CLEANSTART-2026-CM50083 Security fix for GHSA-4c4x-jm2x-pf9j applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

GHSA-4c4x-jm2x-pf9j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LO90472 Security fix for GHSA-x744-4wpc-v9h2 applied in: cadvisor-fips 0.55.1-r0, kubevela 1.10.8-r0, melange 0.56.1-r1, paranoia 0.2.1-r0, spire-server-fips 1.15.1-r1

GHSA-x744-4wpc-v9h2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UC33552 Security fix for CVE-2026-4659 applied in: spire-server-fips 1.14.5-r1

Security vulnerability affects the spire-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OE12981 Security fix for CVE-2026-49834 applied in: cosign 3.1.1-r2, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r1, kyverno 1.17.2-r2, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

CVE-2026-49834 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MR47110 Security fix for GHSA-9c54-x2g4-v92j applied in: cosign 3.1.2-r1, spire-server-fips 1.15.1-r1

GHSA-9c54-x2g4-v92j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UK76839 Security fix for GHSA-47q9-m4ww-924m applied in: cosign 3.1.2-r1, spire-server-fips 1.15.1-r1

GHSA-47q9-m4ww-924m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101817

Security vulnerability affects the spire-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: spire-server, cosign-fips, boring-registry, spire-server-fips, vexctl, falcoctl, tekton-chains, gitsign, external-secrets-fips, kubescape, minio, mc, falcoctl-fips...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: chainctl, spire-server, gitsign, slsa-verifier, spire-server-fips, neuvector-sigstore-interface, flux-source-controller, tkn, ko-fips, policy-controller, falcoctl, wolfictl, apko, skaffold, vexctl, ko, melange, goreleaser, falcoctl-fips, tekton-chains-fips, zarf, zot...

CLEANSTART-2026-OJ52622 Security fixes in spire-server-fips 1.15.1-r1

Package spire-server-fips version 1.15.1-r1 fixes 9 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-48702, CVE-2026-49834, CVE-2026-49835...

CLEANSTART-2026-FA78759 Security fixes in spire-server-fips 1.14.1-r1

Package spire-server-fips version 1.14.1-r1 fixes 6 vulnerabilities: ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525...

CLEANSTART-2026-GN55985 Security fixes in spire-server-fips 1.14.1-r0

Package spire-server-fips version 1.14.1-r0 fixes 2 vulnerabilities: ghsa-4qg8-fj49-pxjh, ghsa-whqx-f9j3-ch6m...

PT-2026-85874

Package spire-server-fips version 1.14.1-r1 fixes 6 vulnerabilities: ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525...

PT-2026-85888

Package spire-server-fips version 1.14.1-r0 fixes 2 vulnerabilities: ghsa-4qg8-fj49-pxjh, ghsa-whqx-f9j3-ch6m...

CLEANSTART-2026-IM39799 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-41889, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-4659, CVE-2026-46595, CVE-2026-46597, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.13.3-r0, 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.5-r0, 1.14.5-r1

Multiple security vulnerabilities affect the spire-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63696

Multiple security vulnerabilities affect the spire-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: zarf-fips, crossplane, gitsign, trivy, docker-fips, ratify, kyverno-notation-aws, tflint, kyverno-notation-aws-fips, trivy-fips, spire-server-fips, trivy-operator, teleport-operator-fips, neuvector-sigstore-interface, tkn, image-factory, kubescape-server,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: spire-server, zarf-fips, crossplane, gitsign, chainctl-fips, slsa-verifier, docker-fips, ratify, kyverno-notation-aws, tflint, kyverno-notation-aws-fips, spire-server-fips, trivy-operator, neuvector-sigstore-interface, tkn, kubescape-server, commercial-kyverno,...

CLEANSTART-2026-NT30039 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-41889, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-4659, CVE-2026-46595, CVE-2026-46597, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.13.3-r0, 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.5-r0, 1.14.5-r1

Multiple security vulnerabilities affect the spire-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UI65993 Within HostnameError

Multiple security vulnerabilities affect the spire-server-fips package. Within HostnameError. See references for individual vulnerability details...