CLEANSTART-2026-WN23323 Security fix for GHSA-xhf5-7wjv-pqxp applied in: syft 1.43.0-r1, tigera-operator-fips 1.40.13-r1, kaniko 1.24.0-r2

GHSA-xhf5-7wjv-pqxp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VD26945 Security fix for GHSA-jpcc-p29g-p8mq applied in: syft 1.43.0-r1, tigera-operator-fips 1.40.13-r1, kaniko 1.24.0-r2

GHSA-jpcc-p29g-p8mq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VH60653 Security fix for GHSA-xf85-363p-868w applied in: consul-k8s-fips 1.8.14-r1, tigera-operator-fips 1.40.13-r1

GHSA-xf85-363p-868w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AW95345 Security fix for GHSA-vh4v-2xq2-g5cg applied in: rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.4-r2, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.12.17-r2, rancher-fleet-agent 0.13.13-r0, rancher-agent 2.11.15-r1, rancher-agent 2.12.11-r1, rancher-agent 2.12.11-r2, rancher-fleet-agent 0.14.8-r2, rancher-fleet-agent 0.14.8-r1, consul-k8s-fips 1.8.14-r1, tigera-operator-fips 1.40.13-r1

GHSA-vh4v-2xq2-g5cg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KV80768 Security fix for GHSA-8xwf-rjm4-xvhv applied in: consul-k8s-fips 1.8.14-r1, tigera-operator-fips 1.40.13-r1

GHSA-8xwf-rjm4-xvhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UQ67139 Security fix for GHSA-jxpm-75mh-9fp7 applied in: consul-k8s-fips 1.8.14-r1, tigera-operator-fips 1.40.13-r1

GHSA-jxpm-75mh-9fp7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HM36104 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-KI06386 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-CU84293 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-SS88453 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-OY08890 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-VN85659 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-XN53923 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-RD27421 Security fix for GHSA-hrxh-6v49-42gf applied in: tigera-operator 1.42.4-r0, grafana 13.1.0-r3, vault 2.0.2-r0, opentelemetry-collector-contrib 0.152.0-r1

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IQ41446 Security fix for GHSA-259r-337f-4rfw applied in: tigera-operator 1.42.4-r1, opentelemetry-collector-contrib 0.152.0-r2

GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: kube-conformance, commercial-chainloop-cli, nvidia-nsight-compute-13.3, karpenter, consul-k8s, commercial-spilo-fips, karpenter-fips, nvidia-nsight-compute-13.1, ingress-nginx-controller-fips, falco-no-driver, nvidia-nsight-compute-12.8, reports-server,...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: k8sgpt, kargo, cert-manager-cmctl, kube-arangodb, helm-push, helm-set-status, maru, opentofu, rancher-helm, kyverno-notation-aws, helm-mapkubeapis, flux-helm-controller, manifest-tool, k9s, xeol, cluster-api-helm-controller, gitness...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: k8sgpt, kargo, cert-manager-cmctl, kube-arangodb, helm-push, helm-set-status, maru, opentofu, rancher-helm, kyverno-notation-aws, helm-mapkubeapis, flux-helm-controller, manifest-tool, k9s, xeol, cluster-api-helm-controller, gitness...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: rancher-agent, skaffold, wolfictl, helm-set-status, rancher-helm, k3s, cluster-api-helm-controller, trivy-operator, dagger, kubescape, kargo, manifest-tool, kube-arangodb, neuvector-scanner, kubevela, xeol, grype, eksctl, headlamp, helm-mapkubeapis, docker-compose,...

CLEANSTART-2026-AA09584 Security fix for GHSA-hr2v-4r36-88hr applied in: cert-manager-cmctl-fips 2.4.0-r3, chartmuseum-fips 0.16.5-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, kubevela 1.10.8-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, tigera-operator 1.41.1-r0

GHSA-hr2v-4r36-88hr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...