CLEANSTART-2026-CC98866 Security fixes in vertical-pod-autoscaler 1.5.1-r2

Package vertical-pod-autoscaler version 1.5.1-r2 fixes 4 vulnerabilities: CVE-2025-47911, CVE-2025-58190, CVE-2025-68121, CVE-2025-61732...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: multus-cni, ip-masq-agent, spire-server, ghaudit, nri-discovery-kubernetes, haproxy-ingress, crossplane-provider-azure-authorization, kine, kuberlr, aws-sigv4-proxy, calico, infinispan-operator, aws-flb-kinesis, http-echo, custom-pod-autoscaler-operator,...

CLEANSTART-2026-MQ21261 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2, 1.5.1-r3

Multiple security vulnerabilities affect the vertical-pod-autoscaler package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX58669 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: trivy, zarf, crossplane-provider-family-aws, kubo, external-dns, crossplane-provider-aws-memorydb, crossplane-provider-aws-elasticache, kube-logging-operator, traefik, cert-manager-webhook-pdns, contour, grafana-mimir, wolfictl, crossplane-provider-aws-eks, timoni,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: trivy, zarf, crossplane-provider-family-aws, kubo, external-dns, crossplane-provider-aws-memorydb, crossplane-provider-aws-elasticache, kube-logging-operator, traefik, cert-manager-webhook-pdns, contour, grafana-mimir, wolfictl, crossplane-provider-aws-eks, timoni,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, telegraf, tempo, azure-service-operator, crossplane-provider-family-aws, cluster-api-azure-controller-fips, flux-kustomize-controller-fips, flux-source-watcher, grafana-alloy-fips, sops, deck, cluster-api-azure-controller,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, telegraf, tempo, azure-service-operator, crossplane-provider-family-aws, cluster-api-azure-controller-fips, flux-kustomize-controller-fips, flux-source-watcher, grafana-alloy-fips, sops, deck, cluster-api-azure-controller,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: op-geth, ip-masq-agent, ghaudit, k8sgpt, cluster-api-aws-controller, crossplane-provider-aws-elasticache, haproxy-ingress, kine, traefik, restic, wolfictl, kuberlr, aws-sigv4-proxy, infinispan-operator, aws-flb-kinesis, http-echo, custom-pod-autoscaler-operator,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: multus-cni, op-geth, ip-masq-agent, wire-go, ghaudit, k8sgpt, cluster-api-aws-controller, crossplane-provider-aws-elasticache, haproxy-ingress, kine, traefik, restic, wolfictl, checksec, kuberlr, velero-plugin-for-microsoft-azure, aws-sigv4-proxy, calico,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: op-geth, ip-masq-agent, ghaudit, k8sgpt, cluster-api-aws-controller, crossplane-provider-aws-elasticache, haproxy-ingress, kine, traefik, restic, wolfictl, kuberlr, aws-sigv4-proxy, infinispan-operator, aws-flb-kinesis, http-echo, custom-pod-autoscaler-operator,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kyverno, aws-sigv4-proxy, crossplane-provider-aws-s3, amazon-k8s-cni, telegraf, terraform-provider-time, newrelic-k8s-metadata-injection, kubernetes-dashboard-auth-fips, pguser, kong-ingress-controller, crossplane-provider-family-aws, kargo, kyverno-notation-aws,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kyverno, aws-sigv4-proxy, crossplane-provider-aws-s3, amazon-k8s-cni, telegraf, terraform-provider-time, newrelic-k8s-metadata-injection, kubernetes-dashboard-auth-fips, pguser, kong-ingress-controller, crossplane-provider-family-aws, kargo, kyverno-notation-aws,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kyverno, aws-sigv4-proxy, crossplane-provider-aws-s3, telegraf, terraform-provider-time, newrelic-k8s-metadata-injection, kubernetes-dashboard-auth-fips, pguser, kong-ingress-controller, crossplane-provider-family-aws, kargo, kyverno-notation-aws,...

CLEANSTART-2026-UM63521 Within HostnameError

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, tekton-chains, crossplane-provider-family-aws, kargo, vexctl, k8sgpt-operator, cosign, pulumi-language-dotnet, crossplane-provider-aws-rds, haproxy-ingress, step, step-ca, external-secrets-fips, chartmuseum,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s-fips, tekton-chains, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, k8sgpt-operator, secrets-store-csi-driver-provider-gcp, sigstore-scaffolding, kube-state-metrics, cosign, pulumi-language-dotnet, kind, flux-helm-controller,...