GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kendra, crossplane-provider-aws-appintegrations, dkron, crossplane-provider-aws-glue, ytt-fips, cluster-api-helm-controller, argo-cd-fips, flux-notification-controller-fips, sftpgo-plugin-auth, datadog-agent-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, cloudprober-fips, migrate, jitsucom-bulker, wal-g, timescaledb-parallel-copy, commercial-grafana, seaweedfs-fips, gitaly-fips, step-ca-fips, openbao-fips, harbor, caddy-fips, openfga-fips, openfga, goose-fips, step-ca, dapr, cloudnative-pg,...

CLEANSTART-2026-GM09342 Security fixes for CVE-2025-68121, CVE-2026-26958, ghsa-fw7p-63qq-7hpr, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.29.0-r0, 0.29.0-r1

Multiple security vulnerabilities affect the step-ca-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler-fips, elvish, lazygit, crossplane-provider-gcp, jitsucom-bulker, cluster-api-helm-controller, argo-cd-fips, policy-controller, ipfs-cluster, cargobump, cortex-fips, aws-privateca-issuer-fips, datadog-agent-fips, emissary-fips, harbor,...