GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: velero, fluent-operator, cass-operator-fips-no-pvc-delete, aws-iam-authenticator-fips, amazon-eks-ami, kubernetes-csi-driver-nfs-fips, opentelemetry-ebpf-instrumentation-fips, secrets-store-csi-driver-provider-gcp, step-ca-fips, eck-operator-fips, traefik-fips, tbot,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter-fips, cass-operator-fips-no-pvc-delete, kubernetes-csi-driver-nfs-fips, helm-fips, secrets-store-csi-driver-provider-gcp, step-ca-fips, tofu-controller-fips, eck-operator-fips, traefik-fips, trino, kubernetes-dashboard-web, grafana-mimir,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, headlamp-fips, spire-server, tfsec, headlamp, newrelic-fluent-bit-output, rke2-runtime, google-osconfig-agent, reports-server, cerbos-fips, coredns-fips, kube-logging-logging-operator, kube-state-metrics, bom, eksctl, kubernetes-dashboard-api,...

CLEANSTART-2026-OJ15484 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...