GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kapp-controller, crossplane-provider-aws-route53, aactl, golangci-lint, fuse-overlayfs-snapshotter, crossplane-provider-aws-s3, flannel, grafana-rollout-operator, libnvidia-container, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, terraform-provider-azurerm, kiali,...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: kapp-controller, crossplane-provider-aws-route53, aactl, golangci-lint, fuse-overlayfs-snapshotter, crossplane-provider-aws-s3, flannel, grafana-rollout-operator, libnvidia-container, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, terraform-provider-azurerm, kiali,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kapp-controller, maru, aactl, golangci-lint, fuse-overlayfs-snapshotter, crossplane-provider-aws-s3, flannel, grafana-rollout-operator, grpcurl, cilium-cli, flux-notification-controller, helm-set-status, doppler-kubernetes-operator, sftpgo-plugin-geoipfilter,...

CLEANSTART-2026-GS57944 Security fixes in vault-k8s-fips 1.7.5-r1

Package vault-k8s-fips version 1.7.5-r1 fixes 1 vulnerabilities: CVE-2026-39822...

CLEANSTART-2026-FE65207 Security fixes in vault-k8s-fips 1.4.2-r0

Package vault-k8s-fips version 1.4.2-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...

CLEANSTART-2026-BP68746 Security fixes in vault-k8s-fips 1.5.0-r0

Package vault-k8s-fips version 1.5.0-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...

CLEANSTART-2026-IC30001 Security fixes in vault-k8s-fips 1.7.0-r0

Package vault-k8s-fips version 1.7.0-r0 fixes 2 vulnerabilities: ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-UY85485 Within HostnameError

Multiple security vulnerabilities affect the vault-k8s package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2025-CN65903 Security fixes for GHSA-6v2p-p543-phr9, GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.5.0-r0, 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-EU07511 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0

Multiple security vulnerabilities affect the vault-k8s package. These issues are resolved in later releases. See references for individual CVE details...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, lvm-driver, kubeflow-katib, sftpgo-plugin-geoipfilter, shfmt, local-path-provisioner, docker-credential-ecr-login, rancher-machine, addon-resizer, octo-sts, php-fpmexporter, blobfuse2, nats, newrelic-nri-statsd,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: shfmt, secrets-store-csi-driver-fips, addon-resizer, local-path-provisioner, gitsign, eks-distro-fips, blob-csi-fips, octo-sts, node-problem-detector-fips, stakater-reloader, kubernetes-csi-node-driver-registrar-fips, prometheus-beat-exporter-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: shfmt, secrets-store-csi-driver-fips, addon-resizer, local-path-provisioner, gitsign, eks-distro-fips, blob-csi-fips, octo-sts, node-problem-detector-fips, stakater-reloader, kubernetes-csi-node-driver-registrar-fips, prometheus-beat-exporter-fips,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: golangci-lint, fuse-overlayfs-snapshotter, grpcurl, kube-rbac-proxy, bazelisk, cadvisor, doppler-kubernetes-operator, paranoia, task, buildkitd, k8sgpt, go-md2man, gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-aws, delve, ip-masq-agent, spark-operator,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: kapp-controller, crossplane-provider-aws-route53, aactl, sftpgo-plugin-pubsub, crossplane-provider-aws, crossplane-provider-aws-s3, flannel, kube-rbac-proxy, cadvisor, cilium-cli, flux-notification-controller, trust-manager, doppler-kubernetes-operator, spicedb,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, buildkitd, newrelic-infrastructure-agent, prometheus-node-exporter, kubeflow-fips, prometheus-statsd-exporter, secrets-store-csi-driver, dex, wavefront-collector-for-kubernetes, prometheus-alertmanager, kube-fluentd-operator, memcached-exporter,...