CLEANSTART-2026-SP45896 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.5.1-r0, 1.5.1-r1

Multiple security vulnerabilities affect the nginx-prometheus-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CV84139 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: crossplane, kubescape-server-fips, tigera-operator-fips, rancher-agent, conftest, drone-fips, grafana-operator-fips, cloudbeat-fips, gatekeeper, linkerd2, gogatekeeper, opa-envoy, opa-fips-envoy, crossplane-fips, rancher-fleet-fips, kots, zarf-fips, kgateway,...

CVE-2026-50163 vulnerabilities

Vulnerabilities for packages: crossplane, kubescape-server-fips, tigera-operator-fips, rancher-agent, conftest, drone-fips, grafana-operator-fips, cloudbeat-fips, gatekeeper, linkerd2, gogatekeeper, opa-envoy, opa-fips-envoy, crossplane-fips, rancher-fleet-fips, kots, zarf-fips, kgateway,...

GHSA-6W3M-4HHP-775Q vulnerabilities

Vulnerabilities for packages: keda-http-add-on, keda-http-add-on-fips...

CVE-2026-49476 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datadog-agent, open-webui, datadog-agent-fips...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datadog-agent, open-webui, datadog-agent-fips...

CVE-2026-49838 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip, kube-vip-fips...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip, kube-vip-fips...

GHSA-836R-79RF-4M37 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datadog-agent, open-webui, datadog-agent-fips...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datadog-agent, open-webui, datadog-agent-fips...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: crossplane, kubescape-server-fips, cloudbeat-fips, kyverno, crossplane-fips, tkn-fips, zarf-fips, falcoctl-fips, neuvector-sigstore-interface, policy-controller, teleport, tekton-chains, policy-controller-fips, ratify, kubescape-server, trivy-operator-fips,...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: crossplane, kubescape-server-fips, cloudbeat-fips, kyverno, crossplane-fips, tkn-fips, zarf-fips, falcoctl-fips, neuvector-sigstore-interface, policy-controller, teleport, tekton-chains, policy-controller-fips, ratify, kubescape-server, trivy-operator-fips,...

golang security, bug fix, and enhancement update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 - Resolves: RHEL-193476 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146452 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139364 1.25.3-2 - Cleanup lib/ ownership 1.25.3-1 ...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, kyverno, commercial-chainloop-backend, grafana-alloy-fips, ingress-nginx-controller-fips, langfuse, docker-cli-fips, pulumi-language-yaml, kube-arangodb-fips, grafana-operator, src, cerbos, cerbos-fips, terraform-fips, traefik, libnvidia-container,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, crossplane-provider-aws-appintegrations, spire-controller-manager-fips, skopeo-fips, chainloop-artifact-cas, jobset-fips, configmap-reload-fips, mcp-grafana, longhorn-manager, openbao-k8s, pulumi-language-yaml, cerbos,...

CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SC97100 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SD94217 Security fixes for CVE-2026-42504 applied in versions: 2.8.0-r3

Security vulnerability affects the local-static-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CP05946 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r5

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...