GO-2026-4775 vulnerabilities

Vulnerabilities for packages: step-ca-fips, frankenphp-8.2, frankenphp-8.5, step-issuer-fips, caddy, caddy-fips, frankenphp-8.4, frankenphp-8.3...

CLEANSTART-2026-NI95810 Security fixes in step-ca-fips 0.29.0-r0

Package step-ca-fips version 0.29.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, ghsa-mqqf-5wvp-8fh8...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: jaeger-operator-fips, tetragon, crossplane-provider-aws-globalaccelerator, consul-k8s, crossplane-provider-aws-s3, k8s-metacollector-fips, opentelemetry-collector-k8s, pvc-autoresizer-fips, dagdotdev, chainloop-cli, opentelemetry-collector-k8s-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: amass, trillian-fips, openfga, keda, spire-server, temporal-server-fips, seaweedfs-rocksdb, falcosidekick, grafana-fips, temporal-fips, gitness, pgtimetable, cerbos, steampipe, cloudnative-pg-fips, bento, sftpgo-plugin-eventsearch, goose-fips, trillian, caddy-fips,...

CLEANSTART-2026-GM09342 Security fixes for CVE-2025-68121, CVE-2026-26958, ghsa-fw7p-63qq-7hpr, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.29.0-r0, 0.29.0-r1

Multiple security vulnerabilities affect the step-ca-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: jaeger-operator-fips, nvidia-nsight-compute-13.0, helm-push, aws-flb-firehose, consul-k8s, yace, spire-server, nova-fips, rekor-fips, helm-mapkubeapis, rancher-loglevel, fulcio, fixuid, cerbos, rook, promxy-fips, contour-fips, cloud-provider-aws-fips,...