CLEANSTART-2026-BJ58464 Security fixes in consul-k8s-fips 1.9.1-r0

Package consul-k8s-fips version 1.9.1-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-AF67526 Security fixes for CVE-2026-42304, CVE-2026-44307, CVE-2026-48522, CVE-2026-48523, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, ghsa-2h4p-vjrc-8xpq, ghsa-grgv-6hw6-v9g4 applied in versions: 4.3.5-r0, 4.3.5-r1

Multiple security vulnerabilities affect the jupyterhub-k8s-hub package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UC45646 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.6.0-r0, 2.6.0-r1

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: step-issuer, nri-kubernetes-fips, wavefront-collector-for-kubernetes, mc, crossplane-provider-aws-redshiftserverless, chisel-fips, secrets-store-csi-driver, crossplane-provider-aws-directconnect-fips, prometheus-elasticsearch-exporter-fips, bank-vaults-fips,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: kubernetes, azuredisk-csi, nri-mysql, actions-runner-controller, step, k8ssandra-operator, argo-events, nri-elasticsearch, grafana-agent-operator, vitess, grafana-operator, cert-exporter, terraform-provider-google, mariadb-operator, net-kourier, coredns, authservice,...

CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: kube-mgmt, ratify, crossplane, headlamp, xeol, kubescape-operator-fips, helm-exporter-fips, chartmuseum-fips, cluster-api-helm-controller-fips, helm-mapkubeapis, rancher, kgateway, jfrog-cli, kgateway-fips, trivy-operator-fips, zarf, ocm-kubernetes-controller-fips,...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: kube-mgmt, ratify, crossplane, headlamp, xeol, kubescape-operator-fips, helm-exporter-fips, chartmuseum-fips, cluster-api-helm-controller-fips, helm-mapkubeapis, rancher, kgateway, jfrog-cli, kgateway-fips, trivy-operator-fips, zarf, ocm-kubernetes-controller-fips,...

GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: kube-mgmt, ratify, crossplane, headlamp, xeol, kubescape-operator-fips, helm-exporter-fips, chartmuseum-fips, cluster-api-helm-controller-fips, helm-mapkubeapis, rancher, kgateway, jfrog-cli, kgateway-fips, trivy-operator-fips, zarf, ocm-kubernetes-controller-fips,...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: kube-mgmt, ratify, crossplane, headlamp, xeol, kubescape-operator-fips, helm-exporter-fips, chartmuseum-fips, cluster-api-helm-controller-fips, helm-mapkubeapis, harvester-fips, rancher, kgateway, jfrog-cli, kgateway-fips, trivy-operator-fips, zarf,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: kube-mgmt, ratify, crossplane, headlamp, xeol, kubescape-operator-fips, helm-exporter-fips, chartmuseum-fips, cluster-api-helm-controller-fips, helm-mapkubeapis, rancher, kgateway, jfrog-cli, kgateway-fips, trivy-operator-fips, zarf, ocm-kubernetes-controller-fips,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: kube-mgmt, ratify, crossplane, headlamp, xeol, kubescape-operator-fips, helm-exporter-fips, chartmuseum-fips, cluster-api-helm-controller-fips, helm-mapkubeapis, rancher, kgateway, jfrog-cli, kgateway-fips, trivy-operator-fips, zarf, ocm-kubernetes-controller-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nvidia-container-toolkit, prometheus-podman-exporter, podman, k8s-device-plugin-fips, node-feature-discovery, buildah, buildah-fips, nvidia-container-toolkit-fips, podman-fips, cadvisor-fips, sriov-network-device-plugin, rancher-agent, rancher,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: cadvisor, podman, nvidia-container-toolkit, node-feature-discovery, sriov-network-device-plugin, k8s-device-plugin, buildah...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: beats-fips, spegel, eck-operator-fips, step-issuer, xeol, dapr-fips, rclone, external-dns, rancher-webhook, envoy-ratelimit, gitlab-pages, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-redshiftserverless, crossplane-provider-aws-ecr, restic,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: helm-push, tw, consul-k8s, kaniko, docker-cli-buildx, k3s, helm-mapkubeapis, kube-arangodb, opa-envoy, docker, trivy, scorecard, ctop, neuvector-scanner, helm-operator, kubevela, grype, rancher-helm, wolfictl, datadog-agent, docker-compose, gatekeeper, steampipe,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: helm-push, tw, consul-k8s, kaniko, docker-cli-buildx, k3s, helm-mapkubeapis, kube-arangodb, opa-envoy, docker, trivy, scorecard, ctop, neuvector-scanner, helm-operator, kubevela, grype, rancher-helm, wolfictl, datadog-agent, docker-compose, gatekeeper, steampipe,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: spegel, kube-mgmt, headlamp, neuvector, xeol, ctop, helm, kubescape-operator-fips, helm-exporter-fips, docker, chartmuseum-fips, cluster-api-helm-controller-fips, grype-db, helm-mapkubeapis, amazon-ecs-agent, rancher, kgateway, jfrog-cli, kubevela-fips, kgateway-fips...

CLEANSTART-2026-CR27895 Security fixes for CVE-2026-42304, CVE-2026-44307, ghsa-2h4p-vjrc-8xpq, ghsa-grgv-6hw6-v9g4 applied in versions: 4.3.5-r0

Multiple security vulnerabilities affect the jupyterhub-k8s-hub package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UV23635 Security fixes for CVE-2026-44431, CVE-2026-44432 applied in versions: 4.3.3-r0

Multiple security vulnerabilities affect the jupyterhub-k8s-hub package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VU08393 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.6.1-r0, 2.6.1-r1, 2.6.1-r7, 2.6.1-r8, 2.6.1-r9

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...