CLEANSTART-2026-FC01276 Security fix for CVE-2026-22703 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.3-r3, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tekton-chains-fips 0.24.0-r1

CVE-2026-22703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-5374 vulnerabilities

Vulnerabilities for packages: kyverno-fips, kyverno-notation-aws-fips, kyverno, kyverno-notation-aws...

GO-2025-3615 vulnerabilities

Vulnerabilities for packages: kyverno-fips, kyverno, commercial-kyverno...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, custom-pod-autoscaler, custom-pod-autoscaler-fips, kyverno-fips, aws-lambda-runtime-interface-emulator-fips, fleet-server-fips, aws-lambda-runtime-interface-emulator, cloudbeat, commercial-kyverno...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: k9s, headlamp-fips, kube-mgmt, kube-arangodb-fips, linkerd2-fips, argocd-image-updater-fips, crossplane, xeol-fips, rancher, argo-cd-fips, helm, oras-fips, ratify, steampipe, zarf, consul-k8s-fips, kargo, argocd-image-updater, oras, envoy-gateway-fips, headlamp,...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller-fips, external-dns-fips, kube-vip, crossplane-provider-aws-datasync-fips, crossplane-provider-azure-authorization, coredns, crossplane-provider-aws-appflow-fips, nri-discovery-kubernetes, vault-k8s, haproxy-ingress, dragonfly-operator,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: buildah, cluster-api-gcp-controller-fips, external-dns-fips, kube-arangodb-fips, nerdctl-fips, crossplane-provider-aws-datasync-fips, coredns, crossplane-provider-aws-appflow-fips, apm-server-fips, helm, seaweedfs-fips, cert-manager-fips, grafana-alloy,...

CLEANSTART-2026-CL42205 Security fixes in kyverno-fips 1.13.6-r9

Package kyverno-fips version 1.13.6-r9 fixes 22 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2026-25679, CVE-2025-61730...

CLEANSTART-2026-ZF69342 Security fixes in kyverno-fips 1.16.3-r6

Package kyverno-fips version 1.16.3-r6 fixes 10 vulnerabilities: CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, CVE-2026-32280, CVE-2026-32289, CVE-2026-32282...

CLEANSTART-2026-JI51120 Security fixes in kyverno-fips 1.16.3-r5

Package kyverno-fips version 1.16.3-r5 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-JN28813 Security fixes in kyverno-fips 1.14.4-r2

Package kyverno-fips version 1.14.4-r2 fixes 3 vulnerabilities: ghsa-6m8w-jc87-6cr7, ghsa-vvgc-356p-c3xw, ghsa-2x5j-vhc8-9cwm...

CLEANSTART-2026-OA50400 Security fixes in kyverno-fips 1.14.4-r1

Package kyverno-fips version 1.14.4-r1 fixes 1 vulnerabilities: CVE-2025-47907...

CLEANSTART-2026-XU94841 Security fixes in kyverno-fips 1.16.1-r2

Package kyverno-fips version 1.16.1-r2 fixes 15 vulnerabilities: CVE-2025-61730, CVE-2025-68119, CVE-2025-61728, CVE-2025-61731, CVE-2025-61726...

CLEANSTART-2026-ZK11830 Security fixes in kyverno-fips 1.12.7-r0

Package kyverno-fips version 1.12.7-r0 fixes 3 vulnerabilities: ghsa-mh63-6h87-95cp, ghsa-m5vv-6r4h-3vj9, ghsa-4vq8-7jfc-9cvp...

CLEANSTART-2026-EH19903 Security fixes in kyverno-fips 1.18.0-r0

Package kyverno-fips version 1.18.0-r0 fixes 2 vulnerabilities: CVE-2026-32952, ghsa-pjcq-xvwq-hhpj...

CLEANSTART-2026-ON48188 Security fixes in kyverno-fips 1.17.1-r4

Package kyverno-fips version 1.17.1-r4 fixes 2 vulnerabilities: CVE-2026-34986, CVE-2026-39883...

CLEANSTART-2026-ZH32905 Security fixes in kyverno-fips 1.17.1-r2

Package kyverno-fips version 1.17.1-r2 fixes 2 vulnerabilities: CVE-2025-15558, ghsa-p436-gjf2-799p...

CLEANSTART-2026-KH82124 Security fixes in kyverno-fips 1.13.6-r1

Package kyverno-fips version 1.13.6-r1 fixes 10 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-hcg3-q754-cr77, ghsa-mh63-6h87-95cp, ghsa-6m8w-jc87-6cr7, ghsa-2464-8j7c-4cjm...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tekton-chains, kubescape-server-fips, crossplane, kyverno, tkn-fips, trivy-fips, crossplane-fips, neuvector-sigstore-interface, kubescape, kyverno-notation-aws, policy-controller-fips, ratify, image-factory, tflint, tflint-fips, kyverno-fips, zarf, trivy-operator-fip...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: k9s, headlamp-fips, kube-mgmt, kube-arangodb-fips, linkerd2-fips, argocd-image-updater-fips, crossplane, xeol-fips, rancher, argo-cd-fips, helm, oras-fips, ratify, steampipe, zarf, consul-k8s-fips, kargo, argocd-image-updater, oras, envoy-gateway-fips, headlamp,...