CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: stern, mariadb-operator, minio-operator, newrelic-k8s-metadata-injection, terraform-mcp-server, malcontent, rqlite, kine, kubernetes-csi-external-resizer, portieris, esbuild, smokescreen, docker-credential-ecr-login, kubernetes-csi-driver-nfs,...

CLEANSTART-2026-MQ21261 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2, 1.5.1-r3

Multiple security vulnerabilities affect the vertical-pod-autoscaler package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-family-aws, azure-service-operator, src, zot, dex, trivy-operator, crossplane-provider-aws-s3, crossplane-provider-aws-cloudfront, crossplane-provider-aws-lambda, caddy, opa, linkerd2, terraform-provider-acme,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-family-aws, azure-service-operator, src, zot, dex, trivy-operator, crossplane-provider-aws-s3, crossplane-provider-aws-cloudfront, crossplane-provider-aws-lambda, caddy, opa, linkerd2, terraform-provider-acme,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, ollama, tekton-pipelines-fips, amazon-ssm-agent-fips, flux-operator-fips, polaris-fips, grafana-alloy, pulumi-language-yaml, neuvector-sigstore-interface-fips, flux-kustomize-controller, ollama-fips, kyverno-policy-reporter,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, ollama, tekton-pipelines-fips, amazon-ssm-agent-fips, flux-operator-fips, polaris-fips, grafana-alloy, pulumi-language-yaml, neuvector-sigstore-interface-fips, flux-kustomize-controller, ollama-fips, kyverno-policy-reporter,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: stern, glow, mariadb-operator, minio-operator, kube-vip-cloud-provider, newrelic-k8s-metadata-injection, terraform-mcp-server, malcontent, cloudprober, secrets-store-csi-driver-provider-gcp, aws-otel-collector, kine, kubernetes-csi-external-resizer, portieris,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: stern, glow, mariadb-operator, minio-operator, kube-vip-cloud-provider, newrelic-k8s-metadata-injection, timescaledb-tune, terraform-mcp-server, malcontent, cloudprober, secrets-store-csi-driver-provider-gcp, aws-otel-collector, kine, xcover,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: stern, glow, mariadb-operator, minio-operator, kube-vip-cloud-provider, newrelic-k8s-metadata-injection, terraform-mcp-server, malcontent, cloudprober, secrets-store-csi-driver-provider-gcp, aws-otel-collector, kine, kubernetes-csi-external-resizer, portieris,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, http-echo, newrelic-nri-statsd, amazon-ssm-agent-fips, grafana-alloy, cluster-autoscaler-fips, haproxy-ingress, aws-sigv4-proxy-fips, net-kourier, sonobuoy-fips, gitlab-workhorse-ce, generic-device-plugin, kyverno-policy-reporter, gobump,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, http-echo, newrelic-nri-statsd, amazon-ssm-agent-fips, grafana-alloy, cluster-autoscaler-fips, haproxy-ingress, aws-sigv4-proxy-fips, net-kourier, sonobuoy-fips, gitlab-workhorse-ce, generic-device-plugin, kyverno-policy-reporter, gobump,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, http-echo, newrelic-nri-statsd, amazon-ssm-agent-fips, grafana-alloy, cluster-autoscaler-fips, haproxy-ingress, aws-sigv4-proxy-fips, net-kourier, sonobuoy-fips, gitlab-workhorse-ce, generic-device-plugin, kyverno-policy-reporter,...

CLEANSTART-2026-UM63521 Within HostnameError

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: ollama, pulumi-language-yaml, cluster-autoscaler-fips, haproxy-ingress, kyverno-policy-reporter, nats, grafana-operator-fips, gcsfuse, crossplane-provider-aws-route53, cloudflared, temporal-ui-server, conftest-fips, configmap-reload-fips, spire-server, dex,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: ollama, nfs-subdir-external-provisioner, yq, gitness, crossplane-provider-azure, pulumi-language-yaml, cluster-autoscaler-fips, haproxy-ingress, terraform, nfs-subdir-external-provisioner-fips, kiam, flux-kustomize-controller, buildkitd, metrics-server-fips, nats, sr...