GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-relay, azurefile-csi-fips, datadog-agent, kubescape-server-fips, traefik-fips, art, authentik, authentik-fips, argo-workflows-fips, tw, zarf, docker-fips, flux-image-automation-controller-fips, grafana-pyroscope-fips, dapr-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: azure-container-networking, chartmuseum-fips, crossplane-provider-aws-ecr, flux-source-controller, skopeo, crossplane-provider-aws-sqs-fips, grpc-health-probe-fips, ceph-csi-operator-fips, crossplane-provider-gcp, knative-operator-fips, seaweedfs-operator-fips,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: apm-server-fips, consul, redis-operator, timoni, runc, cilium-envoy, spire-server, gatekeeper, redis-operator-fips, apm-server, gitlab-rails-ce, hubble, prometheus-mongodb-exporter, gatekeeper-fips, agentbeat-fips, logstash, chaos-mesh-fips, scorecard, dask-gateway,...

CLEANSTART-2026-OJ15484 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...