GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: spire-server-fips, neuvector-sigstore-interface, ratify, kyverno, zarf-fips, kubescape-server, crossplane-fips, falcoctl, tekton-chains-fips, falcoctl-fips, tflint-fips, gitsign, tflint, chainctl-fips, tekton-chains, policy-controller, goreleaser, trivy-operator-fips...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: spire-server-fips, neuvector-sigstore-interface, ratify, kyverno, zarf-fips, kubescape-server, crossplane-fips, falcoctl, tekton-chains-fips, falcoctl-fips, tflint-fips, gitsign, tflint, chainctl-fips, tekton-chains, policy-controller, goreleaser, trivy-operator-fips...

GHSA-PHWJ-RPRQ-35PP vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby4.0-rails, gitlab-rails-ce, pact-broker-docker-fips, pact-broker-docker, ruby3.2-rails, ruby3.4-rails, kube-logging-operator, logstash-fips, logstash...

GHSA-WFPW-MMFH-QQ69 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby4.0-rails, gitlab-rails-ce, pact-broker-docker-fips, pact-broker-docker, ruby3.2-rails, ruby3.4-rails, kube-logging-operator, logstash-fips, logstash...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, docker-cli-buildx-fips, envoy-gateway, kargo, kube-arangodb, zarf-fips, fuse-overlayfs-snapshotter, crossplane-fips, spegel-fips, ctop, kubevela, kaniko, spegel, beats-fips, gatekeeper, tigera-operator, helm-push,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, docker-cli-buildx-fips, envoy-gateway, kargo, kube-arangodb, zarf-fips, fuse-overlayfs-snapshotter, crossplane-fips, spegel-fips, ctop, kubevela, kaniko, spegel, beats-fips, gatekeeper, tigera-operator, helm-push,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, docker-cli-buildx-fips, envoy-gateway, kargo, kube-arangodb, zarf-fips, fuse-overlayfs-snapshotter, crossplane-fips, spegel-fips, ctop, kubevela, kaniko, spegel, gatekeeper, tigera-operator, helm-push,...

CLEANSTART-2026-YB44027 Moby is an open-source project created by Docker for software containerization

Multiple security vulnerabilities affect the docker-fips package. Moby is an open-source project created by Docker for software containerization. See references for individual vulnerability details...

CLEANSTART-2026-SB85645 Moby is an open-source project created by Docker for software containerization

Multiple security vulnerabilities affect the docker-fips package. Moby is an open-source project created by Docker for software containerization. See references for individual vulnerability details...

CLEANSTART-2026-OS18490 Moby is an open-source project created by Docker for software containerization

Multiple security vulnerabilities affect the docker-fips package. Moby is an open-source project created by Docker for software containerization. See references for individual vulnerability details...

CLEANSTART-2026-XL45869 Moby is an open-source project created by Docker for software containerization

Multiple security vulnerabilities affect the docker-fips package. Moby is an open-source project created by Docker for software containerization. See references for individual vulnerability details...

CLEANSTART-2026-BN11148 Moby is an open-source project created by Docker for software containerization

Multiple security vulnerabilities affect the docker-fips package. Moby is an open-source project created by Docker for software containerization. See references for individual vulnerability details...

CLEANSTART-2026-JD48541 Moby is an open-source project created by Docker for software containerization

Multiple security vulnerabilities affect the docker-fips package. Moby is an open-source project created by Docker for software containerization. See references for individual vulnerability details...

CLEANSTART-2026-HL71566 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the docker-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...