GO-2025-3540 vulnerabilities

Vulnerabilities for packages: atlantis, splunk-otel-collector, falcosidekick-fips, oauth2-proxy, gitea-fips, argo-cd, loki-fips, opentelemetry-collector-contrib-fips, gitea, falcosidekick, loki, dapr, rekor-fips, fluent-bit-plugin-loki, dapr-fips, kots, authservice, keda, argo-cd-fips, juicefs,...

CLEANSTART-2026-GK99323 Security fixes in rekor-fips 1.5.1-r0

Package rekor-fips version 1.5.1-r0 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-JI09100 Security fixes in rekor-fips 1.4.3-r0

Package rekor-fips version 1.4.3-r0 fixes 1 vulnerabilities: ghsa-j5w8-q4qc-rx2x...

PT-2026-85930

Package rekor-fips version 1.4.3-r0 fixes 1 vulnerabilities: ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-YN35176 Security fixes for CVE-2026-34986 applied in versions: 1.5.1-r0

Security vulnerability affects the rekor-fips package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: tkn-fips, tflint, docker, trivy-operator-fips, cloudbeat, flux-source-controller, kyverno-fips, gitsign, cloudbeat-fips, crossplane, neuvector-sigstore-interface-fips, teleport, aactl, policy-controller, trivy-fips, goreleaser, ratify,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: tkn-fips, tflint, docker, trivy-operator-fips, cloudbeat, flux-source-controller, kyverno-fips, gitsign, cloudbeat-fips, crossplane, neuvector-sigstore-interface-fips, teleport, aactl, policy-controller, trivy-fips, goreleaser, ratify,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: tkn-fips, tflint, docker, trivy-operator-fips, cloudbeat, flux-source-controller, kyverno-fips, gitsign, cloudbeat-fips, crossplane, neuvector-sigstore-interface-fips, teleport, aactl, policy-controller, trivy-fips, goreleaser, ratify,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: tkn-fips, tflint, docker, trivy-operator-fips, cloudbeat, flux-source-controller, kyverno-fips, gitsign, cloudbeat-fips, crossplane, neuvector-sigstore-interface-fips, teleport, aactl, policy-controller, trivy-fips, goreleaser, ratify,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: dagger, oauth2-proxy, pulumi-language-yaml, crossplane, velero, dex, cloud-provider-aws-fips, dynamic-localpv-provisioner-fips, amass, secrets-store-csi-driver-provider-gcp, terraform-provider-sendgrid-fips, flux-notification-controller-fips, gptscript,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: dagger, oauth2-proxy, cass-operator-fips, velero, velero-plugin-for-aws-fips, dex, dynamic-localpv-provisioner-fips, fluent-operator-fips, wave, amass, karpenter, kustomize, kyverno-policy-reporter-kyverno-plugin, secrets-store-csi-driver-provider-gcp, go-bindata,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: dagger, oauth2-proxy, pulumi-language-yaml, cass-operator-fips, crossplane, velero, dex, dynamic-localpv-provisioner-fips, amass, kustomize, kyverno-policy-reporter-kyverno-plugin, secrets-store-csi-driver-provider-gcp, terraform-provider-sendgrid-fips, cass-operator...