GO-2026-5558 vulnerabilities

Vulnerabilities for packages: opentofu-fips, opentofu...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kubescape, consul-k8s, cluster-api-helm-controller, vcluster-fips, opentofu, k8ssandra-client, jfrog-cli, kyverno, tigera-operator, rancher, kube-mgmt, trivy-fips, kyverno-notation-aws-fips, crossplane-fips, cloudbeat, eksctl, k9s-fips, oras-fips,...

CLEANSTART-2026-GO67814 Security fixes in opentofu-fips 1.9.4-r1

Package opentofu-fips version 1.9.4-r1 fixes 5 vulnerabilities: CVE-2025-61729, CVE-2025-61727, CVE-2025-47913, CVE-2025-58181, CVE-2025-47914...

CLEANSTART-2026-EN87041 Security fixes in opentofu-fips 1.8.11-r2

Package opentofu-fips version 1.8.11-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-AT41104 Security fixes in opentofu-fips 1.8.11-r3

Package opentofu-fips version 1.8.11-r3 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-MY41612 Security fixes in opentofu-fips 1.10.9-r4

Package opentofu-fips version 1.10.9-r4 fixes 7 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-hfvc-g4fc-pqhx, CVE-2026-39883, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-KS00115 Security fixes in opentofu-fips 1.7.10-r3

Package opentofu-fips version 1.7.10-r3 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-QW04025 Security fixes in opentofu-fips 1.11.5-r3

Package opentofu-fips version 1.11.5-r3 fixes 16 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-hfvc-g4fc-pqhx, CVE-2026-39883, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-FH57002 Security fixes in opentofu-fips 1.7.10-r2

Package opentofu-fips version 1.7.10-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-AZ25301 Security fixes in opentofu-fips 1.10.9-r1

Package opentofu-fips version 1.10.9-r1 fixes 2 vulnerabilities: CVE-2026-1229, CVE-2026-24051...

CLEANSTART-2026-ZV01443 Security fixes in opentofu-fips 1.7.10-r0

Package opentofu-fips version 1.7.10-r0 fixes 5 vulnerabilities: CVE-2025-61729, CVE-2025-61727, CVE-2025-47913, CVE-2025-58181, CVE-2025-47914...

CLEANSTART-2026-FG71338 Security fixes in opentofu-fips 1.8.11-r5

Package opentofu-fips version 1.8.11-r5 fixes 9 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter, gitlab-kas, reports-server, kubescape, kubernetes-dashboard, external-secrets-operator, mattermost, opentofu, nemo, kyverno, flux, skaffold-fips, fscrypt, coder, tigera-operator, flux-fips, chisel, snyk-cli, kubevela-fips,...

GHSA-PXH5-6RRC-8RJV vulnerabilities

Vulnerabilities for packages: opentofu-fips, opentofu...

CLEANSTART-2026-GY48351 Within HostnameError

Multiple security vulnerabilities affect the opentofu-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-XN15507 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the opentofu-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-MI12470 Within HostnameError

Multiple security vulnerabilities affect the opentofu-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-SO13464 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the opentofu-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

GHSA-W8RR-5GCM-PP58 vulnerabilities

Vulnerabilities for packages: gitlab-kas, kubescape, grafana-alloy, kiali-fips, external-secrets-operator, gotrue, opa-fips-envoy, opentofu, gitaly, nrdot-collector-k8s, kiali, amazon-cloudwatch-agent-fips, kyverno, flux, datadog-agent, cloudprober-fips, fleet-server-fips, thanos, bento, buildkit...

CVE-2026-39882 vulnerabilities

Vulnerabilities for packages: gitlab-kas, kubescape, grafana-alloy, kiali-fips, external-secrets-operator, gotrue, opa-fips-envoy, opentofu, gitaly, nrdot-collector-k8s, kiali, amazon-cloudwatch-agent-fips, kyverno, flux, datadog-agent, cloudprober-fips, fleet-server-fips, thanos, bento, buildkit...