CLEANSTART-2026-NM10451 Security fix for GHSA-xmrv-pmrh-hhx2 applied in: litestream 0.5.14-r1, kaniko 1.24.0-r2, flux-kustomize-controller-fips 1.8.5-r0, kyverno-policy-reporter-fips 3.7.3-r1, jitsucom-bulker 2.10.0-r0

GHSA-xmrv-pmrh-hhx2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PO24101 Security fix for GHSA-f6x5-jh6r-wrfv applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, kubernetes-dns-node-cache-fips 1.25.0-r1, argo-events 1.6.3-r1, local-static-provisioner-fips 2.8.0-r0, grafana-alloy-fips 1.12.1-r0, kubevela 1.10.5-r0

GHSA-f6x5-jh6r-wrfv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZW70000 Security fix for GHSA-mh2q-q3fh-2475 applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, step-ca-fips 0.30.2-r1, prometheus-operator 0.89.0-r1, litestream 0.5.14-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, node-problem-detector 1.35.2-r1, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, argo-events 1.6.3-r1, kube-logging-operator 6.4.0-r1, kaniko 1.24.0-r2, prometheus-operator 0.88.1-r0, kubernetes-csi-livenessprobe-fips 2.17.0-r2, modelmesh-runtime-adapter 0.12.0-r2

GHSA-mh2q-q3fh-2475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC23006 Security fix for GHSA-8r3f-844c-mc37 applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, k8sgpt 0.1.8-r2, kyverno-policy-reporter-kyverno-plugin 1.5.2-r1

GHSA-8r3f-844c-mc37 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AG54423 Security fix for GHSA-p77j-4mvh-x3m3 applied in: helm-fips 3.20.2-r0, dynamic-localpv-provisioner 4.5.0-r1, argo-workflows 3.6.19-r3, fulcio-fips 1.8.7-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r2, litestream 0.5.14-r1, falco-exporter 0.8.7-r2, k8sgpt-operator 0.2.27-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2, cert-manager 1.19.4-r1

GHSA-p77j-4mvh-x3m3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GI83888 Security fix for GHSA-j5w8-q4qc-rx2x applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, argo-events 1.6.3-r1, local-static-provisioner-fips 2.8.0-r0, grafana-alloy-fips 1.12.1-r0

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VR20426 Security fix for GHSA-jppx-rxg9-jmrx applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, litestream 0.5.14-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, postgres-operator 1.12.2-r1, kumactl 2.13.8-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, promxy 0.0.96-r2, promxy 0.0.96-r3, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, grafana-agent-operator 0.44.3-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, vault-k8s-fips 1.7.5-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

GHSA-jppx-rxg9-jmrx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FO62255 Security fix for GHSA-vvgc-356p-c3xw applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, ip-masq-agent 2.12.0-r1, kserve-rest-proxy 0.12.0-r0, kubernetes-dns-node-cache-fips 1.25.0-r1, local-static-provisioner-fips 2.8.0-r0

GHSA-vvgc-356p-c3xw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UX66393 Security fix for GHSA-f5wc-c3c7-36mc applied in: step-ca 0.30.2-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, melange 0.55.0-r1, litestream 0.5.14-r1, postgres-operator 1.12.2-r1, crossplane-provider-sql-fips 0.15.0-r2, kumactl 2.13.8-r1, promxy 0.0.96-r2, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, vault-k8s-fips 1.7.5-r1, cert-manager-webhook-pdns-fips 2.5.5-r1

GHSA-f5wc-c3c7-36mc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AT58846 Security fix for GHSA-6v2p-p543-phr9 applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, k8sgpt 0.1.8-r2, postgres-operator 1.12.2-r1, kubernetes-dns-node-cache-fips 1.26.0-r1, kubernetes-dns-node-cache-fips 1.24.0-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, local-static-provisioner-fips 2.8.0-r0, postgres-operator 1.13.0-r1

GHSA-6v2p-p543-phr9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HM91097 Security fix for GHSA-vgwf-h737-ff37 applied in: step-ca 0.30.2-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, melange 0.55.0-r1, litestream 0.5.14-r1, postgres-operator 1.12.2-r1, crossplane-provider-sql-fips 0.15.0-r2, kumactl 2.13.8-r1, promxy 0.0.96-r2, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, argo-events 1.6.3-r1, vault-k8s-fips 1.7.5-r1

GHSA-vgwf-h737-ff37 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WM82155 Security fix for GHSA-qxp5-gwg8-xv66 applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, ip-masq-agent 2.12.0-r1, kserve-rest-proxy 0.12.0-r0, kubernetes-dns-node-cache-fips 1.25.0-r1

GHSA-qxp5-gwg8-xv66 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OZ66461 pyrage is a set of Python bindings for the rage file encryption library (age in Rust)

Security vulnerability affects the litestream package. pyrage is a set of Python bindings for the rage file encryption library age in Rust...

CLEANSTART-2026-SP68945 Security fix for GHSA-32gq-x56h-299c applied in: litestream 0.3.14-r2, litestream 0.3.14-r3

Security vulnerability affects the litestream package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WB56354 Security fix for GHSA-m425-mq94-257g applied in: litestream 0.3.14-r2, litestream 0.3.14-r3

Security vulnerability affects the litestream package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KZ33955 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames

Security vulnerability affects the litestream package. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames...

CLEANSTART-2026-NY86477 Security fix for GHSA-4374-p667-p6c8 applied in: litestream 0.3.14-r2, litestream 0.3.14-r3

Security vulnerability affects the litestream package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OF75754 Security fix for GHSA-4v7x-pqxf-cx7m applied in: litestream 0.3.14-r2, litestream 0.3.14-r3

Security vulnerability affects the litestream package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JX64679 Security fix for GHSA-qppj-fm5r-hxr3 applied in: litestream 0.3.14-r2, litestream 0.3.14-r3

Security vulnerability affects the litestream package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JH84635 SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9

Security vulnerability affects the litestream package. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9...