CLEANSTART-2026-QJ84375 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r1

Package prometheus-elasticsearch-exporter version 1.10.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: k9s, minio, prometheus-operator, gitea, reports-server, knative-eventing-fips, vault-fips, trivy-fips, trivy, chisel, argo-workflows, frankenphp-8.3, keda-fips, telegraf, harbor-fips, skaffold-fips, seaweedfs-rocksdb, tigera-operator, trivy-operator, minio-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, azure-service-operator-fips, dex-fips, bento, aws-efs-csi-driver-fips, knative-eventing-fips, vault-fips, nri-apache, regclient, db-operator, kafka-proxy, nri-haproxy, blob-csi-fips, trivy, chaos-mesh-fips, rancher-fleet,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, wait-for-port, knative-eventing-fips, regclient, kafka-proxy, blob-csi-fips, cert-manager-webhook-pdns, kratos, gosu, terraform-provider-random-fips, cfssl-fips, velero-plugin-for-aws-fips, metacontroller, restic-fips, crane-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, wait-for-port, knative-eventing-fips, regclient, kafka-proxy, blob-csi-fips, cert-manager-webhook-pdns, kratos, gosu, terraform-provider-random-fips, cfssl-fips, velero-plugin-for-aws-fips, metacontroller, restic-fips, crane-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, wait-for-port, knative-eventing-fips, regclient, kafka-proxy, trivy, blob-csi-fips, cert-manager-webhook-pdns, kratos, gosu, terraform-provider-random-fips, cfssl-fips, velero-plugin-for-aws-fips, metacontroller, restic-fips, crane-fips,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, wait-for-port, knative-eventing-fips, regclient, kafka-proxy, blob-csi-fips, cert-manager-webhook-pdns, kratos, gosu, terraform-provider-random-fips, cfssl-fips, velero-plugin-for-aws-fips, metacontroller, restic-fips, crane-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, wait-for-port, knative-eventing-fips, regclient, kafka-proxy, blob-csi-fips, cert-manager-webhook-pdns, kratos, gosu, terraform-provider-random-fips, cfssl-fips, velero-plugin-for-aws-fips, metacontroller, restic-fips, crane-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, wait-for-port, knative-eventing-fips, regclient, kafka-proxy, blob-csi-fips, cert-manager-webhook-pdns, kratos, gosu, terraform-provider-random-fips, cfssl-fips, velero-plugin-for-aws-fips, metacontroller, restic-fips, crane-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cortex, helm-operator, sops, frp, crossplane-provider-aws-eks, docker, cosign, chartmuseum, influx, terraform-docs, slsa-verifier, goreleaser, crossplane-provider-aws-cloudformation, crossplane-provider-aws-iam, spicedb, eksctl, kustomize,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: nri-prometheus, minio, prometheus-operator, pulumi-kubernetes-operator, aws-efs-csi-driver-fips, configmap-reload-fips, kubernetes-csi-livenessprobe-fips, kiam, git-lfs, metacontroller, prometheus-stackdriver-exporter, prometheus-node-exporter, grpcurl, cue,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: frp, cosign, chartmuseum, slsa-verifier, gobuster, helm, grpcurl, hey, crossplane-provider-aws, prometheus-pushgateway, aws-efs-csi-driver, flux-source-controller, prometheus-alertmanager, trillian, nodetaint, flux-helm-controller, gke-gcloud-auth-plugin, ollama,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: cortex, frp, cosign, nginx-stable, slsa-verifier, nginx-mainline, scorecard, gobuster, helm, grpcurl, hey, aws-efs-csi-driver, flux-source-controller, nodetaint, flux-helm-controller, gke-gcloud-auth-plugin, ollama, flux-notification-controller, cue, ko, dex,...