CLEANSTART-2026-WM58022 Security fix for ghsa-gcjh-h69q-9w9g applied in: calico 3.30.7-r7, calico 3.32.1-r3, cert-manager 1.18.6-r5, cert-manager 1.19.6-r2, cert-manager 1.20.3-r3, cert-manager 1.21.0-r0, cert-manager 1.21.1-r0, cluster-autoscaler 1.35.2-r2, cluster-autoscaler 1.36.1-r2, eck-operator 3.4.1-r1, eck-operator-fips 3.4.1-r1, external-secrets-fips 2.7.0-r1, external-secrets-operator 2.5.0-r4, external-secrets-operator 2.6.0-r4, external-secrets-operator 2.7.0-r2, external-secrets-operator 2.8.0-r2, external-secrets-operator 2.9.0-r0, flux-notification-controller-fips 1.9.2-r0, grafana 12.3.10-r1, grafana 12.3.8-r2, grafana 12.4.5-r2, grafana 12.4.6-r0, grafana 12.4.7-r1, grafana 12.4.9-r1, grafana-org-operator 1.13.0-r3, helm-operator 1.39.2-r2, helm-operator 1.40.0-r2, helm-operator 1.42.2-r4, helm-operator 1.42.3-r3, istio 1.29.6-r2, istio 1.30.3-r2, keda 2.20.2-r0, kube-metrics-adapter 0.2.9-r1, kube-state-metrics 2.16.0-r10, kube-state-metrics 2.20.0-r1, kube-state-metrics-fips 2.19.1-r0, kube-state-metrics-fips 2.20.0-r1, kubernetes 1.33.13-r1, kubernetes 1.34.10-r5, kubernetes 1.35.7-r0, kubernetes 1.36.3-r0, kubernetes-csi-external-provisioner-fips 6.2.1-r1, kumactl 2.14.0-r3, kyverno 1.15.3-r3, kyverno 1.16.4-r3, kyverno 1.17.2-r3, kyverno 1.18.1-r3, metallb 0.16.0-r3, metrics-server 0.9.0-r1, openbao 2.5.5-r1, rabbitmq-cluster-operator 2.20.1-r6, rabbitmq-cluster-operator 2.21.1-r3, rabbitmq-cluster-operator 2.22.1-r1, rabbitmq-messaging-topology-operator 1.19.3-r3, rancher-agent 2.11.15-r2, rancher-agent 2.12.11-r1, rancher-agent 2.13.7-r2, rancher-agent 2.14.3-r0, rancher-webhook 0.7.10-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tekton-chains-fips 0.29.1-r1, tekton-pipelines-fips 1.13.1-r1, tekton-pipelines-fips 1.14.0-r4, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1, victoriametrics-operator 0.71.0-r2

ghsa-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LL29921 Security fix for ghsa-rjr7-jggh-pgcp applied in: cortex 1.20.1-r3, cosign 2.6.5-r1, gitea 1.26.4-r1, gitea 1.27.0-r2, karma 0.128-r1, karma 0.129-r1, karma 0.130-r1, karma 0.131-r1, policy-controller-fips 0.15.1-r1, rclone 1.71.2-r3, rclone 1.72.1-r11, rclone 1.73.5-r5, rclone 1.74.3-r2, spire-server 1.14.7-r0, step 0.28.7-r4, step 0.29.0-r3, step-ca 0.27.5-r0, step-cli 0.27.5-r1, step-cli 0.30.6-r0, step-issuer 0.11.0-r4, step-issuer 0.9.11-r2, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

ghsa-rjr7-jggh-pgcp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PL40417 Security fix for ghsa-9g5q-2w5x-hmxf applied in: cortex 1.20.1-r3, cosign 2.6.5-r1, gitea 1.26.4-r1, gitea 1.27.0-r2, gitea 1.27.2-r1, karma 0.128-r1, karma 0.129-r1, karma 0.130-r1, karma 0.131-r1, policy-controller-fips 0.15.1-r1, rclone 1.71.2-r3, rclone 1.72.1-r11, rclone 1.73.5-r5, rclone 1.74.3-r2, spire-server 1.14.7-r0, step 0.28.7-r4, step 0.29.0-r3, step-ca 0.27.5-r0, step-cli 0.27.5-r1, step-cli 0.30.6-r0, step-issuer 0.11.0-r4, step-issuer 0.9.11-r2, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

ghsa-9g5q-2w5x-hmxf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IL87436 Security fix for ghsa-x527-x647-q7gg applied in: cfssl 1.5.0-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r3, distribution 3.1.1-r1, grafana-agent-operator 0.44.3-r1, postgres-operator 1.12.2-r2, temporal-ui-server-fips 2.51.1-r1

ghsa-x527-x647-q7gg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QP14212 Security fix for ghsa-vgwf-h737-ff37 applied in: amazon-cloudwatch-agent 1.300065.0-r1, bank-vaults 1.32.1-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, cfssl 1.5.0-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r3, distribution 3.1.1-r1, distribution-fips 3.1.1-r1, flux-image-automation-controller 1.2.1-r1, fulcio 1.8.7-r2, fulcio-fips 1.8.7-r1, grafana-agent-operator 0.44.3-r1, kaniko 1.24.0-r2, kubernetes 1.34.10-r2, kubernetes-dns-node-cache-fips 1.25.0-r1, metrics-server-fips 0.8.1-r3, node-problem-detector 1.35.2-r1, postgres-operator 1.12.2-r2, postgres-operator 1.13.0-r1, prometheus-adapter 0.12.0-r1, promxy 0.0.96-r3, step-ca-fips 0.30.2-r1, syft 1.43.0-r1, temporal-ui-server-fips 2.51.1-r1, trillian-fips 1.7.3-r1, yunikorn-k8shim 1.8.0-r1, yunikorn-k8shim-fips 1.8.0-r2

ghsa-vgwf-h737-ff37 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AH48627 Security fix for ghsa-5cgq-3rg8-m6cv applied in: amazon-cloudwatch-agent 1.300065.0-r1, bank-vaults 1.32.1-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, cfssl 1.5.0-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r3, distribution 3.1.1-r1, distribution-fips 3.1.1-r1, flux-image-automation-controller 1.2.1-r1, fulcio 1.8.7-r2, fulcio-fips 1.8.7-r1, grafana-agent-operator 0.44.3-r1, kaniko 1.24.0-r2, kubernetes-dns-node-cache-fips 1.25.0-r1, litestream 0.3.14-r3, node-problem-detector 1.35.2-r1, postgres-operator 1.12.2-r2, postgres-operator 1.13.0-r1, prometheus-adapter 0.12.0-r1, promxy 0.0.96-r3, step-ca-fips 0.30.2-r1, syft 1.43.0-r1, temporal-ui-server-fips 2.51.1-r1, trillian-fips 1.7.3-r1, yunikorn-k8shim 1.8.0-r1, yunikorn-k8shim-fips 1.8.0-r2

ghsa-5cgq-3rg8-m6cv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GE42999 Security fix for ghsa-vqf4-7m7x-wgfc applied in: spark 3.5.9-r1, spark-sc213-jdk17-py312 3.4.4-r1

ghsa-vqf4-7m7x-wgfc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OH51189 Security fix for CVE-2026-59873 applied in: n8n 2.28.0-r2, npm 11.17.0-r2, pulumi 3.248.0-r0, renovate 43.250.0-r2, renovate 43.251.3-r2, renovate 43.252.8-r2, renovate 43.253.1-r2, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1, sqlpad 7.5.7-r1

CVE-2026-59873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LP47125 Security fix for CVE-2026-59869 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, langfuse 3.210.0-r1, pulumi 3.248.0-r0, renovate 44.31.0-r1, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1, thingsboard 4.3.1.3-r6

CVE-2026-59869 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GE70813 Security fix for CVE-2026-47262 applied in: helm 3.21.1-r1, helm-operator 1.42.2-r2, rancher-agent 2.12.11-r1, rancher-agent 2.13.7-r1, rancher-agent 2.14.3-r0, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.42.1-r0

CVE-2026-47262 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LL95824 Security fix for ghsa-v422-hmwv-36x6 applied in: sqlpad 7.5.7-r4, thingsboard 4.3.1.3-r2

ghsa-v422-hmwv-36x6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NH98703 Security fix for CVE-2025-14986 applied in: temporal-server 1.28.4-r2, temporal-server 1.29.7-r2, temporal-server 1.30.5-r1, temporal-server 1.30.6-r1, temporal-server 1.31.1-r5

CVE-2025-14986 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UB40516 Security fix for CVE-2025-14987 applied in: temporal-server 1.28.4-r2, temporal-server 1.29.7-r2, temporal-server 1.30.5-r1, temporal-server 1.30.6-r1, temporal-server 1.31.1-r5

CVE-2025-14987 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XJ72729 Security fix for CVE-2026-53718 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4, tigera-operator-fips 1.38.16-r2

CVE-2026-53718 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XW00649 Security fix for ghsa-mhm7-754m-9p8w applied in: activemq 6.2.8-r2, activemq 6.3.1-r1, apache-hive 4.1.0-r5, apache-nifi 2.10.0-r3, apache-zookeeper 3.8.6-r5, apache-zookeeper 3.9.5-r5, elasticsearch 9.2.8-r1, hazelcast 5.7.0-r1, keycloak 26.4.13-r1, kserve-modelmesh 0.12.0-r17, logstash-fips 9.4.3-r1, spark-sc213-jdk17-py312 4.2.0-r1

ghsa-mhm7-754m-9p8w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JW13513 Security fix for CVE-2026-44890 applied in: apache-hive 4.2.0-r5, hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-44890 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GH03249 Security fix for CVE-2026-44250 applied in: apache-hive 4.2.0-r5, hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-44250 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SM87861 Security fix for CVE-2026-59921 applied in: apache-activemq-artemis 2.56.0-r1, apache-nifi 2.10.0-r3, elasticsearch 9.1.10-r1, elasticsearch 9.2.8-r1, elasticsearch 9.3.8-r1, elasticsearch 9.4.4-r4, hazelcast 5.7.0-r1, keycloak 26.5.7-r7, logstash-fips 9.4.3-r1, strimzi-kafka-operator 1.1.0-r2

CVE-2026-59921 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KF12369 Security fix for CVE-2026-26018 applied in: kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache-fips 1.26.0-r1

CVE-2026-26018 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WT37658 Security fix for CVE-2026-47701 applied in: kube-logging-operator 6.5.2-r1, kube-logging-operator 6.6.0-r1

CVE-2026-47701 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...