GO-2025-4192 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, kyverno-notation-aws, witness, neuvector-sigstore-interface, skaffold, gh, tkn, vexctl, zot, spire-server, gitsign, teleport, kubescape, policy-controller, cosign, falcoctl, ratify, tflint, aactl, goreleaser, ko, zarf, flux-source-controller,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, kyverno-notation-aws, witness, buildkitd, neuvector-sigstore-interface, skaffold, docker, trivy, gh, tkn, vexctl, zot, spire-server, gitsign, teleport, trivy-operator, kubescape, policy-controller, cosign, falcoctl, slsa-verifier, ratify, tflint...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, kyverno-notation-aws, buildkitd, neuvector-sigstore-interface, skaffold, docker, trivy, rekor, gh, tkn, vexctl, zot, spire-server, gitsign, teleport, trivy-operator, kubescape, policy-controller, cosign, falcoctl, slsa-verifier, ratify, tflint,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, scorecard, sigstore-scaffolding, sops, src-fingerprint, crossplane-provider-azure-authorization, snyk-cli, terragrunt, k3s, buildkitd, crossplane-provider-azure-sql, neuvector-sigstore-interface, kargo, flux-image-reflector-controller, reko...

CLEANSTART-2026-OJ52622 Security fixes in spire-server-fips 1.15.1-r1

Package spire-server-fips version 1.15.1-r1 fixes 9 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-48702, CVE-2026-49834, CVE-2026-49835...

CLEANSTART-2026-WO12990 Security fixes in spire-server 1.13.5-r0

Package spire-server version 1.13.5-r0 fixes 5 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986, CVE-2026-39984, CVE-2025-15558...

CLEANSTART-2026-SL23247 Security fixes in spire-server-fips 1.14.1-r2

Package spire-server-fips version 1.14.1-r2 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-CH14940 Security fixes in spire-server 1.14.5-r0

Package spire-server version 1.14.5-r0 fixes 3 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986...

CLEANSTART-2026-GN55985 Security fixes in spire-server-fips 1.14.1-r0

Package spire-server-fips version 1.14.1-r0 fixes 2 vulnerabilities: ghsa-4qg8-fj49-pxjh, ghsa-whqx-f9j3-ch6m...

CLEANSTART-2026-AA71310 Security fixes in spire-server-fips 1.14.5-r0

Package spire-server-fips version 1.14.5-r0 fixes 3 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986...

CLEANSTART-2026-PE41745 Security fixes in spire-server 1.15.0-r1

Package spire-server version 1.15.0-r1 fixes 2 vulnerabilities: ghsa-j88v-2chj-qfwx, CVE-2026-41889...

CLEANSTART-2026-OG55473 Security fixes in spire-server 1.14.1-r4

Package spire-server version 1.14.1-r4 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-FA78759 Security fixes in spire-server-fips 1.14.1-r1

Package spire-server-fips version 1.14.1-r1 fixes 6 vulnerabilities: ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525...

CLEANSTART-2026-ZE41144 Security fixes in spire-server 1.14.1-r0

Package spire-server version 1.14.1-r0 fixes 2 vulnerabilities: ghsa-4qg8-fj49-pxjh, ghsa-whqx-f9j3-ch6m...

CLEANSTART-2026-BF90643 Security fixes in spire-server 1.14.1-r2

Package spire-server version 1.14.1-r2 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-JS81714 Security fixes in spire-server 1.13.5-r1

Package spire-server version 1.13.5-r1 fixes 28 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: kine, commercial-grafana, telegraf, omnictl-multiarch, aactl, terraform, backup-restore-operator, prometheus-mongodb-exporter, upwind-agent, helm, containerd, snyk-cli, reports-server, loki, zitadel, kaf, nerdctl, prometheus-operator, kots, cert-manager, minio, zot,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: helm, flux, kaf, kots, nerdctl, prometheus-operator, k3s, snyk-cli, telegraf, zot, kine, k3d, containerd, minio, spire-server, aactl, kyverno, loki...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.14: spire1.14-1.14.7-0.2.hum1 aarch64, x8664 spire1.14-agent-1.14.7-0.2.hum1 aarch64, x8664 spire1.14-oidc-discovery-provider-1.14.7-0.2.hum1 aarch64, x8664 spire1.14-server-1.14.7-0.2.hum...

CLEANSTART-2026-IM39799 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-41889, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-4659, CVE-2026-46595, CVE-2026-46597, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.13.3-r0, 1.14.1-r0, 1.14.1-r1, 1.14.1-r2, 1.14.5-r0, 1.14.5-r1

Multiple security vulnerabilities affect the spire-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...