CLEANSTART-2026-WQ81490 Security fixes in prometheus-fips 3.12.0-r2

Package prometheus-fips version 3.12.0-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-CU23154 Security fixes in prometheus-fips 3.10.0-r2

Package prometheus-fips version 3.10.0-r2 fixes 14 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-SB31025 Security fixes in prometheus-fips 3.11.3-r1

Package prometheus-fips version 3.11.3-r1 fixes 17 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-HW17175 Security fixes in prometheus-fips 3.11.3-r2

Package prometheus-fips version 3.11.3-r2 fixes 15 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: karma-fips, tempo, minio, opentelemetry-collector, loki, aws-otel-collector-fips, aws-otel-collector, keda-fips, fluent-bit-plugin-loki, cloudzero-agent, prometheus-pushgateway, mc-fips, prometheus-operator, tempo-fips, datadog-agent, metrics-server, beats-fips, keda...

CLEANSTART-2026-WI70970 Security fixes in prometheus-fips 3.9.0-r0

Package prometheus-fips version 3.9.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: reports-server, knative-kafka-broker, k3s, cloudbeat, commercial-expanso-edge, external-dns, keda-fips, frankenphp-8.3, gitlab-kas, terraform, chisel-fips, external-secrets-operator-fips, grafana, etcd-fips, kyverno-fips, argocd-image-updater, flux-source-controller,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, reports-server, go-discover, knative-kafka-broker, tekton-chains, k3s, podman, argo-events-fips, hcloud, cloudbeat, commercial-expanso-edge, falcoctl, external-dns, crossplane-provider-azure-web, docker-fips, keda-fips, step-ca-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, reports-server, knative-kafka-broker, k3s, podman, argo-events-fips, cloudbeat, commercial-expanso-edge, external-dns, docker-fips, keda-fips, frankenphp-8.3, chainctl-fips, gitlab-kas, chainloop-cli-fips, juicefs, apko-fips, terraform,...

CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-LS08172 Within HostnameError

Multiple security vulnerabilities affect the prometheus-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: zarf, cosign, tekton-chains, k3s, nerdctl, docker-machine-driver-harvester, loki, falcoctl, up, falcoctl-fips, kubevela, policy-controller-fips, flux-image-reflector-controller, zot, cadvisor, scorecard, kpt, k3d, kargo, cosign-fips, flux, crane, gitsign, helm,...

CVE-2023-45286 vulnerabilities

Vulnerabilities for packages: rclone...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: paranoia, spire-server-fips, tekton-chains, aactl, k3s, scorecard, skaffold, ctop, chartmuseum, bom, kpt, k3d, up, falcoctl-fips, slsa-verifier, kubescape...