CVE-2026-82399 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache-fips...

CVE-2026-86003 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache-fips...

GHSA-9GM5-9RFH-M6VX vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache-fips...

GHSA-MRG3-QVQR-JW29 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache-fips...

CVE-2026-85721 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips...

CVE-2026-85717 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips...

GHSA-F8M2-889X-VW4X vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips...

GHSA-7GRG-JCF7-RPMX vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips...

wolfGuard

WolfGuard VPN with FIPS 140-3 cryptography WolfGuard is the wolfSSL FIPS-compliant refactor of Linux kernel-based WireGuard, originally designed and authored by Jason Donenfeld. Usage is essentially identical. There are two principal components to WolfGuard, the wolfguard.ko kernel module and the...

CVE-2026-81870 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, crossplane-provider-gcp-beta-container-fips, src, apm-server, keda, rekor-fips, dapr-fips, aws-ebs-csi-driver, hydra-fips, spicedb-fips, loki-fips, jobset-fips, kubernetes-fips, pgtimetable, argocd-image-updater, containerd,...

GHSA-H7VF-4X9W-H99V vulnerabilities

Vulnerabilities for packages: kyverno-fips, kargo, argo-cd-fips, opentofu, gitlab-operator, xeol, redpanda-operator, cloudbeat-fips, opentofu-fips, kube-arangodb-fips, k9s-fips...

GHSA-8WMF-6V46-5GFG vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, crossplane-provider-gcp-beta-container-fips, src, apm-server, keda, rekor-fips, dapr-fips, aws-ebs-csi-driver, hydra-fips, spicedb-fips, loki-fips, jobset-fips, kubernetes-fips, pgtimetable, argocd-image-updater, containerd,...

GHSA-M37J-52J7-PJW7 vulnerabilities

Vulnerabilities for packages: kyverno-fips, chaos-mesh-fips, argo-cd-fips, kargo, opentofu, consul-k8s, redpanda-operator, cloudbeat-fips, opentofu-fips, k9s-fips, gitlab-operator...

CVE-2026-93604

vm2 through 3.12.0 allows untrusted guest code to cross the NodeVM isolation boundary when the embedder allowlists the crypto builtin. The builtin sanitizer in lib/builtin.js replaces crypto.setEngine but leaves crypto.setFips callable, and the readonly wrapper does not localize side effects of f...

CLEANSTART-2026-ML87749 Security fix for ghsa-4v7x-pqxf-cx7m applied in: cfssl 1.5.0-r1, clickhouse-operator 0.25.5-r0, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, metallb 0.13.12-r3, multus-cni-fips 4.0.2-r2, wave-fips 0.7.2-r1, wave-fips 0.8.0-r1, wave-fips 0.9.0-r1, wavefront-collector-for-kubernetes 1.13.0-r0

ghsa-4v7x-pqxf-cx7m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GS01366 Security fix for ghsa-2gh3-rmm4-6rq5 applied in: ztunnel-fips 1.25.5-r0, ztunnel-fips 1.26.8-r0, ztunnel-fips 1.27.5-r1, ztunnel-fips 1.27.8-r4, ztunnel-fips 1.28.0-r0, ztunnel-fips 1.28.2-r0

ghsa-2gh3-rmm4-6rq5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GA56575 Security fix for ghsa-x4rx-4gw5-53pq applied in: helm-operator-fips 1.41.1-r0

Security vulnerability affects the helm-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-IS89195 Security fix for ghsa-hqhq-hp5x-xp3w applied in: kube-vip-fips 0.7.2-r0

Security vulnerability affects the kube-vip-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-QE77299 Security fix for ghsa-x6mj-w4jf-jmgw applied in: nfs-subdir-external-provisioner-fips 4.0.16-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OD65831 Security fix for ghsa-72qj-48g4-5xgx applied in: logstash-fips 9.0.8-r2, logstash-fips 9.2.4-r1

ghsa-72qj-48g4-5xgx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...