Get real-time updates on Telegram
osv:CLEANSTART-2026-RX78395: kube-state-metrics-fips (exact versions not specified); +4 more affected products
Security fix for ghsa-gcjh-h69q-9w9g applied in: kube-state-metrics-fips 2.20.0-r3, eks-distro-kube-scheduler 1.36.9-r2, eks-distro-kube-controller-manager-fips 1.36.8-r0, eks-distro-kube-apiserver 1.36.8-r0, eks-distro-kube-apiserver-fips 1.36.8-r0. Fixed version: 2.20.0-r3. Fixed version: 1.36.9-r2. Fixed version: 1.36.8-r0. Fixed version: 1.36.8-r0. Fixed version: 1.36.8-r0.
Affected technology
kube-state-metrics-fips · Exact affected versions not specified by the source
Vendor not specified by the source
eks-distro-kube-scheduler · Exact affected versions not specified by the source
Vendor not specified by the source
eks-distro-kube-controller-manager-fips · Exact affected versions not specified by the source
Vendor not specified by the source
eks-distro-kube-apiserver · Exact affected versions not specified by the source
Vendor not specified by the source
eks-distro-kube-apiserver-fips · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
- Product
- kube-state-metrics-fips
- KEV
- no
Provenance
- OSV.dev · Source record · observed 2026-10-08 08:57:13.774521+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-osv-cleanstart-2026-rx78395.html