GO-2024-2454 vulnerabilities

Vulnerabilities for packages: vexctl, spire-server-fips, tekton-chains, boring-registry, minio, external-secrets-fips, spire-server, falcoctl, cosign-fips, falcoctl-fips, mc, gitsign, kubescape...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: ko, zarf, apko, tekton-chains, falcoctl, falcoctl-fips, neuvector-sigstore-interface, policy-controller-fips, spire-server-fips, chainctl, wolfictl, gitsign, kubescape, tkn, tkn-fips, tekton-chains-fips, aactl, flux-source-controller, spire-server, slsa-verifier,...

CLEANSTART-2026-OJ52622 Security fixes in spire-server-fips 1.15.1-r1

Package spire-server-fips version 1.15.1-r1 fixes 9 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-48702, CVE-2026-49834, CVE-2026-49835...

CLEANSTART-2026-IM39799 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-41889, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-4659, CVE-2026-46595, CVE-2026-46597, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.13.3-r0, 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.5-r0, 1.14.5-r1

Multiple security vulnerabilities affect the spire-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: zarf, kubescape-server, tekton-chains, ratify, cloudbeat, falcoctl, falcoctl-fips, trivy-fips, neuvector-sigstore-interface, docker-fips, policy-controller-fips, spire-server-fips, cloudbeat-fips, kyverno-notation-aws, gitsign, kubescape, crossplane, kyverno-fips, tk...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: ko, zarf, kubescape-server, tekton-chains, ratify, cloudbeat, falcoctl, falcoctl-fips, neuvector-sigstore-interface, docker-fips, chainctl-fips, policy-controller-fips, spire-server-fips, cloudbeat-fips, kyverno-notation-aws, gitsign, kubescape, crossplane,...

CLEANSTART-2026-NT30039 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-41889, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-4659, CVE-2026-46595, CVE-2026-46597, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.13.3-r0, 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.5-r0, 1.14.5-r1

Multiple security vulnerabilities affect the spire-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XO49545 Within HostnameError

Multiple security vulnerabilities affect the spire-server-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-UI65993 Within HostnameError

Multiple security vulnerabilities affect the spire-server-fips package. Within HostnameError. See references for individual vulnerability details...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: ko, zarf, apko, tekton-chains, falcoctl, falcoctl-fips, neuvector-sigstore-interface, policy-controller-fips, spire-server-fips, chainctl, wolfictl, gitsign, kubescape, tkn, tkn-fips, tekton-chains-fips, aactl, flux-source-controller, spire-server, slsa-verifier,...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: ko, zarf, apko, tekton-chains, falcoctl, falcoctl-fips, neuvector-sigstore-interface, policy-controller-fips, spire-server-fips, chainctl, wolfictl, gitsign, kubescape, tkn, tkn-fips, tekton-chains-fips, aactl, flux-source-controller, spire-server, slsa-verifier,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: ko, zarf, apko, tekton-chains, falcoctl, falcoctl-fips, neuvector-sigstore-interface, policy-controller-fips, spire-server-fips, chainctl, wolfictl, gitsign, kubescape, tkn, tkn-fips, tekton-chains-fips, aactl, flux-source-controller, spire-server, slsa-verifier,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: ko, grype, conftest-fips, loki, up, spire-server-fips, zot, cadvisor, kaniko, kargo, wolfictl, kubescape, crossplane, prometheus, buildkitd, tkn, trivy, aactl, spire-server, cilium-cli, conftest, buf, melange, docker-compose, ctop, syft, dagger, cadvisor-fips...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: mc-fips, boring-registry-fips, spire-server-fips, boring-registry, minio, external-secrets-fips, spire-server, falcoctl, mc, falcoctl-fips, minio-fips...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: ko, cosign, tkn, spire-server-fips, melange, apko, aactl, policy-controller, skaffold, tekton-chains, flux-source-controller, spire-server, falcoctl-fips, slsa-verifier, kubescape...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: paranoia, spire-server-fips, tekton-chains, aactl, k3s, scorecard, skaffold, ctop, chartmuseum, bom, kpt, k3d, up, falcoctl-fips, slsa-verifier, kubescape...