CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: commercial-grafana, loki, kyverno, k8s-device-plugin, external-dns, flux, commercial-gitlab-rails-ee, zitadel, frankenphp-8.3, nemo, karpenter, commercial-spilo-fips, falco-no-driver, commercial-gitlab-workhorse-ee, consul-k8s, tempo-fips,...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: gitness, flux-helm-controller, cert-manager-cmctl, cluster-api-helm-controller, kargo, manifest-tool, maru, helm-set-status, k9s, opentofu, k8sgpt, kyverno-notation-aws, kube-arangodb, tigera-operator, helm-mapkubeapis, xeol, helm-push, rancher-helm...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: gitness, flux-helm-controller, cert-manager-cmctl, cluster-api-helm-controller, kargo, manifest-tool, maru, helm-set-status, k9s, opentofu, k8sgpt, kyverno-notation-aws, kube-arangodb, tigera-operator, helm-mapkubeapis, xeol, helm-push, rancher-helm...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: docker, skaffold, manifest-tool, k9s, kube-arangodb, kaniko, steampipe, rancher-helm, wolfictl, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, spegel, grype, kargo, k8sgpt, kubescape, helm-mapkubeapis, chartmuseum, docker-cli-buildx, zot, syft,...

CLEANSTART-2026-AA09584 Security fix for GHSA-hr2v-4r36-88hr applied in: cert-manager-cmctl-fips 2.4.0-r3, chartmuseum-fips 0.16.5-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, kubevela 1.10.8-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, tigera-operator 1.41.1-r0

GHSA-hr2v-4r36-88hr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZM97494 Security fix for CVE-2026-46680 applied in: helm-operator 1.42.2-r0, k8sgpt 0.4.33-r0, kubevela 1.10.8-r0, neuvector-controller-fips 5.5.3-r0, newrelic-infrastructure-agent 1.73.1-r1, rancher-agent 2.12.11-r1, rancher-agent 2.13.7-r1, rancher-agent 2.14.3-r0, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.42.0-r0

CVE-2026-46680 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GA19307 Security fix for GHSA-fqw6-gf59-qr4w applied in: helm-operator 1.42.2-r0, k8sgpt 0.4.33-r0, kubevela 1.10.8-r0, newrelic-infrastructure-agent 1.73.1-r1, tigera-operator 1.42.0-r0

GHSA-fqw6-gf59-qr4w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TR04653 Security fix for CVE-2026-53488 applied in: helm 3.21.1-r1, helm-operator 1.42.2-r2, neuvector-controller-fips 5.5.3-r0, rancher-agent 2.12.11-r1, rancher-agent 2.13.7-r1, rancher-agent 2.14.3-r0, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.42.1-r0

CVE-2026-53488 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RZ55639 Security fix for GHSA-xhf5-7wjv-pqxp applied in: helm 3.21.1-r1, helm-operator 1.42.2-r2, tigera-operator 1.42.1-r0

GHSA-xhf5-7wjv-pqxp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TM34060 Security fix for GHSA-xrwg-mqj6-6m22 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IG75377 Security fix for GHSA-m2v6-2jmh-4c68 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZU56180 Security fix for GHSA-h7pq-86h8-rp5x applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NI49374 Security fix for GHSA-fcrp-7gc2-93g7 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JF19024 Security fix for GHSA-cxpq-8v7q-cg56 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZY58428 Security fix for GHSA-8fv2-88gg-hm7q applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BF33311 Security fix for GHSA-22xc-xg2r-9j7v applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UK63085 Security fix for GHSA-wcrf-9vrr-854f applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XZ22302 Security fix for CVE-2026-53719 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4, tigera-operator-fips 1.38.16-r2

CVE-2026-53719 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MY21105 Security fix for CVE-2026-22771 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4

CVE-2026-22771 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XJ72729 Security fix for CVE-2026-53718 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4, tigera-operator-fips 1.38.16-r2

CVE-2026-53718 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...