GO-2026-5763 vulnerabilities

Vulnerabilities for packages: docker, vexctl, cosign, teleport, trivy-operator, zot, ko, kyverno-notation-aws, falcoctl, aactl, gitsign, trivy, slsa-verifier, flux-source-controller, tkn, goreleaser, tflint, zarf, docker-cli-buildx, policy-controller, neuvector-sigstore-interface, ratify, kyverno...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: aactl, gitsign, policy-controller, ratify, flux-source-controller, tkn, teleport, goreleaser, kyverno-notation-aws, zot, witness, falcoctl...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: blobfuse2, amass, pvc-autoresizer, manifest-tool, ipfs-cluster, gogatekeeper, mongodb-kubernetes-operator, azcopy, kubernetes-replicator, cluster-api-ipam-provider-in-cluster, kubo, rancher-helm, crossplane-provider-aws-s3, dbmate, sftpgo-plugin-auth,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: docker, vexctl, cosign, teleport, trivy-operator, zot, ko, kyverno-notation-aws, falcoctl, aactl, gitsign, trivy, slsa-verifier, flux-source-controller, tkn, goreleaser, tflint, zarf, policy-controller, neuvector-sigstore-interface, ratify, rekor, buildkitd,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: polaris, lazydocker, ipfs-cluster, nri-mysql, argo-events, zot, nodetaint, grafana-rollout-operator, falcoctl, trivy, ip-masq-agent, kuberlr, docker-credential-gcr, tkn, yunikorn-k8shim, headlamp, helm-set-status, eksctl, cloud-provider-gcp-cloud-controller-manager,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: vexctl, cosign, zot, wolfictl, falcoctl, aactl, gitsign, trivy, slsa-verifier, flux-source-controller, tkn, melange, zarf, policy-controller, neuvector-sigstore-interface, rekor, sigstore-scaffolding, spire-server, kubescape, gh, apko, tekton-chains...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, flux-image-reflector-controller, kargo, sops, timestamp-authority, vexctl, crossplane-provider-azure-sql, cosign, flux-kustomize-controller, step-ca, argo-events, zot, pulumi-kubernetes-operator, falcoctl, terraform-provider-azurerm,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-PM77605 Security fixes in flux-notification-controller-fips 1.9.2-r0

Package flux-notification-controller-fips version 1.9.2-r0 fixes 6 vulnerabilities: CVE-2023-3955, CVE-2023-3676, CVE-2019-11250, ghsa-gcjh-h69q-9w9g, ghsa-259r-337f-4rfw...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: k9s, google-osconfig-agent, kyverno-fips, gomplate-fips, steampipe, grype-fips, nuclio-controller, argo-workflows, pulumi-language-java, gitlab-rails-ce, kubescape-server-fips, syft-fips, upwind-agent, xeol-fips, xeol, gitaly-fips, gitsign, pulumi-kubernetes-operator...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: k9s, google-osconfig-agent, kyverno-fips, gomplate-fips, steampipe, grype-fips, nuclio-controller, argo-workflows, pulumi-language-java, gitlab-rails-ce, kubescape-server-fips, syft-fips, upwind-agent, xeol-fips, xeol, gitaly-fips, gitsign, pulumi-kubernetes-operator...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: k9s, google-osconfig-agent, kyverno-fips, gomplate-fips, steampipe, grype-fips, nuclio-controller, argo-workflows, pulumi-language-java, gitlab-rails-ce, kubescape-server-fips, syft-fips, upwind-agent, xeol-fips, xeol, gitaly-fips, gitsign, pulumi-kubernetes-operator...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: k9s, google-osconfig-agent, kyverno-fips, gomplate-fips, steampipe, grype-fips, nuclio-controller, argo-workflows, pulumi-language-java, gitlab-rails-ce, kubescape-server-fips, syft-fips, upwind-agent, xeol-fips, xeol, gitaly-fips, gitsign, pulumi-kubernetes-operator...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: kargo, dagger, argocd-image-updater, argo-events, trivy-operator, k9s, zot, pulumi-language-java, pulumi-kubernetes-operator, kots, pulumi-language-dotnet, act, gitsign, nfpm, pulumi-language-yaml, trivy, flux-notification-controller, gitlab-runner, guac, gitaly, bom...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: kargo, dagger, argocd-image-updater, argo-events, trivy-operator, k9s, zot, pulumi-language-java, pulumi-kubernetes-operator, kots, pulumi-language-dotnet, act, gitsign, nfpm, pulumi-language-yaml, trivy, flux-notification-controller, gitlab-runner, guac, gitaly, bom...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: kargo, dagger, argocd-image-updater, argo-events, trivy-operator, k9s, zot, pulumi-language-java, pulumi-kubernetes-operator, kots, pulumi-language-dotnet, act, gitsign, nfpm, pulumi-language-yaml, trivy, flux-notification-controller, gitlab-runner, guac, gitaly, bom...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: kargo, dagger, argocd-image-updater, argo-events, trivy-operator, k9s, zot, pulumi-language-java, pulumi-kubernetes-operator, kots, pulumi-language-dotnet, act, gitsign, nfpm, pulumi-language-yaml, trivy, flux-notification-controller, gitlab-runner, guac, gitaly, bom...

CLEANSTART-2026-YP46917 Security fixes in flux-image-reflector-controller-fips 1.1.2-r0

Package flux-image-reflector-controller-fips version 1.1.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, CVE-2026-29181...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: nerdctl, prometheus, kots, zitadel, loki, flux, cilium, kine, upwind-agent, kyverno, prometheus-mongodb-exporter, backup-restore-operator, spire-server, kaf, aactl, k3s, elastic-agent-fips, commercial-grafana, zot, snyk-cli, terraform, telegraf, omnictl-multiarch-fip...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854. Spring Framework is used as part of our microservices. These vulnerabilities have been addressed. Please read the detai...