CLEANSTART-2026-OE12981 Security fix for CVE-2026-49834 applied in: cosign 3.1.1-r2, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r1, kyverno 1.17.2-r2, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

CVE-2026-49834 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6293 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, temporal-ui-server-fips, kube-metrics-adapter, listmonk, temporal, temporal-fips, falcosidekick-ui-fips, kube-metrics-adapter-fips, falcosidekick-ui...

CVE-2026-55677 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, temporal-ui-server-fips, kube-metrics-adapter, listmonk, temporal, temporal-fips, falcosidekick-ui-fips, kube-metrics-adapter-fips, falcosidekick-ui...

CLEANSTART-2026-LZ81863 Security fixes for CVE-2025-29923, CVE-2026-34040, CVE-2026-39822, CVE-2026-49834, CVE-2026-49835, CVE-2026-50151 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the harbor-trivy-adapter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: snyk-cli, temporal-ui-server, temporal-ui-server-fips, gotenberg, kube-metrics-adapter, temporal, fq, temporal-fips, kube-metrics-adapter-fips...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, go-licenses, kafkaexporter, blob-csi, kube-rbac-proxy, harbor-registry-fips, dex-k8s-authenticator, ip-masq-agent, aws-iam-authenticator, kubebuilder, prometheus-statsd-exporter-fips, terraform-provider-kubernetes, spqr,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, go-licenses, kafkaexporter, blob-csi, kube-rbac-proxy, harbor-registry-fips, dex-k8s-authenticator, ip-masq-agent, aws-iam-authenticator, kubebuilder, prometheus-statsd-exporter-fips, terraform-provider-kubernetes, spqr,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, go-licenses, kafkaexporter, blob-csi, kube-rbac-proxy, harbor-registry-fips, dex-k8s-authenticator, ip-masq-agent, aws-iam-authenticator, kubebuilder, prometheus-statsd-exporter-fips, terraform-provider-kubernetes, spqr,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, go-licenses, kafkaexporter, blob-csi, kube-rbac-proxy, harbor-registry-fips, dex-k8s-authenticator, ip-masq-agent, aws-iam-authenticator, kubebuilder, prometheus-statsd-exporter-fips, terraform-provider-kubernetes, spqr,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, go-licenses, kafkaexporter, blob-csi, kube-rbac-proxy, harbor-registry-fips, dex-k8s-authenticator, ip-masq-agent, aws-iam-authenticator, kubebuilder, prometheus-statsd-exporter-fips, terraform-provider-kubernetes, spqr,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, go-licenses, kafkaexporter, blob-csi, kube-rbac-proxy, harbor-registry-fips, dex-k8s-authenticator, ip-masq-agent, aws-iam-authenticator, kubebuilder, prometheus-statsd-exporter-fips, terraform-provider-kubernetes, spqr,...

GHSA-8XFX-RJ4P-23JM vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, cert-manager-cmctl-fips, kube-rbac-proxy-fips, go-licenses, kube-logging-operator, kafkaexporter, kube-rbac-proxy, harbor-registry-fips, dex-k8s-authenticator, flux-helm-controller, ip-masq-agent, kubebuilder, prometheus-statsd-exporter-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, buildkitd, spark-operator, src, kubeflow-fips, kubeflow, k3d, volume-modifier-for-k8s-fips, aws-efs-csi-driver-fips, dynamic-localpv-provisioner-fips, slsa-verifier, bank-vaults-fips, kubernetes-csi-livenessprobe, aactl, dgraph,...