GHSA-MMWR-2JHP-MC7J vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...

CVE-2026-33033 vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...

CVE-2025-59538 vulnerabilities

Vulnerabilities for packages: argo-cd...

GHSA-WP4P-9PXH-CGX2 vulnerabilities

Vulnerabilities for packages: argo-cd...

GHSA-GPX4-37G2-C8PV vulnerabilities

Vulnerabilities for packages: argo-cd...

CVE-2025-59537 vulnerabilities

Vulnerabilities for packages: argo-cd...

GHSA-F9GQ-PRRC-HRHC vulnerabilities

Vulnerabilities for packages: argo-cd...

CVE-2025-59531 vulnerabilities

Vulnerabilities for packages: argo-cd...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SH14815 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the tkn-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-RJ58492 On Unix platforms, when listing the contents of a directory using File

Multiple security vulnerabilities affect the kyverno-fips package. On Unix platforms, when listing the contents of a directory using File. See references for individual vulnerability details...

CLEANSTART-2026-MU81308 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the kyverno-policy-reporter-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CVE-2026-5446

In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wcAriaEncrypt is stateless and passes the caller-supplied IV verbatim to the MagicCrypto SDK with no internal counter, and because the explicit IV is...

CVE-2025-11537 vulnerabilities

Vulnerabilities for packages: keycloak-fips, keycloak...

GHSA-GV3V-2CPP-3PMQ vulnerabilities

Vulnerabilities for packages: keycloak-fips, keycloak...

CVE-2026-23903 vulnerabilities

Vulnerabilities for packages: apache-activemq, apache-activemq-fips...

GHSA-C244-P6M5-VQJ6 vulnerabilities

Vulnerabilities for packages: apache-activemq, apache-activemq-fips...

CVE-2026-33817 vulnerabilities

Vulnerabilities for packages: vault, vault-fips, cloudbeat, beats, k3s, kine, grafana, frankenphp-8.3, cloudbeat-fips, frankenphp-8.2, containerd, elastic-agent-fips, zot, rke2-runtime-fips, datadog-agent-fips, rke2-runtime, frankenphp-8.5, datadog-agent, grafana-fips, loki, elastic-agent,...