CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: loki, commercial-grafana, kubescape-server-fips, external-secrets-operator-fips, frankenphp-8.5, vitess, rancher, mattermost-fips, opentofu-fips, harbor-fips, flux-image-automation-controller, calico-fips, containerd, kots, tekton-pipelines,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: flagger-fips, goose, crossplane-provider-aws-efs, amazon-ssm-agent, vault-secrets-operator, cadence-fips, commercial-grafana, newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, crossplane-provider-keycloak-fips, spire-controller-manager,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy, ko-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, kubernetes-csi-driver-nfs, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kubernetes-dashboard-metrics-scraper, dagger, kube-state-metrics, eksctl, frp, goreleaser, restic, logstash-exporter, gitsign, pgpool2exporter, helm-push, crossplane-provider-aws-elasticache, flux-image-automation-controller, kots,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kubernetes-dashboard-metrics-scraper, gobuster, frp, kiam, flux-image-automation-controller, kots, crossplane-provider-aws, amass, falcoctl, wavefront-collector-for-kubernetes, dynamic-localpv-provisioner-fips, prometheus-mongodb-exporter-fips,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kubernetes-dashboard-metrics-scraper, gobuster, frp, flux-image-automation-controller, kots, crossplane-provider-aws, amass, falcoctl, prometheus-operator, dex, vault-k8s, up, nri-prometheus, timoni, helm, spark-operator,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gobuster, frp, kots, amass, ip-masq-agent, dex, nri-prometheus, helm, spark-operator, skaffold, aws-efs-csi-driver, atlantis, bom, kubeflow-katib, conftest, sigstore-scaffolding, pulumi, cortex, flux-source-controller, kubernetes-csi-livenessprobe, kaf,...