CLEANSTART-2026-JX39152 Security fixes in spire-server 1.14.7-r0

Package spire-server version 1.14.7-r0 fixes 16 vulnerabilities: CVE-2026-49834, CVE-2026-24122, CVE-2026-39395, CVE-2026-41178, CVE-2026-41568...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kine, commercial-expanso-edge, envoy-gateway-fips, spire-server, commercial-chainloop-backend, kots, envoy-gateway, k3s, commercial-grafana...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, minio, kubescape, boring-registry, mc, spire-server, falcoctl, external-secrets-fips, cosign-fips, tekton-chains, gitsign, vexctl, spire-server-fips...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: minio-fips, falcoctl-fips, minio, boring-registry, mc, spire-server, falcoctl, boring-registry-fips, external-secrets-fips, mc-fips, spire-server-fips...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: cluster-api, opentelemetry-collector-contrib, docker-fips, newrelic-infrastructure-agent-fips, newrelic-infrastructure-agent, zot, cg, melange, k8sgpt, gatekeeper, splunk-otel-collector, goreleaser, amazon-cloudwatch-agent-operator-fips, nuclei, openfga-fips,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: slsa-verifier, chainctl, spire-server, policy-controller, zot, tkn, tekton-chains-fips, falcoctl-fips, skaffold, melange, kubescape, tkn-fips, policy-controller-fips, falcoctl, tekton-chains, ko-fips, goreleaser, vexctl, spire-server-fips, apko, wolfictl, gitsign,...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kots, k3s, spire-server, envoy-gateway, kine...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: kots, spire-server, tfsec, k8sgpt, kubescape, opa, snyk-cli, cosign, zot, zarf, conftest, policy-controller...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: witness, kots, kyverno-notation-aws, spire-server, tfsec, trivy, cosign, conftest, policy-controller...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dex, kots, sigstore-scaffolding, ferretdb, opentelemetry-collector-contrib, spicedb, guac, kargo, temporal, grpc-health-probe, gomplate, terraform-provider-google, dagger, dbmate, cilium-cli, sops, step, pulumi-language-dotnet, rqlite, spire-server, terraform-docs,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, cosign, skaffold, teleport, neuvector-sigstore-interface, gh, spire-server, zot, witness, goreleaser, tekton-chains, gitsign, tflint, buildkitd, kubescape, tkn, trivy-operator, docker, policy-controller, flux-source-controller, falcoctl,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: mc, tekton-chains, gitsign, falcoctl, spire-server, boring-registry, vexctl, kubescape, minio...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: mc, falcoctl, spire-server, boring-registry, minio...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, opentelemetry-collector-contrib, up, airflow, guac, boring-registry, flux, cosign, wal-g, trino, hugo, sops, hugo-extended, step, timestamp-authority, argo-events, spire-server, bank-vaults, ksops, druid, velero, grafana-mimir,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, newrelic-nri-statsd, terraform-provider-grafana, crossplane-provider-aws-sqs, litefs, argo-cd, redka, grafana-operator, local-path-provisioner, slsa-verifier, nfs-subdir-external-provisioner, crossplane-provider-aws-kms, cloud-provider-aws,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: dex, kots, cosign, slsa-verifier, sops, aactl, oauth2-proxy, spire-server, cloudflared, tekton-chains, gitsign, kubescape, tkn, argo-workflows, flux-source-controller, flux-kustomize-controller, rekor, vexctl, fulcio, terragrunt...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: syft, wolfictl, up, kargo, crossplane, dagger, cilium-cli, cadvisor, aactl, buf, spire-server, kaniko, zot, buildkitd, kubescape, docker-compose, tkn, ctop, conftest, melange, grype, ko, trivy...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: crossplane, slsa-verifier, teleport, ratify, aactl, neuvector-sigstore-interface, spire-server, goreleaser, tekton-chains, gitsign, tflint, kubescape, trivy-operator, tkn, policy-controller, falcoctl, kyverno-notation-aws, ko, zarf, kyverno...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: flux-source-controller, apko, aactl, tekton-chains, spire-server, kubescape, ko, cosign, tkn, skaffold, slsa-verifier, melange, policy-controller...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: syft, wolfictl, crossplane-provider-aws-sqs, kargo, kubernetes-dashboard, argo-cd, slsa-verifier, crossplane-provider-aws-kms, cloud-provider-aws, aactl, neuvector-sigstore-interface, terraform-provider-acme, ksops, mattermost, minio, pulumi,...