GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit-fips, rancher, rancher-agent, gpu-operator, buildah, gpu-operator-fips, node-feature-discovery-fips, nvidia-container-toolkit, cadvisor, podman, k8s-device-plugin, podman-fips, prometheus-podman-exporter, prometheus-podman-exporter-fips,...

CLEANSTART-2026-JJ84567 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.6.4-r3

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GK29346 Security fixes for CVE-2025-15558, CVE-2025-47907, CVE-2025-66564, CVE-2026-1229, CVE-2026-22039, CVE-2026-22703, CVE-2026-22772, CVE-2026-23831, CVE-2026-23881, CVE-2026-24051, CVE-2026-24117, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-2464-8j7c-4cjm, ghsa-29wx-vh33-7x7r, ghsa-2x5j-vhc8-9cwm, ghsa-459x-q9hg-4gpq, ghsa-4qg8-fj49-pxjh, ghsa-4vq8-7jfc-9cvp, ghsa-6m8w-jc87-6cr7, ghsa-88jx-383q-w4qc, ghsa-95pr-fxf5-86gv, ghsa-c5q2-7r4c-mv6g, ghsa-c6gw-w398-hv78, ghsa-c77r-fh37-x2px, ghsa-f83f-xpx7-ffpw, ghsa-fv92-fjc5-jj9h, ghsa-jrr2-x33p-6hvc, ghsa-mh63-6h87-95cp, ghsa-mqqf-5wvp-8fh8, ghsa-p77j-4mvh-x3m3, ghsa-qjvc-p88j-j9rm, ghsa-r5p3-955p-5ggq, ghsa-v23v-6jw2-98fq, ghsa-v6v8-xj6m-xwqh, ghsa-xw73-rw38-6vjc applied in versions: 1.4.2-r2, 1.4.2-r4, 1.4.2-r6, 1.4.2-r7

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WI71304 Security fixes for CVE-2023-34091, CVE-2023-47630, CVE-2024-48921, CVE-2025-46342, CVE-2025-47281, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-22039, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-459x-q9hg-4gpq, ghsa-hgv6-w7r3-w4qw applied in versions: 1.3.1-r9

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YS66739 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3. See references for individual vulnerability details...

CLEANSTART-2026-XS24366 Cancelling a query (e

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. Cancelling a query e...

CLEANSTART-2026-ND19988 Cancelling a query (e

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. Cancelling a query e...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: chartmuseum-fips, external-secrets-operator-fips, wireguard-go, task, velero-plugin-for-microsoft-azure, external-dns-fips, gobump, tekton-pipelines-fips, velero-plugin-for-csi-fips, ytt-fips, oras, prometheus-postgres-exporter, azurefile-csi, gosu,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: chartmuseum-fips, external-secrets-operator-fips, wireguard-go, task, velero-plugin-for-microsoft-azure, external-dns-fips, gobump, tekton-pipelines-fips, velero-plugin-for-csi-fips, ytt-fips, oras, prometheus-postgres-exporter, azurefile-csi, gosu,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: hugo-fips, external-dns-fips, gobump, tekton-pipelines-fips, velero-plugin-for-csi-fips, aactl, op-geth, prometheus-postgres-exporter, azurefile-csi, gosu, http-echo, node-feature-discovery-fips, kuma, sftpgo-plugin-kms, gops, opa, qemu-guesthelper,...

GHSA-MJJW-553X-87PQ vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, nvidia-gpu-operator-validator...

CVE-2024-0132 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, nvidia-gpu-operator-validator...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: zarf, grype, skopeo, datadog-agent, newrelic-infrastructure-agent, kubernetes, kubernetes-fips, kaniko, trivy, nerdctl, ctop, k3s, kubescape, cadvisor, datadog-agent-fips, k9s, podman, kots, skaffold, runc, docker, wolfictl, buildkitd, zot, k3d, syft...