CLEANSTART-2026-WN23323 Security fix for GHSA-xhf5-7wjv-pqxp applied in: syft 1.43.0-r1, tigera-operator-fips 1.40.13-r1, kaniko 1.24.0-r2

GHSA-xhf5-7wjv-pqxp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VD26945 Security fix for GHSA-jpcc-p29g-p8mq applied in: syft 1.43.0-r1, tigera-operator-fips 1.40.13-r1, kaniko 1.24.0-r2

GHSA-jpcc-p29g-p8mq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VH60653 Security fix for GHSA-xf85-363p-868w applied in: consul-k8s-fips 1.8.14-r1, tigera-operator-fips 1.40.13-r1

GHSA-xf85-363p-868w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AW95345 Security fix for GHSA-vh4v-2xq2-g5cg applied in: rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.4-r2, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.12.17-r2, rancher-fleet-agent 0.13.13-r0, rancher-agent 2.11.15-r1, rancher-agent 2.12.11-r1, rancher-agent 2.12.11-r2, rancher-fleet-agent 0.14.8-r2, rancher-fleet-agent 0.14.8-r1, consul-k8s-fips 1.8.14-r1, tigera-operator-fips 1.40.13-r1

GHSA-vh4v-2xq2-g5cg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KV80768 Security fix for GHSA-8xwf-rjm4-xvhv applied in: consul-k8s-fips 1.8.14-r1, tigera-operator-fips 1.40.13-r1

GHSA-8xwf-rjm4-xvhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UQ67139 Security fix for GHSA-jxpm-75mh-9fp7 applied in: consul-k8s-fips 1.8.14-r1, tigera-operator-fips 1.40.13-r1

GHSA-jxpm-75mh-9fp7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HM36104 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-KI06386 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-CU84293 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-SS88453 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-OY08890 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-VN85659 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-XN53923 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-CD63596 Security fix for CVE-2026-53717 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4, tigera-operator-fips 1.38.16-r2

CVE-2026-53717 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KY24374 Security fix for CVE-2026-53715 applied in: tigera-operator 1.39.3-r1, tigera-operator-fips 1.37.2-r4, tigera-operator-fips 1.38.16-r2

CVE-2026-53715 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GL17744 Security fix for GHSA-mf24-chxh-hmvj applied in: tigera-operator-fips 1.37.2-r0

Security vulnerability affects the tigera-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DL05775 Security fix for CVE-2025-25294 applied in: tigera-operator-fips 1.37.2-r5

Security vulnerability affects the tigera-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100598

Security vulnerability affects the tigera-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100357

Security vulnerability affects the tigera-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZE35909 Security fixes in tigera-operator-fips 1.38.16-r1

Package tigera-operator-fips version 1.38.16-r1 fixes 7 vulnerabilities: CVE-2026-53713, CVE-2026-53714, CVE-2026-53715, CVE-2026-53716, CVE-2026-53717...