GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, flux-source-watcher, flux-source-controller, flux-notification-controller, victoriametrics-cluster-fips, dkron, victorialogs, librechat, steampipe, localstack, metacontroller, nova-fips, aws-ebs-csi-driver-fips, podinfo, terragrunt,...

CLEANSTART-2026-KF37160 Security fixes in victoriametrics-cluster 1.132.0-r1

Package victoriametrics-cluster version 1.132.0-r1 fixes 1 vulnerabilities: CVE-2025-68121...

CLEANSTART-2026-FL92445 Security fixes in victoriametrics-cluster 1.132.0-r0

Package victoriametrics-cluster version 1.132.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-YK97558 Security fixes in victoriametrics-cluster-fips 1.132.0-r0

Package victoriametrics-cluster-fips version 1.132.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: k3s, kyverno, aws-flb-firehose, aws-flb-cloudwatch, coredns, dask-gateway, runc, grafana-alloy, zarf, kubernetes-dashboard, redka, fluent-bit-plugin-loki, kaf, containerd, minio, helm, prometheus-operator, grafana, argo-cd, libnvidia-container, kubo, juicefs, kots,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: k3s, kyverno, aws-flb-firehose, aws-flb-cloudwatch, coredns, dask-gateway, runc, grafana-alloy, zarf, kubernetes-dashboard, redka, fluent-bit-plugin-loki, kaf, containerd, minio, helm, prometheus-operator, grafana, argo-cd, libnvidia-container, kubo, juicefs, kots,...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, grafana-alloy, kyverno-fips, jaeger-fips, cluster-autoscaler, terraform, minio, mattermost, minio-fips, knative-operator-fips, headlamp-fips, commercial-kyverno, knative-net-istio-fips, vitess, upwind-agent, authentik-fips, seaweedfs-fips,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, grafana-alloy, kyverno-fips, jaeger-fips, cluster-autoscaler, terraform, minio, mattermost, minio-fips, knative-operator-fips, headlamp-fips, commercial-kyverno, knative-net-istio-fips, vitess, upwind-agent, authentik-fips, seaweedfs-fips,...

CLEANSTART-2026-GX29850 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 1.132.0-r0, 1.132.0-r1

Multiple security vulnerabilities affect the victoriametrics-cluster package. These issues are resolved in later releases. See references for individual vulnerability details...