CLEANSTART-2026-IW91368 Security fixes for CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.14.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: temporal, omni-fips, victoriametrics-cluster-fips, dataplaneapi, kube-logging-logging-operator, ingress-nginx-controller-fips, karpenter, aws-privateca-issuer-fips, newrelic-k8s-metadata-injection-fips, gh, localstack, flux-operator-fips, osv-scanner, dgraph,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, crossplane-provider-aws-cloudformation-fips, swagger, sftpgo-plugin-pubsub, backup-restore-operator-fips, crossplane-provider-aws-backup-fips, boring-registry, cloud-provider-aws, ingress-nginx-controller-fips, libnvidia-containe...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, crossplane-provider-aws-cloudformation-fips, swagger, rancher-telemetry, sftpgo-plugin-pubsub, backup-restore-operator-fips, crossplane-provider-aws-backup-fips, boring-registry, victoriametrics-cluster-fips, volcano,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, crossplane-provider-aws-cloudformation-fips, swagger, rancher-telemetry, sftpgo-plugin-pubsub, backup-restore-operator-fips, crossplane-provider-aws-backup-fips, boring-registry, victoriametrics-cluster-fips, volcano,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, crossplane-provider-aws-cloudformation-fips, swagger, rancher-telemetry, sftpgo-plugin-pubsub, backup-restore-operator-fips, crossplane-provider-aws-backup-fips, boring-registry, victoriametrics-cluster-fips, volcano,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, crossplane-provider-aws-cloudformation-fips, swagger, rancher-telemetry, sftpgo-plugin-pubsub, backup-restore-operator-fips, crossplane-provider-aws-backup-fips, boring-registry, victoriametrics-cluster-fips, volcano,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, crossplane-provider-aws-cloudformation-fips, swagger, rancher-telemetry, sftpgo-plugin-pubsub, backup-restore-operator-fips, crossplane-provider-aws-backup-fips, boring-registry, victoriametrics-cluster-fips, volcano,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: flyte, swagger, src, boring-registry, libnvidia-container, prometheus-redis-exporter-fips, kubernetes-csi-driver-hostpath, cni-plugins, litestream, velero-plugin-for-aws, stakater-reloader, helm-fips, pulumi-language-dotnet, configmap-reload-fips, capslock, skaffold,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: src, boring-registry, prometheus-redis-exporter-fips, kubernetes-csi-driver-hostpath, stakater-reloader, pulumi-language-dotnet, configmap-reload-fips, capslock, skaffold, kube-state-metrics, sigstore-scaffolding-fips, logstash-exporter-fips, kaniko, step-ca,...