CLEANSTART-2026-UY81473 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-BS24435 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-BV91860 Within HostnameError

Security vulnerability affects the cloudnative-pg package. Within HostnameError...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cilium-certgen, policy-controller, wait-for-port, influxd, gofumpt, gcp-compute-persistent-disk-csi-driver, loki, falco-exporter, falcoctl-fips, kyverno, configmap-reload, custom-pod-autoscaler-fips, longhorn-instance-manager, dex, k8sgateway, otel-cli,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: k6, kbld, oauth2-proxy, terraform-provider-tls, spire-server, envoy-gateway, terraform-provider-time, grpc-health-probe, rabbitmq-messaging-topology-operator, dgraph, go-licenses, volume-modifier-for-k8s, atlantis, memcached-exporter, velero-plugin-for-csi,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, crossplane-provider-aws-s3, kubernetes-csi-livenessprobe, kapp, flux-fips, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, gcp-compute-persistent-disk-csi-driver, loki, aws-s3-controller, falco-exporter...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: k6, kbld, oauth2-proxy, terraform-provider-tls, spire-server, envoy-gateway, terraform-provider-time, rabbitmq-messaging-topology-operator, maru, sbom-convert, dgraph, gosu, go-licenses, jitsucom-jitsu, gh, volume-modifier-for-k8s, memcached-exporter,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: k6, kbld, oauth2-proxy, terraform-provider-tls, spire-server, envoy-gateway, terraform-provider-time, rabbitmq-messaging-topology-operator, maru, sbom-convert, dgraph, gosu, go-licenses, jitsucom-jitsu, gh, volume-modifier-for-k8s, memcached-exporter,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, policy-controller, wait-for-port, kapp, flux-fips, xcaddy, gcp-compute-persistent-disk-csi-driver, falco-exporter, falcoctl-fips, kyverno, jsonnet-bundler, dex, gh, external-secrets-fips, emissary, incert, azure-service-operator,...