GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, cloud-provider-azure, knative-operator-fips, kubernetes-dashboard, ocm-cli-fips, kube-arangodb-fips, commercial-chainloop-backend, buildah-fips, frankenphp-8.2, cerbos, commercial-spilo, kyverno-policy-reporter-plugins-kyverno, dataplaneapi-fips,...

CLEANSTART-2026-MI82983 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.8.6-r0, 1.8.6-r1, 1.9.0-r0

Multiple security vulnerabilities affect the karpenter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating-fips, crossplane-provider-aws-efs-fips, hugo-extended, cert-manager, gomplate, k8s-metacollector-fips, docker-credential-ecr-login-fips, prometheus-mysqld-exporter, virt-controller, cluster-api-gcp-controller-fips, apache-exporter,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating-fips, crossplane-provider-aws-efs-fips, hugo-extended, cert-manager, gomplate, k8s-metacollector-fips, docker-credential-ecr-login-fips, prometheus-mysqld-exporter, virt-controller, cluster-api-gcp-controller-fips, apache-exporter,...

CLEANSTART-2026-KJ02127 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.8.6-r0, 1.8.6-r1

Multiple security vulnerabilities affect the karpenter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, gcp-compute-persistent-disk-csi-driver-fips, container-object-storage-interface, pvc-autoresizer, stakater-reloader, secrets-store-csi-driver-fips, git-lfs, karpenter-fips, nvidia-nsight-compute-13.1, gitsign, cloud-provider-aws-fips, mattmoor-chaini...

GHSA-3WQC-MWFX-672P vulnerabilities

Vulnerabilities for packages: beats-fips, karpenter-fips, blob-csi-fips, eks-distro, blob-csi, gitlab-pages-fips, eks-distro-fips, grafana-fips, knative-operator, wal-g, k3s...