GO-2025-3900 vulnerabilities

Vulnerabilities for packages: k9s-fips, grafana, beats-fips, docker-compose-fips, pluto-fips, kyverno, gitlab-cng, rancher-security-scan, mattermost-fips, kyverno-notation-aws-fips, neuvector-sigstore-interface-fips, grafana-fips, ratify-fips, zitadel, jitsucom-bulker, gitlab-cng-fips, beats,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: consul, mattermost, grafana, frankenphp-8.4, cloudbeat-fips, zot, fuse-overlayfs-snapshotter, beats-fips, vault-fips, datadog-agent, loki, frankenphp-8.3, mattermost-fips, k3s, frankenphp-8.5, rke2-runtime, cloudbeat, elastic-agent, datadog-agent-fips, grafana-fips,...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: node-problem-detector, cloud-sql-proxy-fips, grafana, opentelemetry-collector-k8s, prometheus-operator-fips, tempo, certificate-transparency-fips, tempo-fips, loki-fips, beats-fips, cloud-sql-proxy, nrdot-collector-k8s, aws-otel-collector-fips, cloudzero-agent-fips,...

CLEANSTART-2026-IE99306 Security fixes in elastic-beats-fips 9.0.8-r1

Package elastic-beats-fips version 9.0.8-r1 fixes 3 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47913...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, knative-kafka-broker, external-secrets-fips, cloud-provider-aws-fips, tempo, fleet-server, grafana-mimir, tempo-fips, gotrue, xeol-fips, crossplane-provider-aws-rds, go-sqlcmd, gitlab-rails-ce-fips, zot, amazon-cloudwatch-agent-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, tempo, fleet-server, grafana-mimir, pulumi-language-dotnet, onepassword-operator, tempo-fips, crossplane-provider-aws-rds, fuse-overlayfs-snapshotter, gitlab-rails-ce-fips, xeol-fips, gitlab-operator, kepler, knative-net-istio, calico...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, bom, cloudbeat-fips, argo-cd, beats-fips, fuse-overlayfs-snapshotter, gitlab-rails-ce-fips, chaos-mesh-fips, logstash, qemu-guesthelper, flux-notification-controller, calico, kubeflow-katib, gosu, vale, ingress-nginx-controller-fips,...

CLEANSTART-2026-OJ15484 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...