GO-2025-4009 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: elvish, dex, percona-server-mongodb-operator-fips, opa, direnv, aws-flb-firehose-fips, dask-gateway, dockerize, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, cluster-proportional-autoscaler, tekton-pipelines, ytt-fips,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: actions-runner-controller-fips, kine, octo-sts, trufflehog-fips, eksctl, keda, nemo, tkn-fips, amazon-cloudwatch-agent, crossplane-provider-family-azure, falcosidekick-fips, thanos, minio, vexctl, timestamp-authority-fips, opentelemetry-operator,...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: octo-sts, dex, eksctl, opa, kserve, crossplane-provider-aws-kinesis, dockerize, crossplane-provider-family-azure, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, malcontent, multus-cni-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: octo-sts, dex, eksctl, kserve, crossplane-provider-aws-kinesis, dockerize, crossplane-provider-family-azure, kafkaexporter-fips, cloud-provider-aws, vexctl, kubernetes-dashboard, lazygit, prometheus-adapter, sqlexporter-fips, conftest, boring-registry,...

CLEANSTART-2026-QF89978 Security fixes in distribution-fips 3.1.1-r1

Package distribution-fips version 3.1.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-86000

Package distribution-fips version 3.1.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CLEANSTART-2026-MZ61768 Security fixes for CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 3.1.0-r0

Multiple security vulnerabilities affect the distribution-fips package. These issues are resolved in later releases. See references for individual vulnerability details...