CLEANSTART-2026-KS29431 Security fix for CVE-2026-32285 applied in: gitlab-runner 18.11.1-r0, grafana-alloy 1.13.1-r1, kubevela 1.10.8-r0, prometheus 3.11.0-r0, tempo 2.10.3-r0, tempo 2.9.1-r1, tempo-fips 2.10.3-r0, tempo-fips 2.9.1-r1, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.98.0-r4

CVE-2026-32285 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AX88434 Security fix for CVE-2025-29786 applied in: argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, tempo-fips 2.7.2-r0

CVE-2025-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: cortex-fips, pulumi-language-yaml, cortex, thanos, tempo, tempo-fips, thanos-receive-controller-fips, cortex-geomys-fips, thanos-receive-controller, thanos-fips...

CLEANSTART-2026-OS37166 Security fixes in tempo-fips 3.0.2-r2

Package tempo-fips version 3.0.2-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-AY71406 Security fixes in tempo-fips 2.9.1-r0

Package tempo-fips version 2.9.1-r0 fixes 20 vulnerabilities: CVE-2026-33186, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913, CVE-2026-32287...

CLEANSTART-2026-QR90423 Security fixes in tempo-fips 2.9.1-r1

Package tempo-fips version 2.9.1-r1 fixes 2 vulnerabilities: CVE-2026-34986, CVE-2026-32285...

CLEANSTART-2026-GG76815 Security fixes in tempo-fips 2.7.2-r0

Package tempo-fips version 2.7.2-r0 fixes 35 vulnerabilities: CVE-2026-33186, CVE-2025-22869, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913...

CLEANSTART-2026-US84111 Security fixes in tempo-fips 2.8.3-r1

Package tempo-fips version 2.8.3-r1 fixes 2 vulnerabilities: CVE-2026-34986, ghsa-78h2-9frx-2jm8...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, trivy, ld-relay, kong-ingress-controller-fips, cert-manager-cmctl, hubble-ui, syft-fips, rancher, kargo, kubevela, commercial-expanso-edge, crossplane-provider-aws-elb, crossplane-provider-aws-cloudsearch, eksctl, dive,...

CLEANSTART-2026-AP92343 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32287, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-34986, ghsa-65xw-vw82-r86x, ghsa-6g7g-w4f8-9c9x, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3 applied in versions: 2.10.3-r0

Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: trivy, syft-fips, rancher, commercial-expanso-edge, kubescape-operator-fips, dkron, seaweedfs-operator, rook, spiffe-helper-fips, crossplane-provider-gcp-fips, commercial-grafana, gitlab-cng-fips, flux-source-controller, seaweedfs, consul-k8s, steampipe, cloudflared,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: trivy, syft-fips, rancher, commercial-expanso-edge, kubescape-operator-fips, dkron, seaweedfs-operator, rook, spiffe-helper-fips, crossplane-provider-gcp-fips, commercial-grafana, gitlab-cng-fips, flux-source-controller, seaweedfs, consul-k8s, steampipe, cloudflared,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, amazon-cloudwatch-agent, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache-fips, crossplane-provider-aws-efs, crossplane-provider-aws-ecs, crossplane-provider-aws-cognitoidp,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, amazon-cloudwatch-agent, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache-fips, crossplane-provider-aws-efs, crossplane-provider-aws-ecs, crossplane-provider-aws-cognitoidp,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, trivy, tigera-operator-fips, cluster-api-azure-controller, cert-manager-cmctl, nri-mysql, kubevela, prometheus-postgres-exporter, eksctl, dive, karma, kubescape-operator-fips, rook, gcp-compute-persistent-disk-csi-driver-fip...