CLEANSTART-2026-ZD86302 Security fixes in neuvector-fips 5.4.8-r0

Package neuvector-fips version 5.4.8-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: trivy, kyverno, tkn-fips, falcoctl, crossplane, gitsign, tflint-fips, spire-server-fips, crossplane-fips, falcoctl-fips, cloudbeat-fips, teleport, teleport-operator-fips, kubescape, cloudbeat, trivy-operator-fips, zarf, image-factory, image-factory-fips, tekton-chain...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: ratify, teleport, kyverno-notation-aws, neuvector-sigstore-interface, kyverno, trivy-operator, crossplane, aactl, kubescape, falcoctl, gitsign, policy-controller, tkn, trivy, zarf, tflint, tekton-chains...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: ratify, teleport, kyverno-notation-aws, neuvector-sigstore-interface, kyverno, trivy-operator, crossplane, aactl, kubescape, falcoctl, gitsign, policy-controller, tkn, trivy, zarf, tflint, tekton-chains...

GHSA-4JJ9-CGQC-X9H5 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

CVE-2025-66001 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kyverno, tkn-fips, falcoctl, crossplane, gitsign, spire-server, tflint-fips, spire-server-fips, crossplane-fips, falcoctl-fips, cloudbeat-fips, ko-fips, teleport, kubescape, cloudbeat, slsa-verifier, trivy-operator-fips, zarf, goreleaser, tekton-chains,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: kyverno, tkn-fips, falcoctl, crossplane, gitsign, spire-server, tflint-fips, spire-server-fips, crossplane-fips, falcoctl-fips, cloudbeat-fips, ko-fips, teleport, kubescape, cloudbeat, slsa-verifier, trivy-operator-fips, zarf, goreleaser, tekton-chains,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: goreleaser, slsa-verifier, neuvector-sigstore-interface, kyverno, trivy-operator, policy-controller, zarf, ko, teleport, kyverno-notation-aws, spire-server, aactl, falcoctl, tkn, tflint, tekton-chains, ratify, crossplane, kubescape, gitsign...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: goreleaser, slsa-verifier, neuvector-sigstore-interface, kyverno, trivy-operator, policy-controller, zarf, ko, teleport, kyverno-notation-aws, spire-server, aactl, falcoctl, tkn, tflint, tekton-chains, ratify, crossplane, kubescape, gitsign...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, envoy-gateway-fips, k8sgpt, crossplane, linkerd2-fips, helm-operator-fips, cluster-api-helm-controller-fips, kubevela-fips, envoy-gateway, cloudbeat-fips, chartmuseum-fips, cloudbeat, kube-arangodb-fips, amazon-ecs-agent-fips, zarf,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, envoy-gateway-fips, k8sgpt, crossplane, linkerd2-fips, helm-operator-fips, cluster-api-helm-controller-fips, kubevela-fips, envoy-gateway, cloudbeat-fips, chartmuseum-fips, cloudbeat, kube-arangodb-fips, amazon-ecs-agent-fips, zarf,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, envoy-gateway-fips, k8sgpt, crossplane, linkerd2-fips, helm-operator-fips, cluster-api-helm-controller-fips, kubevela-fips, envoy-gateway, cloudbeat-fips, chartmuseum-fips, cloudbeat, kube-arangodb-fips, amazon-ecs-agent-fips, zarf,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, envoy-gateway-fips, k8sgpt, crossplane, linkerd2-fips, helm-operator-fips, cluster-api-helm-controller-fips, kubevela-fips, envoy-gateway, cloudbeat-fips, chartmuseum-fips, cloudbeat, kube-arangodb-fips, amazon-ecs-agent-fips, zarf,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, envoy-gateway-fips, k8sgpt, crossplane, linkerd2-fips, helm-operator-fips, cluster-api-helm-controller-fips, kubevela-fips, envoy-gateway, cloudbeat-fips, chartmuseum-fips, cloudbeat, kube-arangodb-fips, amazon-ecs-agent-fips, zarf,...