GO-2025-3900 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, rancher-security-scan, boring-registry-fips, gitlab-cng, pluto-fips, grafana, grafana-fips, docker-compose-fips, jitsucom-bulker, bank-vaults, neuvector-sigstore-interface-fips, mattermost-fips, kyverno, zitadel, beats, kyverno-notation-aws-fips,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: k3s, frankenphp-8.4, vault, consul, frankenphp-8.5, elastic-agent, grafana-fips, kine, loki, consul-fips, frankenphp-8.2, fuse-overlayfs-snapshotter, cloudbeat-fips, rke2-runtime, frankenphp-8.3, cloudbeat, mattermost, commercial-expanso-edge, mattermost-fips,...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: ld-relay, opentelemetry-collector, opentelemetry-collector-fips, splunk-otel-collector, karma-fips, cloudzero-agent-fips, tempo-fips, minio-fips, trillian-fips, jaeger-fips, google-cloud-otel-ops-collector, amazon-cloudwatch-agent-operator, ld-relay-fips, grafana-fip...

CLEANSTART-2026-IE99306 Security fixes in elastic-beats-fips 9.0.8-r1

Package elastic-beats-fips version 9.0.8-r1 fixes 3 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47913...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: openbao, ld-relay, seaweedfs-rocksdb, crossplane-provider-aws-rds-fips, flyte, newrelic-k8s-metrics-adapter-fips, aws-node-termination-handler-fips, db-operator, grafana-pyroscope-fips, crossplane-provider-aws-scheduler, spegel-fips, openbao-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: authservice, crossplane-provider-aws-rds-fips, swagger, sftpgo-plugin-kms, aws-node-termination-handler-fips, amazon-ecs-agent-fips, yunikorn-k8shim-fips, secrets-store-csi-driver-provider-aws, elastic-agent, spegel-fips, openbao-fips, k8s-metacollector,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, kubernetes-dns-node-cache-fips, spire-server, conftest, vault, external-dns, elastic-agent, headlamp, helm-diff, kine, argo-rollouts-fips, mc, fuse-overlayfs-snapshotter, cilium-cli, headlamp-fips, gosu, etcd,...

CLEANSTART-2026-OJ15484 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...