CLEANSTART-2026-KO91449 Security fix for CVE-2026-4428 applied in: ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.27.8-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.29.1-r0

CVE-2026-4428 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PO98584 Security fix for ghsa-jqcq-xjh3-6g23 applied in: grafana-alloy-fips 1.12.1-r2

Security vulnerability affects the grafana-alloy-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CP29339 Security fix for ghsa-9f94-5g5w-gf6r applied in: ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.27.8-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.28.5-r0, ztunnel-fips 1.29.1-r0

ghsa-9f94-5g5w-gf6r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JF46106 Security fix for ghsa-394x-vwmw-crm3 applied in: ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.27.8-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.28.5-r0, ztunnel-fips 1.29.1-r0

ghsa-394x-vwmw-crm3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XA32813 Security fix for ghsa-pwjx-qhcg-rvj4 applied in: shadowsocks-rust 1.24.0-r1, ztunnel-fips 1.27.8-r4, ztunnel-fips 1.27.9-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.28.5-r0, ztunnel-fips 1.29.1-r0

ghsa-pwjx-qhcg-rvj4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MV00348 Security fix for CVE-2024-9823 applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, stargate 1.0.90-r4

CVE-2024-9823 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OU05984 Security fix for ghsa-x6gf-mpr2-68h6 applied in: grafana-alloy-fips 1.12.1-r2

Security vulnerability affects the grafana-alloy-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AS20822 Security fix for CVE-2023-7256 applied in: calico-fips 3.31.2-r1

Security vulnerability affects the calico-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MM14212 Security fix for CVE-2024-8006 applied in: calico-fips 3.31.2-r1

Security vulnerability affects the calico-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NW65912 Security fix for CVE-2025-67499 applied in: calico-fips 3.31.2-r2

Security vulnerability affects the calico-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UT87465 Security fix for CVE-2024-47535 applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, stargate 1.0.90-r4, stargate 2.0.44-r4, wavefront-proxy 13.9-r0

CVE-2024-47535 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WK71465 Security fix for CVE-2026-24117 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tkn 0.42.2-r1, tkn 0.43.2-r1

CVE-2026-24117 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FC01276 Security fix for CVE-2026-22703 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.3-r3, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, policy-controller 0.12.1-r1, tekton-chains-fips 0.24.0-r1

CVE-2026-22703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FE88742 Security fix for CVE-2026-25645 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, cassandra-reaper-fips 3.6.1-r2, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r3, cassandra-reaper-fips 4.0.1-r2, jupyterhub-k8s-hub 4.3.2-r0, k8s-sidecar 1.25.2-r0, k8s-sidecar 2.5.4-r0, kserve-storage-controller 0.19.0-r0, miniforge3 26.1.0.0-r1, tensorflow-gpu-jupyter 2.20.0-r1

CVE-2026-25645 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RJ10234 Security fix for ghsa-9h6p-92jq-888x applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4

ghsa-9h6p-92jq-888x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ER14083 Security fix for CVE-2015-0886 applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9

CVE-2015-0886 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JJ44639 Security fix for ghsa-6mjq-h674-j845 applied in: cassandra-reaper-fips 3.6.1-r3, stargate 1.0.90-r4, stargate 2.0.44-r4

ghsa-6mjq-h674-j845 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BU59456 Security fix for ghsa-j26w-f9rq-mr2q applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, stargate 1.0.90-r4

ghsa-j26w-f9rq-mr2q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PC10169 Security fix for ghsa-wjpw-4j6x-6rwh applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, kafka-fips 3.8.1-r6, kafka-fips 4.0.2-r1, stargate 2.0.44-r5

ghsa-wjpw-4j6x-6rwh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KZ65152 Security fix for ghsa-h75p-j8xm-m278 applied in: kubernetes-dns-node-cache 1.26.7-r1, kubernetes-dns-node-cache-fips 1.26.0-r1, kubernetes-dns-node-cache-fips 1.26.7-r1

ghsa-h75p-j8xm-m278 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...