GO-2025-3540 vulnerabilities

Vulnerabilities for packages: atlantis, keda, mattermost-fips, dapr, falcosidekick-fips, loki-fips, rekor-fips, splunk-otel-collector, argo-cd, argo-cd-fips, juicefs, authservice, falcosidekick, kots, gitea-fips, dapr-fips, splunk-otel-collector-fips, loki, oauth2-proxy, gitea, traefik-fips,...

CLEANSTART-2026-GK99323 Security fixes in rekor-fips 1.5.1-r0

Package rekor-fips version 1.5.1-r0 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-YN35176 Security fixes for CVE-2026-34986 applied in versions: 1.5.1-r0

Security vulnerability affects the rekor-fips package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: tkn-fips, image-factory-fips, sigstore-scaffolding-fips, spire-server, kyverno-policy-reporter-plugins-kyverno-fips, skaffold, tekton-chains-fips, vexctl, ratify, witness, kyverno-notation-aws, kyverno-policy-reporter-plugins-kyverno, kyverno-notation-aws-fips,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: tkn-fips, image-factory-fips, sigstore-scaffolding-fips, spire-server, kyverno-policy-reporter-plugins-kyverno-fips, skaffold, tekton-chains-fips, vexctl, ratify, witness, kyverno-notation-aws, kyverno-policy-reporter-plugins-kyverno, kyverno-notation-aws-fips,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: tkn-fips, image-factory-fips, sigstore-scaffolding-fips, spire-server, kyverno-policy-reporter-plugins-kyverno-fips, skaffold, tekton-chains-fips, vexctl, ratify, witness, kyverno-notation-aws, kyverno-policy-reporter-plugins-kyverno, kyverno-notation-aws-fips,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: tkn-fips, image-factory-fips, sigstore-scaffolding-fips, spire-server, kyverno-policy-reporter-plugins-kyverno-fips, skaffold, tekton-chains-fips, vexctl, ratify, witness, kyverno-notation-aws, kyverno-policy-reporter-plugins-kyverno, kyverno-notation-aws-fips,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, crossplane-provider-azure-storage, pulumi-kubernetes-operator, dynamic-localpv-provisioner-fips, crossplane-provider-aws-s3, prometheus-alertmanager, trust-manager, fq, ko-fips, consul-k8s, scorecard, splunk-otel-collector,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, dynamic-localpv-provisioner-fips, kyverno-policy-reporter-ui, prometheus-alertmanager, ghaudit, trust-manager, fq, ko-fips, scorecard, prometheus-pushgateway-fips, prometheus-nats-exporter, wolfictl, mongo-tools, timestamp-authority,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, pulumi-kubernetes-operator, dynamic-localpv-provisioner-fips, kyverno-policy-reporter-ui, crossplane-provider-aws-s3, prometheus-alertmanager, trust-manager, scorecard, prometheus-pushgateway-fips, prometheus-nats-exporter,...