GHSA-GPX4-37G2-C8PV vulnerabilities

Vulnerabilities for packages: argo-cd...

CVE-2025-59531 vulnerabilities

Vulnerabilities for packages: argo-cd...

GHSA-F9GQ-PRRC-HRHC vulnerabilities

Vulnerabilities for packages: argo-cd...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SH14815 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the tkn-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-RJ58492 On Unix platforms, when listing the contents of a directory using File

Multiple security vulnerabilities affect the kyverno-fips package. On Unix platforms, when listing the contents of a directory using File. See references for individual vulnerability details...

CLEANSTART-2026-MU81308 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the kyverno-policy-reporter-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CVE-2026-5446

In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wcAriaEncrypt is stateless and passes the caller-supplied IV verbatim to the MagicCrypto SDK with no internal counter, and because the explicit IV is...

CVE-2025-11537 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-GV3V-2CPP-3PMQ vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-C244-P6M5-VQJ6 vulnerabilities

Vulnerabilities for packages: apache-activemq, apache-activemq-fips...

CVE-2026-23903 vulnerabilities

Vulnerabilities for packages: apache-activemq, apache-activemq-fips...

CVE-2026-33817 vulnerabilities

Vulnerabilities for packages: beats, k3s, consul-fips, beats-fips, vault, elastic-agent-fips, loki, cloudbeat, mattermost, zot, commercial-grafana, cloudbeat-fips, consul, containerd, datadog-agent, elastic-agent, commercial-expanso-edge, frankenphp-8.2, frankenphp-8.3, datadog-agent-fips,...

GHSA-6JWV-W5XF-7J27 vulnerabilities

Vulnerabilities for packages: beats, k3s, consul-fips, beats-fips, vault, elastic-agent-fips, loki, cloudbeat, mattermost, zot, commercial-grafana, cloudbeat-fips, consul, containerd, datadog-agent, elastic-agent, commercial-expanso-edge, frankenphp-8.2, frankenphp-8.3, datadog-agent-fips,...

CLEANSTART-2026-GE08280 Ruby JSON is a JSON implementation for Ruby

Multiple security vulnerabilities affect the logstash-fips package. Ruby JSON is a JSON implementation for Ruby. See references for individual vulnerability details...

CLEANSTART-2026-SQ18258 url

Multiple security vulnerabilities affect the minio-operator-fips package. url. See references for individual vulnerability details...

CLEANSTART-2026-BA09462 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-UF78567 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the minio-operator-fips package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...