GHSA-6CX8-RJF8-PR8G vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, elasticsearch, logstash-fips, datahub-frontend, strimzi-kafka-operator-fips, datahub-gms, apache-polaris-fips, trino, sonarqube, kafbat-ui-fips, apache-hop-fips, nuxeo, cassandra-fips, confluent-kafka-jre-bcfips, debezium, cassandra-reaper,...

GHSA-343H-94H5-C4WR vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, elasticsearch, logstash-fips, datahub-frontend, strimzi-kafka-operator-fips, datahub-gms, apache-polaris-fips, trino, sonarqube, kafbat-ui-fips, apache-hop-fips, nuxeo, cassandra-fips, confluent-kafka-jre-bcfips, debezium, cassandra-reaper,...

CVE-2026-106450 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, elasticsearch, logstash-fips, datahub-frontend, strimzi-kafka-operator-fips, datahub-gms, apache-polaris-fips, trino, sonarqube, kafbat-ui-fips, apache-hop-fips, nuxeo, cassandra-fips, confluent-kafka-jre-bcfips, debezium, cassandra-reaper,...

GHSA-GM45-99XC-R7WV vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, elasticsearch, logstash-fips, datahub-frontend, strimzi-kafka-operator-fips, datahub-gms, apache-polaris-fips, trino, sonarqube, kafbat-ui-fips, apache-hop-fips, nuxeo, cassandra-fips, confluent-kafka-jre-bcfips, debezium, cassandra-reaper,...

GHSA-MCR4-QMVW-PX4G vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, elasticsearch, logstash-fips, datahub-frontend, strimzi-kafka-operator-fips, datahub-gms, apache-polaris-fips, trino, sonarqube, kafbat-ui-fips, apache-hop-fips, nuxeo, cassandra-fips, confluent-kafka-jre-bcfips, debezium, cassandra-reaper,...

CVE-2026-106451 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, elasticsearch, logstash-fips, datahub-frontend, strimzi-kafka-operator-fips, datahub-gms, apache-polaris-fips, trino, sonarqube, kafbat-ui-fips, apache-hop-fips, nuxeo, cassandra-fips, confluent-kafka-jre-bcfips, debezium, cassandra-reaper,...

CLEANSTART-2026-RX78395 Security fix for GHSA-gcjh-h69q-9w9g applied in: kube-state-metrics-fips 2.20.0-r3, eks-distro-kube-scheduler 1.36.9-r2, eks-distro-kube-controller-manager-fips 1.36.8-r0, eks-distro-kube-apiserver 1.36.8-r0, eks-distro-kube-apiserver-fips 1.36.8-r0

GHSA-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CD04274 Security fix for GHSA-hrxh-6v49-42gf applied in: aws-network-policy-agent 1.2.7-r0, fabric-peer 3.1.5-r1, gotenberg 8.33.0-r0, step 0.30.2-r4, kube-state-metrics-fips 2.20.0-r4, eks-distro-kube-apiserver 1.36.8-r0, eks-distro-kube-apiserver-fips 1.36.8-r0

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZS73776 Security fix for GHSA-8wmf-6v46-5gfg applied in: eks-distro-kube-scheduler-fips 1.35.14-r0, eks-distro-kube-controller-manager-fips 1.36.8-r1, eks-distro-kube-apiserver 1.36.8-r2, eks-distro-kube-apiserver-fips 1.36.8-r1

GHSA-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XH38250 Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments

CVE-2026-59969 affects multiple packages. Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. See references for individual vulnerability details...

CLEANSTART-2026-HL09755 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the temporal-server-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-QF95955 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the kube-state-metrics-fips package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-RM10286 filippo

Security vulnerability affects the temporal-server-fips package. filippo...

GHSA-WQ5F-XC86-PV6W vulnerabilities

Vulnerabilities for packages: keep-fips, keep, langfuse, homepage, peerdb-ui, tileserver-gl-fips, langfuse-fips, tileserver-gl...

GHSA-GXM5-99CW-XJW9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, langfuse-fips, gitlab-rails-ce-fips...

CVE-2026-74866 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, langfuse-fips, gitlab-rails-ce-fips...

ROOT-APP-MAVEN-CVE-2024-29857 CVE-2024-29857 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2024-29857 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

CVE-2026-90771 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, unleash, opensearch-dashboards-fips, thingsboard, gitlab-rails-ce-fips...

GHSA-WR44-6HXH-3JWQ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, unleash, opensearch-dashboards-fips, thingsboard, gitlab-rails-ce-fips...

CVE-2026-104874 vulnerabilities

Vulnerabilities for packages: authentik, wazuh-manager, authentik-fips, mlflow-fips, puppygraph-python, litellm, request-1276, wazuh-manager-fips, py3-cassandra-medusa, nemo-rl-cuda-13.0, crossplane-function-pythonic, airflow...