21 matches found
CLEANSTART-2026-AC15686 Security fix for CVE-2026-41567 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, rancher-agent 2.11.15-r1
CVE-2026-41567 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-FX37210 Security fix for CVE-2026-42306 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, rancher-agent 2.11.15-r1, vault 1.19.5-r1
CVE-2026-42306 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SB31025 Security fixes in prometheus-fips 3.11.3-r1
Package prometheus-fips version 3.11.3-r1 fixes 17 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-HW17175 Security fixes in prometheus-fips 3.11.3-r2
Package prometheus-fips version 3.11.3-r2 fixes 15 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-WQ81490 Security fixes in prometheus-fips 3.12.0-r2
Package prometheus-fips version 3.12.0-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-NR19543 Security fixes in prometheus-fips 3.10.0-r1
Package prometheus-fips version 3.10.0-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-2303, ghsa-259r-337f-4rfw...
CLEANSTART-2026-RW60626 Security fixes in prometheus-fips 3.12.0-r3
Package prometheus-fips version 3.12.0-r3 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-KI63132 Security fixes in prometheus-fips 3.12.0-r1
Package prometheus-fips version 3.12.0-r1 fixes 2 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw...
CLEANSTART-2026-CU23154 Security fixes in prometheus-fips 3.10.0-r2
Package prometheus-fips version 3.10.0-r2 fixes 14 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
PT-2026-89957
Package prometheus-fips version 3.12.0-r1 fixes 2 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw...
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: prometheus, prometheus-operator, istio, elastic-agent, grafana-fips, tempo-fips, keda, fluent-bit-plugin-loki, amazon-cloudwatch-agent-operator, beats-fips, keda-fips, metrics-server, cloud-sql-proxy, elastic-agent-fips, loki, nrdot-collector-k8s, karma-fips,...
CLEANSTART-2026-WI70970 Security fixes in prometheus-fips 3.9.0-r0
Package prometheus-fips version 3.9.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-OL83036 Security fixes in prometheus-fips 2.40.4-r1
Package prometheus-fips version 2.40.4-r1 fixes 1 vulnerabilities: CVE-2022-46146...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: knative-serving, osv-scanner, prometheus-operator, mattermost-fips, crossplane-provider-azure-operationsmanagement, cloudbeat, kube-conformance, flux-fips, falco-no-driver, kubernetes-fips, step-ca-fips, kubescape-server-fips, terraform, grype,...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: knative-serving, osv-scanner, prometheus-operator, mattermost-fips, cloudbeat, kube-conformance, flux-fips, falco-no-driver, kubernetes-fips, kubescape-server-fips, terraform, grype, longhorn-cli, gitlab-rails-ce-fips, omnictl-multiarch-fips, aactl, flux,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: knative-serving, osv-scanner, prometheus-operator, mattermost-fips, cloudbeat, kube-conformance, flux-fips, falco-no-driver, kubernetes-fips, kubescape-server-fips, terraform, gitlab-rails-ce-fips, omnictl-multiarch-fips, aactl, flux, frankenphp-8.5, frankenphp-8.2,...
CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-LS08172 Within HostnameError
Multiple security vulnerabilities affect the prometheus-fips package. Within HostnameError. See references for individual vulnerability details...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: cri-tools, flux-image-reflector-controller, up, crane, helm, trivy, skaffold, k3d, cadvisor-fips, kubevela, policy-controller-fips, cosign-fips, scorecard, bom, helm-operator, kpt, loki, eksctl, pulumi, aactl, zot, flux, helm-fips, skopeo, falcoctl, goreleaser,...