CLEANSTART-2026-MC29038 Security fix for GHSA-hrxh-6v49-42gf applied in: temporal-server 1.30.8-r1, grafana-fips 13.1.0-r1, temporal-server-fips 1.31.4-r1, istio-pilot-discovery 1.29.8-r1, istio-pilot-discovery 1.30.1-r1, openbao 2.6.1-r0, external-dns 0.20.0-r3, kube-state-metrics 2.20.0-r4

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YS81054 Security fix for GHSA-259r-337f-4rfw applied in: temporal-server 1.30.8-r2, temporal-server-fips 1.31.4-r2, argo-rollouts 1.10.0-r1, stakater-reloader 1.2.1-r5, istio-pilot-discovery 1.29.8-r1, istio-pilot-discovery 1.30.1-r1, stakater-reloader 1.1.0-r9, stakater-reloader 1.3.0-r9, openbao 2.6.1-r0, nfs-subdir-external-provisioner 4.0.18-r4, mongodb 8.2.12-r4

GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JO59032 Echo is a Go web framework

Security vulnerability affects the temporal-server-fips package. Echo is a Go web framework...

CLEANSTART-2026-UX94602 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Security vulnerability affects the temporal-server-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint...

CLEANSTART-2026-IO14579 When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...

Security vulnerability affects the temporal-server-fips package. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only...

CLEANSTART-2026-DE80520 writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster

Security vulnerability affects the temporal-server-fips package. A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster...

CLEANSTART-2026-AW40978 frontend gRPC server's streaming interceptor chain did not include the authorization interceptor

Security vulnerability affects the temporal-server-fips package. The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor...

CLEANSTART-2026-SU88556 filippo

Security vulnerability affects the temporal-server-fips package. filippo...

CLEANSTART-2026-JS92674 Memory-safety vulnerability in github

Security vulnerability affects the temporal-server-fips package. Memory-safety vulnerability in github...

CLEANSTART-2026-MC70184 Memory-safety vulnerability in github

Security vulnerability affects the temporal-server-fips package. Memory-safety vulnerability in github...

CLEANSTART-2026-UZ23021 Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0

Security vulnerability affects the temporal-server-fips package. Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0...

CLEANSTART-2026-HL09755 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the temporal-server-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-RM10286 filippo

Security vulnerability affects the temporal-server-fips package. filippo...

GO-2026-5578 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-server, temporal-server-fips...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: trillian, temporal-server, argo-workflows-fips, amass, trillian-fips, kube-bench, falcosidekick-fips, ferretdb, kine, spicedb, kots, step, caddy-fips, caddy, argo-workflows, step-ca, temporal-server-fips, kube-bench-fips, wavefront-collector-for-kubernetes, k3s, src...

GO-2026-5004 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, hydra, hydra-fips, pgtimetable-fips, sftpgo-plugin-eventsearch, migrate, amass, gotrue, cloudnative-pg, zitadel, step-fips, kubeflow-pipelines, spicedb, cloudprober, cloudnative-pg-fips, kots, flyte, gitness, authentik-fips, kuma,...

CLEANSTART-2026-ZB13095 Security fixes in temporal-server-fips 1.31.1-r1

Package temporal-server-fips version 1.31.1-r1 fixes 5 vulnerabilities: CVE-2026-41602, ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, CVE-2026-27145, CVE-2026-33811...

CLEANSTART-2026-PY24465 Security fixes in temporal-server-fips 1.29.2-r0

Package temporal-server-fips version 1.29.2-r0 fixes 1 vulnerabilities: CVE-2026-26958...

PT-2026-86071

Package temporal-server-fips version 1.29.6-r0 fixes 13 vulnerabilities: ghsa-9jj7-4m8r-rfcm, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-WW41817 Security fixes for CVE-2026-26958, CVE-2026-33186, CVE-2026-33815, CVE-2026-33816, CVE-2026-34986, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-9jj7-4m8r-rfcm, ghsa-fw7p-63qq-7hpr, ghsa-hfvc-g4fc-pqhx, ghsa-j88v-2chj-qfwx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.29.6-r0

Multiple security vulnerabilities affect the temporal-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...