CLEANSTART-2026-IL37886 Security fix for GHSA-mqqf-5wvp-8fh8 applied in: cortex 1.21.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, gitea-fips 1.25.5-r0, karma-fips 0.122-r0, kubescape 3.0.47-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7, rekor-backfill-index 1.4.3-r2, step-ca-fips 0.29.0-r0, tkn-fips 0.43.0-r3

GHSA-mqqf-5wvp-8fh8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GN98127 Security fix for GHSA-44p7-9xx4-hf2g applied in: gitea-fips 1.25.5-r0, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0

GHSA-44p7-9xx4-hf2g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6433 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

GHSA-RCR6-4JQH-J84M vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

CVE-2026-60004 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

GO-2025-3988 vulnerabilities

Vulnerabilities for packages: gitea, sftpgo, gitea-fips...

GO-2022-0470 vulnerabilities

Vulnerabilities for packages: gitea, mattermost-fips, grafana, gitness, gitea-fips...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, podman, coder, grype-fips, cloudbeat-fips, kine, reports-server, chainctl-fips, act, gatus-fips, minio, longhorn-manager-fips, flux-image-automation-controller-fips, clickhouse-backup-fips, helm, istio, jfrog-cli, knative-eventing-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, coder, cloudbeat-fips, kine, reports-server, minio, trivy, flux-image-automation-controller-fips, knative-eventing-fips, helm, istio, cloud-provider-aws, fscrypt, external-dns, kots, opentelemetry-collector, argo-workflows-fips,...

CVE-2025-68939 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GHSA-263Q-5CV3-XQ9G vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: grype-fips, tfsec, cloudbeat-fips, chainctl-fips, act, rancher-fleet, trivy, flux-image-automation-controller-fips, jfrog-cli, teleport, pulumi-language-yaml, cg, grype, goreleaser, kots, amazon-ssm-agent-fips, argo-workflows-fips, grafana-fips, trivy-operator-fips,...

CLEANSTART-2026-XO66325 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the gitea-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, tkn-fips, act, licenseclassifier, rancher-helm, knative-eventing-fips, jfrog-cli, commercial-chainloop-backend, external-dns, flux-source-watcher-fips, goreleaser, aws-flb-kinesis-fips, newrelic-fluent-bit-output, argo-workflows-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, crossplane-provider-aws-cloudformation-fips, tkn-fips, lvm-driver, grpcurl, prometheus-postgres-exporter-fips, rancher-helm, knative-eventing-fips, jfrog-cli, nginx-prometheus-exporter-fips, commercial-chainloop-backend,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, tkn-fips, act, licenseclassifier, rancher-helm, knative-eventing-fips, jfrog-cli, commercial-chainloop-backend, external-dns, flux-source-watcher-fips, goreleaser, aws-flb-kinesis-fips, newrelic-fluent-bit-output, argo-workflows-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, crossplane-provider-aws-cloudformation-fips, tkn-fips, lvm-driver, act, grpcurl, prometheus-postgres-exporter-fips, stakater-reloader-fips, rancher-helm, knative-eventing-fips, jfrog-cli, jupyterhub-k8s-image-awaiter,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, crossplane-provider-aws-cloudformation-fips, tkn-fips, lvm-driver, act, grpcurl, prometheus-postgres-exporter-fips, stakater-reloader-fips, rancher-helm, knative-eventing-fips, jfrog-cli, jupyterhub-k8s-image-awaiter,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, crossplane-provider-aws-cloudformation-fips, tkn-fips, lvm-driver, act, grpcurl, prometheus-postgres-exporter-fips, stakater-reloader-fips, rancher-helm, knative-eventing-fips, jfrog-cli, jupyterhub-k8s-image-awaiter,...