PT-2026-63760

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63692

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63659

Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63696

Multiple security vulnerabilities affect the spire-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63744

Multiple security vulnerabilities affect the nginx-prometheus-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-50163 vulnerabilities

Vulnerabilities for packages: gitlab-operator, k8ssandra-client-fips, chartmuseum, opentofu-fips, cilium-cli, helm-operator-fips, opa-fips, kube-arangodb, rancher-agent, kubescape-server-fips, steampipe, crossplane-fips, kyverno-notation-aws-fips, gitness, kgateway, kots, ratify-fips,...

GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: gitlab-operator, k8ssandra-client-fips, chartmuseum, opentofu-fips, cilium-cli, helm-operator-fips, opa-fips, kube-arangodb, rancher-agent, kubescape-server-fips, steampipe, crossplane-fips, kyverno-notation-aws-fips, gitness, kgateway, kots, ratify-fips,...

GHSA-6W3M-4HHP-775Q vulnerabilities

Vulnerabilities for packages: keda-http-add-on, keda-http-add-on-fips...

CVE-2026-49476 vulnerabilities

Vulnerabilities for packages: airflow, open-webui, datadog-agent-fips, datadog-agent, kubeflow-pipelines-visualization-server...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: airflow, open-webui, datadog-agent-fips, datadog-agent, kubeflow-pipelines-visualization-server...

CVE-2026-49838 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip, kube-vip-fips...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip, kube-vip-fips...

GHSA-836R-79RF-4M37 vulnerabilities

Vulnerabilities for packages: airflow, open-webui, datadog-agent-fips, datadog-agent, kubeflow-pipelines-visualization-server...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: airflow, open-webui, datadog-agent-fips, datadog-agent, kubeflow-pipelines-visualization-server...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, zarf, crossplane, neuvector-sigstore-interface-fips, kyverno-notation-aws, commercial-kyverno, teleport-operator-fips, spire-server-fips, gitsign, tekton-chains, trivy-operator-fips, trivy-operator, trivy-fips, kubescape, policy-controller-fips,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, zarf, crossplane, neuvector-sigstore-interface-fips, kyverno-notation-aws, commercial-kyverno, teleport-operator-fips, spire-server-fips, gitsign, tekton-chains, trivy-operator-fips, trivy-operator, trivy-fips, kubescape, policy-controller-fips,...

golang security, bug fix, and enhancement update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 - Resolves: RHEL-193476 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146452 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139364 1.25.3-2 - Cleanup lib/ ownership 1.25.3-1 ...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: podman-fips, caddy-fips, ingress-nginx-controller-fips, opentofu-fips, kyverno-policy-reporter-plugins-kyverno-fips, langfuse-fips, cilium-cli, rke2-runtime-fips, reports-server, atlantis-fips, grype-fips, authentik-fips, frankenphp-8.2, argo-workflows-fips, keda-fip...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: podman-fips, prometheus-podman-exporter-fips, cass-operator-fips-no-pvc-delete, crossplane-provider-aws-networkfirewall, rke2-runtime-fips, ansible-operator-fips, grype-fips, newrelic-k8s-metrics-adapter-fips, crossplane-provider-aws-apigateway-fips,...

CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...