GO-2026-6258 vulnerabilities

Vulnerabilities for packages: cortex-geomys-fips, cortex-fips, thanos-fips, thanos-receive-controller-fips, tempo, thanos, thanos-receive-controller, cortex, pulumi-language-yaml, tempo-fips...

CLEANSTART-2026-OS37166 Security fixes in tempo-fips 3.0.2-r2

Package tempo-fips version 3.0.2-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-AY71406 Security fixes in tempo-fips 2.9.1-r0

Package tempo-fips version 2.9.1-r0 fixes 20 vulnerabilities: CVE-2026-33186, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913, CVE-2026-32287...

CLEANSTART-2026-QR90423 Security fixes in tempo-fips 2.9.1-r1

Package tempo-fips version 2.9.1-r1 fixes 2 vulnerabilities: CVE-2026-34986, CVE-2026-32285...

CLEANSTART-2026-GG76815 Security fixes in tempo-fips 2.7.2-r0

Package tempo-fips version 2.7.2-r0 fixes 35 vulnerabilities: CVE-2026-33186, CVE-2025-22869, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913...

CLEANSTART-2026-US84111 Security fixes in tempo-fips 2.8.3-r1

Package tempo-fips version 2.8.3-r1 fixes 2 vulnerabilities: CVE-2026-34986, ghsa-78h2-9frx-2jm8...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: loki-fips, crossplane-provider-azure-securityinsights, fluent-operator, backup-restore-operator-fips, atlas-fips, tflint, secrets-store-csi-driver-fips, atlas, openbao-fips, crossplane-provider-azure-relay, crossplane, db-operator-fips, perses-fips, neuvector-scanner...

CLEANSTART-2026-AP92343 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32287, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-34986, ghsa-65xw-vw82-r86x, ghsa-6g7g-w4f8-9c9x, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3 applied in versions: 2.10.3-r0

Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: loki-fips, tflint, openbao-fips, oauth2-proxy-fips, crossplane, neuvector-scanner, temporal-ui-server, neuvector-sigstore-interface, k9s-fips, falcosidekick, prometheus-podman-exporter, pulumi, opencost, grpcurl-fips, seaweedfs-rocksdb, tempo-fips, containerd-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: loki-fips, tflint, openbao-fips, oauth2-proxy-fips, crossplane, neuvector-scanner, temporal-ui-server, neuvector-sigstore-interface, k9s-fips, falcosidekick, prometheus-podman-exporter, pulumi, opencost, grpcurl-fips, seaweedfs-rocksdb, tempo-fips, containerd-fips,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, crossplane-provider-aws-backup, crossplane-provider-aws-cloudwatchlogs, grafana-alloy-fips, crossplane-provider-aws-cognitoidentity, crossplane-provider-aws-servicediscovery, crossplane-provider-aws-elbv2-fips, crossplane-provider-aws-ecs...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, crossplane-provider-aws-backup, crossplane-provider-aws-cloudwatchlogs, grafana-alloy-fips, crossplane-provider-aws-cognitoidentity, crossplane-provider-aws-servicediscovery, crossplane-provider-aws-elbv2-fips, crossplane-provider-aws-ecs...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: aws-nuke, ghaudit, loki-fips, falco-exporter, cluster-api-azure-controller, helm, tflint, descheduler-fips, dynamic-localpv-provisioner, helm-docs, kubelet-csr-approver, bom, openbao-fips, db-operator-fips, swagger, opensearch-k8s-operator, k9s-fips, falcosidekick,...