CLEANSTART-2026-PA71152 Security fix for ghsa-fphv-w9fq-2525 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, sigstore-scaffolding 0.7.31-r0, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r1, tekton-chains-fips 0.26.0-r1, tkn-fips 0.43.0-r2

ghsa-fphv-w9fq-2525 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CM50083 Security fix for ghsa-4c4x-jm2x-pf9j applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

ghsa-4c4x-jm2x-pf9j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RI42866 Security fix for ghsa-273p-m2cw-6833 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

ghsa-273p-m2cw-6833 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AQ99839 Security fix for ghsa-72c7-4g63-hpw5 applied in: tekton-chains 0.26.0-r0, tekton-chains-fips 0.26.0-r0

ghsa-72c7-4g63-hpw5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BW27317 Security fix for CVE-2026-40161 applied in: tekton-chains 0.25.2-r1, tekton-chains-fips 0.25.2-r1, tkn-fips 0.44.2-r0

CVE-2026-40161 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX16649 Security fix for CVE-2026-49835 applied in: cosign 3.1.1-r1, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r0, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

CVE-2026-49835 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IH01456 Security fix for CVE-2026-49478 applied in: cosign 2.6.5-r0, cosign 3.1.1-r1, kyverno 1.16.4-r3, kyverno 1.17.2-r2, kyverno 1.18.1-r1, kyverno 1.18.1-r2, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1

CVE-2026-49478 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OE12981 Security fix for CVE-2026-49834 applied in: cosign 3.1.1-r2, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r1, kyverno 1.17.2-r2, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

CVE-2026-49834 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FN18256 Security fix for CVE-2026-33022 applied in: tekton-chains-fips 0.24.0-r1

Security vulnerability affects the tekton-chains-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VQ84921 Security fix for CVE-2026-25542 applied in: tekton-chains 0.25.2-r1, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1

CVE-2026-25542 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XM62440 Security fix for CVE-2026-40924 applied in: tekton-chains 0.25.2-r1, tekton-chains-fips 0.25.2-r1

CVE-2026-40924 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UI10829 Security fix for CVE-2026-40923 applied in: tekton-chains 0.25.2-r1, tekton-chains-fips 0.25.2-r1

CVE-2026-40923 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100522

Security vulnerability affects the tekton-chains-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QE70350 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the tekton-chains-fips package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

CLEANSTART-2026-HA54107 Security fixes in tekton-chains 0.25.2-r1

Package tekton-chains version 0.25.2-r1 fixes 23 vulnerabilities: ghsa-gcjh-h69q-9w9g, ghsa-pmwq-pjrm-6p5r, CVE-2026-49478, CVE-2026-48702, CVE-2026-49834...

CLEANSTART-2026-NJ73427 Security fixes in tekton-chains-fips 0.25.2-r1

Package tekton-chains-fips version 0.25.2-r1 fixes 31 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...

CLEANSTART-2026-NZ51335 Security fixes in tekton-chains-fips 0.26.5-r1

Package tekton-chains-fips version 0.26.5-r1 fixes 25 vulnerabilities: CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859...

CLEANSTART-2026-GR84261 Security fixes in tekton-chains-fips 0.24.0-r1

Package tekton-chains-fips version 0.24.0-r1 fixes 26 vulnerabilities: CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859...

CLEANSTART-2026-RM68806 Security fixes in tekton-chains 0.26.5-r1

Package tekton-chains version 0.26.5-r1 fixes 15 vulnerabilities: ghsa-gcjh-h69q-9w9g, CVE-2026-49478, CVE-2026-48702, CVE-2026-54787, CVE-2026-49834...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, kapp-controller, kubernetes-csi-external-health-monitor, zot, fluent-operator, calico, grafana, kube-state-metrics, opentelemetry-operator, tkn, kubernetes, datadog-agent, caddy, argocd-image-updater, cilium, rancher-agent,...