CLEANSTART-2026-JX39152 Security fixes in spire-server 1.14.7-r0

Package spire-server version 1.14.7-r0 fixes 16 vulnerabilities: CVE-2026-49834, CVE-2026-24122, CVE-2026-39395, CVE-2026-41178, CVE-2026-41568...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kots, commercial-chainloop-backend, k3s, spire-server, commercial-expanso-edge, envoy-gateway, commercial-grafana, envoy-gateway-fips, kine...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: falcoctl, minio-fips, spire-server-fips, falcoctl-fips, boring-registry, mc-fips, spire-server, mc, minio, external-secrets-fips, boring-registry-fips...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: falcoctl, spire-server-fips, falcoctl-fips, boring-registry, cosign-fips, vexctl, tekton-chains, spire-server, mc, minio, gitsign, kubescape, external-secrets-fips...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: ko-fips, cloudbeat-fips, google-cloud-otel-ops-collector, zarf-fips, openfga, opentelemetry-collector, splunk-otel-collector-fips, grafana-beyla, elastic-agent-fips, kubedock, cloudbeat, neuvector, opentelemetry-operator, chainloop-control-plane-fips, harvester,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: ko-fips, slsa-verifier, wolfictl, falcoctl, policy-controller-fips, chainctl, apko, tkn, goreleaser, vexctl, spire-server, gitsign, kubescape, neuvector-sigstore-interface, tekton-chains, ko, aactl, zarf, skaffold, melange, tkn-fips, tekton-chains-fips,...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: spire-server, k3s, envoy-gateway, kots, kine...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: spire-server, opa, policy-controller, kots, k8sgpt, conftest, zarf, tfsec, zot, snyk-cli, cosign, kubescape...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: spire-server, kyverno-notation-aws, policy-controller, kots, witness, conftest, tfsec, trivy, cosign...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, cert-manager-cmctl, guac, k3s, opentelemetry-collector-contrib, restic, spire-server, k8sgpt, conftest, temporal, dbmate, terragrunt, gomplate, certificate-transparency, grafana-mimir, zarf, kots, cilium-cli, hubble-ui, sigstore-scaffolding,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: spire-server, neuvector-sigstore-interface, teleport, gh, cosign, kubescape, zarf, policy-controller, sigstore-scaffolding, goreleaser, docker, trivy, witness, gitsign, vexctl, buildkitd, skaffold, tekton-chains, tkn, tflint, flux-source-controller,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: boring-registry, spire-server, minio, mc, falcoctl, gitsign, vexctl, tekton-chains, kubescape...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: boring-registry, spire-server, minio, mc, falcoctl...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: spire-server, argo-events, guac, opentelemetry-collector-contrib, argo-workflows, restic, cortex, k8sgpt, prometheus-operator, cosign, chezmoi, kubescape, terragrunt, grafana-mimir, zarf, policy-controller, thanos, rook, secrets-store-csi-driver-provider-azure, trino...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: spire-server, argo-workflows, cosign, terragrunt, kubescape, cloudflared, kots, slsa-verifier, fulcio, sops, aactl, gitsign, vexctl, tekton-chains, tkn, flux-source-controller, rekor, flux-kustomize-controller, dex, oauth2-proxy...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: controller-gen, hcloud, k3s, spire-server, conjur-cli, coredns, kube-fluentd-operator, cluster-api, golangci-lint, timoni, kyverno, aws-flb-cloudwatch, kserve, amazon-k8s-cni, apache-exporter, cert-exporter, litefs, runc, dbmate, kubernetes-csi-livenessprobe,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: spire-server, conftest, kubescape, grype, cilium-cli, docker-compose, melange, trivy, syft, dagger, aactl, kaniko, buildkitd, tkn, crossplane, cadvisor, ko, wolfictl, buf, up, ctop, zot, kargo...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: spire-server, neuvector-sigstore-interface, teleport, kyverno, kubescape, zarf, policy-controller, slsa-verifier, goreleaser, aactl, gitsign, tekton-chains, tkn, crossplane, tflint, kyverno-notation-aws, ko, ratify, falcoctl, trivy-operator...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: spire-server, policy-controller, apko, ko, aactl, slsa-verifier, skaffold, melange, tekton-chains, tkn, cosign, kubescape, flux-source-controller...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: hcloud, spire-server, k3s, neuvector-sigstore-interface, crossplane-provider-keycloak, kyverno, terraform-provider-azurerm, prometheus, kubescape, crossplane-provider-aws-sns, zarf, apko, docker-compose, slsa-verifier, docker, docker-cli-buildx,...