CLEANSTART-2026-FO93349 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-33186, CVE-2026-40890, ghsa-77fj-vx54-gvh7, ghsa-p77j-4mvh-x3m3 applied in versions: 2.44.0-r0, 2.48.2-r0

Multiple security vulnerabilities affect the temporal-ui-server-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: snyk-cli, temporal, kube-metrics-adapter, fq, temporal-ui-server...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: snyk-cli, temporal, kube-metrics-adapter, fq, temporal-ui-server...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, temporal, temporal-ui-server-fips, temporal-fips, snyk-cli, gotenberg, kube-metrics-adapter-fips, temporal-ui-server, fq...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, temporal, temporal-ui-server-fips, temporal-fips, snyk-cli, gotenberg, kube-metrics-adapter-fips, temporal-ui-server, fq...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty-fips, gcp-compute-persistent-disk-csi-driver-fips, kube-fluentd-operator, langfuse-fips, prometheus-elasticsearch-exporter-fips, redpanda, esbuild, policy-bot, spire-server, ipfs-cluster-fips, minc, spire-controller-manager-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: policy-bot, spire-server, generic-device-plugin-fips, trivy-fips, gitlab-operator, timoni, aws-application-networking-k8s, cluster-api, dataplaneapi-fips, gpu-operator, docker-credential-acr-env, minio-object-browser-fips, tw, amazon-ecs-cni-plugins-fips, hivemind,...