CLEANSTART-2026-ZD86302 Security fixes in neuvector-fips 5.4.8-r0

Package neuvector-fips version 5.4.8-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: trivy, kyverno-fips, trivy-operator-fips, neuvector-sigstore-interface, tbot, tflint, teleport-operator-fips, kubescape-server-fips, zarf, crossplane-fips, spire-server-fips, aactl, tekton-chains, cloudbeat, falcoctl-fips, docker-fips,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tkn, gitsign, policy-controller, aactl, zarf, ratify, kubescape, kyverno, teleport, kyverno-notation-aws, crossplane, tekton-chains, falcoctl, tflint, trivy, neuvector-sigstore-interface, trivy-operator...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: tkn, gitsign, policy-controller, aactl, zarf, ratify, kubescape, kyverno, teleport, kyverno-notation-aws, crossplane, tekton-chains, falcoctl, tflint, trivy, neuvector-sigstore-interface, trivy-operator...

GHSA-4JJ9-CGQC-X9H5 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

CVE-2025-66001 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kyverno-fips, trivy-operator-fips, ko, neuvector-sigstore-interface, slsa-verifier, tbot, tflint, kubescape-server-fips, zarf, crossplane-fips, ko-fips, spire-server-fips, aactl, tekton-chains, cloudbeat, falcoctl-fips, docker-fips, neuvector-sigstore-interface-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: kyverno-fips, trivy-operator-fips, ko, neuvector-sigstore-interface, slsa-verifier, tbot, tflint, kubescape-server-fips, zarf, crossplane-fips, ko-fips, spire-server-fips, aactl, tekton-chains, cloudbeat, falcoctl-fips, docker-fips, neuvector-sigstore-interface-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tkn, gitsign, policy-controller, aactl, spire-server, kyverno-notation-aws, goreleaser, kyverno, teleport, neuvector-sigstore-interface, ko, zarf, kubescape, crossplane, slsa-verifier, tekton-chains, tflint, ratify, falcoctl, trivy-operator...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tkn, gitsign, policy-controller, aactl, spire-server, kyverno-notation-aws, goreleaser, kyverno, teleport, neuvector-sigstore-interface, ko, zarf, kubescape, crossplane, slsa-verifier, tekton-chains, tflint, ratify, falcoctl, trivy-operator...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: trivy, xeol, cluster-api-helm-controller-fips, dagger, chainctl, headlamp, beats, crossplane-fips, rancher, helm-exporter, docker-fips, spegel, tw, chartmuseum, cloudbeat-fips, k9s, wolfictl, jfrog-cli, newrelic-infrastructure-agent, kgateway-fips,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: trivy, xeol, cluster-api-helm-controller-fips, dagger, chainctl, headlamp, beats, crossplane-fips, rancher, helm-exporter, docker-fips, spegel, tw, chartmuseum, cloudbeat-fips, k9s, wolfictl, jfrog-cli, newrelic-infrastructure-agent, kgateway-fips,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: trivy, xeol, cluster-api-helm-controller-fips, dagger, chainctl, headlamp, beats, crossplane-fips, rancher, helm-exporter, docker-fips, spegel, tw, chartmuseum, cloudbeat-fips, k9s, wolfictl, jfrog-cli, newrelic-infrastructure-agent, kgateway-fips,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: trivy, xeol, cluster-api-helm-controller-fips, dagger, chainctl, headlamp, beats, crossplane-fips, rancher, helm-exporter, docker-fips, spegel, tw, chartmuseum, cloudbeat-fips, k9s, wolfictl, jfrog-cli, newrelic-infrastructure-agent, kgateway-fips,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: trivy, xeol, cluster-api-helm-controller-fips, dagger, chainctl, headlamp, beats, crossplane-fips, rancher, helm-exporter, docker-fips, spegel, tw, chartmuseum, cloudbeat-fips, k9s, wolfictl, jfrog-cli, newrelic-infrastructure-agent, kgateway-fips,...