GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: zarf, kubescape-server-fips, kyverno-notation-aws, kubescape-server, tekton-chains, kubescape, teleport-operator-fips, cloudbeat, docker-fips, tkn, tekton-chains-fips, trivy-operator-fips, image-factory-fips, trivy, aactl, gitsign, spire-server-fips, trivy-operator,...

CLEANSTART-2026-YQ26872 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-1229, CVE-2026-24051, CVE-2026-34986, CVE-2026-39984, ghsa-78h2-9frx-2jm8, ghsa-pmwq-pjrm-6p5r, ghsa-xm5m-wgh2-rrg3 applied in versions: 0.13.1-r0, 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cerbos, ratify, argocd-image-updater, crossplane-provider-keycloak, kots, kubescape, helm, crossplane-provider-aws-sns, crossplane-provider-aws-rds, helm-push, crossplane-provider-azure-authorization, omni-fips, trivy-operator-fips, wolfictl, hydra-fips, q,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: trust-manager, logstash-exporter, kaniko, nodetaint, kubeflow-katib, rekor, kaf, tkn, secrets-store-csi-driver-provider-aws, kubeflow-pipelines, oauth2-proxy, prometheus-node-exporter, prometheus-alertmanager, crossplane-provider-aws-cloudwatchlogs, sonobuoy,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: zarf, cert-manager-fips, cert-manager, cosign-fips, kots, kubeflow-katib, tekton-chains, up, kubescape, chartmuseum, ctop, flux, datadog-agent, helm, pulumi, loki, eksctl, cadvisor-fips, goreleaser, vexctl, helm-operator, buildkitd, kpt, trivy, aactl,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: zarf, cert-manager-fips, cert-manager, cosign-fips, kots, kubeflow-katib, tekton-chains, up, kubescape, chartmuseum, ctop, flux, datadog-agent, helm, pulumi, loki, eksctl, cadvisor-fips, goreleaser, vexctl, helm-operator, buildkitd, kpt, trivy, aactl,...