CLEANSTART-2026-JX39152 Security fixes in spire-server 1.14.7-r0

Package spire-server version 1.14.7-r0 fixes 16 vulnerabilities: CVE-2026-49834, CVE-2026-24122, CVE-2026-39395, CVE-2026-41178, CVE-2026-41568...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kots, envoy-gateway, commercial-chainloop-backend, commercial-grafana, k3s, envoy-gateway-fips, spire-server, commercial-expanso-edge, kine...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: cosign-fips, minio, external-secrets-fips, spire-server-fips, gitsign, spire-server, mc, boring-registry, falcoctl, kubescape, tekton-chains, falcoctl-fips, vexctl...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: minio, external-secrets-fips, spire-server-fips, boring-registry-fips, spire-server, mc, boring-registry, falcoctl, minio-fips, mc-fips, falcoctl-fips...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, goreleaser, spire-server, aws-otel-collector-fips, osv-scanner, podman-fips, podman, gatekeeper, livekit-cli, buildah-fips, trivy, amazon-cloudwatch-agent-operator, consul-k8s-fips, trivy-operator-fips, zarf, skopeo, opentelemetry-operator, traefik,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: apko, goreleaser, spire-server, wolfictl, skaffold, neuvector-sigstore-interface, melange, ko, tkn, gitsign, tekton-chains, falcoctl-fips, policy-controller-fips, spire-server-fips, ko-fips, zot, policy-controller, vexctl, zarf, flux-source-controller, chainctl,...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kots, spire-server, envoy-gateway, kine, k3s...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: kots, spire-server, tfsec, zot, opa, snyk-cli, conftest, k8sgpt, zarf, kubescape, cosign, policy-controller...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: kots, trivy, spire-server, tfsec, kyverno-notation-aws, conftest, witness, cosign, policy-controller...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: cilium-cli, k3d, k8sgpt-operator, certificate-transparency, vcluster, sops, conftest, k8sgpt, smarter-device-manager, dagger, dbmate, terraform-docs, melange, kots, falcosidekick, grpc-health-probe, spire-server, terraform-provider-google, sigstore-scaffolding,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: buildkitd, gh, trivy-operator, falcoctl, kubescape, cosign, gitsign, flux-source-controller, spire-server, kyverno-notation-aws, sigstore-scaffolding, tekton-chains, vexctl, teleport, policy-controller, trivy, zot, ko, neuvector-sigstore-interface, tflint, docker, tk...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: spire-server, boring-registry, mc, minio, tekton-chains, falcoctl, vexctl, kubescape, gitsign...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: spire-server, boring-registry, mc, minio, falcoctl...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: buildkitd, pulumi, sops, nuclei, prometheus-operator, druid, k8sgpt, thanos, falcoctl, timestamp-authority, bank-vaults, kubescape, cosign, wal-g, hugo, flux-source-controller, spire-server, harbor-registry, fluent-bit-plugin-loki, chezmoi,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: rancher, opa-envoy, db-operator, kube-state-metrics, addon-resizer, hcloud, coredns, vcluster, volume-modifier-for-k8s, amazon-cloudwatch-agent-operator, chisel, delve, bank-vaults, kbld, sftpgo-plugin-geoipfilter, envconsul, grafana-operator, cluster-autoscaler,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: sops, kubescape, cosign, gitsign, kots, flux-source-controller, spire-server, fulcio, tekton-chains, vexctl, aactl, argo-workflows, slsa-verifier, cloudflared, flux-kustomize-controller, dex, terragrunt, tkn, oauth2-proxy, rekor...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: crossplane, cilium-cli, buildkitd, syft, conftest, dagger, ctop, kubescape, melange, spire-server, kargo, kaniko, trivy, aactl, cadvisor, buf, zot, ko, grype, docker-compose, up, tkn, wolfictl...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: crossplane, ratify, trivy-operator, falcoctl, kubescape, gitsign, spire-server, kyverno-notation-aws, kyverno, tekton-chains, teleport, policy-controller, aactl, slsa-verifier, ko, neuvector-sigstore-interface, tflint, tkn, goreleaser, zarf...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: flux-source-controller, aactl, spire-server, tkn, slsa-verifier, ko, tekton-chains, policy-controller, skaffold, apko, kubescape, cosign, melange...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cilium-cli, rancher, hcloud, scorecard, gptscript, kaf, nuclei, chisel, gitea, terraform-provider-azapi, caddy, pulumi-kubernetes-operator, flux-source-controller, crossplane-provider-azure-sql, steampipe, kargo, k9s, argo-events, teleport, nerdctl,...