CLEANSTART-2026-IL37886 Security fix for GHSA-mqqf-5wvp-8fh8 applied in: cortex 1.21.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, gitea-fips 1.25.5-r0, karma-fips 0.122-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, rekor-backfill-index 1.4.3-r2, step-ca-fips 0.29.0-r0, tkn-fips 0.43.0-r3

GHSA-mqqf-5wvp-8fh8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GN98127 Security fix for GHSA-44p7-9xx4-hf2g applied in: gitea-fips 1.25.5-r0, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0

GHSA-44p7-9xx4-hf2g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6433 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

GHSA-RCR6-4JQH-J84M vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

CVE-2026-60004 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

GO-2022-0470 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips, gitness, grafana, mattermost-fips...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2025-3988 vulnerabilities

Vulnerabilities for packages: sftpgo, gitea, gitea-fips...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, cilium, frankenphp-8.2, minio, gatekeeper, kots, rootlesskit-fips, podman, argo-workflows-fips, knative-kafka-broker, backup-restore-operator, zot, istio, kaf, prometheus-mongodb-exporter, apko-fips, argocd-image-updater, docker, kine, flux,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cilium, frankenphp-8.2, minio, gatekeeper, kots, argo-workflows-fips, knative-kafka-broker, backup-restore-operator, zot, istio, kaf, prometheus-mongodb-exporter, argocd-image-updater, kine, flux, gitlab-workhorse-ce, cilium-cli, keda-fips, tigera-operator,...

GHSA-263Q-5CV3-XQ9G vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2025-68939 vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, kots, argo-workflows-fips, google-osconfig-agent, zot, apko-fips, argocd-image-updater, steampipe, rancher-fleet-fips, grafana-alloy, flux, packer, kaniko, chainctl, gomplate-fips, chainctl-fips, src-fingerprint, terragrunt-fips, snyk-cli, scorecard...

CLEANSTART-2026-XO66325 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the gitea-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: tkn-fips, regclient, kots, nvidia-nsight-compute-12.9, cloudflared-fips, chartmuseum, istio, nvidia-nsight-compute-13.4, rancher-fleet-fips, nvidia-nsight-compute-13.1, cloud-provider-aws-fips, vendir, vault-env, step-ca, mailpit, seaweedfs, snyk-cli, scorecard,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: tkn-fips, regclient, kots, nvidia-nsight-compute-12.9, cloudflared-fips, chartmuseum, istio, nvidia-nsight-compute-13.4, rancher-fleet-fips, nvidia-nsight-compute-13.1, cloud-provider-aws-fips, vendir, vault-env, step-ca, mailpit, seaweedfs, snyk-cli, scorecard,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: tkn-fips, argo-rollouts-fips, crossplane-provider-aws-acm-fips, kubernetes-csi-external-resizer-fips, kots, chaos-mesh-fips, nvidia-nsight-compute-12.9, fleet-server-fips, tempo, aws-fsx-csi-driver, cloudflared-fips, go-discover-fips, chartmuseum, emqx-exporter, isti...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: tkn-fips, argo-rollouts-fips, crossplane-provider-aws-acm-fips, kubernetes-csi-external-resizer-fips, regclient, kots, chaos-mesh-fips, nvidia-nsight-compute-12.9, fleet-server-fips, tempo, aws-fsx-csi-driver, cloudflared-fips, go-discover-fips, infinispan-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: tkn-fips, argo-rollouts-fips, crossplane-provider-aws-acm-fips, kubernetes-csi-external-resizer-fips, regclient, kots, chaos-mesh-fips, nvidia-nsight-compute-12.9, fleet-server-fips, tempo, aws-fsx-csi-driver, cloudflared-fips, go-discover-fips, infinispan-operator,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: tkn-fips, argo-rollouts-fips, crossplane-provider-aws-acm-fips, kubernetes-csi-external-resizer-fips, regclient, kots, chaos-mesh-fips, nvidia-nsight-compute-12.9, fleet-server-fips, tempo, aws-fsx-csi-driver, cloudflared-fips, go-discover-fips, infinispan-operator,...