CLEANSTART-2026-FE96698 Security fix for ghsa-2x5j-vhc8-9cwm applied in: argo-cd 3.0.22-r0, argo-cd-fips 2.14.20-r1, argo-cd-fips 3.0.20-r2, argo-cd-fips 3.0.22-r0, argo-workflows 3.6.16-r0, argo-workflows-fips 3.6.15-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, falcoctl 0.11.0-r0, flux-notification-controller-fips 1.5.0-r0, kyverno-fips 1.13.6-r1, kyverno-fips 1.14.4-r2, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, opentofu-fips 1.10.7-r0, opentofu-fips 1.10.7-r1, policy-controller 0.12.1-r1

ghsa-2x5j-vhc8-9cwm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CD99087 Security fix for CVE-2025-55198 applied in: consul-k8s-fips 1.5.9-r0, harbor 2.13.4-r2, harbor 2.14.2-r1, k8sgpt 0.4.26-r2, kubevela 1.10.8-r0

CVE-2025-55198 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PS05327 Security fix for CVE-2025-53547 applied in: consul-k8s-fips 1.5.9-r0, harbor 2.13.4-r2, harbor 2.14.2-r1, k8sgpt 0.4.26-r2, kubevela 1.10.8-r0

CVE-2025-53547 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EM35867 Security fix for ghsa-c6gw-w398-hv78 applied in: argo-cd-fips 2.14.20-r1, argo-cd-fips 3.0.20-r2, cosign 2.4.3-r0, cosign 2.5.3-r0, falcoctl 0.11.0-r0, harbor-fips 2.10.3-r0, kyverno-fips 1.13.6-r1, kyverno-fips 1.13.6-r10, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, opentofu-fips 1.9.4-r0, rabbitmq-messaging-topology-operator 1.15.0-r1, step-cli 0.27.5-r0

ghsa-c6gw-w398-hv78 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VE93341 Security fix for ghsa-fv92-fjc5-jj9h applied in: argo-workflows 3.6.16-r0, fulcio 1.7.1-r0, fulcio-fips 1.7.1-r1, kyverno-fips 1.13.6-r1, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, opentofu-fips 1.10.7-r0, opentofu-fips 1.10.7-r1, tempo 2.7.2-r0, tempo 2.8.3-r0, tempo-fips 2.7.2-r0

ghsa-fv92-fjc5-jj9h affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NC69748 Security fix for ghsa-2464-8j7c-4cjm applied in: argo-events 1.9.7-r1, argo-workflows 3.6.16-r0, fulcio 1.7.1-r0, istio 1.27.1-r0, istio 1.28.7-r0, kyverno-fips 1.13.6-r1, kyverno-policy-reporter-fips 3.4.2-r0, kyverno-policy-reporter-fips 3.5.0-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, opentofu-fips 1.10.7-r0, opentofu-fips 1.10.7-r1, spark-operator 2.2.1-r0, tempo 2.7.2-r0, tempo 2.8.3-r0, tempo-fips 2.7.2-r0, tempo-fips 2.8.3-r0, tempo-fips 2.9.1-r0

ghsa-2464-8j7c-4cjm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FB35922 Security fix for ghsa-8r3f-844c-mc37 applied in: argo-events 1.6.3-r1, aws-flb-kinesis 1.10.3-r0, cluster-proportional-autoscaler 1.8.11-r0, kafka_exporter-fips 1.6.0-r0, kafka_exporter-fips 1.7.0-r0, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, kube-vip-fips 0.7.2-r0, litestream 0.5.2-r0, litestream 0.5.2-r1, local-static-provisioner 2.6.0-r1, local-static-provisioner-fips 2.6.0-r1, metallb 0.13.12-r4, multus-cni-fips 4.0.2-r2, nfs-subdir-external-provisioner-fips 4.0.16-r0, nfs-subdir-external-provisioner-fips 4.0.17-r0, nfs-subdir-external-provisioner-fips 4.0.18-r1, prometheus-node-exporter-fips 1.6.1-r0, prometheus-node-exporter-fips 1.7.0-r0, wavefront-collector-for-kubernetes 1.13.0-r0

ghsa-8r3f-844c-mc37 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PU21054 Security fix for ghsa-6m8w-jc87-6cr7 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kyverno-fips 1.13.6-r1, kyverno-fips 1.14.4-r2, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4

ghsa-6m8w-jc87-6cr7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GU62349 Security fix for ghsa-4x4m-3c2p-qppc applied in: argo-cd 3.1.9-r4, argo-cd-fips 2.14.20-r1, argo-cd-fips 3.0.20-r2, argo-cd-fips 3.1.9-r4, calico-fips 3.29.5-r0, ip-masq-agent 2.12.6-r0, local-static-provisioner 2.8.0-r2, nfs-subdir-external-provisioner-fips 4.0.16-r0

ghsa-4x4m-3c2p-qppc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KG56080 Security fix for ghsa-hcg3-q754-cr77 applied in: calico-fips 3.27.5-r0, cfssl 1.5.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, dynamic-localpv-provisioner 4.4.0-r0, falcoctl 0.11.0-r0, go-fips-1.24 1.24.7-r0, go1.24 1.24.11-r0, harbor-registry 3.0.0.1-r2, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, kube-rbac-proxy-fips 0.19.1-r0, kube-state-metrics-fips 2.14.0-r0, kube-state-metrics-fips 2.15.0-r0, kyverno-fips 1.13.6-r1, litestream 0.3.14-r3, modelmesh-runtime-adapter 0.12.0-r0, modelmesh-runtime-adapter 0.12.0-r1, multus-cni-fips 3.9.3-r2, opentofu-fips 1.9.4-r0, postgres-operator 1.12.2-r2, prometheus-node-exporter 1.8.0-r3, prometheus-statsd-exporter 0.28.0-r0, prometheus-statsd-exporter-fips 0.28.0-r0, tempo-fips 2.7.2-r0, wavefront-collector-for-kubernetes 1.13.0-r0

ghsa-hcg3-q754-cr77 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JE43065 Security fix for ghsa-4vq8-7jfc-9cvp applied in: cert-manager-cmctl-fips 2.1.1-r0, elastic-beats 8.18.1-r0, elastic-beats 9.2.8-r0, elastic-beats 9.3.3-r0, falcoctl 0.11.0-r0, gitness 3.3.0-r1, harbor-fips 2.10.3-r0, kyverno-fips 1.12.7-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, paranoia 0.2.1-r0, skaffold 2.16.1-r1

ghsa-4vq8-7jfc-9cvp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UY39386 Security fix for CVE-2023-5870 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5870 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZS91347 Security fix for CVE-2023-5869 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5869 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JD37353 Security fix for CVE-2023-5868 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5868 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FA69444 Security fix for CVE-2024-0985 applied in: postgresql15 15.6-r0, postgresql16 16.2-r0, postgresql17 16.2-r0, postgresql18 16.2-r0

CVE-2024-0985 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-QJ02692 Security fix for CVE-2018-20712 applied in: binutils 2.32-r0

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PN72397 Security fix for CVE-2024-7348 applied in: postgresql15 15.8-r0, postgresql16 16.4-r0, postgresql17 16.4-r0, postgresql18 16.4-r0

CVE-2024-7348 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-JJ02952 Security fix for CVE-2017-7614 applied in: binutils 2.28-r1

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MY37775 Security fix for CVE-2024-10979 applied in: postgresql16 16.5-r0

Security vulnerability affects the postgresql16 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZE96570 Security fix for ghsa-9h84-qmv7-982p applied in: cert-manager-cmctl 2.3.0-r0, cert-manager-cmctl-fips 2.1.1-r0, cert-manager-cmctl-fips 2.3.0-r0, chartmuseum-fips 0.14.0-r1, chartmuseum-fips 0.15.0-r4, harbor 2.13.4-r2, harbor 2.14.2-r1, harbor-fips 2.10.3-r0, harbor-fips 2.12.4-r1, harbor-fips 2.13.2-r1, k8sgpt 0.4.26-r0, kubevela 1.10.8-r0

ghsa-9h84-qmv7-982p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...