CLEANSTART-2026-FH24210 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-26958, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-pmwq-pjrm-6p5r, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.1-r3, 1.14.1-r4, 1.14.5-r0, 1.14.5-r1

Multiple security vulnerabilities affect the spire-server package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX52017 Security fixes for CVE-2025-15558, CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-26958, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39984, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.13.5-r0, 1.13.5-r1, 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.1-r3, 1.14.1-r4

Multiple security vulnerabilities affect the spire-server package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: image-factory-fips, kubescape-server, trivy-operator-fips, aactl, image-factory, kubescape-server-fips, policy-controller, tkn-fips, policy-controller-fips, trivy-fips, trivy-operator, gitsign, falcoctl, crossplane, spire-server-fips, tflint-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: ko-fips, kubescape-server, trivy-operator-fips, aactl, kubescape-server-fips, policy-controller, chainctl-fips, goreleaser, tkn-fips, policy-controller-fips, trivy-operator, gitsign, falcoctl, crossplane, spire-server-fips, tflint-fips, neuvector-sigstore-interface,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: vitess, argo-workflows, knative-serving-fips, gitea, etcd, flux-source-controller, gatekeeper-fips, cert-manager, trivy-operator-fips, aactl, zot, omnictl-multiarch-fips, mattermost-fips, trivy-fips, k9s-fips, zitadel, tekton-pipelines-fips, gitlab-kas,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: teleport, cilium, cloud-provider-aws, crossplane-provider-azure-managedidentity, prometheus, wolfictl, knative-serving, cilium-cli, flux-source-controller, loki, nerdctl, external-dns, go-discover, melange, containerd, step-issuer, cert-manager,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium, cloud-provider-aws, gitlab-kas, prometheus, osv-scanner, argocd-image-updater, kaf, kubescape, telegraf, prometheus-operator, chisel, knative-serving, cilium-cli, falco-no-driver, trivy-operator, flux-source-controller, loki, nerdctl, external-dns, aactl,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cilium, cloud-provider-aws, gitlab-kas, prometheus, kaf, telegraf, prometheus-operator, knative-serving, cilium-cli, falco-no-driver, docker-cli-buildx, loki, nerdctl, external-dns, aactl, containerd, mattermost, k3s, cert-manager, flux, kyverno, kine, spire-server,...

CLEANSTART-2026-NT30039 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-41889, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-4659, CVE-2026-46595, CVE-2026-46597, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.13.3-r0, 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.5-r0, 1.14.5-r1

Multiple security vulnerabilities affect the spire-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EA12165 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-26958, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-pmwq-pjrm-6p5r, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.1-r3, 1.14.1-r4, 1.14.5-r0, 1.14.5-r1

Multiple security vulnerabilities affect the spire-server package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IH16568 Security fixes for CVE-2025-15558, CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-26958, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39984, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.13.5-r0, 1.13.5-r1, 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.1-r3, 1.14.1-r4

Multiple security vulnerabilities affect the spire-server package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: cloudprober, seaweedfs-fips, argo-workflows, sqlexporter, rke2-runtime-fips, rke2-runtime, temporal, sftpgo-plugin-eventstore, step-issuer-fips, cerbos, zitadel, gotrue, goose, gitlab-kas, openbao, authentik-fips, kine, rke2-cloud-provider, kuma, hydra-fips,...

CLEANSTART-2026-YW98740 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the spire-server package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: teleport, cilium, grafana, cert-manager-istio-csr, cloud-provider-aws, emissary, juicefs, azure-workload-identity-webhook, crossplane-provider-azure-managedidentity, lazydocker, opentelemetry-operator, prometheus, aws-otel-collector, otel-cli, keda, openfga, wolfictl...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: blob-csi, cloudflared-fips, crossplane-function-patch-and-transform-fips, cluster-api-helm-controller-fips, dagger, crossplane-provider-aws-ec2-fips, fleet-server, rke2-runtime, flux-source-controller, rancher-support-bundle-kit, crossplane-provider-aws-kms-fips,...

CLEANSTART-2026-PJ76318 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m applied in versions: 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.1-r3

Multiple security vulnerabilities affect the spire-server package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: argo-workflows, juicefs, sftpgo-plugin-eventstore, trillian, step-ca, croc, spicedb, splunk-otel-collector, wolfictl, openfga, amass, trufflehog, cerbos, grafana-alloy, telegraf, chezmoi, kubeflow-pipelines, step-kms-plugin, loki, tailscale, witness, temporal, aactl,...

CLEANSTART-2026-XO49545 Within HostnameError

Multiple security vulnerabilities affect the spire-server-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-UI65993 Within HostnameError

Multiple security vulnerabilities affect the spire-server-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: cilium, nri-discovery-kubernetes, azure-workload-identity-webhook, wolfictl, amass, trufflehog, lazygit, aws-flb-firehose, ipfs-cluster, rancher-telemetry, ghaudit, sftpgo-plugin-kms, snyk-cli, cfssl, harbor-registry, conftest, kaniko, flux-kustomize-controller,...