GO-2026-6613 vulnerabilities

Vulnerabilities for packages: argo-cd, trufflehog, vcluster, fluent-bit-plugin-loki, postgres-operator, pgpool2exporter, melange, vt-cli, delve, flux-source-controller, pinact, rclone, sriov-network-device-plugin, spark-operator, step-issuer, kyverno-notation-aws, mountpoint-s3-csi-driver,...

CVE-2026-94439 vulnerabilities

Vulnerabilities for packages: argo-cd, trufflehog, vcluster, fluent-bit-plugin-loki, postgres-operator, pgpool2exporter, melange, vt-cli, delve, flux-source-controller, pinact, rclone, sriov-network-device-plugin, spark-operator, step-issuer, kyverno-notation-aws, mountpoint-s3-csi-driver,...

Security Bulletin: Impacted IBM Optim for z/OS 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in jackc/Pgx, cloudflare/cfSSL, x/net

Summary IBM Optim for z/OS version 1.0.0, 1.1.0 and 1.2.0 depends on open-source packages jackc/Pgx, cloudflare/cfSSL and x/net which are affected by medium, high and critical severity vulnerabilities. IBM Optim for z/OS 2.0.0 resolves these vulnerabilities by upgrading the affected open-source...

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in cloudflare/cfSSL

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include an open-source package cloudflare/cfSSL that is affected by a medium-severity vulnerability. IBM Optim 2.0.0 resolves this vulnerability by removing the affected dependency. Vulnerability Details CVEID:CVE-2021-34558 DESCRIPTION: The...

CLEANSTART-2026-RW27001 Security fix for CVE-2022-41717 applied in: cfssl 1.5.0-r1, minio-client-fips 0.20250416181326-r0, minio-client-fips 0.20250521015954-r0, minio-client-fips 0.20250716.153503-r0, minio-client-fips 0.20250721052808-r0, wavefront-collector-for-kubernetes 1.13.0-r0

CVE-2022-41717 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ML87749 Security fix for ghsa-4v7x-pqxf-cx7m applied in: cfssl 1.5.0-r1, clickhouse-operator 0.25.5-r0, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, metallb 0.13.12-r3, multus-cni-fips 4.0.2-r2, wave-fips 0.7.2-r1, wave-fips 0.8.0-r1, wave-fips 0.9.0-r1, wavefront-collector-for-kubernetes 1.13.0-r0

ghsa-4v7x-pqxf-cx7m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QG55054 Security fix for ghsa-4374-p667-p6c8 applied in: cfssl 1.5.0-r1, multus-cni-fips 3.9.3-r2, multus-cni-fips 4.0.2-r2, wavefront-collector-for-kubernetes 1.13.0-r0

ghsa-4374-p667-p6c8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CD25563 Security fix for ghsa-vvpx-j8f3-3w6h applied in: cfssl 1.5.0-r1, multus-cni-fips 3.9.3-r2, wavefront-collector-for-kubernetes 1.13.0-r0

ghsa-vvpx-j8f3-3w6h affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZF32543 Security fix for ghsa-gwc9-m7rh-j2ww applied in: cfssl 1.5.0-r1, multus-cni-fips 3.9.3-r2

ghsa-gwc9-m7rh-j2ww affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VD60296 Security fix for ghsa-8c26-wmh5-6g9v applied in: cfssl 1.5.0-r1, multus-cni-fips 3.9.3-r2

ghsa-8c26-wmh5-6g9v affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GW81743 Security fix for ghsa-83g2-8m93-v3w7 applied in: cfssl 1.5.0-r1, multus-cni-fips 3.9.3-r2

ghsa-83g2-8m93-v3w7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MM61448 Security fix for ghsa-69cg-p879-7622 applied in: cfssl 1.5.0-r1, multus-cni-fips 3.9.3-r2

ghsa-69cg-p879-7622 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VL48294 Security fix for ghsa-3vm4-22fp-5rfm applied in: cfssl 1.5.0-r1, multus-cni-fips 3.9.3-r2

ghsa-3vm4-22fp-5rfm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PD56220 Security fix for CVE-2022-27664 applied in: cert-manager-webhook-pdns-fips 2.3.0-r0, cfssl 1.5.0-r1

CVE-2022-27664 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CA06112 Security fix for CVE-2022-32149 applied in: cert-manager-webhook-pdns-fips 2.3.0-r0, cfssl 1.5.0-r1, wavefront-collector-for-kubernetes 1.13.0-r0

CVE-2022-32149 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JG31127 Security fix for CVE-2023-48795 applied in: cert-manager-webhook-pdns-fips 2.3.0-r0, cfssl 1.5.0-r1, erlang 26.2.1-r0, kube-state-metrics 2.10.1-r0, wavefront-collector-for-kubernetes 1.13.0-r0

CVE-2023-48795 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZO20842 Security fix for CVE-2022-27191 applied in: cert-manager-webhook-pdns-fips 2.3.0-r0, cfssl 1.5.0-r1, git-lfs 3.1.2-r4, git-lfs-fips 3.1.2-r4

CVE-2022-27191 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GE07592 Security fix for CVE-2022-30636 applied in: cert-manager-webhook-pdns-fips 2.3.0-r0, cfssl 1.5.0-r1

CVE-2022-30636 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QZ20471 Security fix for CVE-2024-45337 applied in: cfssl 1.5.0-r1, kube-fluentd-operator 1.18.2-r0, kube-state-metrics 2.10.1-r0, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway-fips 1.10.0-r3, rabbitmq-messaging-topology-operator 1.15.0-r1, wavefront-collector-for-kubernetes 1.13.0-r0

CVE-2024-45337 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SD67923 Security fix for CVE-2021-38561 applied in: cfssl 1.5.0-r1, git-lfs 3.1.2-r3, git-lfs-fips 3.1.2-r3

CVE-2021-38561 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...