CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: act, calico-fips, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fip...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: act, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fips,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: act, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: act, calico-fips, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fip...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubecolor, lazygit, datadog-agent, azuredisk-csi-fips, gosu, calico, dapr, crossplane-provider-aws-wafv2, hello-world-golang, nri-couchbase-fips, trivy-operator, kube-mgmt-fips, trivy, localstack, azure-container-networking, k8s-device-plugin, authservice-fips,...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SQ18258 url

Multiple security vulnerabilities affect the minio-operator-fips package. url. See references for individual vulnerability details...

CLEANSTART-2026-BA09462 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-UF78567 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the minio-operator-fips package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

CLEANSTART-2026-UQ00642 Docker CLI for Windows searches for plugin binaries in C:\\ProgramData\\Docker\\cli-plugins, a directory that does not exist by default

Multiple security vulnerabilities affect the minio-operator-fips package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...

CLEANSTART-2026-ST75560 During the TLS 1

Multiple security vulnerabilities affect the minio-operator-fips package. During the TLS 1. See references for individual vulnerability details...

CLEANSTART-2026-OT38160 url

Multiple security vulnerabilities affect the minio-operator-fips package. url. See references for individual vulnerability details...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ssm-fips, gitlab-workhorse-ce, crossplane-aws-provider, commercial-grafana, crossplane-provider-aws-cloudwatchlogs-fips, terraform-fips, snyk-cli, kyverno-policy-reporter-fips, yace, crossplane-provider-family-aws, bento-fips, buildkitd,...

CLEANSTART-2026-WI06218 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.15.1-r0

Multiple security vulnerabilities affect the postgres-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KT25851 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.87.0-r0, 0.87.0-r1, 0.88.0-r1

Multiple security vulnerabilities affect the prometheus-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BP32212 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.87.0-r0, 0.87.0-r1, 0.88.0-r0

Multiple security vulnerabilities affect the prometheus-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RE45064 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 5.0.18-r7

Multiple security vulnerabilities affect the minio-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KW35511 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24515, CVE-2026-25210, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 5.0.18-r6, 5.0.18-r7

Multiple security vulnerabilities affect the minio-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...