CVE-2025-23419 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, azure-service-operator-fips, cloud-sql-proxy, crossplane-provider-aws-ssm-fips, grafana-mimir, pluto, crossplane-provider-aws-cognitoidp-fips, grafana-alloy-fips, pulumi-language-yaml, crossplane-provider-aws-cloudwatchlogs,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, azure-service-operator-fips, cloud-sql-proxy, crossplane-provider-aws-ssm-fips, grafana-mimir, pluto, crossplane-provider-aws-cognitoidp-fips, grafana-alloy-fips, pulumi-language-yaml, crossplane-provider-aws-cloudwatchlogs,...

RUSTSEC-2026-0043 Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVPaes128ccm, EVPaes192ccm, and EVPaes256ccm. Customers of AWS servic...

Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVPaes128ccm, EVPaes192ccm, and EVPaes256ccm. Customers of AWS servic...

CVE-2026-24051 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, envoy-gateway, jobset-fips, argo-workflows, longhorn-manager, cerbos, kube-metrics-adapter, k3d, traefik-fips, ratify, gitlab-rails-ce, kong-ingress-controller, kube-vip-cloud-provider, falcosidekick-fips, trivy, loki, cosign,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, envoy-gateway, jobset-fips, argo-workflows, longhorn-manager, cerbos, kube-metrics-adapter, k3d, traefik-fips, ratify, gitlab-rails-ce, kong-ingress-controller, kube-vip-cloud-provider, falcosidekick-fips, trivy, loki, cosign,...

OESA-2026-1466 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes c...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: flux-operator, github-mcp-server, gptscript, jaeger, datadog-agent, gitlab-workhorse-ce, datadog-agent-fips, jaeger-fips, opencost, opencost-fips, ferretdb, gitlab-workhorse-ce-fips, osv-scanner, flux-operator-fips...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: flux-operator, github-mcp-server, gptscript, jaeger, datadog-agent, gitlab-workhorse-ce, datadog-agent-fips, jaeger-fips, opencost, opencost-fips, ferretdb, gitlab-workhorse-ce-fips, osv-scanner, flux-operator-fips...

CLEANSTART-2026-LS98939 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-YW12690 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-QC30410 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-ID51598 Cancelling a query (e

Multiple security vulnerabilities affect the kyverno-fips package. Cancelling a query e. See references for individual vulnerability details...

CLEANSTART-2026-DZ05206 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-WP10148 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-AC12204 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-AJ16639 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-ER93728 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...