GO-2026-6094 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, cluster-api-aws-controller, rke2-cloud-provider, rancher-webhook, kubescape-operator, tekton-chains, kube-vip-cloud-provider, istio, kubernetes-csi-external-attacher, cass-operator, calico, spqr, opentelemetry-operator,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: cilium-cli, grype, kots, zot, buildkitd, helm, ctop, flux-source-controller, gitness, k8sgpt, k3d, skaffold, kubescape, helm-push, fuse-overlayfs-snapshotter, newrelic-infrastructure-agent, flux-helm-controller, melange, kubevela, eksctl, up, trivy, kaniko...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: runc, cilium-envoy-fips, k8s-device-plugin, aws-load-balancer-controller, k3s, etcd-fips, rke2-runtime-fips, rke2-runtime, gitness, nvidia-gpu-operator-validator, gendesk, etcd, cilium-envoy, wuzz, localstack, fuse-overlayfs-snapshotter, gitlab-rails-ce, terraform,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips, zot, beats-fips, vault, kine, k3s, datadog-agent, containerd, cloudbeat-fips, rke2-runtime-fips, rke2-runtime, mattermost-fips, grafana, datadog-agent-fips, beats, commercial-grafana, fuse-overlayfs-snapshotter, frankenphp-8.4,...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: runc, cilium-envoy-fips, k8s-device-plugin, aws-load-balancer-controller, k3s, etcd-fips, rke2-runtime-fips, rke2-runtime, gitness, nvidia-gpu-operator-validator, gendesk, etcd, cilium-envoy, wuzz, localstack, fuse-overlayfs-snapshotter, gitlab-rails-ce, terraform,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, step-issuer, omnictl-multiarch-fips, zitadel, flux-image-reflector-controller-fips, cert-manager-google-cas-issuer-fips, sftpgo-plugin-geoipfilter, apache-beam-java-sdk, thanos-fips, jfrog-cli, databricks-cli-fips, snyk-cli, rancher-agent,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: k3s, loki, kine, containerd, zot, datadog-agent, fuse-overlayfs-snapshotter...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: buildkitd, flux-source-controller, kaniko, grype, kubescape, cilium-cli, gitness, up, kots, k8sgpt, skaffold, zot, fuse-overlayfs-snapshotter, eksctl, melange, kubevela, trivy, ctop, helm-push, flux-helm-controller, helm, newrelic-infrastructure-agent, k3d...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: k3s, k8s-device-plugin, wuzz, gitness, runc, fuse-overlayfs-snapshotter, aws-load-balancer-controller...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: k3s, k8s-device-plugin, wuzz, gitness, runc, fuse-overlayfs-snapshotter, aws-load-balancer-controller...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gatus, gostatsd, rancher-webhook, dapr, bento, kubescape-operator, tekton-chains, crossplane-provider-aws-cloudfront, argo-events, prometheus-adapter, zarf, timoni, aws-node-termination-handler, istio, kube-bench, step-issuer, flannel,...

CLEANSTART-2026-FV98119 Security fixes in kubernetes-csi-external-snapshotter-fips 8.4.0-r4

Package kubernetes-csi-external-snapshotter-fips version 8.4.0-r4 fixes 31 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-QE69630 Security fixes in kubernetes-csi-external-snapshotter-fips 8.5.0-r0

Package kubernetes-csi-external-snapshotter-fips version 8.5.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-ME11080 Security fixes in kubernetes-csi-external-snapshotter-fips 8.4.0-r2

Package kubernetes-csi-external-snapshotter-fips version 8.4.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-ZW95372 Security fixes in kubernetes-csi-external-snapshotter-fips 8.5.0-r2

Package kubernetes-csi-external-snapshotter-fips version 8.5.0-r2 fixes 8 vulnerabilities: CVE-2026-27143, CVE-2026-32281, CVE-2026-32280, CVE-2026-27140, CVE-2026-32283...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, cluster-api-aws-controller, rke2-cloud-provider, rancher-webhook, kubescape-operator, tekton-chains, kube-vip-cloud-provider, istio, kubernetes-csi-external-attacher, cass-operator, calico, spqr, opentelemetry-operator,...

CLEANSTART-2026-OV95289 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2, 8.4.0-r3, 8.4.0-r4

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BD49035 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FR50160 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Amazon Linux 2 : soci-snapshotter, --advisory ALAS2DOCKER-2026-131 (ALASDOCKER-2026-131)

The version of soci-snapshotter installed on the remote host is prior to 0.14.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-131 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-2568...