GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, kube-metrics-adapter, databricks-cli, eks-distro, cinder-csi-plugin-fips, cluster-api-gcp-controller, crossplane-provider-aws-cloudfront, gitaly, mcp-grafana-fips, tflint-fips, tofu-controller-fips, kubernetes-csi-external-provisioner-fips,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: consul-fips, prometheus, kube-arangodb-fips, omnictl-multiarch, opentofu, rancher-agent, terraform-fips, thanos-operator-fips, eksctl, redka, flux-notification-controller, kine, kubernetes-csi-node-driver-registrar-fips, mattermost, reports-server, consul, conftest,...

CLEANSTART-2026-OJ15484 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...