CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: commercial-nginx-ingress, commercial-gitlab-rails-ee-fips, consul-k8s-fips, ingress-nginx-controller-fips, k8s-device-plugin, kyverno, tempo-fips, google-osconfig-agent, commercial-expanso-edge, commercial-gitlab-workhorse-ee-fips, telegraf, zitadel,...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-arangodb, k9s, helm-set-status, kyverno-notation-aws, tigera-operator, rancher-helm, gitness, maru, cert-manager-cmctl, flux-helm-controller, k8sgpt, helm-push, opentofu, helm-mapkubeapis, kargo, xeol, manifest-tool...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-arangodb, k9s, helm-set-status, kyverno-notation-aws, tigera-operator, rancher-helm, gitness, maru, cert-manager-cmctl, flux-helm-controller, k8sgpt, helm-push, opentofu, helm-mapkubeapis, kargo, xeol, manifest-tool...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: rancher, buildkitd, helm-set-status, docker-compose, kaniko, fuse-overlayfs-snapshotter, kubescape, headlamp, helm-push, skaffold, helm-mapkubeapis, syft, cluster-api-helm-controller, spegel, steampipe, zot, neuvector-scanner, kargo, newrelic-infrastructure-agent,...

CLEANSTART-2026-AA09584 Security fix for GHSA-hr2v-4r36-88hr applied in: cert-manager-cmctl-fips 2.4.0-r3, chartmuseum-fips 0.16.5-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, kubevela 1.10.8-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, tigera-operator 1.41.1-r0

GHSA-hr2v-4r36-88hr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZM97494 Security fix for CVE-2026-46680 applied in: helm-operator 1.42.2-r0, k8sgpt 0.4.33-r0, kubevela 1.10.8-r0, neuvector-controller-fips 5.5.3-r0, newrelic-infrastructure-agent 1.73.1-r1, rancher-agent 2.12.11-r1, rancher-agent 2.13.7-r1, rancher-agent 2.14.3-r0, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.42.0-r0

CVE-2026-46680 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GA19307 Security fix for GHSA-fqw6-gf59-qr4w applied in: helm-operator 1.42.2-r0, k8sgpt 0.4.33-r0, kubevela 1.10.8-r0, newrelic-infrastructure-agent 1.73.1-r1, tigera-operator 1.42.0-r0

GHSA-fqw6-gf59-qr4w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TR04653 Security fix for CVE-2026-53488 applied in: helm 3.21.1-r1, helm-operator 1.42.2-r2, neuvector-controller-fips 5.5.3-r0, rancher-agent 2.12.11-r1, rancher-agent 2.13.7-r1, rancher-agent 2.14.3-r0, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.42.1-r0

CVE-2026-53488 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RZ55639 Security fix for GHSA-xhf5-7wjv-pqxp applied in: helm 3.21.1-r1, helm-operator 1.42.2-r2, tigera-operator 1.42.1-r0

GHSA-xhf5-7wjv-pqxp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TM34060 Security fix for GHSA-xrwg-mqj6-6m22 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IG75377 Security fix for GHSA-m2v6-2jmh-4c68 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZU56180 Security fix for GHSA-h7pq-86h8-rp5x applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JF19024 Security fix for GHSA-cxpq-8v7q-cg56 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NI49374 Security fix for GHSA-fcrp-7gc2-93g7 applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BF33311 Security fix for GHSA-22xc-xg2r-9j7v applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZY58428 Security fix for GHSA-8fv2-88gg-hm7q applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UK63085 Security fix for GHSA-wcrf-9vrr-854f applied in: tigera-operator 1.39.3-r1

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XZ22302 Security fix for CVE-2026-53719 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4, tigera-operator-fips 1.38.16-r2

CVE-2026-53719 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MY21105 Security fix for CVE-2026-22771 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4

CVE-2026-22771 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CD63596 Security fix for CVE-2026-53717 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4, tigera-operator-fips 1.38.16-r2

CVE-2026-53717 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...