Cluster Shield Release Notes
Here are the most recent release notes for Cluster Shield. Review the entries to learn about the latest features, defect fixes, and known issues.
1.21.0 March 26, 2026
Supported shield chart version: 1.31.0
Defect Fixes
- Fixed a bug which could cause a
fatal error: concurrent map writeserror when analyzing Pythonuv.lockfiles. - Fixed a bug where RHEL EUS distributions were incorrectly identified as standard RHEL.
- Resolved an issue where the Kubernetes Lease resource created using Helm was missing standard Kubernetes labels:
app.kubernetes.io/nameapp.kubernetes.io/instanceapp.kubernetes.io/version
Vulnerability Fixes
This release addresses the following vulnerabilities:
- CVE-2026-33186
- CVE-2026-27141
- CVE-2026-4111
- CVE-2025-14831
- CVE-2025-15366
- CVE-2025-15367
- CVE-2026-0865
- CVE-2026-1299
- CVE-2026-25679
- CVE-2026-27142
- CVE-2025-9820
- CVE-2026-27139
1.20.0 February 26, 2026
Supported shield chart version: 1.30.0
Enhancements
- Lease resources are no longer managed by the Helm chart and are now created directly by Cluster Shield with an
ownerReferenceconfigured. Their lifecycle is delegated to Kubernetes garbage collection, ensuring automatic cleanup when the owning component is removed. This improves upgrade reliability, prevents orphaned resources, reduces operational complexity, and aligns resource management with native Kubernetes behavior for more predictable deployments.
Defect Fixes
Vulnerability Fixes
This release addresses the following vulnerabilities:
- CVE-2025-68121
- CVE-2025-15467
- CVE-2026-24051
- CVE-2025-11187
- CVE-2025-12084
- CVE-2025-14104
- CVE-2025-69419
- CVE-2025-9086
- CVE-2026-0915
- CVE-2026-23831
- CVE-2026-24117
- CVE-2026-24137
- CVE-2026-24686
- CVE-2025-15281
- CVE-2025-15468
- CVE-2025-15469
- CVE-2025-66199
- CVE-2025-68160
- CVE-2025-69418
- CVE-2025-69420
- CVE-2025-69421
- CVE-2026-0861
- CVE-2026-22795
1.19.0 January 29, 2026
Supported shield chart version: 1.27.0
Defect Fixes
- Fixed an issue in Response Actions where the Volume Snapshot action failed for deployments with multiple pods sharing the same Persistent Volume Claim (PVC). The action now deduplicates shared PVCs, preventing the
too many matching PVCs founderror.
Vulnerability Fixes
This release addresses the following vulnerabilities: