CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-serving, omnictl-multiarch-fips, loki, drone, gitea, cert-manager, kyverno, tekton-pipelines-fips, opentofu-fips, kyverno-fips, coder, seaweedfs-rocksdb, cloud-provider-aws, elastic-agent-fips, gitlab-kas, grafana-fips, harbor, external-secrets-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, syft, qemu-guesthelper, consul, flannel-fips, pvc-autoresizer-fips, chaos-mesh, kyverno-policy-reporter-kyverno-plugin, regclient-fips, yunikorn-k8shim, logstash-exporter-fips, rabbitmq-default-user-credential-updater,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: gotestsum, neuvector-sigstore-interface, qemu-guesthelper, wire-go, consul, flannel-fips, pvc-autoresizer-fips, regclient-fips, yunikorn-k8shim, fq, aws-signer-notation-plugin-fips, k8ssandra-client-fips, prometheus-podman-exporter, terraform-provider-time-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: gotestsum, neuvector-sigstore-interface, qemu-guesthelper, wire-go, consul, flannel-fips, pvc-autoresizer-fips, regclient-fips, temporal-fips, fq, yunikorn-k8shim, x509-certificate-exporter, aws-signer-notation-plugin-fips, k8ssandra-client-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: gotestsum, neuvector-sigstore-interface, qemu-guesthelper, wire-go, consul, flannel-fips, pvc-autoresizer-fips, regclient-fips, yunikorn-k8shim, fq, aws-signer-notation-plugin-fips, k8ssandra-client-fips, prometheus-podman-exporter, terraform-provider-time-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: gotestsum, neuvector-sigstore-interface, qemu-guesthelper, wire-go, consul, flannel-fips, pvc-autoresizer-fips, regclient-fips, yunikorn-k8shim, fq, aws-signer-notation-plugin-fips, k8ssandra-client-fips, prometheus-podman-exporter, terraform-provider-time-fips,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: gotestsum, neuvector-sigstore-interface, qemu-guesthelper, wire-go, consul, flannel-fips, pvc-autoresizer-fips, regclient-fips, yunikorn-k8shim, fq, aws-signer-notation-plugin-fips, k8ssandra-client-fips, prometheus-podman-exporter, terraform-provider-time-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: gotestsum, neuvector-sigstore-interface, qemu-guesthelper, wire-go, consul, flannel-fips, pvc-autoresizer-fips, regclient-fips, yunikorn-k8shim, fq, aws-signer-notation-plugin-fips, k8ssandra-client-fips, prometheus-podman-exporter, terraform-provider-time-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, spire-server, gitsign, actions-runner-controller, zarf, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, step-ca, rclone, crossplane-provider-family-aws,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: frp, kubernetes-dashboard-metrics-scraper, smarter-device-manager-fips, bank-vaults, wavefront-collector-for-kubernetes, git-lfs, kubeflow-fips, tekton-chains, trust-manager, stakater-reloader, prometheus-bind-exporter, dive, chartmuseum, aws-efs-csi-driver-fips,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, kubernetes-csi-livenessprobe, aws-load-balancer-controller, oauth2-proxy, pulumi, up, vault-k8s, nats, hey, metacontroller, timoni, bank-vaults, k3s, runc, src, kubeflow, kubevela, bom, kube-logging-operator, trust-manager,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kubernetes-csi-livenessprobe, oauth2-proxy, pulumi, nats, hey, metacontroller, src, kubeflow, kubevela, grype, bom, metrics-server, slsa-verifier, pulumi-kubernetes-operator, nri-prometheus, stakater-reloader, kots, prometheus-adapter,...