GO-2026-5410 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, kubewatch, bento, goreleaser, kyverno-policy-reporter, argo-rollouts, argo-cd, argo-events, atlantis...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: harbor-registry, terraform-provider-grafana, redka, pinact, prometheus-adapter, polaris, nri-elasticsearch, k9s, nri-couchbase, kubeflow, kube-logging-operator-custom-runner, kube-state-metrics, trufflehog, sftpgo-plugin-geoipfilter, authservice, cloud-provider-azure...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: k8sgpt, prometheus-alertmanager, smarter-device-manager, terraform, prometheus-adapter, k9s, docker-compose, kubeflow, kube-state-metrics, terraform-provider-sendgrid, gitness, rqlite, kubernetes-dashboard-metrics-scraper, minio, skopeo, crossplane-provider-azure,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: k8sgpt, chezmoi, nfpm, k9s, docker-compose, minio, crossplane-provider-azure-sql, crossplane-provider-aws-kinesis, kine, dagger, gptscript, argo-events, terraform-provider-azapi, loki, flux-kustomize-controller, pulumi, crossplane-provider-aws-cloudwatchlogs, guac,...

CLEANSTART-2026-OT06717 Security fixes in atlantis 0.46.0-r1

Package atlantis version 0.46.0-r1 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-RB42183 Security fixes in atlantis-fips 0.46.0-r2

Package atlantis-fips version 0.46.0-r2 fixes 1 vulnerabilities: CVE-2026-42505...

CLEANSTART-2026-UT36662 Security fixes in atlantis-fips 0.40.0-r0

Package atlantis-fips version 0.40.0-r0 fixes 2 vulnerabilities: ghsa-q9hv-hpm4-hj6x, CVE-2026-1229...

CLEANSTART-2026-HY30847 Security fixes in atlantis-fips 0.37.1-r0

Package atlantis-fips version 0.37.1-r0 fixes 3 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-wjrx-6529-hcj3...

CLEANSTART-2026-AW72691 Security fixes in atlantis 0.37.1-r1

Package atlantis version 0.37.1-r1 fixes 3 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-wjrx-6529-hcj3...

CLEANSTART-2026-GC07367 Security fixes in atlantis-fips 0.38.0-r0

Package atlantis-fips version 0.38.0-r0 fixes 2 vulnerabilities: ghsa-q9hv-hpm4-hj6x, CVE-2026-1229...

GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: nri-mysql, crossplane-provider-aws-verifiedaccess-fips, opentelemetry-collector, omnictl-multiarch-fips, crossplane-provider-aws-iam, hcl2json-fips, atlas-fips, atlantis, trino, pgtimetable-fips, blob-csi, trivy-operator, crossplane-provider-aws-acm-fips,...

CVE-2026-56852 vulnerabilities

Vulnerabilities for packages: nri-mysql, crossplane-provider-aws-verifiedaccess-fips, opentelemetry-collector, omnictl-multiarch-fips, crossplane-provider-aws-iam, hcl2json-fips, atlas-fips, atlantis, trino, pgtimetable-fips, blob-csi, trivy-operator, crossplane-provider-aws-acm-fips,...

GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: harbor-registry, k8sgpt, lazygit, terraform-provider-grafana, smokescreen, kyverno-notation-aws, nfpm, prometheus-alertmanager, terraform, polaris, rancher-telemetry, k9s, docker-compose, terraform-provider-sendgrid, trufflehog, gitness, glow, vault-env, maru,...

CVE-2026-56852 vulnerabilities

Vulnerabilities for packages: harbor-registry, k8sgpt, lazygit, terraform-provider-grafana, smokescreen, kyverno-notation-aws, nfpm, prometheus-alertmanager, terraform, polaris, rancher-telemetry, k9s, docker-compose, terraform-provider-sendgrid, trufflehog, gitness, glow, vault-env, maru,...

CLEANSTART-2026-WY83162 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-wjrx-6529-hcj3 applied in versions: 0.37.1-r1

Multiple security vulnerabilities affect the atlantis package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: k8sgpt, chezmoi, nfpm, k9s, minio, crossplane-provider-azure-sql, kine, dagger, gptscript, argo-events, loki, flux-kustomize-controller, pulumi, rancher-agent, guac, osv-scanner, policy-controller, falcoctl, gitlab-runner, step, aactl, external-dns, spire-server,...

CLEANSTART-2026-ZD27282 Security fixes for CVE-2026-4660, ghsa-92mm-2pjq-r785, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-wjrx-6529-hcj3 applied in versions: 0.37.1-r0, 0.41.0-r0

Multiple security vulnerabilities affect the atlantis-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TY63648 CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...

CLEANSTART-2026-WH33500 CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...

CLEANSTART-2026-WG17155 CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

Multiple security vulnerabilities affect the atlantis package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...