpu-operator-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: envconsul-fips, chartmuseum-fips, kubernetes-csi-external-attacher-fips, cloud-provider-gcp-cloud-controller-manager-fips, cfssl-fips, ctop, k3d, pvc-autoresizer, nvidia-nsight-compute-13.1, rancher-agent, grpcurl-fips, metrics-server, kube-bench, gpu-operator-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-aws-cloudfront, crossplane-provider-aws-eks, gcsfuse, hugo-extended, sigstore-scaffolding, hubble-ui, kine, osv-scanner, zot, buf, cloudflared, trillian, crossplane-provider-aws-cloudformation,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: frp, terraform-provider-sendgrid-fips, prometheus-mongodb-exporter, prometheus-node-exporter, gke-gcloud-auth-plugin, amass, kubernetes-dashboard-metrics-scraper, k3d, prometheus-stackdriver-exporter, dex-k8s-authenticator, nri-prometheus, metacontroller,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: gobuster, sigstore-scaffolding, zot, trillian, aws-load-balancer-controller, grpcurl, kubeflow, nri-prometheus, kind, trust-manager, gomplate, kube-fluentd-operator, metacontroller, spark-operator, oauth2-proxy, rqlite, k8sgpt-operator, kubernetes-csi-external-resize...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gobuster, sigstore-scaffolding, grpcurl, nri-prometheus, kubeflow, kind, gomplate, metacontroller, spark-operator, oauth2-proxy, rqlite, nginx-mainline, kubescape, aactl, flux-source-controller, secrets-store-csi-driver, ip-masq-agent, kots, dgraph,...