CLEANSTART-2026-BN09969 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.14.0-r2

Multiple security vulnerabilities affect the velero-plugin-for-gcp-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: argo-cd-fips, kubernetes-event-exporter, bento-fips, ory-kratos-fips, bento, argo-cd, ory-kratos, kyverno-policy-reporter-fips, argo-rollouts-fips, argo-rollouts, kubernetes-event-exporter-fips, atlantis-fips, atlantis, goreleaser, kubewatch, peerdb-flow,...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: syft-fips, gitlab-rails-ce, chainloop-cli, argo-cd-fips, skaffold-fips, rclone-fips, syft, packer-fips, argo-cd, telegraf, terragrunt, gitaly, rancher-fleet, chainloop-cli-fips, cerbos-fips, upwind-agent, teleport, rancher-fleet-fips, terragrunt-fips, nemo, scorecard...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: syft-fips, gitlab-rails-ce, chainloop-cli, argo-cd-fips, skaffold-fips, rclone-fips, syft, packer-fips, argo-cd, telegraf, terragrunt, gitaly, rancher-fleet, chainloop-cli-fips, cerbos-fips, upwind-agent, teleport, rancher-fleet-fips, terragrunt-fips, nemo, scorecard...

CVE-2012-1007 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-9848-V244-962P vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2026-33813 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, gitea-fips, gitea, ollama-fips, kubescape, bento-fips, rclone-fips, seaweedfs-operator-fips, seaweedfs-fips, bento, mattermost-fips, pdfcpu, mattermost, seaweedfs, ollama, kubescape-server, kubescape-server-fips, seaweedfs-rocksdb-fips,...

CVE-2026-45017 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

GHSA-8P4X-WR7X-3788 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

GHSA-R95X-QFJJ-FJJ2 vulnerabilities

Vulnerabilities for packages: airflow, pgadmin4, mlflow-fips, synapse, pgadmin4-fips...

CVE-2026-44681 vulnerabilities

Vulnerabilities for packages: airflow, pgadmin4, mlflow-fips, synapse, pgadmin4-fips...

EUVD-2026-30106

An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary files. This vulnerability affects WF-500 and WF-500-B appliances running in the default non-FIPS configuration mode. The...

GHSA-MQCG-5X36-VFCG vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips...

GHSA-7545-FCXQ-7J24 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, awx...

CVE-2026-42557 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips...

CVE-2026-0259

An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary files. This vulnerability affects WF-500 and WF-500-B appliances running in the default non-FIPS configuration mode. The...

CVE-2026-0259

An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary files. This vulnerability affects WF-500 and WF-500-B appliances running in the default non-FIPS configuration mode. The...

CVE-2026-0259 WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)

An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary files. This vulnerability affects WF-500 and WF-500-B appliances running in the default non-FIPS configuration mode. The...

CVE-2026-0259

CVE-2026-0259 affects Palo Alto Networks WildFire Appliance WF-500 and WF-500-B operating in the default non-FIPS configuration. It enables an arbitrary File Read and Delete vulnerability over the network, allowing access to sensitive information and deletion of arbitrary files. Impact is describ...

GHSA-QCCP-GFCP-XXVC vulnerabilities

Vulnerabilities for packages: ansible-operator, prefect, py3-cassandra-medusa, dbt-bigquery, confluent-docker-utils, authentik, kubeflow-pipelines, tritonserver-backend-vllm-cuda-12.9, localstack, metaflow-service, mlflow-fips, dbt-snowflake, ggshield, openstack-kolla-toolbox-2025.1,...