CLEANSTART-2026-XC19453 Security fix for GHSA-78h2-9frx-2jm8 applied in: bank-vaults 1.32.1-r1, opentofu-fips 1.10.9-r4, openbao 2.5.4-r1, velero 1.16.2-r5, temporal-server-fips 1.31.1-r1, opentofu-fips 1.11.5-r3, consul 1.20.6-r0, thanos 0.41.0-r0, fulcio 1.8.7-r2

GHSA-78h2-9frx-2jm8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OJ05849 Security fix for GHSA-259r-337f-4rfw applied in: loki 3.7.1-r2, keda 2.20.2-r0, knative-serving 1.21.3-r0, velero 1.16.2-r15, velero 1.16.2-r8, prometheus 3.5.3-r12, prometheus 3.5.3-r8, temporal-server 1.30.6-r1, temporal-server 1.30.6-r2, temporal-server 1.30.8-r1, temporal-server-fips 1.31.4-r1, mongodb 8.1.3-r2, weaviate-fips 1.36.23-r2, kubernetes-event-exporter 1.4-r0, rancher-fleet-agent 0.13.16-r1, thanos 0.40.1-r3, thanos 0.41.0-r2, prometheus 3.5.3-r9, thanos 0.39.2-r4, cadvisor 0.55.1-r3, step-issuer 0.10.2-r3

GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZM96262 Security fix for GHSA-9h8m-3fm2-qjrq applied in: kube-state-metrics 2.18.0-r0, bank-vaults 1.32.1-r1, grafana 12.3.4-r0, minio 0.20250907.161309-r0, velero 1.16.2-r4, thanos 0.41.0-r0, fulcio 1.8.7-r2, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3

GHSA-9h8m-3fm2-qjrq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RD24544 Security fix for GHSA-xmrv-pmrh-hhx2 applied in: bank-vaults 1.32.1-r1, grafana 13.0.0-r0, rclone 1.72.1-r4, velero 1.16.2-r4, velero 1.16.2-r5, opentofu 1.12.7-r1, velero-plugin-for-aws 1.11.1-r3, rqlite 9.4.5-r5

GHSA-xmrv-pmrh-hhx2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XD74685 Security fix for GHSA-5cgq-3rg8-m6cv applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, temporal-server-fips 1.31.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3

GHSA-5cgq-3rg8-m6cv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RA98343 Security fix for GHSA-f5wc-c3c7-36mc applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, step-ca 0.30.2-r2, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3

GHSA-f5wc-c3c7-36mc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VT31314 Security fix for GHSA-vgwf-h737-ff37 applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, step-ca 0.30.2-r2, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3

GHSA-vgwf-h737-ff37 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UK91932 Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes

CVE-2026-32637 affects multiple packages. Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. See references for individual vulnerability details...

CLEANSTART-2026-OH06424 Security fix for GHSA-w67g-5rqw-f597 applied in: etcd 3.5.29-r0, prometheus 3.5.3-r11, prometheus 3.5.3-r12, velero 1.16.2-r15, amazon-cloudwatch-agent 1.300073.0-r0, etcd 3.5.33-r1, etcd 3.5.33-r3

GHSA-w67g-5rqw-f597 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KJ42355 Security fix for GHSA-pc3f-x583-g7j2 applied in: rabbitmq-cluster-operator 2.19.2-r1, velero 1.16.2-r4, argo-cd-fips 3.3.7-r0, dynatrace-operator 1.7.3-r1

GHSA-pc3f-x583-g7j2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AN25242 golang-jwt is a Go implementation of JSON Web Tokens

Security vulnerability affects the velero package. golang-jwt is a Go implementation of JSON Web Tokens...

CLEANSTART-2026-NU72351 Security fix for GHSA-mh63-6h87-95cp applied in: velero 1.15.2-r1

Security vulnerability affects the velero package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2020-3996 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-alicloud-fips, velero-plugin-for-alicloud...

PT-2026-105640

These are all security issues fixed in the velero-1.18.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11931-1 velero-1.18.4-1.1 on GA media

These are all security issues fixed in the velero-1.18.4-1.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-DK18368 Security fix for GHSA-m6hq-p25p-ffr2 applied in: argo-cd-fips 2.13.9-r4, cert-manager-cmctl 2.3.0-r0, helm-fips 3.17-4-r1, helm-fips 3.19.0-r1, helm-fips 3.19.0-r2, k8sgpt 0.4.26-r0, k8ssandra-client-fips 0.7.0-r2, k8ssandra-client-fips 0.7.0-r4, kaniko 1.24.0-r0, kaniko-fips 1.24.0-r0, kubevela 1.10.4-r0, kubevela 1.10.5-r0, skaffold 2.16.1-r1, trivy-fips 0.67.2-r0, velero 1.17.0-r0

GHSA-m6hq-p25p-ffr2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OT80419 Security fix for CVE-2025-46394 applied in: velero 1.17.0-r0

Security vulnerability affects the velero package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SG37837 Security fix for CVE-2025-58251 applied in: velero 1.17.0-r0

Security vulnerability affects the velero package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BL39190 Security fix for GHSA-w67g-5rqw-f597 applied in: vault 1.19.5-r3, vault 1.20.4-r9, velero 1.15.2-r8

GHSA-w67g-5rqw-f597 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZM91804 Security fix for CVE-2026-32637 applied in: velero-plugin-for-aws 1.11.1-r9, velero-plugin-for-aws 1.13.2-r6, velero-plugin-for-aws 1.14.2-r1

CVE-2026-32637 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...