CLEANSTART-2026-YN35176 Security fixes for CVE-2026-34986 applied in versions: 1.5.1-r0

Security vulnerability affects the rekor-fips package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, trivy-operator, tkn-fips, policy-controller, zarf, gitsign, tflint-fips, neuvector-sigstore-interface, spire-server-fips, gh, cg, trivy-fips, kyverno, zot, falcoctl-fips, neuvector-sigstore-interface-fips, tkn, crossplane-fips, vexctl,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, trivy-operator, tkn-fips, policy-controller, zarf, gitsign, tflint-fips, neuvector-sigstore-interface, spire-server-fips, gh, cg, trivy-fips, kyverno, zot, falcoctl-fips, neuvector-sigstore-interface-fips, tkn, crossplane-fips, vexctl,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, trivy-operator, tkn-fips, policy-controller, zarf, gitsign, tflint-fips, neuvector-sigstore-interface, spire-server-fips, gh, cg, trivy-fips, kyverno, zot, falcoctl-fips, neuvector-sigstore-interface-fips, tkn, crossplane-fips, vexctl,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, trivy-operator, tkn-fips, policy-controller, zarf, gitsign, tflint-fips, neuvector-sigstore-interface, spire-server-fips, gh, cg, trivy-fips, kyverno, zot, falcoctl-fips, neuvector-sigstore-interface-fips, tkn, crossplane-fips, vexctl,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: argo-cd-fips, istio-cni, prometheus-mysqld-exporter, fq, ksops, terraform-provider-sendgrid-fips, rabbitmq-messaging-topology-operator, helm, kube-rbac-proxy-fips, mattermost, velero, postgres-operator, docker-cli-buildx-fips, src-fingerprint, cert-exporter-fips,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, istio-cni, newrelic-fluent-bit-output, prometheus-mysqld-exporter, cni-plugins-fips, fq, ksops, rabbitmq-messaging-topology-operator, helm, kube-rbac-proxy-fips, velero, postgres-operator, neuvector-dbgen, src-fingerprint, hello-world-golang,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, prometheus-mysqld-exporter, terraform-provider-sendgrid-fips, rabbitmq-messaging-topology-operator, helm, kube-rbac-proxy-fips, velero, cert-exporter-fips, osv-scanner, falcosidekick, nfs-subdir-external-provisioner-fips,...