GO-2025-3900 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno, neuvector-sigstore-interface-fips, k9s-fips, tkn-fips, zitadel, istio-fips, grafana, beats, grafana-fips, boring-registry-fips, bank-vaults, pluto-fips, rancher-security-scan, jitsucom-bulker, ratify-fips, docker-compose-fips,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: rke2-runtime, kine, rke2-runtime-fips, mattermost, loki, datadog-agent-fips, containerd, grafana, beats, zot, grafana-fips, commercial-grafana, frankenphp-8.2, k3s, frankenphp-8.4, elastic-agent, vault, consul, frankenphp-8.3, frankenphp-8.5, commercial-expanso-edge,...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: minio-operator, prometheus-pushgateway-fips, cloudzero-agent-fips, istio, trillian, loki, splunk-otel-collector-fips, datadog-agent-fips, aws-otel-collector, prometheus-pushgateway, agentbeat, certificate-transparency-fips, istio-fips, aws-otel-collector-fips, tempo,...

CLEANSTART-2026-IK25880 Security fixes in elastic-beats-fips 9.1.8-r0

Package elastic-beats-fips version 9.1.8-r0 fixes 1 vulnerabilities: ghsa-32fw-gq77-f2f2...

CLEANSTART-2026-LD41827 Security fixes in elastic-beats-fips 9.2.0-r1

Package elastic-beats-fips version 9.2.0-r1 fixes 1 vulnerabilities: CVE-2025-47913...

CLEANSTART-2026-TB30686 Security fixes in elastic-beats-fips 8.19.3-r0

Package elastic-beats-fips version 8.19.3-r0 fixes 1 vulnerabilities: ghsa-x4rx-4gw3-53p4...

CLEANSTART-2026-BG86849 Security fixes in elastic-beats-fips 9.0.8-r2

Package elastic-beats-fips version 9.0.8-r2 fixes 1 vulnerabilities: ghsa-32fw-gq77-f2f2...

CLEANSTART-2026-IE99306 Security fixes in elastic-beats-fips 9.0.8-r1

Package elastic-beats-fips version 9.0.8-r1 fixes 3 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47913...

CLEANSTART-2026-TR11311 Security fixes in elastic-beats-fips 9.0.8-r0

Package elastic-beats-fips version 9.0.8-r0 fixes 1 vulnerabilities: CVE-2025-25011...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-wafv2-fips, dagdotdev, secrets-store-csi-driver-fips, kubescape-server, vcluster-fips, crossplane-provider-aws-directconnect-fips, kaniko, istio, argo-events, wolfictl, go-discover, cloud-provider-gcp-cloud-controller-manager-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: bento-fips, localstack, kubescape-server, secrets-store-csi-driver-fips, istio, argo-events, cloud-provider-gcp-cloud-controller-manager-fips, gitlab-rails-ce, longhorn-backing-image-manager, cilium-envoy-fips, kubernetes-csi-external-provisioner-fips, mc,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: helm-diff-fips, localstack, helm-operator, gitlab-rails-ce, cilium-envoy-fips, cilium-cli, external-dns-fips, gpu-operator-fips, mc, vitess, minio, runc, helm-set-status, thanos-operator-fips, headlamp, bom, kube-arangodb-fips, gitlab-rails-ce-fips, timoni, flux-fips...

CLEANSTART-2026-OJ15484 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...