CLEANSTART-2026-FO93349 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-33186, CVE-2026-40890, ghsa-77fj-vx54-gvh7, ghsa-p77j-4mvh-x3m3 applied in versions: 2.44.0-r0, 2.48.2-r0

Multiple security vulnerabilities affect the temporal-ui-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, fq, temporal, snyk-cli, kube-metrics-adapter...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, fq, temporal, snyk-cli, kube-metrics-adapter...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: temporal-ui-server-fips, temporal, kube-metrics-adapter-fips, kube-metrics-adapter, temporal-ui-server, fq, gotenberg, snyk-cli, temporal-fips...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: temporal-ui-server-fips, temporal, kube-metrics-adapter-fips, kube-metrics-adapter, temporal-ui-server, fq, gotenberg, snyk-cli, temporal-fips...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, logstash-exporter, stern, nodetaint, onepassword-operator, yunikorn-web, cert-manager-csi-driver-fips, cluster-api-provider-vsphere, gitlab-kas-fips, nri-elasticsearch-fips, maru, percona-server-mongodb-operator,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: yunikorn-web, cluster-api-provider-vsphere, nri-f5-fips, kubescape-http-request-fips, spire-controller-manager, commercial-grafana, emissary, cluster-api-ipam-provider-in-cluster, mesosphere-vsphere-csi-fips, step-issuer, prometheus-redis-exporter, crossplane-fips,...