CLEANSTART-2026-JC64695 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-26958, CVE-2026-35469, ghsa-f6x5-jh6r-wrfv, ghsa-fw7p-63qq-7hpr, ghsa-gx3x-vq4p-mhhv, ghsa-j5w8-q4qc-rx2x, ghsa-mh2q-q3fh-2475, ghsa-pc3f-x583-g7j2 applied in versions: 1.16.1-r0, 1.16.1-r1, 1.18.0-r0, 1.19.0-r1

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VU08393 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.6.1-r0, 2.6.1-r1, 2.6.1-r7, 2.6.1-r8, 2.6.1-r9

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SE34232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p436-gjf2-799p applied in versions: 7.1.1-r10, 7.1.1-r7, 7.1.1-r8, 7.1.1-r9

Multiple security vulnerabilities affect the minio-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZR76960 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-p77j-4mvh-x3m3 applied in versions: 1.24.0-r0, 1.29.0-r0, 1.29.0-r1

Multiple security vulnerabilities affect the k8ssandra-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: skaffold-fips, jfrog-cli, gitaly, gitsign, osv-scanner, gitea-fips, nfpm, upwind-agent, melange, argo-cd-fips, cg, external-secrets-operator, teleport, coder, wolfictl, chainloop-cli, gomplate-fips, trivy-operator-fips, gitaly-fips, coder-fips, cerbos, act,...

CLEANSTART-2026-DN20646 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: kuberay-operator-fips, gitlab-cng, vault-fips, etcd, crossplane-provider-aws-elb, crossplane-provider-aws-kafka, kubernetes-csi-driver-nfs, crossplane-provider-aws-elasticsearch-fips, teleport, yunikorn-k8shim, gitlab-workhorse-ce, crossplane-provider-family-aws-fips...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: agentbeat-fips, cert-manager-fips, vault-fips, beats-fips, rclone, gitea-fips, yunikorn-k8shim-fips, external-secrets-operator, versitygw, teleport, yunikorn-k8shim, minio, neuvector-fips, rancher-agent, cert-manager-csi-driver, telegraf, ratify, kyverno-fips,...

CVE-2026-6383 vulnerabilities

Vulnerabilities for packages: virt-api-fips, virt-handler-fips, virt-api, virt-operator-fips, virt-handler, virt-launcher, virt-controller, virt-operator, virt-controller-fips...

GHSA-J6CV-3W8P-VRG8 vulnerabilities

Vulnerabilities for packages: virt-api-fips, virt-handler-fips, virt-api, virt-operator-fips, virt-handler, virt-launcher, virt-controller, virt-operator, virt-controller-fips...

CLEANSTART-2026-AN01004 filippo

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...

CLEANSTART-2026-QO20135 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Multiple security vulnerabilities affect the minio-operator-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. See references for individual...

CLEANSTART-2026-YG63570 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the minio-operator-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: agentbeat-fips, minio-operator, nrdot-collector-fips, prometheus-pushgateway, elastic-agent-fips, beats-fips, tempo, datadog-agent-fips, grafana, istio-fips, plutono, jaeger, prometheus-fips, splunk-otel-collector-fips, node-problem-detector,...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: agentbeat-fips, minio-operator, nrdot-collector-fips, prometheus-pushgateway, elastic-agent-fips, beats-fips, tempo, datadog-agent-fips, grafana, istio-fips, plutono, jaeger, prometheus-fips, splunk-otel-collector-fips, node-problem-detector,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: metacontroller, omni-fips, kubewatch, aws-privateca-issuer-fips, osv-scanner, external-secrets-operator, karma-fips, ingress-nginx-controller-fips, aws-eks-pod-identity-agent-fips, kube-logging-logging-operator, gh, grafana-operator-fips, mariadb-operator,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: metacontroller, omni-fips, kubewatch, aws-privateca-issuer-fips, osv-scanner, external-secrets-operator, karma-fips, ingress-nginx-controller-fips, aws-eks-pod-identity-agent-fips, kube-logging-logging-operator, gh, grafana-operator-fips, mariadb-operator,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: cert-manager-fips, envoy-gateway, newrelic-infrastructure-agent-fips, vault-fips, etcd, jfrog-cli, jaeger, aws-flb-firehose-fips, kubernetes-csi-driver-nfs, regclient-fips, knative-operator, gitlab-workhorse-ce, prometheus-operator, falcoctl, gh, grafana-operator-fip...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: cert-manager-fips, envoy-gateway, newrelic-infrastructure-agent-fips, vault-fips, etcd, jfrog-cli, jaeger, aws-flb-firehose-fips, kubernetes-csi-driver-nfs, regclient-fips, knative-operator, gitlab-workhorse-ce, prometheus-operator, falcoctl, gh, grafana-operator-fip...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: cert-manager-fips, envoy-gateway, kuberay-operator-fips, newrelic-infrastructure-agent-fips, vault-fips, etcd, custom-pod-autoscaler, kustomize, jfrog-cli, otel-cli, kubernetes-dashboard-fips, spiffe-helper-fips, stakater-reloader-fips, aws-network-policy-agent-fips,...