GO-2023-2020 vulnerabilities

Vulnerabilities for packages: promxy, prometheus-alertmanager...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: prometheus, pulumi, amazon-cloudwatch-agent-operator, promxy-fips, amazon-cloudwatch-agent-operator-fips, vault, promxy...

GO-2023-2020 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, promxy...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, vcluster, dapr, hubble, ksops, splunk-otel-collector, datadog-agent, bento, grafana-mimir, thanos, consul-k8s, cilium, ratify, weaviate, teleport, tekton-chains, tetragon, kubescape, external-secrets-operator, opentelemetry-collector-contrib,...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, promxy, pulumi...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: k3s, kubevela, rancher-agent, promxy, amazon-cloudwatch-agent-operator, pulumi...

CLEANSTART-2026-YF99196 Security fixes in promxy-fips 0.0.93-r1

Package promxy-fips version 0.0.93-r1 fixes 35 vulnerabilities: CVE-2023-40577, CVE-2026-2303, CVE-2026-29181, CVE-2026-39827, CVE-2026-39828...

CLEANSTART-2026-RW78583 Security fixes for CVE-2023-40577, CVE-2025-47914, CVE-2025-58181, CVE-2026-2303, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-29181, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0.0.93-r0, 0.0.93-r1

Multiple security vulnerabilities affect the promxy-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, crossplane-provider-aws-iam, kargo, mesosphere-vsphere-csi, vexctl, kubernetes-event-exporter, trivy, external-dns, crossplane-provider-aws-s3, kserve, consul-k8s, redpanda, flux-helm-controller, tetragon,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, crossplane-provider-aws-iam, kargo, mesosphere-vsphere-csi, vexctl, kubernetes-event-exporter, trivy, external-dns, crossplane-provider-aws-s3, kserve, consul-k8s, redpanda, flux-helm-controller, tetragon,...

CLEANSTART-2026-SU44499 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the promxy package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, kargo, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws, trillian, kubernetes-event-exporter, certificate-transparency, sftpgo-plugin-pubsub, trivy, vexctl, verticadb-operator, external-dns, fuse-overlayfs-snapshotter, helm,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, volume-modifier-for-k8s, tempo, crossplane-provider-aws-iam, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-snapshotter, terragrunt, trillian, kubernetes-event-exporter, tflint,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, volume-modifier-for-k8s, tempo, crossplane-provider-aws-iam, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-snapshotter, terragrunt, trillian, kubernetes-event-exporter, tflint,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, tflint, nsc, supercronic, external-dns, crossplane-provider-aws-s3, kserve, kubernetes-dashboard-metrics-scraper, spicedb, metrics-server, php-fpmexporter, rook, prometheus-alertmanager, kubernetes-csi-driver-nfs, yq,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, tflint, nsc, supercronic, external-dns, crossplane-provider-aws-s3, kserve, kubernetes-dashboard-metrics-scraper, spicedb, metrics-server, php-fpmexporter, rook, prometheus-alertmanager, kubernetes-csi-driver-nfs, yq,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, tflint, nsc, supercronic, external-dns, crossplane-provider-aws-s3, kserve, kubernetes-dashboard-metrics-scraper, spicedb, metrics-server, php-fpmexporter, rook, prometheus-alertmanager, kubernetes-csi-driver-nfs, yq,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, tflint, nsc, supercronic, external-dns, crossplane-provider-aws-s3, kserve, kubernetes-dashboard-metrics-scraper, spicedb, metrics-server, php-fpmexporter, rook, prometheus-alertmanager, kubernetes-csi-driver-nfs, yq,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, lvm-driver-fips, neuvector, backup-restore-operator, boring-registry, gcp-compute-persistent-disk-csi-driver, tekton-chains-fips, docker-compose, azure-service-operator-fips, neuvector-sigstore-interface, istio, helm-diff-fips,...