CLEANSTART-2026-KS29431 Security fix for CVE-2026-32285 applied in: gitlab-runner 18.11.1-r0, grafana-alloy 1.13.1-r1, kubevela 1.10.8-r0, prometheus 3.11.0-r0, tempo 2.10.3-r0, tempo 2.9.1-r1, tempo-fips 2.10.3-r0, tempo-fips 2.9.1-r1, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.98.0-r4

CVE-2026-32285 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AX88434 Security fix for CVE-2025-29786 applied in: argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, tempo-fips 2.7.2-r0

CVE-2025-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: thanos-receive-controller, cortex, tempo-fips, thanos, cortex-geomys-fips, pulumi-language-yaml, thanos-fips, thanos-receive-controller-fips, cortex-fips, tempo...

CLEANSTART-2026-OS37166 Security fixes in tempo-fips 3.0.2-r2

Package tempo-fips version 3.0.2-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-AY71406 Security fixes in tempo-fips 2.9.1-r0

Package tempo-fips version 2.9.1-r0 fixes 20 vulnerabilities: CVE-2026-33186, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913, CVE-2026-32287...

CLEANSTART-2026-QR90423 Security fixes in tempo-fips 2.9.1-r1

Package tempo-fips version 2.9.1-r1 fixes 2 vulnerabilities: CVE-2026-34986, CVE-2026-32285...

CLEANSTART-2026-US84111 Security fixes in tempo-fips 2.8.3-r1

Package tempo-fips version 2.8.3-r1 fixes 2 vulnerabilities: CVE-2026-34986, ghsa-78h2-9frx-2jm8...

CLEANSTART-2026-GG76815 Security fixes in tempo-fips 2.7.2-r0

Package tempo-fips version 2.7.2-r0 fixes 35 vulnerabilities: CVE-2026-33186, CVE-2025-22869, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: cephcsi-fips, crossplane-provider-aws-sesv2, knative-serving-fips, linkerd2-fips, cert-manager-csi-driver, prometheus-podman-exporter, gitlab-kas, chartmuseum, aws-iam-authenticator, fulcio, vault-fips, tkn-fips, fleet-server, vault, tekton-pipelines, weaviate,...

CLEANSTART-2026-AP92343 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32287, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-34986, ghsa-65xw-vw82-r86x, ghsa-6g7g-w4f8-9c9x, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3 applied in versions: 2.10.3-r0

Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: cephcsi-fips, kserve, prometheus-podman-exporter, gitlab-kas, fulcio, vault-fips, tkn-fips, vault, tekton-pipelines, weaviate, k3s, envoy-gateway-fips, splunk-otel-collector-fips, neuvector-scanner, kubescape, azcopy-fips, istio-fips, spire-server-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: cephcsi-fips, kserve, prometheus-podman-exporter, gitlab-kas, fulcio, vault-fips, tkn-fips, vault, tekton-pipelines, weaviate, k3s, envoy-gateway-fips, splunk-otel-collector-fips, neuvector-scanner, kubescape, azcopy-fips, istio-fips, spire-server-fips,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-acm, crossplane-provider-aws-rolesanywhere-fips, grafana-alloy, crossplane-provider-aws-cloudformation, crossplane-provider-family-azure, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-sns,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-acm, crossplane-provider-aws-rolesanywhere-fips, grafana-alloy, crossplane-provider-aws-cloudformation, crossplane-provider-family-azure, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-sns,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: extism, cephcsi-fips, knative-serving-fips, cilium-certgen, aws-load-balancer-controller-fips, aws-privateca-issuer-fips, cert-manager-csi-driver, dynamic-localpv-provisioner, prometheus-podman-exporter, yam, wait-for-port, aws-flb-kinesis, influx,...