GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: crossplane-fips, kubescape-server-fips, oras, cloudbeat, rancher-agent, ratify, oras-fips, drone-fips, steampipe, zarf-fips, chartmuseum, opa-fips-envoy, gogatekeeper, zot, teleport, helmfile, kubescape-server, argocd-image-updater, argocd-image-updater-fips,...

CVE-2026-50163 vulnerabilities

Vulnerabilities for packages: crossplane-fips, kubescape-server-fips, oras, cloudbeat, rancher-agent, ratify, oras-fips, drone-fips, steampipe, zarf-fips, chartmuseum, opa-fips-envoy, gogatekeeper, zot, teleport, helmfile, kubescape-server, argocd-image-updater, argocd-image-updater-fips,...

GHSA-6W3M-4HHP-775Q vulnerabilities

Vulnerabilities for packages: keda-http-add-on, keda-http-add-on-fips...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, kubeflow-pipelines-visualization-server, open-webui...

CVE-2026-49476 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, kubeflow-pipelines-visualization-server, open-webui...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: kube-vip-fips, cilium-cli, kube-vip...

CVE-2026-49838 vulnerabilities

Vulnerabilities for packages: kube-vip-fips, cilium-cli, kube-vip...

GHSA-836R-79RF-4M37 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, kubeflow-pipelines-visualization-server, open-webui...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, kubeflow-pipelines-visualization-server, open-webui...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: aactl, crossplane-fips, tekton-chains-fips, kyverno-notation-aws, kubescape-server-fips, neuvector-sigstore-interface-fips, cloudbeat, tkn-fips, image-factory-fips, policy-controller-fips, ratify, policy-controller, zarf-fips, neuvector-sigstore-interface, tbot, tkn,...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: aactl, crossplane-fips, tekton-chains-fips, kyverno-notation-aws, kubescape-server-fips, neuvector-sigstore-interface-fips, cloudbeat, tkn-fips, image-factory-fips, policy-controller-fips, ratify, policy-controller, zarf-fips, neuvector-sigstore-interface, tbot, tkn,...

golang security, bug fix, and enhancement update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 - Resolves: RHEL-193476 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146452 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139364 1.25.3-2 - Cleanup lib/ ownership 1.25.3-1 ...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, frankenphp-8.3, knative-net-istio-fips, knative-serving-fips, atlantis-fips, rke2-runtime, vexctl, cloud-provider-azure-fips, keda, azuredisk-csi-fips, beats-fips, chainloop-cli-fips, gitlab-workhorse-ce, prometheus-mongodb-exporter,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: vexctl, crossplane-provider-aws-codestarnotifications, kubevirt-cdi-apiserver, telegraf, crossplane-provider-aws-mwaa, percona-server-mongodb-operator-fips, request-1279-14, helm-operator-fips, openbao-k8s-fips, prometheus-snmp-exporter,...

CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SC97100 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SD94217 Security fixes for CVE-2026-42504 applied in versions: 2.8.0-r3

Security vulnerability affects the local-static-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CP05946 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r5

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-39822 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, frankenphp-8.3, knative-net-istio-fips, knative-serving-fips, atlantis-fips, rke2-runtime, vexctl, cloud-provider-azure-fips, keda, azuredisk-csi-fips, beats-fips, chainloop-cli-fips, gitlab-workhorse-ce, prometheus-mongodb-exporter,...

CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: vexctl, crossplane-provider-aws-codestarnotifications, kubevirt-cdi-apiserver, telegraf, crossplane-provider-aws-mwaa, percona-server-mongodb-operator-fips, request-1279-14, helm-operator-fips, openbao-k8s-fips, prometheus-snmp-exporter,...