CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: hugo-extended, seaweedfs, bank-vaults, cloud-provider-vsphere, cluster-proportional-autoscaler, direnv, kuberay-operator, terraform-provider-time, nri-f5, pdfcpu, vertical-pod-autoscaler, memcached-exporter, bento, dfc, argo-events, hubble,...

CLEANSTART-2026-MQ21261 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2, 1.5.1-r3

Multiple security vulnerabilities affect the vertical-pod-autoscaler package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: wolfictl, k3s, ollama, vertical-pod-autoscaler, pluto, bento, crossplane-provider-aws-cloudformation, nova, mattermost, crossplane-provider-aws-ec2, crossplane-provider-aws-sns, kyverno-policy-reporter, crossplane-provider-aws-route53, tigera-operator,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: wolfictl, k3s, ollama, vertical-pod-autoscaler, pluto, bento, crossplane-provider-aws-cloudformation, nova, mattermost, crossplane-provider-aws-ec2, crossplane-provider-aws-sns, kyverno-policy-reporter, crossplane-provider-aws-route53, tigera-operator,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: nemo, crossplane-provider-aws-cloudwatchlogs-fips, terraform-provider-grafana-fips, crossplane-provider-aws-lambda, crossplane-provider-aws-memorydb-fips, crossplane-provider-family-aws-fips, teleport-operator-fips, tempo, tekton-pipelines-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: nemo, crossplane-provider-aws-cloudwatchlogs-fips, terraform-provider-grafana-fips, crossplane-provider-aws-lambda, crossplane-provider-aws-memorydb-fips, crossplane-provider-family-aws-fips, teleport-operator-fips, tempo, tekton-pipelines-fips,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, bank-vaults, cloud-provider-vsphere, cluster-proportional-autoscaler, direnv, kiali, kuberay-operator, sealed-secrets, terraform-provider-time, pdfcpu, vertical-pod-autoscaler, memcached-exporter, dfc, argo-events, hubble,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, bank-vaults, cloud-provider-vsphere, cluster-proportional-autoscaler, direnv, kiali, kuberay-operator, sealed-secrets, terraform-provider-time, pdfcpu, velero-plugin-for-microsoft-azure, vertical-pod-autoscaler, memcached-exporter, dfc,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, bank-vaults, cloud-provider-vsphere, cluster-proportional-autoscaler, direnv, kiali, kuberay-operator, sealed-secrets, terraform-provider-time, pdfcpu, vertical-pod-autoscaler, memcached-exporter, dfc, argo-events, hubble,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: nemo, knative-operator-fips, volsync-fips, beats-fips, quic-go, aws-network-policy-agent, smarter-device-manager, nodetaint, skopeo-fips, kafkaexporter-fips, atlantis-fips, logstash-exporter, minify, jupyterhub-k8s-image-awaiter-fips, karpenter, kubernetes,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: nemo, knative-operator-fips, volsync-fips, beats-fips, quic-go, aws-network-policy-agent, smarter-device-manager, nodetaint, skopeo-fips, kafkaexporter-fips, atlantis-fips, logstash-exporter, minify, jupyterhub-k8s-image-awaiter-fips, karpenter, kubernetes,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: nemo, knative-operator-fips, volsync-fips, beats-fips, quic-go, aws-network-policy-agent, nodetaint, skopeo-fips, kafkaexporter-fips, atlantis-fips, logstash-exporter, jupyterhub-k8s-image-awaiter-fips, karpenter, kubernetes, kubernetes-csi-external-attacher,...

CLEANSTART-2026-UM63521 Within HostnameError

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, nodetaint, atlantis-fips, logstash-exporter, kubernetes, crossplane-provider-azure-sql, prometheus-alertmanager-fips, dex, vexctl, temporal-ui-server-fips, crossplane-provider-aws-route53, supercronic, coredns, grype, certificate-transparency,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kpt, prometheus-pushgateway-fips, slsa-verifier, nodetaint, node-problem-detector, atlantis-fips, kube-fluentd-operator, stakater-reloader, dex, prometheus-alertmanager, falcoctl-fips, weaviate, prometheus-postgres-exporter, src, coredns, dex-k8s-authenticator,...