GO-2025-3900 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, grafana, mattermost-fips, tkn-fips, bank-vaults, grafana-fips, docker-compose-fips, istio-fips, k9s-fips, beats-fips, rancher-security-scan, kyverno, beats, neuvector-sigstore-interface-fips, pluto-fips, zitadel, ratify-fips, jitsucom-bulker,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: zot, rke2-runtime-fips, grafana, fuse-overlayfs-snapshotter, datadog-agent-fips, mattermost-fips, frankenphp-8.4, loki, frankenphp-8.2, grafana-fips, consul, k3s, mattermost, containerd, frankenphp-8.3, commercial-grafana, beats-fips, vault, elastic-agent,...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway, minio-fips, prometheus-pushgateway-fips, prometheus-operator-fips, cloudzero-agent, telegraf, ops-agent, grafana, ld-relay, tempo-fips, datadog-agent-fips, minio, loki, keda, mc, agentbeat-fips, aws-otel-collector-fips, loki-fips, grafana-fips...

CLEANSTART-2026-LD41827 Security fixes in elastic-beats-fips 9.2.0-r1

Package elastic-beats-fips version 9.2.0-r1 fixes 1 vulnerabilities: CVE-2025-47913...

CLEANSTART-2026-IK25880 Security fixes in elastic-beats-fips 9.1.8-r0

Package elastic-beats-fips version 9.1.8-r0 fixes 1 vulnerabilities: ghsa-32fw-gq77-f2f2...

CLEANSTART-2026-TB30686 Security fixes in elastic-beats-fips 8.19.3-r0

Package elastic-beats-fips version 8.19.3-r0 fixes 1 vulnerabilities: ghsa-x4rx-4gw3-53p4...

CLEANSTART-2026-BG86849 Security fixes in elastic-beats-fips 9.0.8-r2

Package elastic-beats-fips version 9.0.8-r2 fixes 1 vulnerabilities: ghsa-32fw-gq77-f2f2...

CLEANSTART-2026-IE99306 Security fixes in elastic-beats-fips 9.0.8-r1

Package elastic-beats-fips version 9.0.8-r1 fixes 3 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47913...

CLEANSTART-2026-TR11311 Security fixes in elastic-beats-fips 9.0.8-r0

Package elastic-beats-fips version 9.0.8-r0 fixes 1 vulnerabilities: CVE-2025-25011...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, kubernetes-csi-driver-hostpath, opentofu-fips, cephcsi-fips, cert-manager-istio-csr-fips, flux-kustomize-controller-fips, act, crossplane-provider-azure-solutions, cass-operator, step-issuer, crossplane-provider-aws-cloudfront-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, kubernetes-csi-driver-hostpath, opentofu-fips, cephcsi-fips, flux-kustomize-controller-fips, cass-operator, step-issuer, crossplane-provider-aws-cloudfront-fips, xeol-fips, oauth2-proxy-fips, snyk-cli, ollama-fips, azurefile-csi-fips,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, opentofu-fips, listmonk, flux-kustomize-controller-fips, azure-aad-pod-identity-mic, fuse-overlayfs-snapshotter, kubernetes-dashboard-api-fips, helm-operator, headlamp, aws-flb-kinesis-fips, keda, gatekeeper, consul, rancher-helm, k3s,...

CLEANSTART-2026-OJ15484 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...