CLEANSTART-2026-TL04302 Security fixes for CVE-2025-61727, CVE-2025-61729, ghsa-cgrx-mc8f-2prm, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-vvgc-356p-c3xw applied in versions: 1.10.2-r0, 1.10.2-r1, 1.5.0-r0, 1.9.1-r0

Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: kube-vip, secrets-store-csi-driver-provider-aws-fips, kube-logging-operator-custom-runner-fips, kube-vip-cloud-provider, dagdotdev, lvm-driver, wazero-fips, openbao-k8s-fips, mongodb-kubernetes-operator, vault-benchmark, confluent-common-docker, karma-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kube-vip, secrets-store-csi-driver-provider-aws-fips, kube-logging-operator-custom-runner-fips, kube-vip-cloud-provider, dagdotdev, lvm-driver, wazero-fips, openbao-k8s-fips, mongodb-kubernetes-operator, vault-benchmark, confluent-common-docker, karma-fips,...