GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, prometheus, k8s-device-plugin, minio, runc, external-dns, vitess, aactl, telegraf, cilium-cli, fluent-bit-plugin-loki, karma, dask-gateway, istio, gatekeeper, kubevela, kyverno, knative-eventing, go, external-secrets-operator, kots, karpenter,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, prometheus, k8s-device-plugin, minio, runc, external-dns, vitess, aactl, telegraf, cilium-cli, fluent-bit-plugin-loki, karma, dask-gateway, istio, gatekeeper, kubevela, kyverno, knative-eventing, go, external-secrets-operator, kots, karpenter,...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: zot, oauth2-proxy-fips, azure-aad-pod-identity-mic, cloud-provider-azure-fips, cilium, beats-fips, longhorn-backing-image-manager-fips, kaf, argo-workflows-fips, nvidia-nsight-compute-13.1, karma-fips, prometheus-mongodb-exporter, rke2-runtime-fips, chisel-fips,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: zot, oauth2-proxy-fips, azure-aad-pod-identity-mic, cloud-provider-azure-fips, cilium, beats-fips, longhorn-backing-image-manager-fips, kaf, argo-workflows-fips, nvidia-nsight-compute-13.1, karma-fips, prometheus-mongodb-exporter, rke2-runtime-fips, chisel-fips,...

CLEANSTART-2026-GX29850 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 1.132.0-r0, 1.132.0-r1

Multiple security vulnerabilities affect the victoriametrics-cluster package. These issues are resolved in later releases. See references for individual vulnerability details...