CLEANSTART-2026-LZ81863 Security fixes for CVE-2025-29923, CVE-2026-34040, CVE-2026-39822, CVE-2026-49834, CVE-2026-49835, CVE-2026-50151 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the harbor-trivy-adapter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, snyk-cli, temporal-fips, kube-metrics-adapter, fq, temporal-ui-server-fips, gotenberg, temporal-ui-server, temporal...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: kapp, kubernetes-replicator, k6, mkcert, vgpu-util, chisel, docker-credential-acr-env, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, conftest, vault-secrets-webhook, kbld, smarter-device-manager, falco-exporter,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kapp, kubernetes-replicator, k6, mkcert, vgpu-util, chisel, docker-credential-acr-env, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, conftest, vault-secrets-webhook, kbld, smarter-device-manager, falco-exporter,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: kapp, kubernetes-replicator, k6, vgpu-util, chisel, docker-credential-acr-env, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, conftest, vault-secrets-webhook, kbld, smarter-device-manager, falco-exporter,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kapp, kubernetes-replicator, k6, mkcert, vgpu-util, chisel, docker-credential-acr-env, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, conftest, vault-secrets-webhook, kbld, falco-exporter, velero-plugin-for-microsoft-azure,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: kapp, kubernetes-replicator, k6, mkcert, vgpu-util, chisel, docker-credential-acr-env, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, conftest, vault-secrets-webhook, kbld, smarter-device-manager, falco-exporter,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: kapp, kubernetes-replicator, k6, mkcert, vgpu-util, chisel, docker-credential-acr-env, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, conftest, vault-secrets-webhook, kbld, falco-exporter, velero-plugin-for-microsoft-azure,...

GHSA-8XFX-RJ4P-23JM vulnerabilities

Vulnerabilities for packages: buf, pulumi-language-yaml, git-lfs, chezmoi, k6, mkcert, vgpu-util, gitness, docker-credential-acr-env, prometheus-redis-exporter, policy-controller-fips, conftest, external-secrets-fips, smarter-device-manager, metallb, whereabouts, azure-aad-pod-identity-mic, kiam,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, vault-csi-provider, dynamic-localpv-provisioner-fips, up, buildkitd, prometheus-stackdriver-exporter, conftest-fips, slsa-verifier, kubescape, dgraph, volume-modifier-for-k8s-fips, terraform-provider-sendgrid-fips, kube-oidc-proxy, src,...