GO-2025-4013 vulnerabilities

Vulnerabilities for packages: oras, conftest-fips, helm-docs, k8ssandra-client-fips, custom-pod-autoscaler, promxy-fips, multus-cni, dynamic-localpv-provisioner, envconsul, mkcert, terraform-provider-random-fips, apm-server-fips, knative-eventing, prometheus-pushgateway,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: oras, conftest-fips, helm-docs, k8ssandra-client-fips, custom-pod-autoscaler, promxy-fips, multus-cni, dynamic-localpv-provisioner, envconsul, mkcert, terraform-provider-random-fips, apm-server-fips, knative-eventing, prometheus-pushgateway,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: oras, helm-docs, helm-operator-fips, k8ssandra-client-fips, nri-redis, docker-credential-acr-env-fips, cloud-provider-aws, promxy-fips, multus-cni, dynamic-localpv-provisioner, prometheus-beat-exporter-fips, containerd, envconsul, mkcert,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth, xeol, cortex-fips, grafana-alloy-fips, neuvector-fips, filebrowser, secrets-store-csi-driver-provider-azure, promxy-fips, bank-vaults, kargo, thanos-fips, goreleaser, kyverno-notation-aws-fips, hydra-fips, aactl, k8sgpt, cosign-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: oras, q, conftest-fips, helm-docs, helm-operator-fips, k8ssandra-client-fips, go-discover-fips, docker-credential-acr-env-fips, cloud-provider-aws, helm-operator, promxy-fips, dynamic-localpv-provisioner, containerd, mkcert, tailscale, aactl, eksctl,...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: q, conftest-fips, helm-operator-fips, k8ssandra-client-fips, go-discover-fips, cloud-provider-aws, helm-operator, promxy-fips, multus-cni, dynamic-localpv-provisioner, containerd, mkcert, tailscale, aactl, eksctl, crossplane-provider-aws-sqs, prometheus-pushgateway,...

CLEANSTART-2026-QF89978 Security fixes in distribution-fips 3.1.1-r1

Package distribution-fips version 3.1.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-86000

Package distribution-fips version 3.1.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CLEANSTART-2026-MZ61768 Security fixes for CVE-2026-39882, CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58 applied in versions: 3.1.0-r0

Multiple security vulnerabilities affect the distribution-fips package. These issues are resolved in later releases. See references for individual vulnerability details...