CLEANSTART-2026-UY85485 Within HostnameError

Multiple security vulnerabilities affect the vault-k8s package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2025-CN65903 Security fixes for GHSA-6v2p-p543-phr9, GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.5.0-r0, 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-EU07511 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0

Multiple security vulnerabilities affect the vault-k8s package. These issues are resolved in later releases. See references for individual CVE details...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: vault-k8s, kserve-rest-proxy, container-object-storage-interface, php-fpmexporter, k8sgpt-operator, rancher-machine, sftpgo-plugin-pubsub, kuberay-operator, mongodb-kubernetes-operator, git-lfs, nats, linkerd2-proxy-init, sftpgo-plugin-geoipfilter, kube-vip,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, dagdotdev, docker-credential-ecr-login, knative-serving, nvidia-nsight-compute-12.9, k8sgpt-operator, vexctl, grafana-operator, blob-csi-fips, sftpgo-plugin-geoipfilter, knative-eventing, nvidia-nsight-compute-13.1,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, dagdotdev, docker-credential-ecr-login, knative-serving, nvidia-nsight-compute-12.9, k8sgpt-operator, vexctl, grafana-operator, blob-csi-fips, sftpgo-plugin-geoipfilter, knative-eventing, nvidia-nsight-compute-13.1,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-rabbitmq, nri-couchbase, docker-credential-gcr, nri-redis, php-fpmexporter, up, render-template, cert-exporter, go-bindata, prometheus-adapter, ip-masq-agent, kuberay-operator, wire-go, k8sgpt, configmap-reload, kube-logging-operator, ctop,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: temporal, trivy, kapp-controller, zarf, crossplane-provider-family-aws, falcosidekick, nginx-prometheus-exporter, kiali, cert-exporter, prometheus-adapter, sqlexporter, tekton-chains, x509-certificate-exporter, external-dns, crossplane-provider-aws-memorydb,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s-fips, tekton-chains, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, k8sgpt-operator, secrets-store-csi-driver-provider-gcp, sigstore-scaffolding, kube-state-metrics, cosign, pulumi-language-dotnet, kind, flux-helm-controller,...