CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: tempo-fips, tigera-operator, qemu-guesthelper, falco-no-driver, k8s-device-plugin, containerd, consul-k8s-fips, cosign-fips, commercial-gitlab-workhorse-ee, kyverno, ingress-nginx-controller-fips, external-dns, commercial-chainloop-cli, google-osconfig-agent,...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, helm-set-status, manifest-tool, tigera-operator, helm-push, kube-arangodb, xeol, helm-mapkubeapis, maru, opentofu, rancher-helm, k9s, cluster-api-helm-controller, kyverno-notation-aws, gitness, kargo, flux-helm-controller, k8sgpt...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, helm-set-status, manifest-tool, tigera-operator, helm-push, kube-arangodb, xeol, helm-mapkubeapis, maru, opentofu, rancher-helm, k9s, cluster-api-helm-controller, kyverno-notation-aws, gitness, kargo, flux-helm-controller, k8sgpt...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: xeol, zarf, neuvector-scanner, eksctl, newrelic-infrastructure-agent, docker-cli-buildx, trivy-operator, helm-set-status, syft, wolfictl, kubescape-operator, rancher-agent, helm-mapkubeapis, zot, steampipe, k9s, cluster-api-helm-controller, kubescape,...

CLEANSTART-2026-AA09584 Security fix for GHSA-hr2v-4r36-88hr applied in: cert-manager-cmctl-fips 2.4.0-r3, chartmuseum-fips 0.16.5-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, kubevela 1.10.8-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, tigera-operator 1.41.1-r0

GHSA-hr2v-4r36-88hr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZM97494 Security fix for CVE-2026-46680 applied in: helm-operator 1.42.2-r0, k8sgpt 0.4.33-r0, kubevela 1.10.8-r0, neuvector-controller-fips 5.5.3-r0, newrelic-infrastructure-agent 1.73.1-r1, rancher-agent 2.12.11-r1, rancher-agent 2.13.7-r1, rancher-agent 2.14.3-r0, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.42.0-r0

CVE-2026-46680 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GA19307 Security fix for GHSA-fqw6-gf59-qr4w applied in: helm-operator 1.42.2-r0, k8sgpt 0.4.33-r0, kubevela 1.10.8-r0, newrelic-infrastructure-agent 1.73.1-r1, tigera-operator 1.42.0-r0

GHSA-fqw6-gf59-qr4w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TR04653 Security fix for CVE-2026-53488 applied in: helm 3.21.1-r1, helm-operator 1.42.2-r2, neuvector-controller-fips 5.5.3-r0, rancher-agent 2.12.11-r1, rancher-agent 2.13.7-r1, rancher-agent 2.14.3-r0, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.42.1-r0

CVE-2026-53488 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RZ55639 Security fix for GHSA-xhf5-7wjv-pqxp applied in: helm 3.21.1-r1, helm-operator 1.42.2-r2, tigera-operator 1.42.1-r0

GHSA-xhf5-7wjv-pqxp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TM34060 Security fix for GHSA-xrwg-mqj6-6m22 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IG75377 Security fix for GHSA-m2v6-2jmh-4c68 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZU56180 Security fix for GHSA-h7pq-86h8-rp5x applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NI49374 Security fix for GHSA-fcrp-7gc2-93g7 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JF19024 Security fix for GHSA-cxpq-8v7q-cg56 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZY58428 Security fix for GHSA-8fv2-88gg-hm7q applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BF33311 Security fix for GHSA-22xc-xg2r-9j7v applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UK63085 Security fix for GHSA-wcrf-9vrr-854f applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XZ22302 Security fix for CVE-2026-53719 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4, tigera-operator-fips 1.38.16-r2

CVE-2026-53719 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MY21105 Security fix for CVE-2026-22771 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4

CVE-2026-22771 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CD63596 Security fix for CVE-2026-53717 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4, tigera-operator-fips 1.38.16-r2

CVE-2026-53717 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...