CLEANSTART-2026-DB46993 Prometheus is an open-source monitoring system and time series database

Multiple security vulnerabilities affect the prometheus-operator package. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

GO-2025-4175 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, longhorn-backing-image-manager, mongodb-k8s-operator-version-upgrade-post-start-hook, sftpgo-plugin-eventsearch, rke2-cloud-provider, kubernetes-csi-livenessprobe-fips, chisel, cloudnative-pg-fips, kuberay-operator-fips,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: crossplane, kine, kube-state-metrics-fips, mc, aactl, grype, pgpool2exporter-fips, helm, kubernetes-csi-livenessprobe-fips, fulcio-fips, prometheus-alertmanager, terraform-provider-sendgrid, prometheus-redis-exporter, gotenberg, dynamic-localpv-provisioner, caddy,...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, karma, certificate-transparency, datadog-agent, tempo, trillian, prometheus-operator, splunk-otel-collector, node-problem-detector, k8sgpt, prometheus, keda, minio, prometheus-pushgateway, jaeger, istio, opentelemetry-collector,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: velero, sigstore-scaffolding, sops, terragrunt, buildkitd, secrets-store-csi-driver-provider-azure, step, argo-workflows, trivy, flux-image-reflector-controller, rekor, thanos, timestamp-authority, hugo-extended, step-ca, up, pulumi, prometheus-operator, tkn,...

GO-2026-5841 vulnerabilities

Vulnerabilities for packages: helm, flux, kaf, kots, nerdctl, prometheus-operator, k3s, snyk-cli, telegraf, zot, kine, k3d, containerd, minio, spire-server, aactl, kyverno, loki...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: kaf, rancher-agent, nerdctl, mattermost, k3s, gitlab-kas, snyk-cli, kubernetes-dashboard, containerd, external-secrets-operator, podman, buildah, helm, cilium-cli, prometheus-operator, zot, spire-server, cilium, rancher, cert-manager, prometheus, falco-no-driver,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, scorecard, rancher-agent, sops, crossplane-provider-azure-authorization, nerdctl, traefik, gh, src, cilium-cli, chezmoi, crossplane-provider-azure-storage, crossplane-provider-aws-ec2, fulcio, pulumi-language-java,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, hubble, kor, src, kapp-controller, cilium-cli, docker-credential-gcr, terraform-mcp-server, nodetaint, fulcio, cni-plugins, nova, migrate, docker-machine-driver-harvester, dgraph, portieris, kuberlr, nri-redis, clickhouse-operator,...

CLEANSTART-2026-ET08057 Security fixes in prometheus-operator-fips 0.87.0-r1

Package prometheus-operator-fips version 0.87.0-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-JP03758 Security fixes in prometheus-operator 0.90.1-r1

Package prometheus-operator version 0.90.1-r1 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-42507, CVE-2026-27145...

CLEANSTART-2026-ZZ86582 Security fixes in prometheus-operator-fips 0.86.2-r0

Package prometheus-operator-fips version 0.86.2-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-ZW36129 Security fixes in prometheus-operator-fips 0.87.0-r0

Package prometheus-operator-fips version 0.87.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-QS33809 Security fixes in prometheus-operator-fips 0.88.0-r0

Package prometheus-operator-fips version 0.88.0-r0 fixes 2 vulnerabilities: CVE-2025-61732, CVE-2025-68121...

CLEANSTART-2026-QM13586 Security fixes in prometheus-operator 0.88.1-r2

Package prometheus-operator version 0.88.1-r2 fixes 1 vulnerabilities: CVE-2026-2303...

CLEANSTART-2026-YF39699 Security fixes in prometheus-operator 0.69.1-r3

Package prometheus-operator version 0.69.1-r3 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-YY15664 Security fixes in prometheus-operator 0.89.0-r2

Package prometheus-operator version 0.89.0-r2 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-42507, CVE-2026-27145...

CLEANSTART-2026-QB06725 Security fixes in prometheus-operator 0.91.0-r1

Package prometheus-operator version 0.91.0-r1 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-42507, CVE-2026-27145...

CLEANSTART-2026-EO79692 Security fixes in prometheus-operator 0.69.1-r2

Package prometheus-operator version 0.69.1-r2 fixes 2 vulnerabilities: CVE-2026-42154, CVE-2026-46598...

CLEANSTART-2026-GN43215 Security fixes in prometheus-operator-fips 0.88.0-r1

Package prometheus-operator-fips version 0.88.0-r1 fixes 2 vulnerabilities: CVE-2025-61732, CVE-2025-68121...