CLEANSTART-2026-KS35076 Security fix for CVE-2026-22039 applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7

CVE-2026-22039 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EE99058 Security fix for CVE-2026-23881 applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VX56698 Security fix for CVE-2024-48921 applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JI50806 Security fix for CVE-2025-47281 applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VJ98320 Security fix for CVE-2025-46342 applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LU55678 Security fix for CVE-2023-47630 applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FU09912 Security fix for CVE-2023-34091 applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ON51112 Security fix for CVE-2025-27612 applied in: nvidia-device-plugin 0.19.2-r1

Security vulnerability affects the nvidia-device-plugin package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZM91804 Security fix for CVE-2026-32637 applied in: velero-plugin-for-aws 1.11.1-r9, velero-plugin-for-aws 1.13.2-r6, velero-plugin-for-aws 1.14.2-r1

CVE-2026-32637 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

Malicious Package

Overview lint-xo-ceres-mini-css-extract-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

autocleus (0.1.1), poetry (>=1.2.0a1, <=1.2.0a2) +2 more potentially affected by CVE-2026-102930 via virtualenv (20.4.4)

virtualenv PYPI version 20.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - autocleus 0.1.1 - poetry =1.2.0a1, =0.1.2, =0.0.1, =0.4.1 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

EUVD-2026-82494

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of data due to missing authorization checks in mvlajaxdealerloadcars function in all versions up to, and including, 1.4.120. This makes it possible for unauthenticated attackers to...

CVE-2026-93454

Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plugin. Authenticated users with payment-term create permission can submit arbitrary JavaScript to the payment-terms endpoint, which persists to the database and executes in browse...

PT-2026-101793

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100050

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100024

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101725

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100592

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100972

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95211

Name of the Vulnerable Software and Affected Versions Nextcloud affected versions not specified Description An improper authorization issue exists in the DAV plugin where the system resolves files from the absolute request URI without verifying if the path segment matches the authenticated sessio...