CLEANSTART-2026-QM14096 Security fixes in karpenter-fips 1.9.0-r0

Package karpenter-fips version 1.9.0-r0 fixes 23 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: prometheus-fips, envoy-gateway-fips, grafana-operator-fips, karpenter-fips, opentofu-fips, kube-fluentd-operator, vexctl, azure-aad-pod-identity-mic, docker-cli-fips, frankenphp-8.3, consul, kube-arangodb-fips, consul-fips, ingress-nginx-controller-fips, eks-distro,...

CLEANSTART-2026-MI82983 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.8.6-r0, 1.8.6-r1, 1.9.0-r0

Multiple security vulnerabilities affect the karpenter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: swagger, spiffe-helper-fips, grafana-operator-fips, karpenter-fips, blob-csi, chisel, kubernetes-dashboard-api, prometheus-node-exporter, hugo-extended, qemu-guesthelper, temporal, tempo, terraform-provider-tls-fips, crossplane-provider-keycloak-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: swagger, spiffe-helper-fips, grafana-operator-fips, karpenter-fips, blob-csi, chisel, kubernetes-dashboard-api, prometheus-node-exporter, hugo-extended, qemu-guesthelper, temporal, tempo, terraform-provider-tls-fips, crossplane-provider-keycloak-fips,...

CLEANSTART-2026-KJ02127 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.8.6-r0, 1.8.6-r1

Multiple security vulnerabilities affect the karpenter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: karpenter-fips, terraform-provider-tls-fips, bank-vaults, vexctl, prometheus-adapter, consul-fips, etcd-fips, rancher-machine, confluent-common-docker, azuredisk-csi-fips, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-aws-fips, checksec,...

GHSA-3WQC-MWFX-672P vulnerabilities

Vulnerabilities for packages: beats-fips, karpenter-fips, blob-csi-fips, eks-distro, blob-csi, gitlab-pages-fips, eks-distro-fips, grafana-fips, knative-operator, wal-g, k3s...