GO-2026-5763 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, policy-controller, crossplane, tflint, falcoctl, skaffold, docker, gh, flux-source-controller, sigstore-scaffolding, ko, buildkitd, kyverno, kyverno-notation-aws, kubescape, zot, goreleaser, cosign, vexctl, tkn, zarf, aactl, teleport,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, policy-controller, crossplane, tflint, falcoctl, skaffold, docker, gh, flux-source-controller, rekor, ko, buildkitd, kyverno, sigstore-scaffolding, kyverno-notation-aws, kubescape, zot, goreleaser, cosign, vexctl, tkn, zarf, aactl, teleport,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane-provider-azure-sql, glab, policy-controller, crossplane-provider-azure-managedidentity, opentelemetry-collector-contrib, crossplane-provider-azure-storage, pulumi-kubernetes-operator, ksops, nuclei, kargo, falcoctl, fulcio,...

CLEANSTART-2026-WO12990 Security fixes in spire-server 1.13.5-r0

Package spire-server version 1.13.5-r0 fixes 5 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986, CVE-2026-39984, CVE-2025-15558...

CLEANSTART-2026-CH14940 Security fixes in spire-server 1.14.5-r0

Package spire-server version 1.14.5-r0 fixes 3 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986...

CLEANSTART-2026-AA71310 Security fixes in spire-server-fips 1.14.5-r0

Package spire-server-fips version 1.14.5-r0 fixes 3 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986...

CLEANSTART-2026-OG55473 Security fixes in spire-server 1.14.1-r4

Package spire-server version 1.14.1-r4 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-BF90643 Security fixes in spire-server 1.14.1-r2

Package spire-server version 1.14.1-r2 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-JS81714 Security fixes in spire-server 1.13.5-r1

Package spire-server version 1.13.5-r1 fixes 28 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, kaf, nerdctl, cert-manager, omnictl-multiarch, spire-server, kots, terraform, prometheus-mongodb-exporter, kine, telegraf, prometheus, snyk-cli, backup-restore-operator, elastic-agent-fips, loki, prometheus-operator, cilium, reports-server,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: aactl, kaf, k3s, kots, loki, minio, nerdctl, spire-server, telegraf, kine, prometheus-operator, zot, k3d, flux, snyk-cli, kyverno, containerd...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.14: spire1.14-1.14.7-0.2.hum1 aarch64, x8664 spire1.14-agent-1.14.7-0.2.hum1 aarch64, x8664 spire1.14-oidc-discovery-provider-1.14.7-0.2.hum1 aarch64, x8664 spire1.14-server-1.14.7-0.2.hum...

CLEANSTART-2026-IM39799 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-41889, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-4659, CVE-2026-46595, CVE-2026-46597, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.13.3-r0, 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.5-r0, 1.14.5-r1

Multiple security vulnerabilities affect the spire-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FH24210 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-26958, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-pmwq-pjrm-6p5r, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.1-r3, 1.14.1-r4, 1.14.5-r0, 1.14.5-r1

Multiple security vulnerabilities affect the spire-server package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX52017 Security fixes for CVE-2025-15558, CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-26958, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39984, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.13.5-r0, 1.13.5-r1, 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.1-r3, 1.14.1-r4

Multiple security vulnerabilities affect the spire-server package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, neuvector-sigstore-interface-fips, gitsign, trivy-operator, kubescape-server, kyverno-notation-aws, falcoctl-fips, tbot, tflint, kubescape, crossplane, docker-fips, teleport-operator-fips, image-factory, ratify-fips, zarf, trivy,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: policy-controller, tekton-chains, ko, ko-fips, spire-server, neuvector-sigstore-interface-fips, gitsign, trivy-operator, kubescape-server, kyverno-notation-aws, falcoctl-fips, tbot, tflint, kubescape, chainctl-fips, crossplane, docker-fips, ratify-fips, zarf,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: calico-fips, kaf, frankenphp-8.5, kube-state-metrics, omnictl-multiarch, spire-server, upwind-agent, docker-machine-driver-harvester, skaffold-fips, trivy-operator, argo-cd-fips, minio-fips, terraform, kine, argo-workflows-fips, k9s-fips, tigera-operator,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, kubernetes-dashboard, chisel, gptscript, cilium, nuclei, kargo, fulcio, skaffold, gomplate, scorecard, vault-benchmark, buildkitd, melange, cilium-cli, step-issuer, atlantis, guac, age, flux, splunk-otel-collector,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: trivy, spire-server, nerdctl, kubernetes-dashboard, chisel, kine, cilium, mattermost, argocd-image-updater, prometheus, fscrypt, kaf, k3s, skaffold, istio, prometheus-operator, knative-serving, flux-source-controller, kyverno, gitea, containerd, kubernetes, cilium-cl...