CLEANSTART-2026-YN35176 Security fixes for CVE-2026-34986 applied in versions: 1.5.1-r0

Security vulnerability affects the rekor-fips package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: cosign-fips, trivy, kyverno-fips, trivy-operator-fips, ko, kyverno-policy-reporter-plugins-kyverno-fips, neuvector-sigstore-interface, slsa-verifier, chainctl, teleport-operator-fips, tflint, cg, zarf, crossplane-fips, ko-fips, spire-server-fips, docker, aactl, gh,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: cosign-fips, trivy, kyverno-fips, trivy-operator-fips, ko, kyverno-policy-reporter-plugins-kyverno-fips, neuvector-sigstore-interface, slsa-verifier, chainctl, teleport-operator-fips, tflint, cg, zarf, crossplane-fips, ko-fips, spire-server-fips, docker, aactl, gh,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: cosign-fips, trivy, kyverno-fips, trivy-operator-fips, ko, kyverno-policy-reporter-plugins-kyverno-fips, neuvector-sigstore-interface, slsa-verifier, chainctl, teleport-operator-fips, tflint, cg, zarf, crossplane-fips, ko-fips, spire-server-fips, docker, aactl, gh,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: cosign-fips, trivy, kyverno-fips, trivy-operator-fips, ko, kyverno-policy-reporter-plugins-kyverno-fips, neuvector-sigstore-interface, slsa-verifier, chainctl, teleport-operator-fips, tflint, cg, zarf, crossplane-fips, ko-fips, spire-server-fips, docker, aactl, gh,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: argo-cd, jitsucom-bulker, gptscript, cloudnative-pg-fips, beats, spire-server-fips, amazon-ssm-agent, prometheus-statsd-exporter, docker-fips, openbao-k8s-fips, kubernetes, keda, neuvector-sigstore-interface-fips, terraform-provider-azurerm, spegel, vault-k8s-fips,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: shfmt, jitsucom-bulker, rootlesskit, cue-fips, spire-server-fips, kube-oidc-proxy, nri-mysql, prometheus-statsd-exporter, kubernetes, nri-kubernetes, neuvector-sigstore-interface-fips, terraform-provider-azurerm, spegel, flannel-cni-plugin, vault-k8s-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: spire-server-fips, kube-oidc-proxy, prometheus-statsd-exporter, kubernetes, nri-kubernetes, terraform-provider-azurerm, vault-k8s-fips, osv-scanner, crossplane-provider-aws-sqs, rekor-fips, kubernetes-dashboard-metrics-scraper-fips, helm-operator-fips,...