CLEANSTART-2026-IL37886 Security fix for ghsa-mqqf-5wvp-8fh8 applied in: cortex 1.21.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, gitea-fips 1.25.5-r0, karma-fips 0.122-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, rekor-backfill-index 1.4.3-r2, step-ca-fips 0.29.0-r0, tkn-fips 0.43.0-r3

ghsa-mqqf-5wvp-8fh8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GN98127 Security fix for ghsa-44p7-9xx4-hf2g applied in: gitea-fips 1.25.5-r0, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0

ghsa-44p7-9xx4-hf2g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6433 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea...

GHSA-RCR6-4JQH-J84M vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea...

CVE-2026-60004 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2022-0470 vulnerabilities

Vulnerabilities for packages: mattermost-fips, grafana, gitness, gitea-fips, gitea...

GO-2025-3988 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea, sftpgo...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cert-manager, vault-fips, argo-workflows-fips, kots, frankenphp-8.4, prometheus-mongodb-exporter, minio, aactl, knative-eventing-fips, vault, cloudbeat, kubescape-server, k9s-fips, istio, tigera-operator, cloudbeat-fips, flux-source-controller-fips, helm, coder,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: rancher-machine, cert-manager, rootlesskit-fips, gomplate-fips, witness, vault-fips, argo-workflows-fips, kots, frankenphp-8.4, prometheus-mongodb-exporter, minio, aactl, pulumi-kubernetes-operator, gatus-fips, docker-cli-buildx, knative-eventing-fips,...

CVE-2025-68939 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GHSA-263Q-5CV3-XQ9G vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: gitaly-fips, gomplate-fips, google-osconfig-agent, witness, argo-workflows-fips, kots, commercial-chainloop-cli, pulumi-kubernetes-operator, kargo, gitlab-runner-fips, rancher-fleet, cloudbeat, kubescape-server, terragrunt-fips, wolfictl, k9s-fips, gitlab-runner,...

CLEANSTART-2026-XO66325 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the gitea-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: gomplate-fips, witness, vault-fips, nats-server-fips, task, kargo, knative-eventing-fips, rancher-fleet, sonobuoy-fips, caddy, eksctl, flux-source-watcher-fips, buf, vault-env, tigera-operator, docker-cli, flux-source-controller-fips, fuse-overlayfs-snapshotter,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: gomplate-fips, witness, vault-fips, nats-server-fips, task, kargo, knative-eventing-fips, rancher-fleet, sonobuoy-fips, caddy, eksctl, flux-source-watcher-fips, buf, vault-env, tigera-operator, docker-cli, flux-source-controller-fips, fuse-overlayfs-snapshotter,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: gomplate-fips, hubble-ui-backend-fips, witness, vault-fips, task, kargo, knative-eventing-fips, sftpgo-plugin-eventsearch, certificate-transparency, gatus, rancher-fleet, crossplane-provider-sql, caddy, kepler, eksctl, blob-csi, crossplane-provider-aws-acm, goose-fip...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, gomplate-fips, hubble-ui-backend-fips, doppler-kubernetes-operator, vault-fips, witness, nats-server-fips, task, kargo, knative-eventing-fips, sftpgo-plugin-eventsearch, certificate-transparency, gatus,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, gomplate-fips, hubble-ui-backend-fips, doppler-kubernetes-operator, vault-fips, witness, nats-server-fips, task, kargo, knative-eventing-fips, sftpgo-plugin-eventsearch, certificate-transparency, gatus,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, gomplate-fips, hubble-ui-backend-fips, doppler-kubernetes-operator, vault-fips, witness, nats-server-fips, task, kargo, knative-eventing-fips, sftpgo-plugin-eventsearch, certificate-transparency, gatus,...