CLEANSTART-2026-KS29431 Security fix for CVE-2026-32285 applied in: gitlab-runner 18.11.1-r0, grafana-alloy 1.13.1-r1, kubevela 1.10.8-r0, prometheus 3.11.0-r0, tempo 2.10.3-r0, tempo 2.9.1-r1, tempo-fips 2.10.3-r0, tempo-fips 2.9.1-r1, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.98.0-r4

CVE-2026-32285 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AX88434 Security fix for CVE-2025-29786 applied in: argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, tempo-fips 2.7.2-r0

CVE-2025-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: thanos-receive-controller, tempo, cortex-fips, pulumi-language-yaml, thanos, tempo-fips, cortex-geomys-fips, thanos-receive-controller-fips, cortex, thanos-fips...

CLEANSTART-2026-OS37166 Security fixes in tempo-fips 3.0.2-r2

Package tempo-fips version 3.0.2-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-QR90423 Security fixes in tempo-fips 2.9.1-r1

Package tempo-fips version 2.9.1-r1 fixes 2 vulnerabilities: CVE-2026-34986, CVE-2026-32285...

CLEANSTART-2026-AY71406 Security fixes in tempo-fips 2.9.1-r0

Package tempo-fips version 2.9.1-r0 fixes 20 vulnerabilities: CVE-2026-33186, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913, CVE-2026-32287...

CLEANSTART-2026-GG76815 Security fixes in tempo-fips 2.7.2-r0

Package tempo-fips version 2.7.2-r0 fixes 35 vulnerabilities: CVE-2026-33186, CVE-2025-22869, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913...

CLEANSTART-2026-US84111 Security fixes in tempo-fips 2.8.3-r1

Package tempo-fips version 2.8.3-r1 fixes 2 vulnerabilities: CVE-2026-34986, ghsa-78h2-9frx-2jm8...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, crossplane-provider-aws-ecs-fips, volcano, cluster-api-helm-controller-fips, cert-manager-openshift-routes-fips, syft-fips, databricks-cli-fips, gatus, crossplane-provider-aws-secretsmanager, haproxy-ingress-fips,...

CLEANSTART-2026-AP92343 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32287, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-34986, ghsa-65xw-vw82-r86x, ghsa-6g7g-w4f8-9c9x, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3 applied in versions: 2.10.3-r0

Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: clickhouse-backup, external-secrets-fips, syft-fips, gatus, kserve, beats, trivy-fips, witness, spire-controller-manager-fips, ratify-fips, velero-fips, external-secrets-operator-fips, crossplane-provider-gcp-fips, envconsul, vault-csi-provider, frankenphp-8.4,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: clickhouse-backup, external-secrets-fips, syft-fips, gatus, kserve, beats, trivy-fips, witness, spire-controller-manager-fips, ratify-fips, velero-fips, external-secrets-operator-fips, crossplane-provider-gcp-fips, envconsul, vault-csi-provider, frankenphp-8.4,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elbv2, crossplane-provider-aws-ecs-fips, crossplane-provider-aws-lambda, crossplane-provider-aws-kms-fips, crossplane-provider-aws-firehose, crossplane-provider-aws-dynamodb, telegraf, crossplane-provider-aws-iam, crossplane-provider-aws-backu...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elbv2, crossplane-provider-aws-ecs-fips, crossplane-provider-aws-lambda, crossplane-provider-aws-kms-fips, crossplane-provider-aws-firehose, crossplane-provider-aws-dynamodb, telegraf, crossplane-provider-aws-iam, crossplane-provider-aws-backu...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-custom-runner, cluster-api-helm-controller-fips, supercronic, databricks-cli-fips, azure-aad-pod-identity-mic, kube-fluentd-operator, volume-modifier-for-k8s, gatus, prometheus-mysqld-exporter, karma, etcd, rancher-helm, s5cmd, amazon-k8s-cni,...