CLEANSTART-2026-ZC29205 Security fixes in kaniko-fips 1.24.0-r0

Package kaniko-fips version 1.24.0-r0 fixes 5 vulnerabilities: ghsa-cgrx-mc8f-2prm, ghsa-pwhc-rpq9-4c8w, ghsa-m6hq-p25p-ffr2, CVE-2025-61729, CVE-2025-61727...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, tigera-operator, k3s, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, beats-fips, rancher,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, tigera-operator, k3s, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, rancher,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, tigera-operator, k3s, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, rancher,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: chainloop-cli, gitaly-fips, k9s, kaniko-fips, zarf, argo-cd-fips, argo-events-fips, kyverno, gitlab-rails-ce, amazon-ssm-agent-fips, packer-fips, kubevela-fips, pulumi, pulumi-language-dotnet, src-fingerprint, nemo, bom, xeol-fips, wolfictl, flux-fips,...

CLEANSTART-2026-GJ12884 Within HostnameError

Multiple security vulnerabilities affect the kaniko-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: distribution, sbom-scorecard, kbld, envoy-gateway, sriov-network-device-plugin, elastic-agent, argo-events-fips, step-fips, kube-logging-operator, frp, kubernetes-fips, openbao-k8s, timoni, local-static-provisioner-fips, metrics-server-fips,...