CLEANSTART-2026-FO93349 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-33186, CVE-2026-40890, ghsa-77fj-vx54-gvh7, ghsa-p77j-4mvh-x3m3 applied in versions: 2.44.0-r0, 2.48.2-r0

Multiple security vulnerabilities affect the temporal-ui-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: temporal, fq, snyk-cli, temporal-ui-server, kube-metrics-adapter...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: temporal, fq, snyk-cli, temporal-ui-server, kube-metrics-adapter...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: fq, temporal-ui-server-fips, kube-metrics-adapter, snyk-cli, temporal-fips, kube-metrics-adapter-fips, gotenberg, temporal, temporal-ui-server...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: fq, temporal-ui-server-fips, kube-metrics-adapter, snyk-cli, temporal-fips, kube-metrics-adapter-fips, gotenberg, temporal, temporal-ui-server...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: trivy, knative-net-istio-fips, kapp, datadog-agent, influxd, caddy, commercial-chainloop-backend, crossplane-provider-azure-managedidentity, prometheus-pushgateway-fips, http-echo, gatus-fips, kube-bench, custom-pod-autoscaler-fips, ingress-nginx-controller,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, custom-pod-autoscaler-fips, ingress-nginx-controller, crossplane-provider-aws-sqs-fips, rabbitmq-messaging-topology-operator, goose, git-lfs, pvc-autoresizer, newrelic-nri-statsd, gitaly, thanos-receive-controller-fips,...