CLEANSTART-2026-LS30652 Security fixes for CVE-2025-0913, CVE-2025-15558, CVE-2025-4673, CVE-2025-47907, CVE-2025-47914, CVE-2025-58181, CVE-2025-62156, CVE-2025-62157, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-33186, ghsa-37cx-329c-33x3, ghsa-c2hv-4pfj-mm2r, ghsa-cfpf-hrx2-8rv6, ghsa-fw7p-63qq-7hpr, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-p84v-gxvw-73pf applied in versions: 3.7.0-r0, 3.7.11-r0, 3.7.3-r0, 3.7.4-r0, 3.7.6-r0, 3.7.9-r0, 3.7.9-r1, 3.7.9-r2, 4.0.2-r0

Multiple security vulnerabilities affect the argo-workflows-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BK28579 Security fixes for CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 3.0.2-r0, 3.0.2-r1

Multiple security vulnerabilities affect the grafana-mimir-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

K000160560: OpenSSL vulnerability CVE-2025-69420

Security Advisory Description Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Respons...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: weaviate, dagger, ollama-fips, chainloop-cli-fips, loki, commercial-grafana, chainloop-control-plane-fips, redpanda, eksctl, goreleaser, jfrog-cli, vcluster, rclone-fips, opentelemetry-collector-contrib-fips, gitlab-runner, elastic-agent, minio, terragrunt-fips,...

CVE-2026-32286 vulnerabilities

Vulnerabilities for packages: bento-fips, kots, bento, grafana-alloy-fips, telegraf, teleport, grafana-alloy, steampipe, splunk-otel-collector, splunk-otel-collector-fips...

K000160555: OpenSSL vulnerability CVE-2026-22795

Security Advisory Description Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS12 file. Impact summary: An application processing a malformed PKCS12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting ...

K000160554: OpenSSL vulnerability CVE-2025-69421

Security Advisory Description Issue summary: Processing a malformed PKCS12 file can trigger a NULL pointer dereference in the PKCS12itemdecryptd2iex function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS12 files...

CVE-2026-33809 vulnerabilities

Vulnerabilities for packages: seaweedfs, mattermost, ollama-fips, hugo-extended, rclone, ollama, seaweedfs-operator, mailpit, mattermost-fips, hugo, rclone-fips, seaweedfs-operator-fips, seaweedfs-fips, mailpit-fips, listmonk, hugo-fips...

GHSA-44P7-9XX4-HF2G vulnerabilities

Vulnerabilities for packages: seaweedfs, mattermost, ollama-fips, hugo-extended, rclone, ollama, seaweedfs-operator, mailpit, mattermost-fips, hugo, rclone-fips, seaweedfs-operator-fips, seaweedfs-fips, mailpit-fips, listmonk, hugo-fips...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: dagger, amazon-ssm-agent, kubescape-server-fips, external-secrets-operator-fips, gitlab-runner, gitsign, flux-image-automation-controller, kots, grype-db, k9s-fips, argo-cd-fips, argo-workflows, grype-fips, crossplane-fips, argo-cd, trufflehog-fips, zarf-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: dagger, amazon-ssm-agent, kubescape-server-fips, external-secrets-operator-fips, gitlab-runner, gitsign, flux-image-automation-controller, kots, grype-db, k9s-fips, argo-cd-fips, argo-workflows, grype-fips, crossplane-fips, argo-cd, trufflehog-fips, zarf-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: dagger, amazon-ssm-agent, kubescape-server-fips, external-secrets-operator-fips, gitlab-runner, gitsign, flux-image-automation-controller, kots, grype-db, k9s-fips, argo-cd-fips, argo-workflows, grype-fips, crossplane-fips, argo-cd, trufflehog-fips, zarf-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: dagger, amazon-ssm-agent, kubescape-server-fips, external-secrets-operator-fips, gitlab-runner, gitsign, flux-image-automation-controller, kots, grype-db, k9s-fips, argo-cd-fips, argo-workflows, grype-fips, crossplane-fips, argo-cd, trufflehog-fips, zarf-fips,...

GHSA-XJPJ-3MR7-GCPF vulnerabilities

Vulnerabilities for packages: rancher-api-ui, py3-jupyterlab, gitlab-rails-ce, wazuh-dashboard, lerna, opensearch-dashboards-fips, tileserver-gl-fips, pelias-api, ts-patch, wazuh-dashboard-fips, gitlab-rails-ce-fips, opensearch-dashboards, kibana, prism, tensorflow-cpu-jupyter, nextcloud-server...

GHSA-3MFM-83XF-C92R vulnerabilities

Vulnerabilities for packages: rancher-api-ui, py3-jupyterlab, gitlab-rails-ce, wazuh-dashboard, lerna, opensearch-dashboards-fips, tileserver-gl-fips, pelias-api, ts-patch, wazuh-dashboard-fips, gitlab-rails-ce-fips, opensearch-dashboards, kibana, prism, tensorflow-cpu-jupyter, nextcloud-server...

CVE-2026-33940 vulnerabilities

Vulnerabilities for packages: rancher-api-ui, py3-jupyterlab, gitlab-rails-ce, wazuh-dashboard, lerna, opensearch-dashboards-fips, tileserver-gl-fips, pelias-api, ts-patch, wazuh-dashboard-fips, gitlab-rails-ce-fips, opensearch-dashboards, kibana, prism, tensorflow-cpu-jupyter, nextcloud-server...

CVE-2026-33937 vulnerabilities

Vulnerabilities for packages: rancher-api-ui, py3-jupyterlab, gitlab-rails-ce, wazuh-dashboard, lerna, opensearch-dashboards-fips, tileserver-gl-fips, pelias-api, ts-patch, wazuh-dashboard-fips, gitlab-rails-ce-fips, opensearch-dashboards, kibana, prism, tensorflow-cpu-jupyter, nextcloud-server...

GHSA-2W6W-674Q-4C4Q vulnerabilities

Vulnerabilities for packages: rancher-api-ui, py3-jupyterlab, gitlab-rails-ce, wazuh-dashboard, lerna, opensearch-dashboards-fips, tileserver-gl-fips, pelias-api, ts-patch, wazuh-dashboard-fips, gitlab-rails-ce-fips, opensearch-dashboards, kibana, prism, tensorflow-cpu-jupyter, nextcloud-server...

GHSA-7RX3-28CR-V5WH vulnerabilities

Vulnerabilities for packages: rancher-api-ui, py3-jupyterlab, gitlab-rails-ce, wazuh-dashboard, lerna, opensearch-dashboards-fips, tileserver-gl-fips, pelias-api, ts-patch, wazuh-dashboard-fips, gitlab-rails-ce-fips, opensearch-dashboards, kibana, prism, tensorflow-cpu-jupyter, nextcloud-server...