GHSA-CMV8-6362-R5W9 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argo-workflows...

CVE-2026-27138 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, loki-fips, victoriametrics-fips, terragrunt, victoriametrics-cluster-fips, amazon-k8s-cni-fips, localstack, flux-image-reflector-controller, nova-fips, go, flux-helm-controller, flux-source-watcher, grafana-rollout-operator, cert-manager-fips,...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, loki-fips, victoriametrics-fips, terragrunt, victoriametrics-cluster-fips, amazon-k8s-cni-fips, localstack, flux-image-reflector-controller, nova-fips, go, flux-helm-controller, flux-source-watcher, grafana-rollout-operator, cert-manager-fips,...

GHSA-7HFW-R8QC-89V4 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, loki-fips, victoriametrics-fips, terragrunt, victoriametrics-cluster-fips, amazon-k8s-cni-fips, localstack, flux-image-reflector-controller, nova-fips, go, flux-helm-controller, flux-source-watcher, grafana-rollout-operator, cert-manager-fips,...

CVE-2026-27137 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, loki-fips, victoriametrics-fips, terragrunt, victoriametrics-cluster-fips, amazon-k8s-cni-fips, localstack, flux-image-reflector-controller, nova-fips, go, flux-helm-controller, flux-source-watcher, grafana-rollout-operator, cert-manager-fips,...

CVE-2026-24308 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, zookeeper, apache-activemq-artemis, tez, seata, spark-kubernetes-operator-fips, thingsboard, solr, strimzi-kafka-operator, spark-fips, wso2is, spark-kubernetes-operator, kserve-modelmesh, druid, apache-pulsar, kafka, apache-nifi, trino,...

GHSA-CRHR-QQJ8-RPXC vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, zookeeper, apache-activemq-artemis, tez, seata, spark-kubernetes-operator-fips, thingsboard, solr, strimzi-kafka-operator, spark-fips, wso2is, spark-kubernetes-operator, kserve-modelmesh, druid, apache-pulsar, kafka, apache-nifi, trino,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, terraform-provider-databricks-fips, podman, packer, ipfs-cluster-fips, prometheus-mongodb-exporter-fips, crossplane-provider-aws-kinesis-fips, cloud-provider-gcp-cloud-controller-manager-fips, emqx-exporter,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, terraform-provider-databricks-fips, prometheus-mongodb-exporter-fips, packer, crossplane-provider-aws-kinesis-fips, cloud-provider-gcp-cloud-controller-manager-fips, emqx-exporter, prometheus-podman-exporter-fips, promxy-fips,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, terraform-provider-databricks-fips, podman, packer, ipfs-cluster-fips, prometheus-mongodb-exporter-fips, crossplane-provider-aws-kinesis-fips, cloud-provider-gcp-cloud-controller-manager-fips, emqx-exporter,...

CLEANSTART-2026-AB04032 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the fluent-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-OH74241 Security fixes for GHSA-MQQF-5WVP-8FH8 applied in versions: 0.122-r0

Security vulnerability affects the karma-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-29062 vulnerabilities

Vulnerabilities for packages: flyway-fips, camunda, camunda-zeebe, sonarqube, keycloak-config-cli, apicurio-registry, apache-nifi, flyway...

GHSA-6V53-7C9G-W56R vulnerabilities

Vulnerabilities for packages: flyway-fips, camunda, camunda-zeebe, sonarqube, keycloak-config-cli, apicurio-registry, apache-nifi, flyway...

GHSA-C9V3-4PV7-87PR vulnerabilities

Vulnerabilities for packages: k8sgateway-fips, eks-distro-fips, juicefs, kubernetes-dns-node-cache, eks-distro, kubernetes-dns-node-cache-fips, k8sgateway...

CVE-2026-26017 vulnerabilities

Vulnerabilities for packages: k8sgateway-fips, eks-distro-fips, juicefs, kubernetes-dns-node-cache, eks-distro, kubernetes-dns-node-cache-fips, k8sgateway...

CVE-2026-25674 vulnerabilities

Vulnerabilities for packages: authentik-fips, label-studio, awx...

GHSA-8P8V-WH79-9R56 vulnerabilities

Vulnerabilities for packages: authentik-fips, label-studio, awx...

CVE-2026-25673 vulnerabilities

Vulnerabilities for packages: authentik-fips, label-studio, awx...

CLEANSTART-2026-PP62083 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the fluent-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...