CLEANSTART-2026-WI70970 Security fixes in prometheus-fips 3.9.0-r0

Package prometheus-fips version 3.9.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: argo-workflows, google-guest-agent-manager, kaf, rancher, kubernetes, drone, istio, argo-workflows-fips, crossplane-fips, cert-manager, knative-serving, prometheus-operator, crossplane-provider-azure-orbital, flux-notification-controller, external-dns,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argo-workflows, kaf, rancher, kubernetes, drone, istio, argo-workflows-fips, knative-serving, cert-manager, prometheus-operator, external-dns, k9s-fips, omnictl-multiarch, kubevela-fips, kubernetes-dashboard, kubescape-server, kubescape-server-fips, k9s, skaffold,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: argo-workflows, kaf, rancher, kubernetes, drone, istio, argo-workflows-fips, knative-serving, cert-manager, prometheus-operator, external-dns, datadog-agent-fips, buildkitd, syft, guac, pulumi-language-java, k9s-fips, rootlesskit-fips, grype-fips, omnictl-multiarch,...

CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-LS08172 Within HostnameError

Multiple security vulnerabilities affect the prometheus-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: argo-workflows, helm-fips, vexctl, slsa-verifier, zot, k3s, argo-workflows-fips, kubeflow-katib, newrelic-infrastructure-agent, docker-machine-driver-harvester, chartmuseum, helm-operator-fips, skopeo, buildkitd, kargo, nerdctl, scorecard, kpt, helm-operator, guac,...

CVE-2023-45286 vulnerabilities

Vulnerabilities for packages: rclone...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: slsa-verifier, falcoctl-fips, k3s, tekton-chains, skaffold, bom, chartmuseum, k3d, paranoia, rancher-agent, aactl, scorecard, up, spire-server-fips, kpt, ctop, kubescape...