GO-2025-4013 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, mongodb-kubernetes-operator-fips, oras-fips, yunikorn-web-fips, boring-registry, knative-operator-fips, azure-aad-pod-identity-mic, cloudbeat,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, mongodb-kubernetes-operator-fips, oras-fips, yunikorn-web-fips, boring-registry, knative-operator-fips, azure-aad-pod-identity-mic, cloudbeat,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: op-geth, terraform-provider-azapi-fips, hubble-ui-backend-fips, metallb, mongodb-kubernetes-operator-fips, oras-fips, yunikorn-web-fips, boring-registry, sigstore-scaffolding-fips, knative-operator-fips, azure-aad-pod-identity-mic,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: op-geth, actions-runner-controller, crossplane-provider-azure, terraform-provider-azapi-fips, tekton-chains, k3s, boring-registry, sigstore-scaffolding-fips, azure-aad-pod-identity-mic, falcoctl, distribution, harbor-registry, docker-fips, step-ca, step-ca-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, pulumi-language-java, boring-registry, sigstore-scaffolding-fips, azure-aad-pod-identity-mic, gcp-compute-persistent-disk-csi-driver-fips, distribution, docker-fips, kafkaexporter-fips, step-ca, kyverno-notation-aws, hugo-fips,...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, hubble-ui-backend-fips, metallb, pulumi-language-java, boring-registry, sigstore-scaffolding-fips, azure-aad-pod-identity-mic, gcp-compute-persistent-disk-csi-driver-fips, distribution, docker-fips, kafkaexporter-fips, step-ca,...

CLEANSTART-2026-MZ61768 Security fixes for CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 3.1.0-r0

Multiple security vulnerabilities affect the distribution-fips package. These issues are resolved in later releases. See references for individual vulnerability details...