GO-2025-4013 vulnerabilities

Vulnerabilities for packages: bazelisk, spire-controller-manager-fips, wazero-fips, prometheus-mongodb-exporter, yace-fips, envconsul-fips, velero-plugin-for-microsoft-azure, kiam, prometheus-statsd-exporter, vault-csi-provider-fips, mongodb-kubernetes-operator-fips, prometheus-adapter, dbmate,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: bazelisk, spire-controller-manager-fips, wazero-fips, prometheus-mongodb-exporter, yace-fips, envconsul-fips, velero-plugin-for-microsoft-azure, kiam, prometheus-statsd-exporter, vault-csi-provider-fips, mongodb-kubernetes-operator-fips, prometheus-adapter, dbmate,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: bazelisk, spire-controller-manager-fips, steampipe, agentbeat, prometheus-mongodb-exporter, wazero-fips, yace-fips, velero-plugin-for-microsoft-azure, kiam, flux-kustomize-controller, cortex-fips, vault-csi-provider-fips, mongodb-kubernetes-operator-fips,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, cilium-fips, git-sync, openfga, opentelemetry-collector-fips, flux-image-automation-controller-fips, opentelemetry-collector, kaniko, grafana-agent-operator, keda, openbao, kyverno-policy-reporter-ui-fips, velero-plugin-for-microsoft-azure...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, hugo-fips, velero-plugin-for-microsoft-azure, kiam, flux-kustomize-controller, cortex-fips, prometheus-statsd-exporter, actions-runner-controller-fips, eks-distro-fips, helm-operator, spire-server, prometheus-adapter, kiali-fips, dbmate,...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, hugo-fips, velero-plugin-for-microsoft-azure, kiam, flux-kustomize-controller, cortex-fips, prometheus-statsd-exporter, actions-runner-controller-fips, eks-distro-fips, rabbitmq-cluster-operator, helm-operator, spire-server,...

CLEANSTART-2026-MZ61768 Security fixes for CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 3.1.0-r0

Multiple security vulnerabilities affect the distribution-fips package. These issues are resolved in later releases. See references for individual vulnerability details...