CLEANSTART-2026-FX37210 Security fix for CVE-2026-42306 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, rancher-agent 2.11.15-r1, vault 1.19.5-r1

CVE-2026-42306 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AC15686 Security fix for CVE-2026-41567 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, rancher-agent 2.11.15-r1

CVE-2026-41567 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WQ81490 Security fixes in prometheus-fips 3.12.0-r2

Package prometheus-fips version 3.12.0-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-CU23154 Security fixes in prometheus-fips 3.10.0-r2

Package prometheus-fips version 3.10.0-r2 fixes 14 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-SB31025 Security fixes in prometheus-fips 3.11.3-r1

Package prometheus-fips version 3.11.3-r1 fixes 17 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-RW60626 Security fixes in prometheus-fips 3.12.0-r3

Package prometheus-fips version 3.12.0-r3 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-HW17175 Security fixes in prometheus-fips 3.11.3-r2

Package prometheus-fips version 3.11.3-r2 fixes 15 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-NR19543 Security fixes in prometheus-fips 3.10.0-r1

Package prometheus-fips version 3.10.0-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-2303, ghsa-259r-337f-4rfw...

CLEANSTART-2026-KI63132 Security fixes in prometheus-fips 3.12.0-r1

Package prometheus-fips version 3.12.0-r1 fixes 2 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, prometheus-operator-fips, metrics-server, prometheus-fips, jaeger, opentelemetry-collector, fluent-bit-plugin-loki, prometheus-pushgateway, google-cloud-otel-ops-collector, cloud-sql-proxy, commercial-grafana, certificate-transparency,...

CLEANSTART-2026-WI70970 Security fixes in prometheus-fips 3.9.0-r0

Package prometheus-fips version 3.9.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-OL83036 Security fixes in prometheus-fips 2.40.4-r1

Package prometheus-fips version 2.40.4-r1 fixes 1 vulnerabilities: CVE-2022-46146...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: helm, mattermost-fips, tekton-pipelines-fips, knative-eventing-fips, gitea, harbor, docker-machine-driver-harvester, grafana-fips, frankenphp-8.5, traefik-fips, elastic-agent-fips, kubescape-server-fips, cilium-cli, chisel, falco-no-driver, kine, nemo, kubevela-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-search, helm, mattermost-fips, fulcio-fips, tekton-pipelines-fips, knative-eventing-fips, podman-fips, gitea, crossplane-provider-azure-operationsmanagement, tflint-fips, crossplane-provider-azure-relay, amazon-ssm-agent, buildkitd-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: helm, mattermost-fips, tekton-pipelines-fips, knative-eventing-fips, longhorn-manager, podman-fips, gitea, amazon-ssm-agent, harbor, chainctl, docker-machine-driver-harvester, argo-events-fips, grafana-fips, nuclei, frankenphp-8.5, pulumi-kubernetes-operator,...

CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-LS08172 Within HostnameError

Multiple security vulnerabilities affect the prometheus-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: helm, newrelic-infrastructure-agent, rancher-machine, buildkitd, k3d, kots, aactl, pulumi, docker-machine-driver-harvester, timoni, flux-image-reflector-controller, kargo, k3s, cosign-fips, helm-operator, guac, gitsign, argo-workflows-fips, kpt, policy-controller-fip...

CVE-2023-45286 vulnerabilities

Vulnerabilities for packages: rclone...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: k3s, tekton-chains, k3d, spire-server-fips, kpt, up, aactl, chartmuseum, slsa-verifier, skaffold, kubescape, bom, falcoctl-fips, ctop, scorecard, paranoia...