GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kots, kubescape, helm, kaf, frankenphp-8.2, prometheus-mongodb-exporter, istio, trivy-operator-fips, cloud-provider-aws, commercial-grafana, kubernetes, osv-scanner, argo-workflows, calico-fips, gitlab-rails-ce-fips, traefik-fips, frankenphp-8.4...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, logstash-exporter, stern, nodetaint, onepassword-operator, yunikorn-web, cert-manager-csi-driver-fips, cluster-api-provider-vsphere, gitlab-kas-fips, nri-elasticsearch-fips, maru, percona-server-mongodb-operator,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, cluster-api-gcp-controller, logstash-exporter, nodetaint, onepassword-operator, rekor, cluster-api-provider-vsphere, stern, yunikorn-web, cfssl-fips, maru, container-object-storage-interface, docker-credential-acr-env, kaf,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, cluster-api-gcp-controller, logstash-exporter, nodetaint, onepassword-operator, rekor, cluster-api-provider-vsphere, stern, yunikorn-web, cfssl-fips, maru, container-object-storage-interface, docker-credential-acr-env, kaf,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, cluster-api-gcp-controller, logstash-exporter, nodetaint, onepassword-operator, rekor, cluster-api-provider-vsphere, stern, yunikorn-web, cfssl-fips, maru, container-object-storage-interface, docker-credential-acr-env, kaf,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, cluster-api-gcp-controller, logstash-exporter, nodetaint, onepassword-operator, rekor, cluster-api-provider-vsphere, stern, yunikorn-web, cfssl-fips, maru, container-object-storage-interface, docker-credential-acr-env, kaf,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, cluster-api-gcp-controller, logstash-exporter, nodetaint, onepassword-operator, rekor, cluster-api-provider-vsphere, stern, yunikorn-web, cfssl-fips, maru, container-object-storage-interface, docker-credential-acr-env, kaf,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, cluster-api-gcp-controller, logstash-exporter, nodetaint, onepassword-operator, rekor, cluster-api-provider-vsphere, stern, yunikorn-web, cfssl-fips, maru, container-object-storage-interface, docker-credential-acr-env, kaf,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kargo, vertical-pod-autoscaler, metacontroller, prometheus-alertmanager, fuse-overlayfs-snapshotter, cilium-cli, pulumi-kubernetes-operator, secrets-store-csi-driver-provider-aws, kube-logging-operator, temporal, terragrunt, kubernetes-event-exporter,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: bom, vertical-pod-autoscaler, metacontroller, prometheus-alertmanager, fuse-overlayfs-snapshotter, pulumi-kubernetes-operator, kube-logging-operator, kubernetes-dashboard, gomplate, stakater-reloader, k3d, kube-fluentd-operator, thanos-operator, yq, kind,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, trust-manager, nodetaint, kubeflow-katib, kots, kind, ollama, tekton-chains, kubernetes-csi-external-resizer, helm, kubescape, kaf, prometheus-mongodb-exporter, tkn, oauth2-proxy, prometheus-node-exporter, yq, prometheus-alertmanager...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: bom, metacontroller, fuse-overlayfs-snapshotter, pulumi-kubernetes-operator, gomplate, stakater-reloader, envoy-ratelimit, k3d, kind, secrets-store-csi-driver-provider-gcp, flux-helm-controller, kubescape, gke-gcloud-auth-plugin, src, weaviate, kubeflow, cue, coredns...