GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cert-manager, kube-fluentd-operator, kubeflow, rancher, vault-k8s, fuse-overlayfs-snapshotter, hubble-ui, conjur-cli, container-object-storage-interface, nri-apache, q, secrets-store-csi-driver, octo-sts, db-operator, kube-state-metrics, flux,...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: cert-manager, kube-fluentd-operator, kubeflow, rancher, vault-k8s, fuse-overlayfs-snapshotter, hubble-ui, conjur-cli, container-object-storage-interface, nri-apache, q, secrets-store-csi-driver, octo-sts, db-operator, kube-state-metrics, flux,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubeflow, ytt, vault-k8s, flux-image-automation-controller, fuse-overlayfs-snapshotter, hubble-ui, step, conjur-cli, container-object-storage-interface, maru, sbomqs, blobfuse2, pguser, secrets-store-csi-driver, terraform-mcp-server, octo-sts, esbuild,...

CLEANSTART-2026-UY85485 Within HostnameError

Multiple security vulnerabilities affect the vault-k8s package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2025-CN65903 Security fixes for GHSA-6v2p-p543-phr9, GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.5.0-r0, 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-EU07511 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0

Multiple security vulnerabilities affect the vault-k8s package. These issues are resolved in later releases. See references for individual CVE details...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, hivemind, local-path-provisioner, vault-k8s, sftpgo-plugin-pubsub, container-object-storage-interface, k8sgpt-operator, cloud-provider-aws, kuberay-operator, blobfuse2, custom-pod-autoscaler-operator, mongodb-kubernetes-operator, shfmt, octo-sts,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: grafana-operator, prometheus-bind-exporter, container-object-storage-interface, docker-credential-ecr-login, vault-benchmark, custom-pod-autoscaler-operator, octo-sts, blob-csi-fips, secrets-store-csi-driver-provider-aws, kubeflow-katib, prometheus-process-exporter,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: grafana-operator, prometheus-bind-exporter, container-object-storage-interface, docker-credential-ecr-login, vault-benchmark, custom-pod-autoscaler-operator, octo-sts, blob-csi-fips, secrets-store-csi-driver-provider-aws, kubeflow-katib, prometheus-process-exporter,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: ytt, nats-server, vault-k8s, crossplane-provider-azure, flux-image-automation-controller, fuse-overlayfs-snapshotter, hubble-ui, mage, nri-apache, q, sbomqs, aws-flb-firehose, shfmt, esbuild, gcsfuse, kube-state-metrics, flux, aws-load-balancer-controller, influx,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kubeflow, crossplane-provider-aws, nats-server, vault-k8s, crossplane-provider-azure, flux-image-automation-controller, step, kyverno-notation-aws, q, sbomqs, secrets-store-csi-driver, k8ssandra-client, octo-sts, gcsfuse, kube-state-metrics,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: metacontroller, dynamic-localpv-provisioner, aws-load-balancer-controller-fips, metrics-server, prometheus-bind-exporter, aws-ebs-csi-driver, prometheus-mongodb-exporter-fips, up, flux-source-controller, atlantis-fips, falcoctl-fips, k3s,...