Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Amazon CloudWatch Agent and other tools receive code execution fix

published 1 month ago

Summary

Several open‑source components—including Amazon CloudWatch Agent, Argo CD, Cadvisor, and others—had a security flaw that could let attackers run unauthorized code. The problem has been corrected in the latest versions, so update each affected package as soon as possible to stay protected.

What to do

Update cleanstart amazon-cloudwatch-agent to version 1.300070.0-r1.
Update cleanstart amazon-cloudwatch-agent to version 1.300071.0-r1.
Update cleanstart argo-cd to version 3.1.16-r4.
Update cleanstart argo-cd to version 3.2.12-r3.
Update cleanstart argo-cd to version 3.3.12-r4.
Update cleanstart argo-cd to version 3.3.14-r2.
Update cleanstart argo-cd to version 3.4.5-r2.
Update cleanstart argo-cd to version 3.4.6-r0.
Update cleanstart argo-cd to version 3.4.7-r2.
Update cleanstart argo-cd-fips to version 3.4.7-r1.
Update cleanstart argo-workflows to version 3.7.17-r2.
Update cleanstart cadvisor to version 0.55.1-r4.
Update cleanstart cadvisor to version 0.56.2-r2.
Update cleanstart cadvisor to version 0.57.0-r4.
Update cleanstart cadvisor to version 0.60.5-r0.
Update cleanstart calico to version 3.30.7-r6.
Update cleanstart cert-manager to version 1.17.4-r5.
Update cleanstart cert-manager to version 1.18.6-r4.
Update cleanstart cortex to version 1.18.1-r4.
Update cleanstart cortex to version 1.19.1-r2.
Update cleanstart cortex to version 1.20.1-r3.
Update cleanstart cosign to version 3.1.2-r1.
Update cleanstart crossplane to version 2.3.4-r2.
Update cleanstart dex to version 2.42.1-r2.
Update cleanstart dynatrace-operator to version 1.8.1-r6.
Update cleanstart dynatrace-operator to version 1.9.0-r4.
Update cleanstart elastic-beats to version 9.1.10-r5.
Update cleanstart elastic-beats to version 9.2.8-r7.
Update cleanstart elastic-beats to version 9.3.7-r1.
Update cleanstart elastic-beats to version 9.3.9-r0.
Update cleanstart elastic-beats to version 9.4.2-r3.
Update cleanstart flux-notification-controller-fips to version 1.9.2-r0.
Update cleanstart fulcio-fips to version 1.6.6-r3.
Update cleanstart gitea to version 1.26.4-r1.
Update cleanstart gitea to version 1.27.0-r2.
Update cleanstart gitea to version 1.27.2-r1.
Update cleanstart grafana to version 12.3.10-r1.
Update cleanstart grafana to version 12.3.8-r2.
Update cleanstart grafana to version 12.4.5-r2.
Update cleanstart grafana to version 12.4.6-r0.
Update cleanstart grafana to version 12.4.7-r1.
Update cleanstart grafana to version 12.4.9-r1.
Update cleanstart grafana to version 13.0.5-r1.
Update cleanstart grafana to version 13.0.7-r1.
Update cleanstart haproxy-ingress to version 0.14.12-r2.
Update cleanstart helm-operator to version 1.39.2-r1.
Update cleanstart helm-operator to version 1.40.0-r1.
Update cleanstart istio to version 1.29.6-r2.
Update cleanstart karma to version 0.128-r1.
Update cleanstart karma to version 0.129-r1.
Update cleanstart karma to version 0.130-r1.
Update cleanstart karma to version 0.131-r1.
Update cleanstart knative-net-istio to version 1.21.4-r2.
Update cleanstart knative-serving to version 1.20.3-r0.
Update cleanstart kube-metrics-adapter to version 0.2.9-r1.
Update cleanstart kubernetes-dns-node-cache to version 1.23.1-r1.
Update cleanstart kubernetes-dns-node-cache to version 1.24.1-r2.
Update cleanstart kubernetes-dns-node-cache to version 1.25.0-r9.
Update cleanstart kubernetes-dns-node-cache to version 1.26.8-r6.
Update cleanstart kubernetes-event-exporter to version 1.5-r3.
Update cleanstart kyverno to version 1.16.4-r3.
Update cleanstart kyverno to version 1.17.2-r2.
Update cleanstart kyverno to version 1.18.1-r3.
Update cleanstart local-path-provisioner-fips to version 0.0.36-r1.
Update cleanstart logstash-exporter to version 1.7.1-r1.
Update cleanstart logstash-exporter to version 1.8.4-r1.
Update cleanstart loki to version 3.6.12-r2.
Update cleanstart minio-operator to version 6.0.4-r6.
Update cleanstart minio-operator to version 7.0.1-r7.
Update cleanstart mongodb to version 8.1.3-r3.
Update cleanstart mongodb to version 8.3.7-r0.
Update cleanstart nats-streaming to version 0.22.1-r1.
Update cleanstart nats-streaming to version 0.23.2-r1.
Update cleanstart nats-streaming to version 0.24.6-r4.
Update cleanstart nats-streaming to version 0.25.6-r5.
Update cleanstart newrelic-infrastructure-agent to version 1.76.2-r1.
Update cleanstart newrelic-infrastructure-agent to version 1.78.1-r1.
Update cleanstart newrelic-infrastructure-agent to version 1.79.0-r1.
Update cleanstart ollama to version 0.31.2-r1.
Update cleanstart ollama to version 0.32.0-r1.
Update cleanstart ollama to version 0.32.11-r3.
Update cleanstart ollama to version 0.32.4-r1.
Update cleanstart ollama to version 0.32.7-r1.
Update cleanstart ollama to version 0.32.9-r1.
Update cleanstart ollama-fips to version 0.30.11-r2.
Update cleanstart ollama-fips to version 0.32.1-r1.
Update cleanstart ollama-fips to version 0.32.11-r2.
Update cleanstart ollama-fips to version 0.32.14-r2.
Update cleanstart ollama-fips to version 0.32.4-r1.
Update cleanstart ollama-fips to version 0.32.7-r1.
Update cleanstart ollama-fips to version 0.32.8-r1.
Update cleanstart ollama-fips to version 0.32.9-r2.
Update cleanstart opentelemetry-collector-contrib to version 0.153.0-r3.
Update cleanstart opentelemetry-collector-contrib to version 0.155.0-r1.
Update cleanstart percona-server-mongodb-operator to version 1.23.0-r0.
Update cleanstart policy-controller-fips to version 0.15.1-r1.
Update cleanstart prometheus to version 3.10.0-r7.
Update cleanstart prometheus to version 3.11.3-r5.
Update cleanstart prometheus to version 3.13.1-r2.
Update cleanstart prometheus to version 3.5.3-r6.
Update cleanstart prometheus to version 3.9.1-r9.
Update cleanstart prometheus-alertmanager to version 0.33.0-r2.
Update cleanstart prometheus-fips to version 3.10.0-r1.
Update cleanstart prometheus-fips to version 3.11.3-r1.
Update cleanstart prometheus-fips to version 3.12.0-r1.
Update cleanstart prometheus-mysqld-exporter to version 0.16.0-r4.
Update cleanstart prometheus-mysqld-exporter to version 0.17.2-r4.
Update cleanstart prometheus-pushgateway to version 1.10.0-r3.
Update cleanstart prometheus-redis-exporter to version 1.85.0-r1.
Update cleanstart prometheus-redis-exporter to version 1.86.0-r1.
Update cleanstart prometheus-redis-exporter to version 1.88.0-r2.
Update cleanstart prometheus-redis-exporter-fips to version 1.87.0-r1.
Update cleanstart prometheus-statsd-exporter to version 0.27.2-r1.
Update cleanstart prometheus-statsd-exporter to version 0.28.0-r3.
Update cleanstart pulumi to version 3.248.0-r0.
Update cleanstart rabbitmq-messaging-topology-operator to version 1.16.0-r2.
Update cleanstart rancher-agent to version 2.11.15-r1.
Update cleanstart rancher-agent to version 2.12.11-r1.
Update cleanstart rancher-agent to version 2.13.7-r3.
Update cleanstart rancher-agent to version 2.14.3-r0.
Update cleanstart rancher-fleet-agent to version 0.12.17-r1.
Update cleanstart rancher-fleet-agent to version 0.14.10-r1.
Update cleanstart rancher-fleet-agent to version 0.14.8-r1.
Update cleanstart rancher-fleet-agent to version 0.15.4-r1.
Update cleanstart rancher-fleet-agent to version 0.15.6-r0.
Update cleanstart rancher-fleet-agent to version 0.16.1-r1.
Update cleanstart rclone to version 1.71.2-r3.
Update cleanstart rclone to version 1.72.1-r11.
Update cleanstart rclone to version 1.73.5-r5.
Update cleanstart rclone to version 1.74.3-r2.
Update cleanstart spire-server to version 1.14.7-r0.
Update cleanstart stakater-reloader to version 1.1.0-r3.
Update cleanstart stakater-reloader to version 1.2.1-r2.
Update cleanstart stakater-reloader to version 1.3.0-r2.
Update cleanstart step to version 0.27.5-r3.
Update cleanstart step to version 0.28.7-r4.
Update cleanstart step to version 0.29.0-r3.
Update cleanstart step-ca to version 0.27.5-r0.
Update cleanstart step-cli to version 0.27.5-r1.
Update cleanstart step-cli to version 0.30.6-r0.
Update cleanstart step-issuer to version 0.11.0-r4.
Update cleanstart step-issuer to version 0.9.11-r2.
Update cleanstart tekton-chains to version 0.25.2-r1.
Update cleanstart tekton-chains-fips to version 0.24.0-r1.
Update cleanstart tekton-chains-fips to version 0.25.2-r1.
Update cleanstart tekton-chains-fips to version 0.26.5-r1.
Update cleanstart tempo to version 2.10.7-r2.
Update cleanstart tempo to version 2.10.8-r1.
Update cleanstart tempo to version 2.9.5-r2.
Update cleanstart temporal-server to version 1.28.4-r2.
Update cleanstart temporal-server to version 1.29.7-r2.
Update cleanstart temporal-server to version 1.30.5-r1.
Update cleanstart temporal-server to version 1.30.6-r3.
Update cleanstart terraform to version 1.15.7-r0.
Update cleanstart tigera-operator to version 1.39.3-r1.
Update cleanstart tigera-operator to version 1.40.13-r1.
Update cleanstart tigera-operator to version 1.42.1-r2.
Update cleanstart tigera-operator to version 1.42.3-r2.
Update cleanstart tkn to version 0.42.2-r1.
Update cleanstart tkn to version 0.43.2-r1.
Update cleanstart tkn to version 0.44.2-r1.
Update cleanstart tkn to version 0.45.0-r1.
Update cleanstart vault to version 1.19.5-r1.
Update cleanstart vault to version 1.20.4-r8.
Update cleanstart vault to version 1.21.4-r9.
Update cleanstart vault to version 2.0.3-r1.
Update cleanstart vault-k8s to version 1.5.0-r2.
Update cleanstart vault-k8s to version 1.6.2-r1.
Update cleanstart velero to version 1.15.2-r6.
Update cleanstart velero to version 1.17.2-r7.
Update cleanstart velero to version 1.18.2-r6.
Update cleanstart victoriametrics-operator to version 0.71.0-r2.
Update cleanstart victoriametrics-operator-fips to version 0.69.0-r0.
Update cleanstart victoriametrics-operator-fips to version 0.70.1-r0.
Update cleanstart victoriametrics-operator-fips to version 0.71.0-r0.
Update cleanstart victoriametrics-operator-fips to version 0.72.0-r1.
Update cleanstart wave to version 0.10.0-r4.
Update cleanstart weaviate-fips to version 1.37.14-r0.
Update cleanstart weaviate-fips to version 1.38.6-r1.
Update amazon-cloudwatch-agent to version 1.300070.0-r1.
Update amazon-cloudwatch-agent to version 1.300071.0-r1.
Update argo-cd to version 3.1.16-r4.
Update argo-cd to version 3.2.12-r3.
Update argo-cd to version 3.3.12-r4.
Update argo-cd to version 3.3.14-r2.
Update argo-cd to version 3.4.5-r2.
Update argo-cd to version 3.4.6-r0.
Update argo-cd to version 3.4.7-r2.
Update argo-cd-fips to version 3.4.7-r1.
Update argo-workflows to version 3.7.17-r2.
Update cadvisor to version 0.55.1-r4.
Update cadvisor to version 0.56.2-r2.
Update cadvisor to version 0.57.0-r4.
Update cadvisor to version 0.60.5-r0.
Update calico to version 3.30.7-r6.
Update cert-manager to version 1.17.4-r5.
Update cert-manager to version 1.18.6-r4.
Update cortex to version 1.18.1-r4.
Update cortex to version 1.19.1-r2.
Update cortex to version 1.20.1-r3.
Update cosign to version 3.1.2-r1.
Update crossplane to version 2.3.4-r2.
Update dex to version 2.42.1-r2.
Update dynatrace-operator to version 1.8.1-r6.
Update dynatrace-operator to version 1.9.0-r4.
Update elastic-beats to version 9.1.10-r5.
Update elastic-beats to version 9.2.8-r7.
Update elastic-beats to version 9.3.7-r1.
Update elastic-beats to version 9.3.9-r0.
Update elastic-beats to version 9.4.2-r3.
Update flux-notification-controller-fips to version 1.9.2-r0.
Update fulcio-fips to version 1.6.6-r3.
Update gitea to version 1.26.4-r1.
Update gitea to version 1.27.0-r2.
Update gitea to version 1.27.2-r1.
Update grafana to version 12.3.10-r1.
Update grafana to version 12.3.8-r2.
Update grafana to version 12.4.5-r2.
Update grafana to version 12.4.6-r0.
Update grafana to version 12.4.7-r1.
Update grafana to version 12.4.9-r1.
Update grafana to version 13.0.5-r1.
Update grafana to version 13.0.7-r1.
Update haproxy-ingress to version 0.14.12-r2.
Update helm-operator to version 1.39.2-r1.
Update helm-operator to version 1.40.0-r1.
Update istio to version 1.29.6-r2.
Update karma to version 0.128-r1.
Update karma to version 0.129-r1.
Update karma to version 0.130-r1.
Update karma to version 0.131-r1.
Update knative-net-istio to version 1.21.4-r2.
Update knative-serving to version 1.20.3-r0.
Update kube-metrics-adapter to version 0.2.9-r1.
Update kubernetes-dns-node-cache to version 1.23.1-r1.
Update kubernetes-dns-node-cache to version 1.24.1-r2.
Update kubernetes-dns-node-cache to version 1.25.0-r9.
Update kubernetes-dns-node-cache to version 1.26.8-r6.
Update kubernetes-event-exporter to version 1.5-r3.
Update kyverno to version 1.16.4-r3.
Update kyverno to version 1.17.2-r2.
Update kyverno to version 1.18.1-r3.
Update local-path-provisioner-fips to version 0.0.36-r1.
Update logstash-exporter to version 1.7.1-r1.
Update logstash-exporter to version 1.8.4-r1.
Update loki to version 3.6.12-r2.
Update minio-operator to version 6.0.4-r6.
Update minio-operator to version 7.0.1-r7.
Update mongodb to version 8.1.3-r3.
Update mongodb to version 8.3.7-r0.
Update nats-streaming to version 0.22.1-r1.
Update nats-streaming to version 0.23.2-r1.
Update nats-streaming to version 0.24.6-r4.
Update nats-streaming to version 0.25.6-r5.
Update newrelic-infrastructure-agent to version 1.76.2-r1.
Update newrelic-infrastructure-agent to version 1.78.1-r1.
Update newrelic-infrastructure-agent to version 1.79.0-r1.
Update ollama to version 0.31.2-r1.
Update ollama to version 0.32.0-r1.
Update ollama to version 0.32.11-r3.
Update ollama to version 0.32.4-r1.
Update ollama to version 0.32.7-r1.
Update ollama to version 0.32.9-r1.
Update ollama-fips to version 0.30.11-r2.
Update ollama-fips to version 0.32.1-r1.
Update ollama-fips to version 0.32.11-r2.
Update ollama-fips to version 0.32.14-r2.
Update ollama-fips to version 0.32.4-r1.
Update ollama-fips to version 0.32.7-r1.
Update ollama-fips to version 0.32.8-r1.
Update ollama-fips to version 0.32.9-r2.
Update opentelemetry-collector-contrib to version 0.153.0-r3.
Update opentelemetry-collector-contrib to version 0.155.0-r1.
Update percona-server-mongodb-operator to version 1.23.0-r0.
Update policy-controller-fips to version 0.15.1-r1.
Update prometheus to version 3.10.0-r7.
Update prometheus to version 3.11.3-r5.
Update prometheus to version 3.13.1-r2.
Update prometheus to version 3.5.3-r6.
Update prometheus to version 3.9.1-r9.
Update prometheus-alertmanager to version 0.33.0-r2.
Update prometheus-fips to version 3.10.0-r1.
Update prometheus-fips to version 3.11.3-r1.
Update prometheus-fips to version 3.12.0-r1.
Update prometheus-mysqld-exporter to version 0.16.0-r4.
Update prometheus-mysqld-exporter to version 0.17.2-r4.
Update prometheus-pushgateway to version 1.10.0-r3.
Update prometheus-redis-exporter to version 1.85.0-r1.
Update prometheus-redis-exporter to version 1.86.0-r1.
Update prometheus-redis-exporter to version 1.88.0-r2.
Update prometheus-redis-exporter-fips to version 1.87.0-r1.
Update prometheus-statsd-exporter to version 0.27.2-r1.
Update prometheus-statsd-exporter to version 0.28.0-r3.
Update pulumi to version 3.248.0-r0.
Update rabbitmq-messaging-topology-operator to version 1.16.0-r2.
Update rancher-agent to version 2.11.15-r1.
Update rancher-agent to version 2.12.11-r1.
Update rancher-agent to version 2.13.7-r3.
Update rancher-agent to version 2.14.3-r0.
Update rancher-fleet-agent to version 0.12.17-r1.
Update rancher-fleet-agent to version 0.14.10-r1.
Update rancher-fleet-agent to version 0.14.8-r1.
Update rancher-fleet-agent to version 0.15.4-r1.
Update rancher-fleet-agent to version 0.15.6-r0.
Update rancher-fleet-agent to version 0.16.1-r1.
Update rclone to version 1.71.2-r3.
Update rclone to version 1.72.1-r11.
Update rclone to version 1.73.5-r5.
Update rclone to version 1.74.3-r2.
Update spire-server to version 1.14.7-r0.
Update stakater-reloader to version 1.1.0-r3.
Update stakater-reloader to version 1.2.1-r2.
Update stakater-reloader to version 1.3.0-r2.
Update step to version 0.27.5-r3.
Update step to version 0.28.7-r4.
Update step to version 0.29.0-r3.
Update step-ca to version 0.27.5-r0.
Update step-cli to version 0.27.5-r1.
Update step-cli to version 0.30.6-r0.
Update step-issuer to version 0.11.0-r4.
Update step-issuer to version 0.9.11-r2.
Update tekton-chains to version 0.25.2-r1.
Update tekton-chains-fips to version 0.24.0-r1.
Update tekton-chains-fips to version 0.25.2-r1.
Update tekton-chains-fips to version 0.26.5-r1.
Update tempo to version 2.10.7-r2.
Update tempo to version 2.10.8-r1.
Update tempo to version 2.9.5-r2.
Update temporal-server to version 1.28.4-r2.
Update temporal-server to version 1.29.7-r2.
Update temporal-server to version 1.30.5-r1.
Update temporal-server to version 1.30.6-r3.
Update terraform to version 1.15.7-r0.
Update tigera-operator to version 1.39.3-r1.
Update tigera-operator to version 1.40.13-r1.
Update tigera-operator to version 1.42.1-r2.
Update tigera-operator to version 1.42.3-r2.
Update tkn to version 0.42.2-r1.
Update tkn to version 0.43.2-r1.
Update tkn to version 0.44.2-r1.
Update tkn to version 0.45.0-r1.
Update vault to version 1.19.5-r1.
Update vault to version 1.20.4-r8.
Update vault to version 1.21.4-r9.
Update vault to version 2.0.3-r1.
Update vault-k8s to version 1.5.0-r2.
Update vault-k8s to version 1.6.2-r1.
Update velero to version 1.15.2-r6.
Update velero to version 1.17.2-r7.
Update velero to version 1.18.2-r6.
Update victoriametrics-operator to version 0.71.0-r2.
Update victoriametrics-operator-fips to version 0.69.0-r0.
Update victoriametrics-operator-fips to version 0.70.1-r0.
Update victoriametrics-operator-fips to version 0.71.0-r0.
Update victoriametrics-operator-fips to version 0.72.0-r1.
Update wave to version 0.10.0-r4.
Update weaviate-fips to version 1.37.14-r0.
Update weaviate-fips to version 1.38.6-r1.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	amazon-cloudwatch-agent	< 1.300070.0-r1 < 1.300071.0-r1 Fix: upgrade to 1.300070.0-r1
CleanStart	cleanstart	argo-cd	< 3.1.16-r4 < 3.2.12-r3 < 3.3.12-r4 < 3.3.14-r2 < 3.4.5-r2 < 3.4.6-r0 < 3.4.7-r2 Fix: upgrade to 3.1.16-r4
CleanStart	cleanstart	argo-cd-fips	< 3.4.7-r1 Fix: upgrade to 3.4.7-r1
CleanStart	cleanstart	argo-workflows	< 3.7.17-r2 Fix: upgrade to 3.7.17-r2
CleanStart	cleanstart	cadvisor	< 0.55.1-r4 < 0.56.2-r2 < 0.57.0-r4 < 0.60.5-r0 Fix: upgrade to 0.55.1-r4
CleanStart	cleanstart	calico	< 3.30.7-r6 Fix: upgrade to 3.30.7-r6
CleanStart	cleanstart	cert-manager	< 1.17.4-r5 < 1.18.6-r4 Fix: upgrade to 1.17.4-r5
CleanStart	cleanstart	cortex	< 1.18.1-r4 < 1.19.1-r2 < 1.20.1-r3 Fix: upgrade to 1.18.1-r4
CleanStart	cleanstart	cosign	< 3.1.2-r1 Fix: upgrade to 3.1.2-r1
CleanStart	cleanstart	crossplane	< 2.3.4-r2 Fix: upgrade to 2.3.4-r2
CleanStart	cleanstart	dex	< 2.42.1-r2 Fix: upgrade to 2.42.1-r2
CleanStart	cleanstart	dynatrace-operator	< 1.8.1-r6 < 1.9.0-r4 Fix: upgrade to 1.8.1-r6
CleanStart	cleanstart	elastic-beats	< 9.1.10-r5 < 9.2.8-r7 < 9.3.7-r1 < 9.3.9-r0 < 9.4.2-r3 Fix: upgrade to 9.1.10-r5
CleanStart	cleanstart	flux-notification-controller-fips	< 1.9.2-r0 Fix: upgrade to 1.9.2-r0
CleanStart	cleanstart	fulcio-fips	< 1.6.6-r3 Fix: upgrade to 1.6.6-r3
CleanStart	cleanstart	gitea	< 1.26.4-r1 < 1.27.0-r2 < 1.27.2-r1 Fix: upgrade to 1.26.4-r1
CleanStart	cleanstart	grafana	< 12.3.10-r1 < 12.3.8-r2 < 12.4.5-r2 < 12.4.6-r0 < 12.4.7-r1 < 12.4.9-r1 < 13.0.5-r1 < 13.0.7-r1 Fix: upgrade to 12.3.10-r1
CleanStart	cleanstart	haproxy-ingress	< 0.14.12-r2 Fix: upgrade to 0.14.12-r2
CleanStart	cleanstart	helm-operator	< 1.39.2-r1 < 1.40.0-r1 Fix: upgrade to 1.39.2-r1
CleanStart	cleanstart	istio	< 1.29.6-r2 Fix: upgrade to 1.29.6-r2
CleanStart	cleanstart	karma	< 0.128-r1 < 0.129-r1 < 0.130-r1 < 0.131-r1 Fix: upgrade to 0.128-r1
CleanStart	cleanstart	knative-net-istio	< 1.21.4-r2 Fix: upgrade to 1.21.4-r2
CleanStart	cleanstart	knative-serving	< 1.20.3-r0 Fix: upgrade to 1.20.3-r0
CleanStart	cleanstart	kube-metrics-adapter	< 0.2.9-r1 Fix: upgrade to 0.2.9-r1
CleanStart	cleanstart	kubernetes-dns-node-cache	< 1.23.1-r1 < 1.24.1-r2 < 1.25.0-r9 < 1.26.8-r6 Fix: upgrade to 1.23.1-r1
CleanStart	cleanstart	kubernetes-event-exporter	< 1.5-r3 Fix: upgrade to 1.5-r3
CleanStart	cleanstart	kyverno	< 1.16.4-r3 < 1.17.2-r2 < 1.18.1-r3 Fix: upgrade to 1.16.4-r3
CleanStart	cleanstart	local-path-provisioner-fips	< 0.0.36-r1 Fix: upgrade to 0.0.36-r1
CleanStart	cleanstart	logstash-exporter	< 1.7.1-r1 < 1.8.4-r1 Fix: upgrade to 1.7.1-r1
CleanStart	cleanstart	loki	< 3.6.12-r2 Fix: upgrade to 3.6.12-r2
CleanStart	cleanstart	minio-operator	< 6.0.4-r6 < 7.0.1-r7 Fix: upgrade to 6.0.4-r6
CleanStart	cleanstart	mongodb	< 8.1.3-r3 < 8.3.7-r0 Fix: upgrade to 8.1.3-r3
CleanStart	cleanstart	nats-streaming	< 0.22.1-r1 < 0.23.2-r1 < 0.24.6-r4 < 0.25.6-r5 Fix: upgrade to 0.22.1-r1
CleanStart	cleanstart	newrelic-infrastructure-agent	< 1.76.2-r1 < 1.78.1-r1 < 1.79.0-r1 Fix: upgrade to 1.76.2-r1
CleanStart	cleanstart	ollama	< 0.31.2-r1 < 0.32.0-r1 < 0.32.11-r3 < 0.32.4-r1 < 0.32.7-r1 < 0.32.9-r1 Fix: upgrade to 0.31.2-r1
CleanStart	cleanstart	ollama-fips	< 0.30.11-r2 < 0.32.1-r1 < 0.32.11-r2 < 0.32.14-r2 < 0.32.4-r1 < 0.32.7-r1 < 0.32.8-r1 < 0.32.9-r2 Fix: upgrade to 0.30.11-r2
CleanStart	cleanstart	opentelemetry-collector-contrib	< 0.153.0-r3 < 0.155.0-r1 Fix: upgrade to 0.153.0-r3
CleanStart	cleanstart	percona-server-mongodb-operator	< 1.23.0-r0 Fix: upgrade to 1.23.0-r0
CleanStart	cleanstart	policy-controller-fips	< 0.15.1-r1 Fix: upgrade to 0.15.1-r1
CleanStart	cleanstart	prometheus	< 3.10.0-r7 < 3.11.3-r5 < 3.13.1-r2 < 3.5.3-r6 < 3.9.1-r9 Fix: upgrade to 3.10.0-r7
CleanStart	cleanstart	prometheus-alertmanager	< 0.33.0-r2 Fix: upgrade to 0.33.0-r2
CleanStart	cleanstart	prometheus-fips	< 3.10.0-r1 < 3.11.3-r1 < 3.12.0-r1 Fix: upgrade to 3.10.0-r1
CleanStart	cleanstart	prometheus-mysqld-exporter	< 0.16.0-r4 < 0.17.2-r4 Fix: upgrade to 0.16.0-r4
CleanStart	cleanstart	prometheus-pushgateway	< 1.10.0-r3 Fix: upgrade to 1.10.0-r3
CleanStart	cleanstart	prometheus-redis-exporter	< 1.85.0-r1 < 1.86.0-r1 < 1.88.0-r2 Fix: upgrade to 1.85.0-r1
CleanStart	cleanstart	prometheus-redis-exporter-fips	< 1.87.0-r1 Fix: upgrade to 1.87.0-r1
CleanStart	cleanstart	prometheus-statsd-exporter	< 0.27.2-r1 < 0.28.0-r3 Fix: upgrade to 0.27.2-r1
CleanStart	cleanstart	pulumi	< 3.248.0-r0 Fix: upgrade to 3.248.0-r0
CleanStart	cleanstart	rabbitmq-messaging-topology-operator	< 1.16.0-r2 Fix: upgrade to 1.16.0-r2
CleanStart	cleanstart	rancher-agent	< 2.11.15-r1 < 2.12.11-r1 < 2.13.7-r3 < 2.14.3-r0 Fix: upgrade to 2.11.15-r1

Showing 50 of 144. Show the rest

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	rancher-fleet-agent	< 0.12.17-r1 < 0.14.10-r1 < 0.14.8-r1 < 0.15.4-r1 < 0.15.6-r0 < 0.16.1-r1 Fix: upgrade to 0.12.17-r1
CleanStart	cleanstart	rclone	< 1.71.2-r3 < 1.72.1-r11 < 1.73.5-r5 < 1.74.3-r2 Fix: upgrade to 1.71.2-r3
CleanStart	cleanstart	spire-server	< 1.14.7-r0 Fix: upgrade to 1.14.7-r0
CleanStart	cleanstart	stakater-reloader	< 1.1.0-r3 < 1.2.1-r2 < 1.3.0-r2 Fix: upgrade to 1.1.0-r3
CleanStart	cleanstart	step	< 0.27.5-r3 < 0.28.7-r4 < 0.29.0-r3 Fix: upgrade to 0.27.5-r3
CleanStart	cleanstart	step-ca	< 0.27.5-r0 Fix: upgrade to 0.27.5-r0
CleanStart	cleanstart	step-cli	< 0.27.5-r1 < 0.30.6-r0 Fix: upgrade to 0.27.5-r1
CleanStart	cleanstart	step-issuer	< 0.11.0-r4 < 0.9.11-r2 Fix: upgrade to 0.11.0-r4
CleanStart	cleanstart	tekton-chains	< 0.25.2-r1 Fix: upgrade to 0.25.2-r1
CleanStart	cleanstart	tekton-chains-fips	< 0.24.0-r1 < 0.25.2-r1 < 0.26.5-r1 Fix: upgrade to 0.24.0-r1
CleanStart	cleanstart	tempo	< 2.10.7-r2 < 2.10.8-r1 < 2.9.5-r2 Fix: upgrade to 2.10.7-r2
CleanStart	cleanstart	temporal-server	< 1.28.4-r2 < 1.29.7-r2 < 1.30.5-r1 < 1.30.6-r3 Fix: upgrade to 1.28.4-r2
CleanStart	cleanstart	terraform	< 1.15.7-r0 Fix: upgrade to 1.15.7-r0
CleanStart	cleanstart	tigera-operator	< 1.39.3-r1 < 1.40.13-r1 < 1.42.1-r2 < 1.42.3-r2 Fix: upgrade to 1.39.3-r1
CleanStart	cleanstart	tkn	< 0.42.2-r1 < 0.43.2-r1 < 0.44.2-r1 < 0.45.0-r1 Fix: upgrade to 0.42.2-r1
CleanStart	cleanstart	vault	< 1.19.5-r1 < 1.20.4-r8 < 1.21.4-r9 < 2.0.3-r1 Fix: upgrade to 1.19.5-r1
CleanStart	cleanstart	vault-k8s	< 1.5.0-r2 < 1.6.2-r1 Fix: upgrade to 1.5.0-r2
CleanStart	cleanstart	velero	< 1.15.2-r6 < 1.17.2-r7 < 1.18.2-r6 Fix: upgrade to 1.15.2-r6
CleanStart	cleanstart	victoriametrics-operator	< 0.71.0-r2 Fix: upgrade to 0.71.0-r2
CleanStart	cleanstart	victoriametrics-operator-fips	< 0.69.0-r0 < 0.70.1-r0 < 0.71.0-r0 < 0.72.0-r1 Fix: upgrade to 0.69.0-r0
CleanStart	cleanstart	wave	< 0.10.0-r4 Fix: upgrade to 0.10.0-r4
CleanStart	cleanstart	weaviate-fips	< 1.37.14-r0 < 1.38.6-r1 Fix: upgrade to 1.37.14-r0
CleanStart	–	amazon-cloudwatch-agent	< 1.300070.0-r1 < 1.300071.0-r1 Fix: upgrade to 1.300070.0-r1
CleanStart	–	argo-cd	< 3.1.16-r4 < 3.2.12-r3 < 3.3.12-r4 < 3.3.14-r2 < 3.4.5-r2 < 3.4.6-r0 < 3.4.7-r2 Fix: upgrade to 3.1.16-r4
CleanStart	–	argo-cd-fips	< 3.4.7-r1 Fix: upgrade to 3.4.7-r1
CleanStart	–	argo-workflows	< 3.7.17-r2 Fix: upgrade to 3.7.17-r2
CleanStart	–	cadvisor	< 0.55.1-r4 < 0.56.2-r2 < 0.57.0-r4 < 0.60.5-r0 Fix: upgrade to 0.55.1-r4
CleanStart	–	calico	< 3.30.7-r6 Fix: upgrade to 3.30.7-r6
CleanStart	–	cert-manager	< 1.17.4-r5 < 1.18.6-r4 Fix: upgrade to 1.17.4-r5
CleanStart	–	cortex	< 1.18.1-r4 < 1.19.1-r2 < 1.20.1-r3 Fix: upgrade to 1.18.1-r4
CleanStart	–	cosign	< 3.1.2-r1 Fix: upgrade to 3.1.2-r1
CleanStart	–	crossplane	< 2.3.4-r2 Fix: upgrade to 2.3.4-r2
CleanStart	–	dex	< 2.42.1-r2 Fix: upgrade to 2.42.1-r2
CleanStart	–	dynatrace-operator	< 1.8.1-r6 < 1.9.0-r4 Fix: upgrade to 1.8.1-r6
CleanStart	–	elastic-beats	< 9.1.10-r5 < 9.2.8-r7 < 9.3.7-r1 < 9.3.9-r0 < 9.4.2-r3 Fix: upgrade to 9.1.10-r5
CleanStart	–	flux-notification-controller-fips	< 1.9.2-r0 Fix: upgrade to 1.9.2-r0
CleanStart	–	fulcio-fips	< 1.6.6-r3 Fix: upgrade to 1.6.6-r3
CleanStart	–	gitea	< 1.26.4-r1 < 1.27.0-r2 < 1.27.2-r1 Fix: upgrade to 1.26.4-r1
CleanStart	–	grafana	< 12.3.10-r1 < 12.3.8-r2 < 12.4.5-r2 < 12.4.6-r0 < 12.4.7-r1 < 12.4.9-r1 < 13.0.5-r1 < 13.0.7-r1 Fix: upgrade to 12.3.10-r1
CleanStart	–	haproxy-ingress	< 0.14.12-r2 Fix: upgrade to 0.14.12-r2
CleanStart	–	helm-operator	< 1.39.2-r1 < 1.40.0-r1 Fix: upgrade to 1.39.2-r1
CleanStart	–	istio	< 1.29.6-r2 Fix: upgrade to 1.29.6-r2
CleanStart	–	karma	< 0.128-r1 < 0.129-r1 < 0.130-r1 < 0.131-r1 Fix: upgrade to 0.128-r1
CleanStart	–	knative-net-istio	< 1.21.4-r2 Fix: upgrade to 1.21.4-r2
CleanStart	–	knative-serving	< 1.20.3-r0 Fix: upgrade to 1.20.3-r0
CleanStart	–	kube-metrics-adapter	< 0.2.9-r1 Fix: upgrade to 0.2.9-r1
CleanStart	–	kubernetes-dns-node-cache	< 1.23.1-r1 < 1.24.1-r2 < 1.25.0-r9 < 1.26.8-r6 Fix: upgrade to 1.23.1-r1
CleanStart	–	kubernetes-event-exporter	< 1.5-r3 Fix: upgrade to 1.5-r3
CleanStart	–	kyverno	< 1.16.4-r3 < 1.17.2-r2 < 1.18.1-r3 Fix: upgrade to 1.16.4-r3
CleanStart	–	local-path-provisioner-fips	< 0.0.36-r1 Fix: upgrade to 0.0.36-r1
CleanStart	–	logstash-exporter	< 1.7.1-r1 < 1.8.4-r1 Fix: upgrade to 1.7.1-r1
CleanStart	–	loki	< 3.6.12-r2 Fix: upgrade to 3.6.12-r2
CleanStart	–	minio-operator	< 6.0.4-r6 < 7.0.1-r7 Fix: upgrade to 6.0.4-r6
CleanStart	–	mongodb	< 8.1.3-r3 < 8.3.7-r0 Fix: upgrade to 8.1.3-r3
CleanStart	–	nats-streaming	< 0.22.1-r1 < 0.23.2-r1 < 0.24.6-r4 < 0.25.6-r5 Fix: upgrade to 0.22.1-r1
CleanStart	–	newrelic-infrastructure-agent	< 1.76.2-r1 < 1.78.1-r1 < 1.79.0-r1 Fix: upgrade to 1.76.2-r1
CleanStart	–	ollama	< 0.31.2-r1 < 0.32.0-r1 < 0.32.11-r3 < 0.32.4-r1 < 0.32.7-r1 < 0.32.9-r1 Fix: upgrade to 0.31.2-r1
CleanStart	–	ollama-fips	< 0.30.11-r2 < 0.32.1-r1 < 0.32.11-r2 < 0.32.14-r2 < 0.32.4-r1 < 0.32.7-r1 < 0.32.8-r1 < 0.32.9-r2 Fix: upgrade to 0.30.11-r2
CleanStart	–	opentelemetry-collector-contrib	< 0.153.0-r3 < 0.155.0-r1 Fix: upgrade to 0.153.0-r3
CleanStart	–	percona-server-mongodb-operator	< 1.23.0-r0 Fix: upgrade to 1.23.0-r0
CleanStart	–	policy-controller-fips	< 0.15.1-r1 Fix: upgrade to 0.15.1-r1
CleanStart	–	prometheus	< 3.10.0-r7 < 3.11.3-r5 < 3.13.1-r2 < 3.5.3-r6 < 3.9.1-r9 Fix: upgrade to 3.10.0-r7
CleanStart	–	prometheus-alertmanager	< 0.33.0-r2 Fix: upgrade to 0.33.0-r2
CleanStart	–	prometheus-fips	< 3.10.0-r1 < 3.11.3-r1 < 3.12.0-r1 Fix: upgrade to 3.10.0-r1
CleanStart	–	prometheus-mysqld-exporter	< 0.16.0-r4 < 0.17.2-r4 Fix: upgrade to 0.16.0-r4
CleanStart	–	prometheus-pushgateway	< 1.10.0-r3 Fix: upgrade to 1.10.0-r3
CleanStart	–	prometheus-redis-exporter	< 1.85.0-r1 < 1.86.0-r1 < 1.88.0-r2 Fix: upgrade to 1.85.0-r1
CleanStart	–	prometheus-redis-exporter-fips	< 1.87.0-r1 Fix: upgrade to 1.87.0-r1
CleanStart	–	prometheus-statsd-exporter	< 0.27.2-r1 < 0.28.0-r3 Fix: upgrade to 0.27.2-r1
CleanStart	–	pulumi	< 3.248.0-r0 Fix: upgrade to 3.248.0-r0
CleanStart	–	rabbitmq-messaging-topology-operator	< 1.16.0-r2 Fix: upgrade to 1.16.0-r2
CleanStart	–	rancher-agent	< 2.11.15-r1 < 2.12.11-r1 < 2.13.7-r3 < 2.14.3-r0 Fix: upgrade to 2.11.15-r1
CleanStart	–	rancher-fleet-agent	< 0.12.17-r1 < 0.14.10-r1 < 0.14.8-r1 < 0.15.4-r1 < 0.15.6-r0 < 0.16.1-r1 Fix: upgrade to 0.12.17-r1
CleanStart	–	rclone	< 1.71.2-r3 < 1.72.1-r11 < 1.73.5-r5 < 1.74.3-r2 Fix: upgrade to 1.71.2-r3
CleanStart	–	spire-server	< 1.14.7-r0 Fix: upgrade to 1.14.7-r0
CleanStart	–	stakater-reloader	< 1.1.0-r3 < 1.2.1-r2 < 1.3.0-r2 Fix: upgrade to 1.1.0-r3
CleanStart	–	step	< 0.27.5-r3 < 0.28.7-r4 < 0.29.0-r3 Fix: upgrade to 0.27.5-r3
CleanStart	–	step-ca	< 0.27.5-r0 Fix: upgrade to 0.27.5-r0
CleanStart	–	step-cli	< 0.27.5-r1 < 0.30.6-r0 Fix: upgrade to 0.27.5-r1
CleanStart	–	step-issuer	< 0.11.0-r4 < 0.9.11-r2 Fix: upgrade to 0.11.0-r4
CleanStart	–	tekton-chains	< 0.25.2-r1 Fix: upgrade to 0.25.2-r1
CleanStart	–	tekton-chains-fips	< 0.24.0-r1 < 0.25.2-r1 < 0.26.5-r1 Fix: upgrade to 0.24.0-r1
CleanStart	–	tempo	< 2.10.7-r2 < 2.10.8-r1 < 2.9.5-r2 Fix: upgrade to 2.10.7-r2
CleanStart	–	temporal-server	< 1.28.4-r2 < 1.29.7-r2 < 1.30.5-r1 < 1.30.6-r3 Fix: upgrade to 1.28.4-r2
CleanStart	–	terraform	< 1.15.7-r0 Fix: upgrade to 1.15.7-r0
CleanStart	–	tigera-operator	< 1.39.3-r1 < 1.40.13-r1 < 1.42.1-r2 < 1.42.3-r2 Fix: upgrade to 1.39.3-r1
CleanStart	–	tkn	< 0.42.2-r1 < 0.43.2-r1 < 0.44.2-r1 < 0.45.0-r1 Fix: upgrade to 0.42.2-r1
CleanStart	–	vault	< 1.19.5-r1 < 1.20.4-r8 < 1.21.4-r9 < 2.0.3-r1 Fix: upgrade to 1.19.5-r1
CleanStart	–	vault-k8s	< 1.5.0-r2 < 1.6.2-r1 Fix: upgrade to 1.5.0-r2
CleanStart	–	velero	< 1.15.2-r6 < 1.17.2-r7 < 1.18.2-r6 Fix: upgrade to 1.15.2-r6
CleanStart	–	victoriametrics-operator	< 0.71.0-r2 Fix: upgrade to 0.71.0-r2
CleanStart	–	victoriametrics-operator-fips	< 0.69.0-r0 < 0.70.1-r0 < 0.71.0-r0 < 0.72.0-r1 Fix: upgrade to 0.69.0-r0
CleanStart	–	wave	< 0.10.0-r4 Fix: upgrade to 0.10.0-r4
CleanStart	–	weaviate-fips	< 1.37.14-r0 < 1.38.6-r1 Fix: upgrade to 1.37.14-r0

Original advisory text

Security fix for GHSA-259r-337f-4rfw applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, argo-cd 3.1.16-r4, argo-cd 3.2.12-r3, argo-cd 3.3.12-r4, argo-cd 3.3.14-r2, argo-cd 3.4.5-r2, argo-cd 3.4.6-r0, argo-cd 3.4.7-r2, argo-cd-fips 3.4.7-r1, argo-workflows 3.7.17-r2, cadvisor 0.55.1-r4, cadvisor 0.56.2-r2, cadvisor 0.57.0-r4, cadvisor 0.60.5-r0, calico 3.30.7-r6, cert-manager 1.17.4-r5, cert-manager 1.18.6-r4, cortex 1.18.1-r4, cortex 1.19.1-r2, cortex 1.20.1-r3, cosign 3.1.2-r1, crossplane 2.3.4-r2, dex 2.42.1-r2, dynatrace-operator 1.8.1-r6, dynatrace-operator 1.9.0-r4, elastic-beats 9.1.10-r5, elastic-beats 9.2.8-r7, elastic-beats 9.3.7-r1, elastic-beats 9.3.9-r0, elastic-beats 9.4.2-r3, flux-notification-controller-fips 1.9.2-r0, fulcio-fips 1.6.6-r3, gitea 1.26.4-r1, gitea 1.27.0-r2, gitea 1.27.2-r1, grafana 12.3.10-r1, grafana 12.3.8-r2, grafana 12.4.5-r2, grafana 12.4.6-r0, grafana 12.4.7-r1, grafana 12.4.9-r1, grafana 13.0.5-r1, grafana 13.0.7-r1, haproxy-ingress 0.14.12-r2, helm-operator 1.39.2-r1, helm-operator 1.40.0-r1, istio 1.29.6-r2, karma 0.128-r1, karma 0.129-r1, karma 0.130-r1, karma 0.131-r1, knative-net-istio 1.21.4-r2, knative-serving 1.20.3-r0, kube-metrics-adapter 0.2.9-r1, kubernetes-dns-node-cache 1.23.1-r1, kubernetes-dns-node-cache 1.24.1-r2, kubernetes-dns-node-cache 1.25.0-r9, kubernetes-dns-node-cache 1.26.8-r6, kubernetes-event-exporter 1.5-r3, kyverno 1.16.4-r3, kyverno 1.17.2-r2, kyverno 1.18.1-r3, local-path-provisioner-fips 0.0.36-r1, logstash-exporter 1.7.1-r1, logstash-exporter 1.8.4-r1, loki 3.6.12-r2, minio-operator 6.0.4-r6, minio-operator 7.0.1-r7, mongodb 8.1.3-r3, mongodb 8.3.7-r0, nats-streaming 0.22.1-r1, nats-streaming 0.23.2-r1, nats-streaming 0.24.6-r4, nats-streaming 0.25.6-r5, newrelic-infrastructure-agent 1.76.2-r1, newrelic-infrastructure-agent 1.78.1-r1, newrelic-infrastructure-agent 1.79.0-r1, ollama 0.31.2-r1, ollama 0.32.0-r1, ollama 0.32.11-r3, ollama 0.32.4-r1, ollama 0.32.7-r1, ollama 0.32.9-r1, ollama-fips 0.30.11-r2, ollama-fips 0.32.1-r1, ollama-fips 0.32.11-r2, ollama-fips 0.32.14-r2, ollama-fips 0.32.4-r1, ollama-fips 0.32.7-r1, ollama-fips 0.32.8-r1, ollama-fips 0.32.9-r2, opentelemetry-collector-contrib 0.153.0-r3, opentelemetry-collector-contrib 0.155.0-r1, percona-server-mongodb-operator 1.23.0-r0, policy-controller-fips 0.15.1-r1, prometheus 3.10.0-r7, prometheus 3.11.3-r5, prometheus 3.13.1-r2, prometheus 3.5.3-r6, prometheus 3.9.1-r9, prometheus-alertmanager 0.33.0-r2, prometheus-fips 3.10.0-r1, prometheus-fips 3.11.3-r1, prometheus-fips 3.12.0-r1, prometheus-mysqld-exporter 0.16.0-r4, prometheus-mysqld-exporter 0.17.2-r4, prometheus-pushgateway 1.10.0-r3, prometheus-redis-exporter 1.85.0-r1, prometheus-redis-exporter 1.86.0-r1, prometheus-redis-exporter 1.88.0-r2, prometheus-redis-exporter-fips 1.87.0-r1, prometheus-statsd-exporter 0.27.2-r1, prometheus-statsd-exporter 0.28.0-r3, pulumi 3.248.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r2, rancher-agent 2.11.15-r1, rancher-agent 2.12.11-r1, rancher-agent 2.13.7-r3, rancher-agent 2.14.3-r0, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, rclone 1.71.2-r3, rclone 1.72.1-r11, rclone 1.73.5-r5, rclone 1.74.3-r2, spire-server 1.14.7-r0, stakater-reloader 1.1.0-r3, stakater-reloader 1.2.1-r2, stakater-reloader 1.3.0-r2, step 0.27.5-r3, step 0.28.7-r4, step 0.29.0-r3, step-ca 0.27.5-r0, step-cli 0.27.5-r1, step-cli 0.30.6-r0, step-issuer 0.11.0-r4, step-issuer 0.9.11-r2, tekton-chains 0.25.2-r1, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tempo 2.10.7-r2, tempo 2.10.8-r1, tempo 2.9.5-r2, temporal-server 1.28.4-r2, temporal-server 1.29.7-r2, temporal-server 1.30.5-r1, temporal-server 1.30.6-r3, terraform 1.15.7-r0, tigera-operator 1.39.3-r1, tigera-operator 1.40.13-r1, tigera-operator 1.42.1-r2, tigera-operator 1.42.3-r2, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1, vault 1.19.5-r1, vault 1.20.4-r8, vault 1.21.4-r9, vault 2.0.3-r1, vault-k8s 1.5.0-r2, vault-k8s 1.6.2-r1, velero 1.15.2-r6, velero 1.17.2-r7, velero 1.18.2-r6, victoriametrics-operator 0.71.0-r2, victoriametrics-operator-fips 0.69.0-r0, victoriametrics-operator-fips 0.70.1-r0, victoriametrics-operator-fips 0.71.0-r0, victoriametrics-operator-fips 0.72.0-r1, wave 0.10.0-r4, weaviate-fips 1.37.14-r0, weaviate-fips 1.38.6-r1

GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Timeline

Published18 Sep 2026

Updated15 Oct 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-UW32521 · OSV

Track software like this

Free during beta