CLEANSTART-2026-YB91515 Security fixes in gomplate 4.3.3-r1

Package gomplate version 4.3.3-r1 fixes 3 vulnerabilities: CVE-2026-42507, CVE-2026-42504, CVE-2026-27145...

CLEANSTART-2026-PJ11836 Security fixes in gomplate-fips 4.3.3-r3

Package gomplate-fips version 4.3.3-r3 fixes 4 vulnerabilities: CVE-2025-61729, CVE-2025-61727, ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, terragrunt, chainctl-fips, gitaly-fips, cloudbeat, teleport, cloudbeat-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, terragrunt, chainctl-fips, gitaly-fips, cloudbeat, teleport, cloudbeat-fips,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, terragrunt, chainctl-fips, gitaly-fips, cloudbeat, teleport, cloudbeat-fips,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, terragrunt, chainctl-fips, gitaly-fips, cloudbeat, teleport, cloudbeat-fips,...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-provider-aws-kinesis-fips, gomplate, juicefs, crossplane-aws-provider-fips, loki-fips, boring-registry-fips, agentbeat, zot, kots, k9s-fips, terraform, google-cloud-otel-ops-collector, velero-plugin-for-aws, conftest-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: kaniko-fips, zot, ratify, conftest-fips, knative-kafka-broker-fips, kyverno-notation-aws-fips, conftest, ko-fips, beats, gitaly-fips, timestamp-authority-fips, gatus-fips, bank-vaults-fips, cloudbeat, cloudflared, google-guest-agent-manager, cert-manager-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, chainctl-fips, gitaly-fips, chezmoi, cloudbeat, teleport, cloudbeat-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kaniko-fips, crossplane-fips, gomplate, melange, zot, kots, k9s-fips, argo-cd-fips, argocd-image-updater, jfrog-cli, gitlab-runner, trivy-fips, gitea, grafana-alloy, zarf-fips, chainctl-fips, gitaly-fips, chezmoi, cloudbeat, teleport, cloudbeat-fips,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: argo-events, dagger, grafana-alloy, nfpm, bom, osv-scanner, flux-source-controller, gitea, gomplate, steampipe, chezmoi, snyk-cli, gitaly, syft, apko, trivy-operator, wolfictl, skaffold, pulumi-language-java, external-secrets-operator, kubevela, argo-workflows,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: argo-events, dagger, grafana-alloy, nfpm, bom, osv-scanner, flux-source-controller, gitea, gomplate, steampipe, chezmoi, snyk-cli, gitaly, syft, apko, trivy-operator, wolfictl, skaffold, pulumi-language-java, external-secrets-operator, kubevela, argo-workflows,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: argo-events, dagger, grafana-alloy, nfpm, bom, osv-scanner, flux-source-controller, gitea, gomplate, steampipe, chezmoi, snyk-cli, gitaly, syft, apko, trivy-operator, wolfictl, skaffold, pulumi-language-java, external-secrets-operator, kubevela, argo-workflows,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: argo-events, dagger, grafana-alloy, nfpm, bom, osv-scanner, flux-source-controller, gitea, gomplate, steampipe, chezmoi, snyk-cli, gitaly, syft, apko, trivy-operator, wolfictl, skaffold, pulumi-language-java, external-secrets-operator, kubevela, argo-workflows,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: databricks-cli-fips, kubernetes-dashboard-auth, kaf, redpanda, prometheus-pushgateway-fips, k6-operator, flux-image-reflector-controller-fips, conftest-fips, kyverno-notation-aws-fips, conftest, crossplane-provider-aws-firehose-fips, knative-net-istio-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: databricks-cli-fips, kaniko-fips, configmap-reload, kaf, kubernetes-dashboard-auth, redpanda, prometheus-pushgateway-fips, vale, metacontroller, k6-operator, dockerize-fips, ratify, flux-image-reflector-controller-fips, conftest-fips, nri-rabbitmq-fips,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: undock, gomplate, spire-server, skaffold, kyverno-notation-aws, distribution, flux-kustomize-controller, temporal-ui-server, timestamp-authority, octo-sts, rook, guac, trivy, falcoctl, dgraph, bank-vaults, ko, dagger, grafana-alloy, spiffe-helper, steampipe,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: gomplate, melange, boring-registry-fips, zot, kots, octo-sts, vault-benchmark, kyverno-notation-aws-fips, argo-cd-fips, argocd-image-updater, ko-fips, sftpgo-plugin-kms, trivy-fips, grafana-alloy, caddy-fips, terragrunt, cilium, consul-k8s-fips,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: undock, gomplate, spire-server, skaffold, kyverno-notation-aws, distribution, flux-kustomize-controller, temporal-ui-server, timestamp-authority, octo-sts, rook, guac, trivy, falcoctl, dgraph, bank-vaults, ko, dagger, grafana-alloy, spiffe-helper, steampipe,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: tekton-chains, argo-events, crossplane-provider-azure, terraform-provider-azurerm, flux-source-controller, opentelemetry-collector, gomplate, snyk-cli, spire-server, k3s, rekor, crossplane-provider-family-azure, rabbitmq-messaging-topology-operator, terragrunt, glab,...