CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: tkn, buf, dapr-fips, gitness, rclone-fips, telegraf, step-issuer, step-issuer-fips, kyverno-policy-reporter-ui-fips, step-fips, karma, sftpgo, cloudflared, step, tkn-fips, gogatekeeper, caddy, rclone, dapr, step-ca, step-ca-fips, caddy-fips, kyverno-policy-reporter-u...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, frankenphp-8.4, step-issuer-fips, caddy, frankenphp-8.2, frankenphp-8.5, step-ca-fips, caddy-fips...

CLEANSTART-2026-HR84779 Security fixes in step-ca-fips 0.30.2-r1

Package step-ca-fips version 0.30.2-r1 fixes 16 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-NI95810 Security fixes in step-ca-fips 0.29.0-r0

Package step-ca-fips version 0.29.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, ghsa-mqqf-5wvp-8fh8...

CLEANSTART-2026-HH86881 Security fixes in step-ca-fips 0.29.0-r1

Package step-ca-fips version 0.29.0-r1 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: minio-object-browser, glab, keda, crossplane-provider-aws-sesv2-fips, rancher, listmonk, kyverno, kubevirt-cdi-controller-fips, crossplane-provider-aws-globalaccelerator, ksops, nova, nerdctl, cluster-api-azure-controller, clickhouse-backup, neuvector-scanner,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: ferretdb, harbor, spqr, keda, telegraf, chainloop-control-plane-fips, argo-workflows-fips, authentik, spire-server-fips, grafana-alloy-fips, argo-workflows, kots, bento-fips, cloudprober, envoy-gateway, kine, temporal-fips, cloudnative-pg-fips,...

CLEANSTART-2026-GM09342 Security fixes for CVE-2025-68121, CVE-2026-26958, ghsa-fw7p-63qq-7hpr, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.29.0-r0, 0.29.0-r1

Multiple security vulnerabilities affect the step-ca-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: flux-helm-controller-fips, prometheus-elasticsearch-exporter, glab, keda, trufflehog, gomplate, kyverno, skopeo, go-md2man, kubelet-csr-approver-fips, kubescape, trivy-operator, mkcert, vault-csi-provider, azure-aad-pod-identity-mic, grpcurl, rekor-fips,...