CLEANSTART-2026-TM97925 tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing

Security vulnerability affects the ollama-fips package. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing...

CLEANSTART-2026-OL43911 html

Security vulnerability affects the ollama-fips package. The html...

CLEANSTART-2026-US20242 html

Security vulnerability affects the ollama-fips package. The html...

CLEANSTART-2026-MJ34936 Security fix for GHSA-8wmf-6v46-5gfg applied in: weaviate-fips 1.38.19-r3, weaviate-fips 1.39.10-r1

GHSA-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QF15454 Security fix for GHSA-mpwr-8vm7-h73f applied in: external-secrets-operator-fips 2.7.0-r1

Security vulnerability affects the external-secrets-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RV05686 Security fix for GHSA-cp6g-7hqx-qxhp applied in: external-secrets-operator-fips 2.7.0-r1

Security vulnerability affects the external-secrets-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EU28747 mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS

Security vulnerability affects the external-secrets-operator-fips package. The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS...

PT-2026-117181

Security vulnerability affects the external-secrets-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-117184

Security vulnerability affects the external-secrets-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-117175

Security vulnerability affects the ollama-fips package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-4V53-57PG-C464 vulnerabilities

Vulnerabilities for packages: kayenta, elasticsearch-fips, debezium-connector-vitess, cruise-control, opensearch, knative-kafka-broker-fips, elasticsearch, thingsboard, spark, apache-pulsar, confluent-kafka-jre-bcfips, kafka-fips, logstash, akhq, knative-kafka-broker, trino, wildfly,...

CVE-2026-106452 vulnerabilities

Vulnerabilities for packages: kayenta, elasticsearch-fips, debezium-connector-vitess, cruise-control, opensearch, knative-kafka-broker-fips, elasticsearch, thingsboard, spark, apache-pulsar, confluent-kafka-jre-bcfips, kafka-fips, logstash, akhq, knative-kafka-broker, trino, wildfly,...

CVE-2026-106453 vulnerabilities

Vulnerabilities for packages: kayenta, elasticsearch-fips, debezium-connector-vitess, cruise-control, opensearch, knative-kafka-broker-fips, elasticsearch, thingsboard, spark, apache-pulsar, confluent-kafka-jre-bcfips, kafka-fips, logstash, akhq, knative-kafka-broker, trino, wildfly,...

GHSA-6CX8-RJF8-PR8G vulnerabilities

Vulnerabilities for packages: kayenta, elasticsearch-fips, debezium-connector-vitess, cruise-control, opensearch, knative-kafka-broker-fips, elasticsearch, thingsboard, spark, apache-pulsar, confluent-kafka-jre-bcfips, kafka-fips, logstash, akhq, knative-kafka-broker, trino, wildfly,...

CVE-2026-106451 vulnerabilities

Vulnerabilities for packages: kayenta, elasticsearch-fips, debezium-connector-vitess, cruise-control, opensearch, knative-kafka-broker-fips, elasticsearch, thingsboard, spark, apache-pulsar, confluent-kafka-jre-bcfips, kafka-fips, logstash, akhq, apache-hop, knative-kafka-broker, trino, wildfly,...

GHSA-MCR4-QMVW-PX4G vulnerabilities

Vulnerabilities for packages: kayenta, elasticsearch-fips, debezium-connector-vitess, cruise-control, opensearch, knative-kafka-broker-fips, elasticsearch, thingsboard, spark, apache-pulsar, confluent-kafka-jre-bcfips, kafka-fips, logstash, akhq, apache-hop, knative-kafka-broker, trino, wildfly,...

CVE-2026-106450 vulnerabilities

Vulnerabilities for packages: kayenta, elasticsearch-fips, debezium-connector-vitess, cruise-control, opensearch, knative-kafka-broker-fips, elasticsearch, thingsboard, spark, apache-pulsar, confluent-kafka-jre-bcfips, kafka-fips, logstash, akhq, apache-hop, knative-kafka-broker, trino, wildfly,...

GHSA-343H-94H5-C4WR vulnerabilities

Vulnerabilities for packages: kayenta, elasticsearch-fips, debezium-connector-vitess, cruise-control, opensearch, knative-kafka-broker-fips, elasticsearch, thingsboard, spark, apache-pulsar, confluent-kafka-jre-bcfips, kafka-fips, logstash, akhq, apache-hop, knative-kafka-broker, trino, wildfly,...

GHSA-GM45-99XC-R7WV vulnerabilities

Vulnerabilities for packages: kayenta, elasticsearch-fips, debezium-connector-vitess, cruise-control, opensearch, knative-kafka-broker-fips, elasticsearch, thingsboard, spark, apache-pulsar, confluent-kafka-jre-bcfips, kafka-fips, logstash, akhq, apache-hop, knative-kafka-broker, trino, wildfly,...

CLEANSTART-2026-RX78395 Security fix for GHSA-gcjh-h69q-9w9g applied in: kube-state-metrics-fips 2.20.0-r3, eks-distro-kube-scheduler 1.36.9-r2, eks-distro-kube-controller-manager-fips 1.36.8-r0, eks-distro-kube-apiserver 1.36.8-r0, eks-distro-kube-apiserver-fips 1.36.8-r0

GHSA-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...