GO-2026-5264 vulnerabilities

Vulnerabilities for packages: grafana, google-cloud-otel-ops-collector, metrics-server-fips, commercial-grafana, amazon-cloudwatch-agent-operator-fips, metrics-server, telegraf, elastic-agent, cloud-sql-proxy, loki, prometheus, aws-otel-collector, mc, keda-fips, minio, minio-operator,...

CLEANSTART-2026-WI70970 Security fixes in prometheus-fips 3.9.0-r0

Package prometheus-fips version 3.9.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: flux-notification-controller-fips, k9s, nerdctl, chisel, terraform-fips, teleport, trivy-fips, crossplane-provider-azure-securityinsights, knative-serving-fips, zarf-fips, falcoctl, crossplane-provider-azure-portal, flux-image-automation-controller-fips, grype-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: k9s, nerdctl, chisel, knative-serving-fips, zarf-fips, flux-image-automation-controller-fips, loki, mattermost-fips, minio, kube-arangodb-fips, mattermost, frankenphp-8.3, skaffold, reports-server, frankenphp-8.2, kubernetes-fips, gitea-fips, omnictl-multiarch-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: k9s, nerdctl, chisel, longhorn-manager-fips, terraform-fips, knative-serving-fips, zarf-fips, flux-image-automation-controller-fips, grype-fips, loki, mattermost-fips, minio, kube-arangodb-fips, mattermost, frankenphp-8.3, skaffold, reports-server, frankenphp-8.2,...

CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-LS08172 Within HostnameError

Multiple security vulnerabilities affect the prometheus-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: aactl, cosign, k9s, nerdctl, up, vexctl, k3s, falcoctl, argo-workflows-fips, falcoctl-fips, loki, bom, crane, flux-helm-controller, helm-operator-fips, newrelic-infrastructure-agent, skaffold, policy-controller-fips, flux-image-reflector-controller, cri-tools, ko-fip...

CVE-2023-45286 vulnerabilities

Vulnerabilities for packages: rclone...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: aactl, up, slsa-verifier, paranoia, tekton-chains, k3s, kpt, scorecard, falcoctl-fips, kubescape, spire-server-fips, bom, k3d, chartmuseum, skaffold, ctop...