CLEANSTART-2026-RC77081 Security fix for CVE-2026-26996 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, npm 11.10.0-r1, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-26996 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JJ50819 Security fix for CVE-2025-15558 applied in: argo-workflows 3.7.10-r4, argo-workflows 3.7.7-r0, argo-workflows 4.0.2-r0, argo-workflows-fips 3.6.19-r1, argo-workflows-fips 3.7.10-r2, argo-workflows-fips 4.0.2-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, crossplane 2.0.2-r1, dynatrace-operator 1.8.1-r3, flux-image-automation-controller-fips 4.0.1-r0, gptscript 0.6.0-r0, gptscript 0.7.1-r0, gptscript 0.8.5-r0, gptscript 0.9.8-r0, harbor 2.13.4-r1, harbor-fips 2.13.4-r0, harbor-fips 2.14.2-r1, harbor-scanner-trivy 0.35.1-r0, harbor-scanner-trivy-fips 0.35.1-r0, istio 1.27.1-r0, istio 1.28.4-r0, istio 1.28.5-r2, istio 1.28.7-r2, istio 1.29.0-r0, istio 1.29.1-r1, istio-fips 1.25.5-r4, istio-fips 1.27.8-r2, istio-fips 1.28.5-r2, istio-fips 1.29.1-r1, istio-pilot-discovery-fips 1.28.3-r1, kubescape 3.0.47-r1, kubevela 1.10.8-r0, kyverno-fips 1.13.6-r9, kyverno-fips 1.16.1-r3, kyverno-fips 1.16.3-r3, kyverno-fips 1.17.1-r2, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, minio-operator 7.0.1-r5, minio-operator-fips 5.0.18-r8, paranoia 0.2.1-r0, paranoia 0.3.1-r0, paranoia 0.4.0-r0, policy-controller 0.12.1-r1, rancher-agent 2.11.15-r1, spire-server 1.13.5-r0, syft 1.39.0-r2, tekton-chains 0.26.0-r3, tekton-pipelines 1.7.0-r0, tekton-pipelines 1.9.2-r0, tekton-pipelines-fips 1.10.2-r0, tekton-pipelines-fips 1.11.0-r0, tekton-pipelines-fips 1.7.0-r0, tekton-pipelines-fips 1.9.2-r0, timoni 0.25.2-r0, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn-fips 0.43.0-r4

CVE-2025-15558 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BE82466 Security fix for CVE-2026-32141 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-32141 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NS67921 Security fix for CVE-2025-69873 applied in: argo-workflows 3.6.19-r8, mongosh 2.5.10-r5, mongosh 2.6.0-r4, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2025-69873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HA54689 Security fix for CVE-2026-27904 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, npm 11.11.0-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-27904 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LT23543 Security fix for ghsa-23c5-xmqv-rm74 applied in: argo-workflows 3.7.17-r1, mongosh 2.5.10-r3, mongosh 2.6.0-r2, mongosh 2.7.0-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

ghsa-23c5-xmqv-rm74 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DH07747 Security fix for CVE-2026-33896 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, jitsucom-jitsu 2.11.0-r3, opensearch-dashboards-fips 2.19.5-r0

CVE-2026-33896 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PF59420 Security fix for CVE-2026-33895 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, jitsucom-jitsu 2.11.0-r3, opensearch-dashboards-fips 2.19.5-r0

CVE-2026-33895 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZI53736 Security fix for CVE-2026-33894 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, jitsucom-jitsu 2.11.0-r3, opensearch-dashboards-fips 2.19.5-r0

CVE-2026-33894 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AG97190 Security fix for CVE-2026-33891 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, jitsucom-jitsu 2.11.0-r3, opensearch-dashboards-fips 2.19.5-r0

CVE-2026-33891 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WD42763 Security fix for CVE-2026-2950 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, jitsucom-jitsu 2.11.0-r3, mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r1, mongosh 2.8.2-r2, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r0, renovate 43.123.6-r0, sqlpad 7.5.7-r1

CVE-2026-2950 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RV70220 Security fix for CVE-2026-3449 applied in: argo-workflows 3.6.19-r8, jitsucom-jitsu 2.10.0-r0, jitsucom-jitsu 2.11.0-r3, jitsucom-jitsu 2.14.0-r0, jitsucom-jitsu 2.9.0-r0, sqlpad 7.5.7-r3

CVE-2026-3449 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VC24094 Security fix for CVE-2026-33532 applied in: argo-workflows 3.6.19-r8, mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0

CVE-2026-33532 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VL17238 Security fix for CVE-2026-33815 applied in: argo-workflows 4.0.4-r1, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.27.3-r3, cloudnative-pg-fips 1.28.1-r3, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r1, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, keda 2.19.0-r3, keda-fips 2.18.3-r3, kube-bench 0.15.0-r0, openbao-fips 2.3.2-r6, openbao-fips 2.4.4-r6, step 0.29.0-r0, step 0.30.2-r1, step-cli 0.27.5-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, temporal 1.5.1-r0, temporal-server 1.29.6-r0, temporal-server 1.30.4-r0, temporal-server 1.31.0.153.3-r0, temporal-server-fips 1.29.6-r0, temporal-server-fips 1.31.0.153.1-r0

CVE-2026-33815 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QC14914 Security fix for CVE-2026-4867 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-4867 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OD19905 Security fix for CVE-2026-34043 applied in: argo-workflows 3.6.19-r8, argo-workflows 3.7.15-r3, opensearch-dashboards-fips 2.19.5-r0

CVE-2026-34043 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH75169 Security fix for CVE-2026-6322 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2

CVE-2026-6322 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UQ15244 Security fix for CVE-2026-6321 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2

CVE-2026-6321 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DB54672 Security fix for ghsa-5c6j-r48x-rmvq applied in: argo-workflows 3.6.19-r8, argo-workflows 3.7.15-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-5c6j-r48x-rmvq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KV71564 Security fix for ghsa-v39h-62p7-jpjc applied in: argo-workflows 3.7.17-r1, kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2

ghsa-v39h-62p7-jpjc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...