CLEANSTART-2026-UX51431 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the velero-fips package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: cluster-api-fips, sbom-convert, vexctl, vault-secrets-operator, falco-no-driver, pvc-autoresizer, neuvector-dbgen-fips, go-md2man, cloud-provider-azure-fips, gptscript, tfsec, terraform-provider-kubernetes, kbld, configmap-reload-fips, harbor-scanner-trivy-fips,...

CLEANSTART-2026-CQ39898 Security fixes in velero-fips 1.18.2-r6

Package velero-fips version 1.18.2-r6 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-BD64085 Security fixes in velero-fips 1.13.2-r0

Package velero-fips version 1.13.2-r0 fixes 1 vulnerabilities: ghsa-m5vv-6r4h-3vj9...

CLEANSTART-2026-MZ11582 Security fixes in velero-fips 1.17.1-r1

Package velero-fips version 1.17.1-r1 fixes 9 vulnerabilities: CVE-2025-61730, CVE-2025-61726, CVE-2025-61728, CVE-2025-68121, CVE-2026-27142...

CLEANSTART-2026-YW64226 Security fixes in velero-fips 1.15.2-r0

Package velero-fips version 1.15.2-r0 fixes 1 vulnerabilities: ghsa-mh63-6h87-95cp...

CLEANSTART-2026-JG21544 Security fixes in velero-fips 1.18.0-r0

Package velero-fips version 1.18.0-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186...

CLEANSTART-2026-YB99033 Security fixes in velero-fips 1.17.2-r4

Package velero-fips version 1.17.2-r4 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-FP57093 Security fixes in velero-fips 1.17.2-r0

Package velero-fips version 1.17.2-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-68119...

CLEANSTART-2026-VP67440 Security fixes in velero-fips 1.18.0-r1

Package velero-fips version 1.18.0-r1 fixes 5 vulnerabilities: CVE-2026-32288, CVE-2026-33810, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-xmrv-pmrh-hhx2...

CLEANSTART-2026-CV18777 Security fixes in velero-fips 1.17.2-r5

Package velero-fips version 1.17.2-r5 fixes 6 vulnerabilities: CVE-2026-33810, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283...

CLEANSTART-2026-SD41440 Security fixes in velero-fips 1.18.0-r3

Package velero-fips version 1.18.0-r3 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-MR48582 Security fixes in velero-fips 1.18.0-r2

Package velero-fips version 1.18.0-r2 fixes 2 vulnerabilities: CVE-2026-35469, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-QY76332 Security fixes in velero-fips 1.16.2-r2

Package velero-fips version 1.16.2-r2 fixes 4 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, CVE-2025-61729, CVE-2025-61729...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: cilium-fips, caddy, perses, cluster-api-fips, crossplane-provider-azure-securityinsights, vault-secrets-operator, falco-no-driver, kargo, crossplane-provider-aws-sns-fips, cert-manager, goose, crossplane-provider-aws-kinesis-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: cilium-fips, caddy, perses, cluster-api-fips, crossplane-provider-azure-securityinsights, vault-secrets-operator, falco-no-driver, kargo, crossplane-provider-aws-sns-fips, cert-manager, goose, crossplane-provider-aws-kinesis-fips,...

CLEANSTART-2026-WL14185 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CLEANSTART-2026-VN02574 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CLEANSTART-2026-FB07695 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Multiple security vulnerabilities affect the velero-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. See references for individual vulnerability...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: cilium-fips, caddy, vexctl, vault-secrets-operator, falco-no-driver, kargo, cert-manager, chainloop-artifact-cas, tfsec, chainloop-control-plane, cloudflared-fips, bento-fips, keda-fips, envoy-gateway-fips, steampipe, sftpgo-plugin-kms, rekor-fips,...