CLEANSTART-2026-YF99196 Security fixes in promxy-fips 0.0.93-r1

Package promxy-fips version 0.0.93-r1 fixes 35 vulnerabilities: CVE-2023-40577, CVE-2026-2303, CVE-2026-29181, CVE-2026-39827, CVE-2026-39828...

CLEANSTART-2026-RW78583 Security fixes for CVE-2023-40577, CVE-2025-47914, CVE-2025-58181, CVE-2026-2303, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-29181, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0.0.93-r0, 0.0.93-r1

Multiple security vulnerabilities affect the promxy-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: metallb, gitlab-pages, argo-events, cilium, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, osv-scanner, neuvector-scanner, undock, amazon-cloudwatch-agent-operator, src, cert-manager-cmctl, falco-no-driver,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: metallb, gitlab-pages, argo-events, cilium, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, osv-scanner, neuvector-scanner, undock, amazon-cloudwatch-agent-operator, src, cert-manager-cmctl, falco-no-driver,...

CLEANSTART-2026-SU44499 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the promxy package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cosign, terraform-provider-kubernetes, grpc-health-probe, kubernetes-csi-external-health-monitor, golangci-lint, helm, secrets-store-csi-driver, gitlab-pages, syft, cilium-envoy, argo-events, cilium, dask-gateway, rabbitmq-messaging-topology-operator, osv-scanner,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: openfga, terraform-provider-kubernetes, kubernetes-csi-external-health-monitor, helm, secrets-store-csi-driver, gitlab-pages, syft, cilium-envoy, k8sgpt, argo-events, sops, cilium, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, dask-gateway...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: openfga, terraform-provider-kubernetes, kubernetes-csi-external-health-monitor, helm, secrets-store-csi-driver, gitlab-pages, syft, cilium-envoy, k8sgpt, argo-events, sops, cilium, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, dask-gateway...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, nri-jmx, kube-bench, nsc, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, steampipe, crossplane-provider-aws-cloudfront, newrelic-k8s-metadata-injection, ksops, pguser,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, nri-jmx, kube-bench, nsc, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, steampipe, crossplane-provider-aws-cloudfront, newrelic-k8s-metadata-injection, ksops, pguser,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, nri-jmx, kube-bench, nsc, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, steampipe, crossplane-provider-aws-cloudfront, newrelic-k8s-metadata-injection, ksops, pguser,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, nri-jmx, kube-bench, nsc, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, steampipe, crossplane-provider-aws-cloudfront, newrelic-k8s-metadata-injection, ksops, pguser,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: argo-cd, kube-vip-cloud-provider, teleport-operator-fips, cloudnative-pg-fips, beats, cue-fips, jobset-fips, rancher, kube-oidc-proxy, karma, prometheus-statsd-exporter, spire-controller-manager, nemo, crossplane-provider-gcp-fips, kubernetes, keda,...