CLEANSTART-2026-GT85159 Security fix for CVE-2025-22872 applied in: cert-manager-webhook-pdns-fips 2.2.0-r0, cert-manager-webhook-pdns-fips 2.4.0-r0, cfssl 1.5.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, ingress-nginx-controller 1.24.2-r0, kserve-rest-proxy 0.12.0-r3, kube-fluentd-operator 1.18.2-r0, kube-state-metrics 2.10.1-r0, kuberay-operator 1.3.2-r3, kubernetes-csi-node-driver-registrar 2.13.0-r0, prometheus 2.55.1-r3, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway-fips 1.10.0-r3, rclone 1.69.0-r0, runc 1.1.14-r0, tempo-fips 2.7.2-r0, wavefront-collector-for-kubernetes 1.13.0-r0

CVE-2025-22872 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YI67273 Security fix for CVE-2026-34040 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300069.0-r1, cadvisor-fips 0.55.1-r0, docker-compose 5.1.0-r0, gitlab-runner 18.11.1-r0, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r0, grafana-alloy 1.15.1-r1, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0, grafana-alloy-fips 1.15.1-r0, harbor-trivy-adapter-fips 0.36.0-r1, k8ssandra-client-fips 0.6.4-r7, k8ssandra-client-fips 0.7.0-r5, kubevela 1.10.8-r0, melange 0.45.4-r0, melange 0.46.1-r0, melange 0.47.0-r0, melange 0.55.0-r1, melange 0.56.1-r1, paranoia 0.2.1-r0, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, promxy 0.0.93-r1, pulumi 3.299.0-r0, rancher-agent 2.11.15-r1, spire-server-fips 1.15.1-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1, tkn-fips 0.44.2-r0, vault 1.21.4-r1

CVE-2026-34040 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VF40617 Security fix for CVE-2026-33816 applied in: argo-workflows 4.0.4-r1, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.27.3-r3, cloudnative-pg-fips 1.27.4-r0, cloudnative-pg-fips 1.28.1-r3, cloudnative-pg-fips 1.28.2-r0, cloudprober 0.13.9-r0, cloudprober 0.14.2-r0, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r1, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, keda 2.19.0-r3, keda-fips 2.18.3-r3, kube-bench 0.15.0-r0, openbao-fips 2.3.2-r6, openbao-fips 2.4.4-r6, openbao-fips 2.5.1-r2, openbao-fips 2.5.2-r0, opentelemetry-collector-contrib 0.150.0-r0, spire-server 1.13.5-r0, spire-server 1.14.5-r0, spire-server-fips 1.14.5-r0, step 0.29.0-r0, step-cli 0.27.5-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, temporal 1.5.1-r0, temporal-server 1.29.6-r0, temporal-server 1.30.4-r0, temporal-server 1.31.0.153.3-r0, temporal-server-fips 1.29.6-r0, temporal-server-fips 1.31.0.153.1-r0, vault 1.20.4-r3, vault 1.21.4-r3

CVE-2026-33816 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KF12369 Security fix for CVE-2026-26018 applied in: kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache-fips 1.26.0-r1

CVE-2026-26018 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HS50696 Security fix for CVE-2026-56865 applied in: atlantis 0.44.1-r0, atlantis 0.47.0-r1, atlantis 0.47.1-r1, atlantis-fips 0.47.1-r1, cluster-autoscaler 1.35.2-r4, cluster-autoscaler 1.36.1-r4, cosign 3.0.6-r2, cosign 3.1.3-r0, crossplane 2.3.4-r2, crossplane-provider-keycloak 3.0.1-r0, dex 2.42.1-r6, dex 2.43.1-r3, dex 2.44.0-r7, dynatrace-operator 1.10.1-r1, dynatrace-operator 1.10.2-r0, dynatrace-operator 1.8.1-r7, gitea 1.26.4-r1, gitea 1.27.2-r1, grype 0.117.0-r1, grype-fips 0.117.0-r1, kubernetes-dns-node-cache 1.23.1-r1, kubernetes-dns-node-cache 1.24.1-r2, kubernetes-dns-node-cache 1.25.0-r9, kubernetes-dns-node-cache 1.26.8-r7, kyverno 1.15.3-r3, kyverno 1.16.4-r3, kyverno 1.17.2-r3, kyverno 1.18.2-r0, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, minio-operator 6.0.4-r7, minio-operator 7.0.1-r7, minio-operator 7.1.1-r7, ollama 0.32.11-r3, ollama-fips 0.32.11-r2, ollama-fips 0.32.12-r1, ollama-fips 0.32.13-r1, ollama-fips 0.32.14-r1, ollama-fips 0.32.15-r1, opentelemetry-collector-contrib 0.155.0-r2, opentelemetry-collector-contrib 0.156.0-r0, opentelemetry-collector-contrib 0.157.0-r0, opentelemetry-collector-contrib 0.159.0-r2, opentelemetry-collector-contrib-fips 0.158.0-r3, opentelemetry-collector-contrib-fips 0.159.0-r2, prometheus-alertmanager 0.33.0-r2, prometheus-alertmanager 0.34.0-r1, prometheus-mongodb-exporter 0.53.0-r1, prometheus-mongodb-exporter-fips 0.53.0-r1, pulumi 3.248.0-r0, rancher-agent 2.11.15-r2, rancher-agent 2.12.11-r3, rancher-agent 2.13.7-r1, rancher-agent 2.14.3-r0, rekor-backfill-index 1.2.2-r0, spire-server 1.14.7-r0, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tekton-chains-fips 0.29.1-r1, terraform 1.15.7-r0, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1, velero 1.15.2-r7, velero 1.17.2-r8, velero 1.18.2-r7, velero-fips 1.18.2-r7, wave 011.0-r4

CVE-2026-56865 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-76172 vulnerabilities

Vulnerabilities for packages: unleash-fips, vitess, tensorflow-gpu-jupyter, yaml-language-server, prism, wazuh-dashboard-fips, kibana, unleash-proxy, gitlab-rails-ce-fips, wazuh-dashboard, gitlab-rails-ce, keep-fips, nextcloud-server, arangodb, tileserver-gl, langfuse-fips, keep, argo-workflows,...

CLEANSTART-2026-BE65099 Security fixes in nginx-prometheus-exporter-fips 1.5.3-r1

Package nginx-prometheus-exporter-fips version 1.5.3-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-FS21502 Security fixes in argo-rollouts-fips 1.9.1-r2

Package argo-rollouts-fips version 1.9.1-r2 fixes 9 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-YQ91884 Security fixes in fulcio-fips 1.5.1-r1

Package fulcio-fips version 1.5.1-r1 fixes 17 vulnerabilities: CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860...

CLEANSTART-2026-WE39738 Security fixes in cassandra-reaper-fips 4.1.1-r1

Package cassandra-reaper-fips version 4.1.1-r1 fixes 17 vulnerabilities: CVE-2026-10532, CVE-2026-1225, CVE-2026-9828, ghsa-r7wm-3cxj-wff9, ghsa-72hv-8253-57qq...

CLEANSTART-2026-EI29741 Security fixes in argo-rollouts-fips 1.9.1-r3

Package argo-rollouts-fips version 1.9.1-r3 fixes 9 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-IA07692 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r2

Package opentelemetry-collector-contrib-fips version 0.158.0-r2 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

GHSA-6HX8-3WJJ-GR8G vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1, openstack-nova-2025.2, openstack-horizon-2025.2, openstack-keystone-2025.1, openstack-horizon-2025.2-fips, openstack-keystone-2026.1, openstack-glance-2025.1-fips, openstack-nova-2026.1, openstack-keystone-2025.1-fips,...

CVE-2026-55677 vulnerabilities

Vulnerabilities for packages: listmonk, temporal-fips, falcosidekick-ui-fips, kube-metrics-adapter, temporal-ui-server-fips, falcosidekick-ui, temporal-ui-server, temporal, kube-metrics-adapter-fips...

GO-2026-6003 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips, datadog-agent...

EUVD-2026-52031

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

CVE-2026-59643 OpenPGP inline-signature policy failures silently ignored

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

CVE-2026-59648

CVE-2026-59648 affects Bouncy Castle for Java: OpenPGP Argon2 S2K accepts attacker-chosen memory parameters. Vulnerable in BC Java before 1.85, in BC Java LTS before 2.73.12, and in BC Java FIPS (bcpg-fips) before 1.0.13 (1.0.x), 2.0.13 (2.0.x), and 2.1.13 (2.1.x). Per NVD, CVSSv4.0 base score 6....

CLEANSTART-2026-SL23247 Security fixes in spire-server-fips 1.14.1-r2

Package spire-server-fips version 1.14.1-r2 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-QE69630 Security fixes in kubernetes-csi-external-snapshotter-fips 8.5.0-r0

Package kubernetes-csi-external-snapshotter-fips version 8.5.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...