GO-2026-5039 vulnerabilities

Vulnerabilities for packages: net-kourier, kube-logging-operator-custom-runner, k9s, kbld, cilium, vertical-pod-autoscaler, pgpool2exporter, crossplane, crossplane-provider-aws-cloudformation, kiali, percona-server-mongodb-operator, kots, goreleaser, litestream, kubernetes-csi-external-snapshotte...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: net-kourier, kube-logging-operator-custom-runner, k9s, kbld, cilium, vertical-pod-autoscaler, pgpool2exporter, crossplane, crossplane-provider-aws-cloudformation, kiali, percona-server-mongodb-operator, kots, goreleaser, litestream, kubernetes-csi-external-snapshotte...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, rabbitmq-messaging-topology-operator, tfsec, vertical-pod-autoscaler, ferretdb, newrelic-fluent-bit-output, pgpool2exporter,...

CLEANSTART-2026-FE65207 Security fixes in vault-k8s-fips 1.4.2-r0

Package vault-k8s-fips version 1.4.2-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...

CLEANSTART-2026-UY85485 Within HostnameError

Multiple security vulnerabilities affect the vault-k8s package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2025-CN65903 Security fixes for GHSA-6v2p-p543-phr9, GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.5.0-r0, 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-EU07511 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0

Multiple security vulnerabilities affect the vault-k8s package. These issues are resolved in later releases. See references for individual CVE details...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-vip, k8sgpt-operator, terraform-provider-time, newrelic-fluent-bit-output, bank-vaults, shfmt, sftpgo-plugin-pubsub, grafana-operator, hivemind, addon-resizer, linkerd2-proxy-init, kuberay-operator, php-fpmexporter,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: karma-fips, vault-k8s, nvidia-nsight-compute-12.8, linkerd2-proxy-init, secrets-store-csi-driver-provider-aws, docker-credential-ecr-login, kubernetes-dashboard-fips, vexctl, kube-vip, blob-csi-fips, ctop, gostatsd, confluent-common-docker,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: karma-fips, vault-k8s, nvidia-nsight-compute-12.8, linkerd2-proxy-init, secrets-store-csi-driver-provider-aws, docker-credential-ecr-login, kubernetes-dashboard-fips, vexctl, kube-vip, blob-csi-fips, ctop, gostatsd, confluent-common-docker,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, memcached-exporter, vertical-pod-autoscaler, supercronic, ferretdb, newrelic-fluent-bit-output, vt-cli, dockerize, goreleaser, k3d, controller-gen, prometheus-alertmanager, nri-mysql, yq, k8sgpt, nri-couchbase, stakater-reloader,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: k9s, falcosidekick, memcached-exporter, rabbitmq-messaging-topology-operator, sftpgo-plugin-eventsearch, ferretdb, tfsec, crossplane, crossplane-provider-aws-cloudformation, dockerize, kiali, kots, goreleaser, litestream, amazon-cloudwatch-agent-operator, cilium-cli,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: vault-k8s, metacontroller, secrets-store-csi-driver-provider-gcp, kube-logging-operator, kube-oidc-proxy, mc, prometheus-postgres-exporter, atlantis-fips, flux-source-controller, smarter-device-manager-fips, fuse-overlayfs-snapshotter, flux-image-reflector-controller...