CLEANSTART-2026-TA66488 Security fix for ghsa-pc3f-x583-g7j2 applied in: argo-cd 3.2.7-r2, argo-cd 3.3.5-r0, argo-cd-fips 3.0.23-r1, argo-cd-fips 3.1.14-r0, argo-cd-fips 3.2.9-r0, argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, argo-workflows 3.6.19-r5, cert-manager-cmctl-fips 2.4.0-r3, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.27.3-r3, cloudnative-pg-fips 1.28.1-r3, dynamic-localpv-provisioner 4.3.0-r1, dynamic-localpv-provisioner 4.5.0-r1, dynatrace-operator 1.9.0-r0, flux-notification-controller-fips 1.5.0-r0, gitlab-runner 18.11.1-r0, helm 4.0.5-r2, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, istio 1.27.9-r0, istio 1.28.5-r3, istio-fips 1.25.5-r5, istio-fips 1.26.8-r2, istio-fips 1.27.8-r3, istio-fips 1.27.9-r0, istio-fips 1.28.5-r3, istio-fips 1.30.0-r0, istio-pilot-discovery 1.28.3-r1, istio-pilot-discovery-fips 1.28.3-r1, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r1, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, k8ssandra-client-fips 0.5.0-r10, k8ssandra-client-fips 0.6.4-r8, k8ssandra-client-fips 0.7.0-r6, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, kubernetes 1.34.1-r4, kubernetes 1.35.3-r2, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubevela 1.10.8-r0, kured 1.20.0-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, percona-server-mongodb-operator 1.22.0-r1, percona-xtradb-cluster-operator 1.19.1-r0, percona-xtradb-cluster-operator-fips 1.16.1-r1, percona-xtradb-cluster-operator-fips 1.17.0-r0, percona-xtradb-cluster-operator-fips 1.18.0-r4, percona-xtradb-cluster-operator-fips 1.19.1-r0, postgres-operator 1.12.2-r2, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-cluster-operator 2.20.0-r1, tigera-operator 1.41.1-r0, timoni 0.25.2-r0, velero-fips 1.17.2-r6, velero-fips 1.18.0-r2

ghsa-pc3f-x583-g7j2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HI24004 Security fixes in dynatrace-operator 1.9.0-r0

Package dynatrace-operator version 1.9.0-r0 fixes 2 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469...

CLEANSTART-2026-MR48582 Security fixes in velero-fips 1.18.0-r2

Package velero-fips version 1.18.0-r2 fixes 2 vulnerabilities: CVE-2026-35469, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-EH36582 Security fixes for CVE-2025-47912, CVE-2025-55190, CVE-2025-55191, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-59537, CVE-2025-59538, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-29181, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, CVE-2026-34986, CVE-2026-35469, CVE-2026-39821, CVE-2026-39883, CVE-2026-41506, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42880, CVE-2026-44740, CVE-2026-44973, CVE-2026-45022, CVE-2026-45570, CVE-2026-45571, CVE-2026-45737, CVE-2026-45738, ghsa-2v5j-vhc3-9cwm, ghsa-2vgg-9h3w-qbr4, ghsa-2xsj-vh29-9cwm, ghsa-37cx-329c-33x3, ghsa-389r-gv7p-r3rp, ghsa-3v3m-wc6v-x4x3, ghsa-3wgm-2mw2-vh5m, ghsa-3xc5-wrhm-f963, ghsa-4x4m-3c2p-qppc, ghsa-6v2p-p543-phr9, ghsa-78h2-9frx-2jm8, ghsa-92cp-5422-2m47, ghsa-93mq-9ffx-83m2, ghsa-crhj-59gh-8x96, ghsa-f6x5-jh6r-wrfv, ghsa-gm2x-2g9h-ccm8, ghsa-gxhx-2686-5h9g, ghsa-h98r-wv3h-fr38, ghsa-hfvc-g4fc-pqhx, ghsa-hj2p-8wj8-pfq4, ghsa-j5w8-q4qc-rx2x, ghsa-jhf3-xxhw-2wpp, ghsa-m3xc-h892-ggx6, ghsa-m7cr-m3pv-hgrp, ghsa-mh2q-q3fh-2475, ghsa-mh63-6h87-95cp, ghsa-mw99-9chc-xw7r, ghsa-pc3f-x583-g7j2, ghsa-qw64-3x98-g7q2, ghsa-rg3g-4rw9-gqrp applied in versions: 2.13.9-r0, 2.14.20-r0, 3.0.16-r0, 3.0.19-r0, 3.1.4-r0, 3.1.8.-r0, 3.1.9-r4, 3.2.7-r0, 3.2.7-r1, 3.2.7-r2, 3.2.7-r3, 3.2.7-r4

Multiple security vulnerabilities affect the argo-cd package. These issues are resolved in later releases. See references for individual vulnerability details...