CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: vitess, prometheus-operator, zarf, falco-no-driver, harbor-fips, cert-manager, trivy-fips, coder-fips, spire-server, commercial-expanso-edge, argo-workflows-fips, chisel-fips, knative-kafka-broker-fips, etcd-fips, snyk-cli, knative-serving, kubescape-server-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cilium-fips, caddy, cluster-api-fips, vexctl, vault-secrets-operator, falco-no-driver, kargo, prometheus-node-exporter-fips, pvc-autoresizer, crossplane-provider-aws-sns-fips, neuvector-dbgen-fips, cert-manager, goose, crossplane-provider-aws-kinesis-fips,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cluster-api-fips, sbom-convert, vexctl, vault-secrets-operator, falco-no-driver, pvc-autoresizer, neuvector-dbgen-fips, go-md2man, cloud-provider-azure-fips, tfsec, terraform-provider-kubernetes, kbld, configmap-reload-fips, harbor-scanner-trivy-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: cluster-api-fips, sbom-convert, vexctl, vault-secrets-operator, falco-no-driver, pvc-autoresizer, neuvector-dbgen-fips, go-md2man, cloud-provider-azure-fips, gptscript, tfsec, terraform-provider-kubernetes, kbld, configmap-reload-fips, harbor-scanner-trivy-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cluster-api-fips, sbom-convert, vexctl, vault-secrets-operator, falco-no-driver, pvc-autoresizer, neuvector-dbgen-fips, go-md2man, cloud-provider-azure-fips, tfsec, terraform-provider-kubernetes, kbld, configmap-reload-fips, harbor-scanner-trivy-fips,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: cluster-api-fips, sbom-convert, vexctl, vault-secrets-operator, falco-no-driver, pvc-autoresizer, neuvector-dbgen-fips, go-md2man, cloud-provider-azure-fips, tfsec, terraform-provider-kubernetes, kbld, configmap-reload-fips, harbor-scanner-trivy-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: cluster-api-fips, sbom-convert, vexctl, vault-secrets-operator, falco-no-driver, pvc-autoresizer, neuvector-dbgen-fips, go-md2man, cloud-provider-azure-fips, tfsec, terraform-provider-kubernetes, kbld, configmap-reload-fips, harbor-scanner-trivy-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: cluster-api-fips, sbom-convert, vexctl, vault-secrets-operator, falco-no-driver, pvc-autoresizer, neuvector-dbgen-fips, go-md2man, cloud-provider-azure-fips, tfsec, terraform-provider-kubernetes, kbld, configmap-reload-fips, harbor-scanner-trivy-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, ip-masq-agent, crossplane-provider-aws-elasticache, flannel, kubernetes, boring-registry, prometheus-pushgateway, nuclei, rabbitmq-cluster-operator, flux-image-reflector-controller, kyverno-policy-reporter-ui, aactl, cloudflared,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: caddy, prometheus-operator, kubeflow-katib, prometheus-mongodb-exporter-fips, prometheus-node-exporter-fips, bank-vaults, dgraph, dynamic-localpv-provisioner-fips, weaviate, terraform-provider-sendgrid, yq, kube-logging-operator, k8sgpt-operator, configmap-reload-fip...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, prometheus-pushgateway, flux-image-reflector-controller, metacontroller, aactl, cue, aws-load-balancer-controller, nri-prometheus, trillian, prometheus-alertmanager, zot, buildkitd, apko, k8sgpt-operator, kubernetes-dns-node-cache, grpcurl, timoni...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, metacontroller, aactl, cue, nri-prometheus, nghttp2, buildkitd, grpcurl, terraform-provider-aws, flux-kustomize-controller, cosign, terraform-provider-sendgrid, nginx-mainline, kubewatch, kubeflow-katib, grype, sigstore-scaffolding,...