CLEANSTART-2026-KS29431 Security fix for CVE-2026-32285 applied in: gitlab-runner 18.11.1-r0, grafana-alloy 1.13.1-r1, kubevela 1.10.8-r0, prometheus 3.11.0-r0, tempo 2.10.3-r0, tempo 2.9.1-r1, tempo-fips 2.10.3-r0, tempo-fips 2.9.1-r1, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.98.0-r4

CVE-2026-32285 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AX88434 Security fix for CVE-2025-29786 applied in: argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, tempo-fips 2.7.2-r0

CVE-2025-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: cortex-fips, cortex-geomys-fips, thanos-receive-controller, cortex, thanos-receive-controller-fips, tempo, pulumi-language-yaml, thanos, tempo-fips, thanos-fips...

CLEANSTART-2026-OS37166 Security fixes in tempo-fips 3.0.2-r2

Package tempo-fips version 3.0.2-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-AY71406 Security fixes in tempo-fips 2.9.1-r0

Package tempo-fips version 2.9.1-r0 fixes 20 vulnerabilities: CVE-2026-33186, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913, CVE-2026-32287...

CLEANSTART-2026-QR90423 Security fixes in tempo-fips 2.9.1-r1

Package tempo-fips version 2.9.1-r1 fixes 2 vulnerabilities: CVE-2026-34986, CVE-2026-32285...

CLEANSTART-2026-GG76815 Security fixes in tempo-fips 2.7.2-r0

Package tempo-fips version 2.7.2-r0 fixes 35 vulnerabilities: CVE-2026-33186, CVE-2025-22869, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913...

CLEANSTART-2026-US84111 Security fixes in tempo-fips 2.8.3-r1

Package tempo-fips version 2.8.3-r1 fixes 2 vulnerabilities: CVE-2026-34986, ghsa-78h2-9frx-2jm8...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: chartmuseum-fips, docker-compose, crossplane-provider-azure-notificationhubs, gitlab-runner-fips, crossplane-provider-aws-secretsmanager-fips, aws-node-termination-handler, cluster-api-provider-vsphere, amazon-cloudwatch-agent, metallb, cadvisor-fips, kapp-controller...

CLEANSTART-2026-AP92343 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32287, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-34986, ghsa-65xw-vw82-r86x, ghsa-6g7g-w4f8-9c9x, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3 applied in versions: 2.10.3-r0

Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, bank-vaults, chainloop-artifact-cas, cluster-api-aws-controller, guac, scorecard, rancher-agent, dapr-fips, beats, grype, k3d, vault-secrets-webhook, grafana-mimir-fips, terragrunt-fips, falcosidekick-fips, temporal-ui-server, grpc-health-probe,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, bank-vaults, chainloop-artifact-cas, cluster-api-aws-controller, guac, scorecard, rancher-agent, dapr-fips, beats, grype, k3d, vault-secrets-webhook, grafana-mimir-fips, terragrunt-fips, falcosidekick-fips, temporal-ui-server, grpc-health-probe,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cognitoidp, crossplane-provider-aws-iam, crossplane-provider-aws-elasticache-fips, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-efs-fips, crossplane-provider-aws-cloudfront, crossplane-provider-gcp-fips,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cognitoidp, crossplane-provider-aws-iam, crossplane-provider-aws-elasticache-fips, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-efs-fips, crossplane-provider-aws-cloudfront, crossplane-provider-gcp-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, harbor-scanner-trivy, aws-node-termination-handler, velero-plugin-for-csi-fips, fluent-bit-plugin-loki, amazon-cloudwatch-agent, nri-rabbitmq, metallb, kapp-controller, rancher-security-scan, cluster-autoscaler, cluster-api-aws-controller, db-operator...