CVE-2026-63209 vulnerabilities

Vulnerabilities for packages: k3s, containerd, loki, aactl, omnictl-multiarch-fips, snyk-cli, kaf, backup-restore-operator, spire-server, commercial-grafana, prometheus-mongodb-exporter, k3d, kyverno, prometheus, terraform, zot, upwind-agent, elastic-agent-fips, prometheus-operator, cilium, kots,...

CVE-2026-63209 vulnerabilities

Vulnerabilities for packages: k3d, falco-no-driver, spire-server, k3s, zot, telegraf, minio, kine, kyverno, aactl, containerd, helm, prometheus-operator, flux, kaf, loki, snyk-cli, nerdctl, kots...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: containerd, loki, commercial-nginx-ingress, commercial-chainloop-cli, nvidia-nsight-compute-12.8, ingress-nginx-controller-fips, aactl, nvidia-nsight-compute-13.1, k8s-device-plugin, omnictl-multiarch-fips, external-dns, karpenter-fips, frankenphp-8.4, spire-server,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: argo-workflows, chartmuseum, external-dns, kyverno-policy-reporter-ui, yunikorn-web, argo-cd, flux-source-controller, openbao, kubernetes, terragrunt, temporal-ui-server, grafana, falco-no-driver, rancher, k6, spire-server, ingress-nginx-controller, continuity,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: aactl, external-dns, falco-no-driver, spire-server, ingress-nginx-controller, flux, k8s-device-plugin, kubernetes, loki, cert-manager...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: argo-workflows, chartmuseum, external-dns, kyverno-policy-reporter-ui, yunikorn-web, argo-cd, flux-source-controller, openbao, kubernetes, terragrunt, temporal-ui-server, grafana, falco-no-driver, rancher, k6, spire-server, ingress-nginx-controller, continuity,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: aactl, external-dns, falco-no-driver, spire-server, ingress-nginx-controller, flux, k8s-device-plugin, kubernetes, loki, cert-manager...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: aactl, external-dns, falco-no-driver, spire-server, ingress-nginx-controller, flux, k8s-device-plugin, kubernetes, loki, cert-manager...

CLEANSTART-2026-BV58345 Security fix for GHSA-jqc5-w2xx-5vq4 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, kyverno-fips 1.16.3-r3, sigstore-scaffolding 0.7.31-r1, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

GHSA-jqc5-w2xx-5vq4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PA71152 Security fix for GHSA-fphv-w9fq-2525 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, sigstore-scaffolding 0.7.31-r0, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r1, tekton-chains-fips 0.26.0-r1, tkn-fips 0.43.0-r2

GHSA-fphv-w9fq-2525 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CM50083 Security fix for GHSA-4c4x-jm2x-pf9j applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

GHSA-4c4x-jm2x-pf9j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RI42866 Security fix for GHSA-273p-m2cw-6833 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

GHSA-273p-m2cw-6833 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FA45866 Security fix for CVE-2026-24122 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kyverno 1.15.3-r3, kyverno 1.16.4-r3, kyverno 1.17.2-r2, spire-server 1.14.7-r0

CVE-2026-24122 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LO90472 Security fix for GHSA-x744-4wpc-v9h2 applied in: cadvisor-fips 0.55.1-r0, kubevela 1.10.8-r0, melange 0.56.1-r1, paranoia 0.2.1-r0, spire-server-fips 1.15.1-r1

GHSA-x744-4wpc-v9h2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UC33552 Security fix for CVE-2026-4659 applied in: spire-server-fips 1.14.5-r1

Security vulnerability affects the spire-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZX16649 Security fix for CVE-2026-49835 applied in: cosign 3.1.1-r1, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r0, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

CVE-2026-49835 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OE12981 Security fix for CVE-2026-49834 applied in: cosign 3.1.1-r2, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r1, kyverno 1.17.2-r2, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

CVE-2026-49834 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MR47110 Security fix for GHSA-9c54-x2g4-v92j applied in: cosign 3.1.2-r1, spire-server-fips 1.15.1-r1

GHSA-9c54-x2g4-v92j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UK76839 Security fix for GHSA-47q9-m4ww-924m applied in: cosign 3.1.2-r1, spire-server-fips 1.15.1-r1

GHSA-47q9-m4ww-924m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WB69722 Security fix for CVE-2026-39395 applied in: kyverno 1.15.3-r3, kyverno 1.16.4-r3, kyverno 1.17.2-r2, kyverno 1.18.2-r0, spire-server 1.14.7-r0

CVE-2026-39395 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...