CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: k8s-agents-operator-fips, cluster-api-gcp-controller, kaniko, rekor, cert-manager-csi-driver-fips, gitlab-kas-fips, crossplane-provider-aws-kafka, tkn, crossplane-provider-azure-resources, envoy-gateway-fips, kubeflow-pipelines, opentelemetry-ebpf-instrumentation-fip...

CLEANSTART-2026-AP92343 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32287, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-34986, ghsa-65xw-vw82-r86x, ghsa-6g7g-w4f8-9c9x, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3 applied in versions: 2.10.3-r0

Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: kaniko, rekor, gitlab-kas-fips, percona-server-mongodb-operator, tkn, envoy-gateway-fips, kubeflow-pipelines, oauth2-proxy, commercial-chainloop-cli, packer-fips, spire-controller-manager, commercial-grafana, gcsfuse, crossplane, seaweedfs-operator-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: kaniko, rekor, gitlab-kas-fips, percona-server-mongodb-operator, tkn, envoy-gateway-fips, kubeflow-pipelines, oauth2-proxy, commercial-chainloop-cli, packer-fips, spire-controller-manager, commercial-grafana, gcsfuse, crossplane, seaweedfs-operator-fips,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, crossplane-provider-aws-backup, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-azure-authorization, crossplane-provider-aws-cognitoidp-fips, amazon-cloudwatch-agent, crossplane-provider-aws-cloudwatchlogs,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, crossplane-provider-aws-backup, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-azure-authorization, crossplane-provider-aws-cognitoidp-fips, amazon-cloudwatch-agent, crossplane-provider-aws-cloudwatchlogs,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, trust-manager, cluster-api-gcp-controller, kaniko, logstash-exporter, kubeflow-katib, rekor, cert-manager-csi-driver-fips, yunikorn-web, gitlab-kas-fips, cfssl-fips, kaf, kubernetes-dashboard-api, jaeger-operator-fips, aws-flb-cloudwatch,...