CLEANSTART-2026-IL37886 Security fix for GHSA-mqqf-5wvp-8fh8 applied in: cortex 1.21.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, gitea-fips 1.25.5-r0, karma-fips 0.122-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, rekor-backfill-index 1.4.3-r2, step-ca-fips 0.29.0-r0, tkn-fips 0.43.0-r3

GHSA-mqqf-5wvp-8fh8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GN98127 Security fix for GHSA-44p7-9xx4-hf2g applied in: gitea-fips 1.25.5-r0, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0

GHSA-44p7-9xx4-hf2g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6433 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

GHSA-RCR6-4JQH-J84M vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

CVE-2026-60004 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

GO-2025-3988 vulnerabilities

Vulnerabilities for packages: gitea, sftpgo, gitea-fips...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2022-0470 vulnerabilities

Vulnerabilities for packages: grafana, gitea, gitness, gitea-fips, mattermost-fips...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: melange, gomplate-fips, kaf, skaffold, trivy-operator-fips, vitess, chainloop-cli-fips, kubernetes, osv-scanner, frankenphp-8.4, harbor-fips, frankenphp-8.3, apply-cve-bump, commercial-grafana, gitlab-kas, prometheus-elasticsearch-exporter, zitadel,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kaf, skaffold, trivy-operator-fips, vitess, kubernetes, osv-scanner, frankenphp-8.4, harbor-fips, frankenphp-8.3, commercial-grafana, gitlab-kas, prometheus-elasticsearch-exporter, zitadel, argocd-image-updater, kine, chisel-fips, opentelemetry-collector,...

CVE-2025-68939 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GHSA-263Q-5CV3-XQ9G vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: melange, gomplate-fips, skaffold, xeol, kargo, trivy-operator-fips, chainloop-cli-fips, osv-scanner, argocd-image-updater, pulumi-kubernetes-operator, argo-workflows-fips, amazon-ssm-agent-fips, chainloop-cli, kaniko-fips, cloudbeat, syft-fips, act, rancher-fleet,...

CLEANSTART-2026-XO66325 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the gitea-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: json-exporter, xeol, trivy-operator-fips, flannel-fips, dask-gateway, gcp-compute-persistent-disk-csi-driver, authservice-fips, kubernetes-dashboard-api, image-factory, grpcurl-fips, kubescape-operator-fips, knative-client, kafka-proxy-fips, goose, influxd,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: xeol, trivy-operator-fips, dask-gateway, image-factory, nats-fips, crane, influxd, net-kourier, buildah-fips, helm-exporter-fips, seaweedfs, argo-workflows-fips, datadog-agent-fips, aws-flb-cloudwatch-fips, karpenter-fips, cloudbeat, sonobuoy-fips, dive,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: xeol, trivy-operator-fips, dask-gateway, image-factory, nats-fips, crane, influxd, net-kourier, buildah-fips, helm-exporter-fips, seaweedfs, argo-workflows-fips, datadog-agent-fips, aws-flb-cloudwatch-fips, karpenter-fips, cloudbeat, sonobuoy-fips, dive,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, flannel-fips, dask-gateway, yace, kubescape-operator-fips, kafka-proxy-fips, net-kourier, http-echo, datadog-agent-fips, amass, sbomqs, apache-beam-python-3.13-sdk, haproxy-ingress-fips, kafka-proxy, nodetaint-fips, dive, opa-envoy, wgcf,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: json-exporter, pushprox, xeol, trivy-operator-fips, aws-application-networking-k8s-fips, flannel-fips, php-fpmexporter, dask-gateway, gcp-compute-persistent-disk-csi-driver, yace, authservice-fips, kubernetes-dashboard-api, image-factory, grpcurl-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: json-exporter, pushprox, xeol, trivy-operator-fips, aws-application-networking-k8s-fips, flannel-fips, php-fpmexporter, dask-gateway, gcp-compute-persistent-disk-csi-driver, yace, authservice-fips, kubernetes-dashboard-api, image-factory, grpcurl-fips,...