GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-swf-fips, vale, ocm-cli, terraform-provider-azuread-fips, rancher-system-upgrade-controller-fips, azure-workload-identity-webhook, kafkaexporter-fips, dcgm-exporter-fips, seaweedfs-fips, ceph-csi-operator-fips, yunikorn-web-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: gitaly-fips, ldap2pg, cerbos, opentelemetry-collector-contrib-fips, pgtimetable-fips, openfga, caddy, commercial-expanso-edge, kubeflow-pipelines, bento, falcosidekick-fips, authentik, seaweedfs-rocksdb-fips, peerdb-flow, seaweedfs-fips, zitadel, openbao-fips,...

CLEANSTART-2026-GM09342 Security fixes for CVE-2025-68121, CVE-2026-26958, ghsa-fw7p-63qq-7hpr, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.29.0-r0, 0.29.0-r1

Multiple security vulnerabilities affect the step-ca-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: s5cmd, kratos, kubeflow, opentelemetry-collector-contrib-fips, thanos, cilium-cli, kepler, crossplane-provider-azure-sql, azure-workload-identity-webhook, contour-fips, nri-mysql, step-kms-plugin-fips, crossplane-provider-azure-authorization, jaeger-operator-fips,...