CLEANSTART-2026-IL37886 Security fix for ghsa-mqqf-5wvp-8fh8 applied in: cortex 1.21.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, gitea-fips 1.25.5-r0, karma-fips 0.122-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, rekor-backfill-index 1.4.3-r2, step-ca-fips 0.29.0-r0, tkn-fips 0.43.0-r3

ghsa-mqqf-5wvp-8fh8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GN98127 Security fix for ghsa-44p7-9xx4-hf2g applied in: gitea-fips 1.25.5-r0, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0

ghsa-44p7-9xx4-hf2g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6433 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

GHSA-RCR6-4JQH-J84M vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

CVE-2026-60004 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2022-0470 vulnerabilities

Vulnerabilities for packages: mattermost-fips, gitea, gitness, gitea-fips, grafana...

GO-2025-3988 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips, sftpgo...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: knative-serving, osv-scanner, prometheus-operator, mattermost-fips, cloudbeat, kube-conformance, flux-fips, falco-no-driver, kubernetes-fips, kubescape-server-fips, terraform, grype, longhorn-cli, gitlab-rails-ce-fips, omnictl-multiarch-fips, aactl, flux,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-serving, osv-scanner, prometheus-operator, mattermost-fips, cloudbeat, kube-conformance, flux-fips, falco-no-driver, kubernetes-fips, kubescape-server-fips, terraform, gitlab-rails-ce-fips, omnictl-multiarch-fips, aactl, flux, frankenphp-8.5, frankenphp-8.2,...

CVE-2025-68939 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GHSA-263Q-5CV3-XQ9G vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: osv-scanner, cloudbeat, flux-fips, kubescape-server-fips, grype, src-fingerprint, grafana-alloy, bom, gitlab-rails-ce-fips, flux, crossplane-fips, kots, grafana, kyverno, grype-db, mapotf, cerbos, guac, act, nuclei, grype-fips, apko, kaniko-fips, amazon-ssm-agent-fip...

CLEANSTART-2026-XO66325 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the gitea-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: spegel, azure-service-operator, grafana-rollout-operator, atlas, kyverno-policy-reporter-ui, kyverno-notation-aws, mattermost-fips, prometheus-operator, kube-conformance, helm-mapkubeapis, gcsfuse, beats-fips, dapr, cluster-autoscaler-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: spegel, prometheus-operator, atlas, mattermost-fips, crane, kube-conformance, helm-mapkubeapis, beats-fips, cluster-autoscaler-fips, eksctl, task-fips, external-dns, libnvidia-container, kots, chartmuseum-fips, grafana, docker-compose-fips, azurefile-csi-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: spegel, prometheus-operator, atlas, mattermost-fips, crane, kube-conformance, helm-mapkubeapis, beats-fips, cluster-autoscaler-fips, eksctl, task-fips, external-dns, libnvidia-container, kots, chartmuseum-fips, grafana, docker-compose-fips, azurefile-csi-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, crane, kube-conformance, gcp-compute-persistent-disk-csi-driver, linkerd2-fips, eksctl, timescaledb-parallel-copy, renovate, yunikorn-web, mariadb-operator, cloud-provider-gcp-cloud-controller-manager-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: spegel, azure-service-operator, grafana-rollout-operator, atlas, kyverno-policy-reporter-ui, kyverno-notation-aws, mattermost-fips, prometheus-operator, crane, ytt, kube-conformance, helm-mapkubeapis, gcsfuse, beats-fips, chart-testing-fips, dapr,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: spegel, azure-service-operator, grafana-rollout-operator, atlas, kyverno-policy-reporter-ui, kyverno-notation-aws, mattermost-fips, prometheus-operator, crane, ytt, kube-conformance, helm-mapkubeapis, gcsfuse, beats-fips, chart-testing-fips, dapr,...