GO-2025-3540 vulnerabilities

Vulnerabilities for packages: dapr, opentelemetry-collector-contrib-fips, keda, splunk-otel-collector, loki, juicefs, oauth2-proxy, splunk-otel-collector-fips, argo-cd-fips, argo-cd, fluent-bit-plugin-loki, atlantis, falcosidekick-fips, dapr-fips, gitea-fips, traefik-fips, rekor-fips, authservice...

CLEANSTART-2026-GK99323 Security fixes in rekor-fips 1.5.1-r0

Package rekor-fips version 1.5.1-r0 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-JI09100 Security fixes in rekor-fips 1.4.3-r0

Package rekor-fips version 1.4.3-r0 fixes 1 vulnerabilities: ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-YN35176 Security fixes for CVE-2026-34986 applied in versions: 1.5.1-r0

Security vulnerability affects the rekor-fips package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: buildkitd, image-factory, cosign, spire-server-fips, gitsign, rekor, trivy, cloudbeat-fips, trivy-operator, tkn, falcoctl, neuvector-sigstore-interface, gh, policy-controller-fips, zot, tkn-fips, vexctl, skaffold-fips, trivy-fips, flux-source-controller-fips,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: buildkitd, image-factory, cosign, spire-server-fips, gitsign, rekor, trivy, cloudbeat-fips, trivy-operator, tkn, falcoctl, neuvector-sigstore-interface, gh, policy-controller-fips, zot, tkn-fips, vexctl, skaffold-fips, trivy-fips, flux-source-controller-fips,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: buildkitd, image-factory, cosign, spire-server-fips, gitsign, rekor, trivy, cloudbeat-fips, trivy-operator, tkn, falcoctl, neuvector-sigstore-interface, gh, policy-controller-fips, zot, tkn-fips, vexctl, skaffold-fips, trivy-fips, flux-source-controller-fips,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: buildkitd, image-factory, cosign, spire-server-fips, gitsign, rekor, trivy, cloudbeat-fips, trivy-operator, tkn, falcoctl, neuvector-sigstore-interface, gh, policy-controller-fips, zot, tkn-fips, vexctl, skaffold-fips, trivy-fips, flux-source-controller-fips,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: metrics-server-fips, gitsign, flux-helm-controller, snyk-cli, sqlexporter, kafka-proxy, neuvector-sigstore-interface, dagdotdev, policy-controller-fips, lazygit, k3d, vexctl, terraform-provider-sendgrid-fips, mailpit, terraform-provider-sendgrid, cadvisor, syft,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, ytt, gitsign, opa-fips, smarter-device-manager, flux-helm-controller, snyk-cli, k8ssandra-operator, kafka-proxy, gobump, neuvector-sigstore-interface, dagdotdev, policy-controller-fips, lazygit, k3d, vexctl, protoc-gen-go,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, gitsign, smarter-device-manager, flux-helm-controller, k8ssandra-operator, policy-controller-fips, k3d, vexctl, terraform-provider-sendgrid-fips, terraform-provider-sendgrid, cadvisor, syft, falcoctl-fips, prometheus-adapter-fips...