CLEANSTART-2026-WY50383 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25518, CVE-2026-26958, CVE-2026-35469, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2 applied in versions: 1.17.0-r0, 1.18.0-r0, 1.18.0-r1, 1.18.0-r2

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JC64695 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-26958, CVE-2026-35469, ghsa-f6x5-jh6r-wrfv, ghsa-fw7p-63qq-7hpr, ghsa-gx3x-vq4p-mhhv, ghsa-j5w8-q4qc-rx2x, ghsa-mh2q-q3fh-2475, ghsa-pc3f-x583-g7j2 applied in versions: 1.16.1-r0, 1.16.1-r1, 1.18.0-r0, 1.19.0-r1

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VU08393 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.6.1-r0, 2.6.1-r1, 2.6.1-r7, 2.6.1-r8, 2.6.1-r9

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SE34232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p436-gjf2-799p applied in versions: 7.1.1-r10, 7.1.1-r7, 7.1.1-r8, 7.1.1-r9

Multiple security vulnerabilities affect the minio-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZR76960 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-p77j-4mvh-x3m3 applied in versions: 1.24.0-r0, 1.29.0-r0, 1.29.0-r1

Multiple security vulnerabilities affect the k8ssandra-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: argo-events-fips, nemo, pulumi, wolfictl, witness, trivy-fips, kaniko, kargo, melange, cerbos, skaffold-fips, kaniko-fips, gitlab-runner-fips, zot, tfsec, src-fingerprint-fips, grafana-alloy, upwind-agent, xeol-fips, grafana, argocd-image-updater-fips, bom,...

CLEANSTART-2026-DN20646 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, neuvector, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy, ipfs-cluster-fips, crossplane-provider-aws-cognitoidentity-fips, volcano-fips, istio, crossplane-provider-aws-secretsmanager-fips, cadence, vexctl,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: neuvector, openbao, cert-manager-cmctl, commercial-grafana, rancher-webhook, opentofu-fips, agentbeat-fips, gitlab-runner-fips, seaweedfs-fips, zot, k6, beats, rancher-webhook-fips, telegraf, versitygw-fips, grafana, xeol-fips, external-secrets-operator, packer-fips,...

GHSA-J6CV-3W8P-VRG8 vulnerabilities

Vulnerabilities for packages: virt-api-fips, virt-launcher, virt-handler, virt-controller-fips, virt-controller, virt-handler-fips, virt-operator, virt-operator-fips, virt-api...

CVE-2026-6383 vulnerabilities

Vulnerabilities for packages: virt-api-fips, virt-launcher, virt-handler, virt-controller-fips, virt-controller, virt-handler-fips, virt-operator, virt-operator-fips, virt-api...

CLEANSTART-2026-AN01004 filippo

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...

CLEANSTART-2026-QO20135 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Multiple security vulnerabilities affect the minio-operator-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. See references for individual...

CLEANSTART-2026-YG63570 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the minio-operator-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: trillian, plutono-fips, minio-operator, cloud-sql-proxy, agentbeat, minio-fips, karma, splunk-otel-collector-fips, trillian-fips, cloudzero-agent, karma-fips, nrdot-collector-fips, minio-object-browser, minio, keda-fips, istio, prometheus-pushgateway,...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: trillian, plutono-fips, minio-operator, cloud-sql-proxy, agentbeat, minio-fips, karma, splunk-otel-collector-fips, trillian-fips, cloudzero-agent, karma-fips, nrdot-collector-fips, minio-object-browser, minio, keda-fips, istio, prometheus-pushgateway,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: nemo, spire-server, grafana-operator-fips, ingress-nginx-controller, rabbitmq-messaging-topology-operator, commercial-expanso-edge, victorialogs-fips, karpenter-fips, mariadb-operator-fips, oras, eks-node-monitoring-agent, local-path-provisioner, localstack,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: nemo, spire-server, grafana-operator-fips, ingress-nginx-controller, rabbitmq-messaging-topology-operator, commercial-expanso-edge, victorialogs-fips, karpenter-fips, mariadb-operator-fips, oras, eks-node-monitoring-agent, local-path-provisioner, localstack,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: backup-restore-operator, tekton-chains-fips, ipfs-cluster-fips, openbao, istio, helm-diff-fips, libnvidia-container-fips, vendir, opentofu-fips, oras, neuvector-scanner, seaweedfs-fips, zot, cilium, amazon-ecs-cni-plugins, tigera-operator-fips, redpanda, xeol-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: backup-restore-operator, tekton-chains-fips, ipfs-cluster-fips, openbao, istio, helm-diff-fips, libnvidia-container-fips, vendir, opentofu-fips, oras, neuvector-scanner, seaweedfs-fips, zot, cilium, amazon-ecs-cni-plugins, tigera-operator-fips, redpanda, xeol-fips,...