PT-2026-63762

Multiple security vulnerabilities affect the kubernetes-csi-external-provisioner-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63688

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63696

Multiple security vulnerabilities affect the spire-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63723

Multiple security vulnerabilities affect the kubernetes-csi-external-provisioner-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63707

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63665

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63741

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-50163 vulnerabilities

Vulnerabilities for packages: helm-exporter, helm-diff-fips, trivy-operator, zarf, helm-fips, opa, rancher-agent, gitlab-operator-fips, kyverno-fips, kubescape-server, kyverno, helm-operator, chartmuseum-fips, cloudbeat, consul-k8s-fips, grafana-operator-fips, gitness, kgateway-fips, steampipe,...

GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: helm-exporter, helm-diff-fips, trivy-operator, zarf, helm-fips, opa, rancher-agent, gitlab-operator-fips, kyverno-fips, kubescape-server, kyverno, helm-operator, chartmuseum-fips, cloudbeat, consul-k8s-fips, grafana-operator-fips, gitness, kgateway-fips, steampipe,...

GHSA-6W3M-4HHP-775Q vulnerabilities

Vulnerabilities for packages: keda-http-add-on-fips, keda-http-add-on...

CVE-2026-49476 vulnerabilities

Vulnerabilities for packages: open-webui, datadog-agent-fips, airflow, kubeflow-pipelines-visualization-server, datadog-agent...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: open-webui, datadog-agent-fips, airflow, kubeflow-pipelines-visualization-server, datadog-agent...

CVE-2026-49838 vulnerabilities

Vulnerabilities for packages: kube-vip-fips, kube-vip, cilium-cli...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: kube-vip-fips, kube-vip, cilium-cli...

GHSA-836R-79RF-4M37 vulnerabilities

Vulnerabilities for packages: open-webui, datadog-agent-fips, airflow, kubeflow-pipelines-visualization-server, datadog-agent...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: open-webui, datadog-agent-fips, airflow, kubeflow-pipelines-visualization-server, datadog-agent...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: crossplane, tekton-chains, tflint-fips, cloudbeat-fips, neuvector-sigstore-interface-fips, trivy-operator, zarf, kubescape-server-fips, zarf-fips, falcoctl-fips, kyverno-notation-aws, kubescape, image-factory, ratify, spire-server-fips, kyverno-notation-aws-fips,...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: crossplane, tekton-chains, tflint-fips, cloudbeat-fips, neuvector-sigstore-interface-fips, trivy-operator, zarf, kubescape-server-fips, zarf-fips, falcoctl-fips, kyverno-notation-aws, kubescape, image-factory, ratify, spire-server-fips, kyverno-notation-aws-fips,...

golang security, bug fix, and enhancement update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 - Resolves: RHEL-193476 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146452 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139364 1.25.3-2 - Cleanup lib/ ownership 1.25.3-1 ...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: ocm-kubernetes-controller-fips, buildkitd, karpenter-fips, istio-fips, zarf, containerd, cloud-provider-azure-fips, commercial-expanso-edge, redka, scorecard, nerdctl, kube-conformance, prometheus-mongodb-exporter, k3s, cluster-api-fips, frankenphp-8.4, authentik-fip...