GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: crossplane, gogatekeeper, argocd-image-updater, falcoctl, headlamp, grafana-operator, chartmuseum, opa, gitlab-operator, helm-diff, ratify-fips, kyverno-notation-aws, xeol-fips, helm-exporter, trivy, cert-manager-cmctl, helm-operator, helmfile, kgateway,...

GHSA-6W3M-4HHP-775Q vulnerabilities

Vulnerabilities for packages: keda-http-add-on-fips, keda-http-add-on...

CVE-2026-49476 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, kubeflow-pipelines-visualization-server, datadog-agent, datadog-agent-fips...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: open-webui, airflow, kubeflow-pipelines-visualization-server, datadog-agent, datadog-agent-fips...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: kube-vip, kube-vip-fips, cilium-cli...

CVE-2026-49838 vulnerabilities

Vulnerabilities for packages: kube-vip, kube-vip-fips, cilium-cli...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, kubeflow-pipelines-visualization-server, datadog-agent, datadog-agent-fips...

GHSA-836R-79RF-4M37 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, kubeflow-pipelines-visualization-server, datadog-agent, datadog-agent-fips...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: crossplane, kubescape, docker-fips, tekton-chains, falcoctl, aactl, kyverno-fips, policy-controller-fips, teleport, gitsign, image-factory-fips, ratify-fips, kyverno-notation-aws, tkn-fips, trivy-fips, trivy-operator, crossplane-fips, kyverno, trivy, tkn,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: crossplane, kubescape, docker-fips, tekton-chains, falcoctl, aactl, kyverno-fips, policy-controller-fips, teleport, gitsign, image-factory-fips, ratify-fips, kyverno-notation-aws, tkn-fips, trivy-fips, trivy-operator, crossplane-fips, kyverno, trivy, tkn,...

golang security, bug fix, and enhancement update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 - Resolves: RHEL-193476 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146452 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139364 1.25.3-2 - Cleanup lib/ ownership 1.25.3-1 ...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: nemo, harbor, consul-fips, grafana-alloy-fips, grafana-operator, backup-restore-operator, opentelemetry-collector-k8s, mattermost-fips, cilium-envoy-fips, cloud-provider-aws, grafana-alloy, authentik-fips, langfuse, upwind-agent, langfuse-fips, net-kourier-fips,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, crossplane-provider-aws-athena, deck-fips, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, longhorn-share-manager,...

CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SC97100 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SD94217 Security fixes for CVE-2026-42504 applied in versions: 2.8.0-r3

Security vulnerability affects the local-static-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CP05946 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r5

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-39822 vulnerabilities

Vulnerabilities for packages: nemo, harbor, consul-fips, grafana-alloy-fips, grafana-operator, backup-restore-operator, opentelemetry-collector-k8s, mattermost-fips, cilium-envoy-fips, cloud-provider-aws, grafana-alloy, authentik-fips, langfuse, upwind-agent, langfuse-fips, net-kourier-fips,...

CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, crossplane-provider-aws-athena, deck-fips, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, longhorn-share-manager,...

Oracle Linux 9 : openssl (ELSA-2026-50379)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50379 advisory. 3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: ad...