GO-2025-4013 vulnerabilities

Vulnerabilities for packages: prometheus-process-exporter, gosu-fips, blob-csi-fips, vault, kapp, stampdalf, fulcio-fips, cloudbeat, harbor-fips, cloud-provider-gcp-cloud-controller-manager, conftest-fips, oras, container-object-storage-interface, rootlesskit, conjur-cli, prometheus-nats-exporter...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: prometheus-process-exporter, gosu-fips, blob-csi-fips, vault, kapp, stampdalf, fulcio-fips, cloudbeat, harbor-fips, cloud-provider-gcp-cloud-controller-manager, conftest-fips, oras, container-object-storage-interface, rootlesskit, conjur-cli, prometheus-nats-exporter...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, gosu-fips, helm-operator-fips, flux-notification-controller, yace, blob-csi-fips, nemo, blobfuse2, kapp, step-issuer, sftpgo-plugin-pubsub, fulcio-fips, harbor-fips, oras, opencost-fips, rootlesskit, prometheus-nats-exporter, kbld-fips,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: mongo-tools, opentelemetry-collector-contrib-fips, guac, influxd, flux-notification-controller, step-kms-plugin-fips, spire-server-fips, step-fips, vault, nemo, argo-cd-fips, kube-logging-logging-operator, aws-eks-pod-identity-agent, prometheus, fulcio-fips, gitness,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, kubeflow-pipelines, helm-operator-fips, memcached-exporter, flux-notification-controller, vault, kubeflow-fips, neuvector-sigstore-interface-fips, step-issuer, tailscale, sftpgo-plugin-pubsub, fulcio-fips, harbor-fips,...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, opentelemetry-collector-contrib-fips, kubeflow-pipelines, helm-operator-fips, memcached-exporter, flux-notification-controller, vault, kubeflow-fips, nemo, kapp, neuvector-sigstore-interface-fips, step-issuer, tailscale, sftpgo-plugin-pubsub,...

CLEANSTART-2026-QF89978 Security fixes in distribution-fips 3.1.1-r1

Package distribution-fips version 3.1.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CLEANSTART-2026-MZ61768 Security fixes for CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 3.1.0-r0

Multiple security vulnerabilities affect the distribution-fips package. These issues are resolved in later releases. See references for individual vulnerability details...