CVE-2026-33816 vulnerabilities

Vulnerabilities for packages: spire-server, kine, envoy-gateway, kots, k3s...

GHSA-9JJ7-4M8R-RFCM vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, k3s, spire-server, envoy-gateway, commercial-grafana, commercial-expanso-edge, kots, kine, commercial-chainloop-backend...

CVE-2026-33816 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, k3s, spire-server, envoy-gateway, commercial-grafana, commercial-expanso-edge, kots, kine, commercial-chainloop-backend...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: goreleaser, spire-controller-manager, crossplane-provider-azure-storage, mesosphere-vsphere-csi, timoni, neuvector-scanner, oauth2-proxy, fscrypt, karpenter, kubernetes-csi-driver-hostpath, grafana-agent-operator, kubescape, memcached-exporter, kube-fluentd-operator,...

CLEANSTART-2026-ZD19143 Security fixes for CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24515, CVE-2026-25210, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.24.4-r0, 1.24.4-r1, 1.24.4-r2, 1.24.4-r3

Multiple security vulnerabilities affect the cloudnative-pg-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PV93827 Security fixes for CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24515, CVE-2026-25210, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.25.4-r0, 1.25.4-r1, 1.25.4-r2

Multiple security vulnerabilities affect the cloudnative-pg-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LI47669 Security fixes for CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-61727, CVE-2025-61729, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.26.2-r0, 1.26.3-r0, 1.26.3-r1

Multiple security vulnerabilities affect the cloudnative-pg-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TS54009 Security fixes for CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-61727, CVE-2025-61729, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.24.4-r0, 1.27.3-r0, 1.27.3-r1

Multiple security vulnerabilities affect the cloudnative-pg-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NC32267 Security fixes for CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-61727, CVE-2025-61729, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.24.4-r0, 1.28.1-r0, 1.28.1-r1

Multiple security vulnerabilities affect the cloudnative-pg-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GV85693 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-QI35149 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-SV79070 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FJ56296 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-UY81473 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-BS24435 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-BV91860 Within HostnameError

Security vulnerability affects the cloudnative-pg package. Within HostnameError...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, bento, k3s, trivy-operator-fips, step-ca, cilium-fips, kube-logging-logging-operator, nri-mssql, opentelemetry-collector-contrib, trust-manager, rancher-telemetry, argo-cd-fips, prometheus-postgres-exporter, fulcio, consul-k8s,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, timoni, gitea, go-licenses, kube-fluentd-operator, aws-application-networking-k8s, octo-sts, gptscript, cluster-api-helm-controller, hubble, whereabouts, amass, buildah, kargo, cortex, kserve-rest-proxy, jaeger-operator, q,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: terraform-provider-time-fips, k3s, pulumi-language-dotnet, step-ca, cass-operator-fips, kube-logging-logging-operator, opencost-fips, rootlesskit, trust-manager, crossplane-provider-aws-dynamodb, crossplane-provider-aws-sqs, argo-cd-fips, rancher-telemetry,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, timoni, go-licenses, kube-fluentd-operator, swagger, ini-file, paranoia, aws-application-networking-k8s, octo-sts, gptscript, amass, buildah, cortex, kserve-rest-proxy, jaeger-operator, q, lvm-driver, hivemind, nri-postgresql, elvis...