CLEANSTART-2026-CB54577 Security fixes in boring-registry 0.19.0-r1

Package boring-registry version 0.19.0-r1 fixes 1 vulnerabilities: CVE-2026-71556...

CLEANSTART-2026-SY77391 Security fixes in boring-registry 0.19.0-r3

Package boring-registry version 0.19.0-r3 fixes 1 vulnerabilities: CVE-2026-71557...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: spire-server, kubescape, gitsign, falcoctl-fips, boring-registry, cosign-fips, mc, tekton-chains, falcoctl, minio, vexctl, spire-server-fips, external-secrets-fips...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: spire-server, mc-fips, minio-fips, falcoctl-fips, boring-registry, mc, boring-registry-fips, falcoctl, minio, spire-server-fips, external-secrets-fips...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: bank-vaults, beats, jitsucom-bulker, kyverno-notation-aws-fips, beats-fips, gitlab-cng, docker-compose-fips, rancher-security-scan, zitadel, pluto-fips, neuvector-sigstore-interface-fips, gitlab-cng-fips, tkn-fips, grafana, kyverno, boring-registry-fips, ratify-fips,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: spire-server, boring-registry, kubescape, tekton-chains, falcoctl, gitsign, minio, mc, vexctl...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: spire-server, boring-registry, falcoctl, minio, mc...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: spire-server, zarf, goreleaser, step, druid, tekton-chains, argo-workflows, flyte, cosign, rekor, wal-g, nuclei, prometheus-operator, rclone, airflow, rook, policy-controller, up, ksops, sops, flux, bank-vaults, tempo, hugo, buildkitd, terragrunt, py3-cassandra-medus...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: spire-server, goreleaser, apache-exporter, gptscript, dex, cert-manager-istio-csr, eksctl, crossplane-provider-aws-cloudwatchlogs, hubble, kapp-controller, sftpgo-plugin-pubsub, terraform-docs, fluxcd-kustomize-mutating-webhook, aws-flb-cloudwatch, kuberay-operator,...

CLEANSTART-2026-VU50374 Security fixes in boring-registry-fips 0.15.5-r1

Package boring-registry-fips version 0.15.5-r1 fixes 2 vulnerabilities: CVE-2025-30204, ghsa-mh63-6h87-95cp...

CLEANSTART-2026-OD61763 Security fixes in boring-registry-fips 0.15.5-r2

Package boring-registry-fips version 0.15.5-r2 fixes 2 vulnerabilities: CVE-2025-30204, ghsa-mh63-6h87-95cp...

CLEANSTART-2026-ZI30101 Security fixes in boring-registry 0.16.6-r0

Package boring-registry version 0.16.6-r0 fixes 1 vulnerabilities: ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-LG82948 Security fixes in boring-registry 0.17.0-r0

Package boring-registry version 0.17.0-r0 fixes 6 vulnerabilities: CVE-2026-33186, CVE-2026-34986, CVE-2026-29181, CVE-2026-39883, CVE-2026-1229...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kong-ingress-controller-fips, trufflehog-fips, k8sgateway, kyverno-notation-aws-fips, cloud-provider-aws, kyverno-notation-aws, kube-metrics-adapter, crossplane-provider-aws-s3, kgateway-fips, crossplane-provider-aws-memorydb-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, docker-cli-buildx-fips, flux-image-automation-controller, trufflehog-fips, crossplane-provider-aws-route53-fips, kyverno-notation-aws-fips, kyverno-notation-aws, trivy-operator-fips, crossplane-provider-aws-cognitoidentity-fips,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: bank-vaults, beats, jitsucom-bulker, kyverno-notation-aws-fips, beats-fips, gitlab-cng, docker-compose-fips, rancher-security-scan, zitadel, pluto-fips, neuvector-sigstore-interface-fips, gitlab-cng-fips, tkn-fips, grafana, kyverno, boring-registry-fips, ratify-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth, gptscript, supercronic, hubble, kuberay-operator, go-md2man, cluster-api-aws-controller, metrics-server, rancher-helm, karma, helm-set-status, nginx-prometheus-exporter, flux-image-reflector-controller, kine, nri-apache,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: gptscript, supercronic, docker-cli-buildx, timoni, go-md2man, kubescape-operator, metrics-server, x509-certificate-exporter, rancher-helm, speedtest-go, container-object-storage-interface, helm-set-status, fscrypt, sriov-network-device-plugin, openbao-k8s, xeol,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: fq, nsc, oauth2-proxy, apisix-ingress-controller, terraform-docs, flyte, docker-cli-buildx, timescaledb-parallel-copy, nerdctl, http-echo, local-path-provisioner, timoni, jitsucom-bulker, conjur-cli, go-md2man, kubescape-operator, metrics-server,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: fq, nsc, oauth2-proxy, apisix-ingress-controller, terraform-docs, flyte, docker-cli-buildx, timescaledb-parallel-copy, nerdctl, http-echo, local-path-provisioner, timoni, jitsucom-bulker, conjur-cli, go-md2man, kubescape-operator, metrics-server,...