GO-2026-5558 vulnerabilities

Vulnerabilities for packages: opentofu, opentofu-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, kargo, trivy-operator, argo-cd-fips, falcoctl-fips, helm-push, cert-manager-cmctl, conftest-fips, ratify-fips, k9s-fips, tigera-operator, argocd-image-updater, gatekeeper, rancher-fleet-fips, conftest, steampipe, cloudbeat-fips,...

CLEANSTART-2026-AT41104 Security fixes in opentofu-fips 1.8.11-r3

Package opentofu-fips version 1.8.11-r3 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-EN87041 Security fixes in opentofu-fips 1.8.11-r2

Package opentofu-fips version 1.8.11-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-GO67814 Security fixes in opentofu-fips 1.9.4-r1

Package opentofu-fips version 1.9.4-r1 fixes 5 vulnerabilities: CVE-2025-61729, CVE-2025-61727, CVE-2025-47913, CVE-2025-58181, CVE-2025-47914...

CLEANSTART-2026-KS00115 Security fixes in opentofu-fips 1.7.10-r3

Package opentofu-fips version 1.7.10-r3 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-MY41612 Security fixes in opentofu-fips 1.10.9-r4

Package opentofu-fips version 1.10.9-r4 fixes 7 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-hfvc-g4fc-pqhx, CVE-2026-39883, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-AZ25301 Security fixes in opentofu-fips 1.10.9-r1

Package opentofu-fips version 1.10.9-r1 fixes 2 vulnerabilities: CVE-2026-1229, CVE-2026-24051...

CLEANSTART-2026-ZV01443 Security fixes in opentofu-fips 1.7.10-r0

Package opentofu-fips version 1.7.10-r0 fixes 5 vulnerabilities: CVE-2025-61729, CVE-2025-61727, CVE-2025-47913, CVE-2025-58181, CVE-2025-47914...

CLEANSTART-2026-FH57002 Security fixes in opentofu-fips 1.7.10-r2

Package opentofu-fips version 1.7.10-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-QF23668 Security fixes in opentofu-fips 1.11.5-r0

Package opentofu-fips version 1.11.5-r0 fixes 2 vulnerabilities: CVE-2026-1229, CVE-2026-24051...

CLEANSTART-2026-QW04025 Security fixes in opentofu-fips 1.11.5-r3

Package opentofu-fips version 1.11.5-r3 fixes 16 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-hfvc-g4fc-pqhx, CVE-2026-39883, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-FG71338 Security fixes in opentofu-fips 1.8.11-r5

Package opentofu-fips version 1.8.11-r5 fixes 9 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: calico-fips, kaf, frankenphp-8.5, kube-state-metrics, omnictl-multiarch, spire-server, upwind-agent, docker-machine-driver-harvester, skaffold-fips, trivy-operator, argo-cd-fips, minio-fips, terraform, kine, argo-workflows-fips, k9s-fips, tigera-operator,...

GHSA-PXH5-6RRC-8RJV vulnerabilities

Vulnerabilities for packages: opentofu, opentofu-fips...

CLEANSTART-2026-GY48351 Within HostnameError

Multiple security vulnerabilities affect the opentofu-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-XN15507 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the opentofu-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-MI12470 Within HostnameError

Multiple security vulnerabilities affect the opentofu-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-SO13464 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the opentofu-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

GHSA-W8RR-5GCM-PP58 vulnerabilities

Vulnerabilities for packages: cortex, knative-eventing, kubescape-operator-fips, fleet-server-fips, frankenphp-8.5, docker-compose, spicedb, milvus, net-kourier, containerd-fips, opa-envoy, argo-cd-fips, terraform, weaviate, loki-fips, argo-workflows-fips, aws-otel-collector-fips,...