CLEANSTART-2026-XW33274 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

CLEANSTART-2026-JJ84567 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.6.4-r3

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GK29346 Security fixes for CVE-2025-15558, CVE-2025-47907, CVE-2025-66564, CVE-2026-1229, CVE-2026-22039, CVE-2026-22703, CVE-2026-22772, CVE-2026-23831, CVE-2026-23881, CVE-2026-24051, CVE-2026-24117, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-2464-8j7c-4cjm, ghsa-29wx-vh33-7x7r, ghsa-2x5j-vhc8-9cwm, ghsa-459x-q9hg-4gpq, ghsa-4qg8-fj49-pxjh, ghsa-4vq8-7jfc-9cvp, ghsa-6m8w-jc87-6cr7, ghsa-88jx-383q-w4qc, ghsa-95pr-fxf5-86gv, ghsa-c5q2-7r4c-mv6g, ghsa-c6gw-w398-hv78, ghsa-c77r-fh37-x2px, ghsa-f83f-xpx7-ffpw, ghsa-fv92-fjc5-jj9h, ghsa-jrr2-x33p-6hvc, ghsa-mh63-6h87-95cp, ghsa-mqqf-5wvp-8fh8, ghsa-p77j-4mvh-x3m3, ghsa-qjvc-p88j-j9rm, ghsa-r5p3-955p-5ggq, ghsa-v23v-6jw2-98fq, ghsa-v6v8-xj6m-xwqh, ghsa-xw73-rw38-6vjc applied in versions: 1.4.2-r2, 1.4.2-r4, 1.4.2-r6, 1.4.2-r7

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WI71304 Security fixes for CVE-2023-34091, CVE-2023-47630, CVE-2024-48921, CVE-2025-46342, CVE-2025-47281, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-22039, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-459x-q9hg-4gpq, ghsa-hgv6-w7r3-w4qw applied in versions: 1.3.1-r9

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YS66739 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3. See references for individual vulnerability details...

CLEANSTART-2026-XS24366 Cancelling a query (e

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. Cancelling a query e...

CLEANSTART-2026-ND19988 Cancelling a query (e

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. Cancelling a query e...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kubevela-fips, gops, azure-ipam, kube-rbac-proxy, otel-cli, s5cmd, cloud-provider-gcp-cloud-controller-manager, cis-operator, volsync, dagdotdev, cloud-sql-proxy, age-fips, cluster-api-provider-vsphere-fips, pvc-autoresizer, x509-certificate-exporter-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: kubevela-fips, gops, azure-ipam, kube-rbac-proxy, otel-cli, s5cmd, cloud-provider-gcp-cloud-controller-manager, cis-operator, volsync, dagdotdev, cloud-sql-proxy, age-fips, cluster-api-provider-vsphere-fips, pvc-autoresizer, x509-certificate-exporter-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubevela-fips, gops, azure-ipam, kube-rbac-proxy, otel-cli, s5cmd, crossplane-provider-azure-storage, secrets-store-csi-driver-provider-azure-fips, cloud-sql-proxy, aws-flb-cloudwatch, caddy-fips, x509-certificate-exporter-fips, prometheus-podman-exporter-fips,...

GHSA-MJJW-553X-87PQ vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

CVE-2024-0132 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: skopeo, zarf, ctop, newrelic-infrastructure-agent, nerdctl, k3s, kubernetes, k3d, k9s, docker, wolfictl, kubescape, podman, runc, kaniko, kots, zot, cadvisor, syft, grype, trivy, buildkitd, skaffold...