67 matches found
CLEANSTART-2026-IV67749 Security fix for GHSA-cfpf-hrx2-8rv6 applied in: nats-server-config-reloader-fips 0.22.0-r0
Security vulnerability affects the nats-server-config-reloader-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-YS81054 Security fix for GHSA-259r-337f-4rfw applied in: temporal-server 1.30.8-r2, temporal-server-fips 1.31.4-r2, argo-rollouts 1.10.0-r1, stakater-reloader 1.2.1-r5, istio-pilot-discovery 1.29.8-r1, istio-pilot-discovery 1.30.1-r1, stakater-reloader 1.1.0-r9, stakater-reloader 1.3.0-r9, openbao 2.6.1-r0, nfs-subdir-external-provisioner 4.0.18-r4, mongodb 8.2.12-r4
GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-LU90605 Security fix for GHSA-6v2p-p543-phr9 applied in: stakater-reloader 1.1.0-r9
Security vulnerability affects the stakater-reloader package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-122778
Security vulnerability affects the stakater-reloader package. This issue is resolved in later releases. See references for vulnerability details...
GO-2026-6610 vulnerabilities
Vulnerabilities for packages: percona-backup-mongodb, multicluster-controlplane, acm-controller-fips, crossplane-provider-aws-transfer, crossplane-provider-aws-appflow, spicedb-operator, chainctl, crossplane-provider-aws-inspector2-fips, container-object-storage-interface,...
GO-2026-6611 vulnerabilities
Vulnerabilities for packages: percona-backup-mongodb, multicluster-controlplane, acm-controller-fips, crossplane-provider-aws-transfer, ko, crossplane-provider-aws-appflow, spicedb-operator, chainctl, crossplane-provider-aws-inspector2-fips, container-object-storage-interface,...
GO-2026-6603 vulnerabilities
Vulnerabilities for packages: percona-backup-mongodb, multicluster-controlplane, acm-controller-fips, crossplane-provider-aws-transfer, ko, crossplane-provider-aws-appflow, spicedb-operator, chainctl, crossplane-provider-aws-inspector2-fips, container-object-storage-interface,...
CVE-2026-78669 vulnerabilities
Vulnerabilities for packages: percona-backup-mongodb, multicluster-controlplane, acm-controller-fips, crossplane-provider-aws-transfer, ko, crossplane-provider-aws-appflow, spicedb-operator, chainctl, crossplane-provider-aws-inspector2-fips, container-object-storage-interface,...
GO-2026-6612 vulnerabilities
Vulnerabilities for packages: percona-backup-mongodb, multicluster-controlplane, acm-controller-fips, crossplane-provider-aws-transfer, ko, crossplane-provider-aws-appflow, spicedb-operator, chainctl, crossplane-provider-aws-inspector2-fips, container-object-storage-interface,...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: percona-backup-mongodb, multicluster-controlplane, acm-controller-fips, crossplane-provider-aws-transfer, ko, crossplane-provider-aws-appflow, spicedb-operator, chainctl, crossplane-provider-aws-inspector2-fips, container-object-storage-interface,...
CLEANSTART-2026-UJ78067 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the stakater-reloader package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-IK48300 Security fixes in stakater-reloader-fips 1.4.19-r1
Package stakater-reloader-fips version 1.4.19-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
GO-2025-4188 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis, prometheus-beat-exporter-fips, prometheus-mongodb-exporter-fips, kube-fluentd-operator, consul, go-discover, sonobuoy, aws-flb-cloudwatch, aws-flb-firehose, terraform-provider-google, kpt, hello-world-golang, gostatsd, src-fingerprint, sonobuoy-fips,...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: cluster-autoscaler-fips, aws-ebs-csi-driver, victoriametrics, flux-source-controller, librechat, gotenberg, loki-fips, nova, polaris, dkron, grafana-fips, podinfo, nova-fips, flux-operator-fips, victoriametrics-cluster, aws-ebs-csi-driver-fips, grafana-operator-fips,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: regclient, helm-set-status, aws-privateca-issuer, k3s, aws-eks-pod-identity-agent, cloud-provider-gcp-cloud-controller-manager, controller-gen, witness, oauth2-proxy, kpt, dex, grafana-rollout-operator, swagger, kuberlr, nri-f5, tekton-chains, rancher-system-agent,...
CLEANSTART-2026-DV77892 Security fixes in stakater-reloader 1.1.0-r0
Package stakater-reloader version 1.1.0-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, CVE-2025-22868...
CLEANSTART-2026-AD76060 Security fixes in stakater-reloader-fips 1.4.10-r0
Package stakater-reloader-fips version 1.4.10-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-GU77250 Security fixes in stakater-reloader 1.4.10-r0
Package stakater-reloader version 1.4.10-r0 fixes 1 vulnerabilities: CVE-2025-61729...