CLEANSTART-2026-YF99196 Security fixes in promxy-fips 0.0.93-r1

Package promxy-fips version 0.0.93-r1 fixes 35 vulnerabilities: CVE-2023-40577, CVE-2026-2303, CVE-2026-29181, CVE-2026-39827, CVE-2026-39828...

CLEANSTART-2026-RW78583 Security fixes for CVE-2023-40577, CVE-2025-47914, CVE-2025-58181, CVE-2026-2303, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-29181, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0.0.93-r0, 0.0.93-r1

Multiple security vulnerabilities affect the promxy-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: step-ca, step-issuer, step, external-dns, flux, slsa-verifier, skopeo, crossplane-provider-family-azure, kubernetes-csi-driver-hostpath, tetragon, vexctl, src, falco-no-driver, crossplane-provider-aws-sqs, osv-scanner, yunikorn-k8shim,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: step-ca, step-issuer, step, external-dns, flux, slsa-verifier, skopeo, crossplane-provider-family-azure, kubernetes-csi-driver-hostpath, tetragon, vexctl, src, falco-no-driver, crossplane-provider-aws-sqs, osv-scanner, yunikorn-k8shim,...

CLEANSTART-2026-SU44499 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the promxy package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, scorecard, memcached-exporter, kubernetes-csi-external-resizer, bom, step-ca, step-issuer, step, external-dns, docker-machine-driver-linode, flux, nginx-prometheus-exporter, newrelic-infrastructure-agent, slsa-verifier,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, memcached-exporter, kubernetes-csi-external-resizer, bom, step-ca, step-issuer, step, external-dns, nginx-prometheus-exporter, newrelic-infrastructure-agent, neuvector-sigstore-interface, skopeo, terraform-provider-time, pulumi,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, memcached-exporter, kubernetes-csi-external-resizer, bom, step-ca, step-issuer, step, external-dns, nginx-prometheus-exporter, newrelic-infrastructure-agent, neuvector-sigstore-interface, skopeo, terraform-provider-time, pulumi,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: skopeo, pulumi, nsc, restic, cluster-autoscaler, crossplane-provider-aws-sqs, yunikorn-k8shim, controller-gen, clickhouse-operator, redka, s5cmd, helm, rabbitmq-cluster-operator, actions-runner-controller, crossplane-provider-aws-cloudwatchlogs, aws-sigv4-proxy,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: skopeo, pulumi, nsc, restic, cluster-autoscaler, crossplane-provider-aws-sqs, yunikorn-k8shim, controller-gen, clickhouse-operator, redka, s5cmd, helm, rabbitmq-cluster-operator, actions-runner-controller, crossplane-provider-aws-cloudwatchlogs, aws-sigv4-proxy,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: skopeo, pulumi, nsc, restic, cluster-autoscaler, crossplane-provider-aws-sqs, yunikorn-k8shim, controller-gen, clickhouse-operator, redka, s5cmd, helm, rabbitmq-cluster-operator, actions-runner-controller, crossplane-provider-aws-cloudwatchlogs, aws-sigv4-proxy,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: skopeo, pulumi, nsc, restic, cluster-autoscaler, crossplane-provider-aws-sqs, yunikorn-k8shim, controller-gen, clickhouse-operator, redka, s5cmd, helm, rabbitmq-cluster-operator, actions-runner-controller, crossplane-provider-aws-cloudwatchlogs, aws-sigv4-proxy,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: buildah, containerd, minio, prometheus-operator-fips, kserve-modelmesh-serving, kubernetes-csi-external-provisioner, prometheus-pgbouncer-exporter, atlantis-fips, thanos-fips, argo-cd, argocd-image-updater, aws-ebs-csi-driver-fips, rancher-webhook, podinfo, goose-fip...