GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: snyk-cli, gotenberg, kube-metrics-adapter-fips, kube-metrics-adapter, temporal-ui-server, temporal-fips, fq, temporal-ui-server-fips, temporal...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: snyk-cli, gotenberg, kube-metrics-adapter-fips, kube-metrics-adapter, temporal-ui-server, temporal-fips, fq, temporal-ui-server-fips, temporal...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: tflint-fips, kyverno, kyverno-policy-reporter-plugins-kyverno-fips, ratify, crossplane, skaffold-fips, trivy-fips, spire-server-fips, tekton-chains, teleport-operator-fips, witness, gh, vexctl, policy-controller-fips, crossplane-fips, chainctl-fips, docker,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: tflint-fips, kyverno, kyverno-policy-reporter-plugins-kyverno-fips, ratify, crossplane, skaffold-fips, trivy-fips, spire-server-fips, tekton-chains, teleport-operator-fips, witness, gh, vexctl, policy-controller-fips, crossplane-fips, chainctl-fips, docker,...

GHSA-JVFF-X2QM-6286 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, librechat, opensearch-dashboards-fips...

GHSA-JG4P-7FHP-P32P vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard, opensearch-dashboards, opensearch-dashboards-fips...

CVE-2026-35213 vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard, opensearch-dashboards, opensearch-dashboards-fips...

CVE-2026-40293 vulnerabilities

Vulnerabilities for packages: commercial-grafana, grafana, openfga, openfga-fips, grafana-fips...

CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

CLEANSTART-2026-AN01004 filippo

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...

CLEANSTART-2026-YY57430 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the temporal-server-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CVE-2026-5588 PKIX draft CompositeVerifier accepts empty signature sequence as valid.

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all pkix modules, Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All pkix modules, Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All pkix modules. This vulnerability...

CLEANSTART-2026-ZU09124 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the terragrunt-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-FB07695 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Multiple security vulnerabilities affect the velero-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. See references for individual vulnerability...

CLEANSTART-2026-QO20135 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Multiple security vulnerabilities affect the minio-operator-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. See references for individual...

CLEANSTART-2026-YG63570 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the minio-operator-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: beats-fips, prometheus, agentbeat, cloud-sql-proxy, splunk-otel-collector, aws-otel-collector-fips, wavefront-collector-for-kubernetes, prometheus-pushgateway, mc, minio-object-browser-fips, prometheus-pushgateway-fips, tempo-fips, istio-fips, loki-fips,...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: beats-fips, prometheus, agentbeat, cloud-sql-proxy, splunk-otel-collector, aws-otel-collector-fips, wavefront-collector-for-kubernetes, prometheus-pushgateway, mc, minio-object-browser-fips, prometheus-pushgateway-fips, tempo-fips, istio-fips, loki-fips,...

GHSA-QJ83-CQ47-W5F8 vulnerabilities

Vulnerabilities for packages: kibana, langfuse-fips, kubeflow-centraldashboard, langfuse...

CLEANSTART-2026-XO66325 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the gitea-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...